DNSSEC Debugger

Domain Name:

Time: 2024-09-15 19:29:15 UTC

Analyzing DNSSEC problems for ic3.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 30768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to h.root-servers.net for ic3.gov/A
	Received 614 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 614 octets ;; HEADER SECTION ;; id = 41309 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240928170000 20240915160000 20038 . on1N81v2jbCjprE18ofJh/KQJC1Lym/Tv1QT4YDW61cw7CV47o43IltbDcerLe6Ax0mMqCkU7M9y IvPYorj8bKHlirsLLxTzMxAdpWLkKCzmRZg+vL7ArOehEc++aQ1+f234HY1aH1qZA+Ed01KzLztr yspKC+A3s7mvDjUeAeFSo4e1SCkSxYQe2ao+MS5hJh0e7tbRapB4seDZ08n5g1Knv2waDVggbg63 KuTMqd716Rcbs5AQh8XwgMfqwhuDexFJ7lkNK1D88OmZMB+eWEbQ8qDtLQHGRZEvbdvMswGd4mi4 riPDEOKX2TGH5mvzglX8v51a8oVD5mXUGfPTjQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 65082 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240928170000 20240915160000 20038 . on1N81v2jbCjprE18ofJh/KQJC1Lym/Tv1QT4YDW61cw7CV47o43IltbDcerLe6Ax0mMqCkU7M9y IvPYorj8bKHlirsLLxTzMxAdpWLkKCzmRZg+vL7ArOehEc++aQ1+f234HY1aH1qZA+Ed01KzLztr yspKC+A3s7mvDjUeAeFSo4e1SCkSxYQe2ao+MS5hJh0e7tbRapB4seDZ08n5g1Knv2waDVggbg63 KuTMqd716Rcbs5AQh8XwgMfqwhuDexFJ7lkNK1D88OmZMB+eWEbQ8qDtLQHGRZEvbdvMswGd4mi4 riPDEOKX2TGH5mvzglX8v51a8oVD5mXUGfPTjQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 29838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240928170000 20240915160000 20038 . on1N81v2jbCjprE18ofJh/KQJC1Lym/Tv1QT4YDW61cw7CV47o43IltbDcerLe6Ax0mMqCkU7M9y IvPYorj8bKHlirsLLxTzMxAdpWLkKCzmRZg+vL7ArOehEc++aQ1+f234HY1aH1qZA+Ed01KzLztr yspKC+A3s7mvDjUeAeFSo4e1SCkSxYQe2ao+MS5hJh0e7tbRapB4seDZ08n5g1Knv2waDVggbg63 KuTMqd716Rcbs5AQh8XwgMfqwhuDexFJ7lkNK1D88OmZMB+eWEbQ8qDtLQHGRZEvbdvMswGd4mi4 riPDEOKX2TGH5mvzglX8v51a8oVD5mXUGfPTjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240928170000 20240915160000 20038 . on1N81v2jbCjprE18ofJh/KQJC1Lym/Tv1QT4YDW61cw7CV47o43IltbDcerLe6Ax0mMqCkU7M9y IvPYorj8bKHlirsLLxTzMxAdpWLkKCzmRZg+vL7ArOehEc++aQ1+f234HY1aH1qZA+Ed01KzLztr yspKC+A3s7mvDjUeAeFSo4e1SCkSxYQe2ao+MS5hJh0e7tbRapB4seDZ08n5g1Knv2waDVggbg63 KuTMqd716Rcbs5AQh8XwgMfqwhuDexFJ7lkNK1D88OmZMB+eWEbQ8qDtLQHGRZEvbdvMswGd4mi4 riPDEOKX2TGH5mvzglX8v51a8oVD5mXUGfPTjQ== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 13839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for ic3.gov/A
	Received 357 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 357 octets ;; HEADER SECTION ;; id = 35594 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ic3.gov. 10800 IN NS dns1.ic3.gov. ic3.gov. 10800 IN NS dns2.ic3.gov. ic3.gov. 3600 IN DS ( 31369 8 2 952064dfba1d605762b989b788468b8ae3025c5fd53bdb1487bd0f38734e2cb9 ) ic3.gov. 3600 IN DS ( 3503 13 2 1c743444f15523f3153e434371edda30bed7c82fbb1e1183bd83ef97bd5faf44 ) ic3.gov. 3600 IN RRSIG ( DS 13 2 3600 20240916202915 20240914182915 35496 gov. kWGwMKthLfS44eGFRtD17XMqTr4Exn+LvBwiPf4EF5FHpXu48SmrfJgDr83P3JMuwi+sYuz7FKtR 9iwEiZBRww== ) ;; ADDITIONAL SECTION (5 records) dns1.ic3.gov. 3600 IN A 20.141.170.64 dns1.ic3.gov. 3600 IN AAAA 2001:489a:3102:6::62 dns2.ic3.gov. 3600 IN A 52.126.48.246 dns2.ic3.gov. 3600 IN AAAA 2001:489a:3600::13 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for ic3.gov/DNSKEY
	Received 357 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 357 octets ;; HEADER SECTION ;; id = 8648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ic3.gov. 10800 IN NS dns1.ic3.gov. ic3.gov. 10800 IN NS dns2.ic3.gov. ic3.gov. 3600 IN DS ( 31369 8 2 952064dfba1d605762b989b788468b8ae3025c5fd53bdb1487bd0f38734e2cb9 ) ic3.gov. 3600 IN DS ( 3503 13 2 1c743444f15523f3153e434371edda30bed7c82fbb1e1183bd83ef97bd5faf44 ) ic3.gov. 3600 IN RRSIG ( DS 13 2 3600 20240916202915 20240914182915 35496 gov. IEabnDDUH1XTpBcLleAj/GvLsJ1l8GYPwB7mnZgEo+1zDu06p/AYU2e+3QlDcZxkuC2xnhMlBNjb Ructvkf2FQ== ) ;; ADDITIONAL SECTION (5 records) dns1.ic3.gov. 3600 IN A 20.141.170.64 dns1.ic3.gov. 3600 IN AAAA 2001:489a:3102:6::62 dns2.ic3.gov. 3600 IN A 52.126.48.246 dns2.ic3.gov. 3600 IN AAAA 2001:489a:3600::13 ;; { "EDNS-VERSION": 0 }
	Found child zone ic3.gov

ic3.gov

	Checking DS between gov and ic3.gov
	Query to a.ns.gov for ic3.gov/DS
	Received 231 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 231 octets ;; HEADER SECTION ;; id = 8313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN DS ;; ANSWER SECTION (3 records) ic3.gov. 3600 IN DS ( 31369 8 2 952064dfba1d605762b989b788468b8ae3025c5fd53bdb1487bd0f38734e2cb9 ) ic3.gov. 3600 IN DS ( 3503 13 2 1c743444f15523f3153e434371edda30bed7c82fbb1e1183bd83ef97bd5faf44 ) ic3.gov. 3600 IN RRSIG ( DS 13 2 3600 20240916202915 20240914182915 35496 gov. ThOZyQEDYGLknloCdQDAY2G+VMeNHaUnuiRt47CisKceuvOeUOEKGd1LTrLeJ1oGfPBrvZMAxWL7 vHYt7OOBfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for ic3.gov in the gov zone
	DS=31369/SHA-256 has algorithm RSASHA256
	DS=3503/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ic3.gov. 3600 IN RRSIG ( DS 13 2 3600 20240916202915 20240914182915 35496 gov. ThOZyQEDYGLknloCdQDAY2G+VMeNHaUnuiRt47CisKceuvOeUOEKGd1LTrLeJ1oGfPBrvZMAxWL7 vHYt7OOBfw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=31369/SHA-256 is now in the chain-of-trust
	DS=3503/SHA-256 is now in the chain-of-trust
	`ic3.gov. 3600 IN DS ( 31369 8 2 952064dfba1d605762b989b788468b8ae3025c5fd53bdb1487bd0f38734e2cb9 )`
	`ic3.gov. 3600 IN DS ( 3503 13 2 1c743444f15523f3153e434371edda30bed7c82fbb1e1183bd83ef97bd5faf44 )`
	Query to dns1.ic3.gov for ic3.gov/DNSKEY
	Received 1624 bytes from 20.141.170.64
	;; Response received from [20.141.170.64] 1624 octets ;; HEADER SECTION ;; id = 18305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN DNSKEY ;; ANSWER SECTION (9 records) ic3.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAa9G2Yzin/5QfI268NN7yyJK+1QRR9TJNH4R9pbtYJE4aQU4zzdwHWqRv28q9vf7dPNhYJ8L fqFOnQWQPavQzfn1y8WuD8ghDKNYrANJOx+VAYMb4aUurKVrCDoeQjPdOS0LfE/xtS7MG4vtikA3 p2/pNwX4UZ0Z3bEyzGGwhZSJxiCVwuycgzY8hF6sxKO4Ba038+HJGOuGDiXtGkhbfuslkedeyfQ+ bsDY3SQQwoKHLSg7U0CgdkKCnxbO/IZjoPXxl+FpwPuAogis1lf0oCLokrjvYPsEFSaNoevfx4Le V2JqW6FxL1oY877f+ZvSzYPIgmmTzaPMKe9xdpHe5UE= ) ; Key ID = 31369 ic3.gov. 86400 IN DNSKEY ( 257 3 13 raKsrKwgtlh5hSMsEOcKtW5IjP+va46Xm4s96uHHMvSQTfisVHJhjQZmHWD1QGcfgGedCZsjdSh/ f3vPN1hNiA== ) ; Key ID = 3503 ic3.gov. 86400 IN DNSKEY ( 256 3 13 d9QLXR33EzRXxlsVb4reS+nWL4aOxEQonCAb6V6zW8LdlkjSlIyMS4xVfs190hOEcxsrQZuk5Pwp Re5vk6TByg== ) ; Key ID = 34754 ic3.gov. 86400 IN DNSKEY ( 256 3 13 dbin6oH+d6+1umYzDL5KAS956rqIUKEdUQOmFsuCqD/OTAKb6XE9ITBd8wE2EVhHmLSihTChftyN BkvQnszfaA== ) ; Key ID = 10113 ic3.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb1MfofUEKeRs92wXHwMKBj0FBapu2NCFIgckbDOROzC6wIQR14Dh+UVNsxsrgqarisExXWI CMWULTzaTLA/+IGLBFaTSAVQsGY9MD6BQcvKzZtYqnBLb0/7+fdewvrjpxOtocGINaBolqldaoEI VmjnrHeNks+Wp5EWueav4Aky4nvhnc94ewZmVt9m43+RNH1fah7i0uGSA20wwJbHAnbAheBq0+hE +yJFJW3TvLG6hxTu8c/U1UBd4MeyxqdM0tlyN1INtm0WmjWKwpRGTMBs/R94jEzZ47kzeRwOk8xY YNPfH6ai+yq+YKNjXKq2xKQnqP5oty6wdnEayw+wvTk= ) ; Key ID = 6781 ic3.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250531235959 20240520000000 31369 ic3.gov. kKwIN9l0H+MrKIrta0ra8u2r36YrdrkC5qJx0g6v5oBzFLY/wnJLU9OQUz+IOIB15lBIBOaPcKq0 qr+g8CatmaKqwmXd8ROaJLfm+MlhCCAkk+jxZYpRGDfgBYxG8LgCF26Lab8fYLI8YzIoYY2tGRaS +2mr5SNvdPh7AaFznpABSFtP3eduXZ3WeENoMsMIbbcGzfclVvlj1DTySgzgXXpYmn3HN19V9CUd 0CVrEabD/eGS31apERccjmP8tsi4Uk/UufujEwEOmN0xvjmzIxyRvf9/M19wMP4F6+HeXoVhQXVZ rM2VmLjVhc+K0QmxRL5W2BCYLMMiG9ltoC9DIg== ) ic3.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20250531235959 20240520000000 3503 ic3.gov. zGRfulucmorSV1t+DhJKvt/1KDqqff8cpLk6zogU0O3AWRc94OXAGZwfRyyuUtHRe1yD9JIucsjL OioErltZ4Q== ) ic3.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20241130235959 20240823000000 34754 ic3.gov. GcHtFb/8yeJ3+R1t95u3ya6rgRTRgFdb1bEaJ0q07HriphVtsOWwin1stohiutXaqePeSa9zlTUE /jhw7eZT1g== ) ic3.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241130235959 20240823000000 6781 ic3.gov. YOXdcmMbYo6JFxrmdSMkd9vzR50R+HJai2Ljm+DJvl7P/9EuKQjH5F9jm7c/S9SSEj37M5kEH19K FVVf3QYOrTmrmu4JFehNAggL43XrseU2eyA4afCcMymlLRF+HNBIC44hziNrPHUJWhF2HnRDrYuF w1THGx+7rfNp3+sS+KGzsunI93GqMz7N8YDq17acNUkCytg9dnl8n868TQf2oN+9tZnmdYlCRjk/ 6iqHggGXoEiz5Gc74tUi92pDZ6iY4OHuAH6C071NwCQg19rA9ef9Y9sZ+/DOHnw3tzsHvrQhzJnx UbjniG1GwFQAoDKnVqPyPXGHkT2OB8L4OZfQGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for ic3.gov
	`ic3.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAa9G2Yzin/5QfI268NN7yyJK+1QRR9TJNH4R9pbtYJE4aQU4zzdwHWqRv28q9vf7dPNhYJ8L fqFOnQWQPavQzfn1y8WuD8ghDKNYrANJOx+VAYMb4aUurKVrCDoeQjPdOS0LfE/xtS7MG4vtikA3 p2/pNwX4UZ0Z3bEyzGGwhZSJxiCVwuycgzY8hF6sxKO4Ba038+HJGOuGDiXtGkhbfuslkedeyfQ+ bsDY3SQQwoKHLSg7U0CgdkKCnxbO/IZjoPXxl+FpwPuAogis1lf0oCLokrjvYPsEFSaNoevfx4Le V2JqW6FxL1oY877f+ZvSzYPIgmmTzaPMKe9xdpHe5UE= ) ; Key ID = 31369`
	`ic3.gov. 86400 IN DNSKEY ( 257 3 13 raKsrKwgtlh5hSMsEOcKtW5IjP+va46Xm4s96uHHMvSQTfisVHJhjQZmHWD1QGcfgGedCZsjdSh/ f3vPN1hNiA== ) ; Key ID = 3503`
	`ic3.gov. 86400 IN DNSKEY ( 256 3 13 d9QLXR33EzRXxlsVb4reS+nWL4aOxEQonCAb6V6zW8LdlkjSlIyMS4xVfs190hOEcxsrQZuk5Pwp Re5vk6TByg== ) ; Key ID = 34754`
	`ic3.gov. 86400 IN DNSKEY ( 256 3 13 dbin6oH+d6+1umYzDL5KAS956rqIUKEdUQOmFsuCqD/OTAKb6XE9ITBd8wE2EVhHmLSihTChftyN BkvQnszfaA== ) ; Key ID = 10113`
	`ic3.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb1MfofUEKeRs92wXHwMKBj0FBapu2NCFIgckbDOROzC6wIQR14Dh+UVNsxsrgqarisExXWI CMWULTzaTLA/+IGLBFaTSAVQsGY9MD6BQcvKzZtYqnBLb0/7+fdewvrjpxOtocGINaBolqldaoEI VmjnrHeNks+Wp5EWueav4Aky4nvhnc94ewZmVt9m43+RNH1fah7i0uGSA20wwJbHAnbAheBq0+hE +yJFJW3TvLG6hxTu8c/U1UBd4MeyxqdM0tlyN1INtm0WmjWKwpRGTMBs/R94jEzZ47kzeRwOk8xY YNPfH6ai+yq+YKNjXKq2xKQnqP5oty6wdnEayw+wvTk= ) ; Key ID = 6781`
	DNSKEY=31369/SEP is now in the chain-of-trust
	DS=31369/SHA-256 verifies DNSKEY=31369/SEP
	DNSKEY=3503/SEP is now in the chain-of-trust
	DS=3503/SHA-256 verifies DNSKEY=3503/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`ic3.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250531235959 20240520000000 31369 ic3.gov. kKwIN9l0H+MrKIrta0ra8u2r36YrdrkC5qJx0g6v5oBzFLY/wnJLU9OQUz+IOIB15lBIBOaPcKq0 qr+g8CatmaKqwmXd8ROaJLfm+MlhCCAkk+jxZYpRGDfgBYxG8LgCF26Lab8fYLI8YzIoYY2tGRaS +2mr5SNvdPh7AaFznpABSFtP3eduXZ3WeENoMsMIbbcGzfclVvlj1DTySgzgXXpYmn3HN19V9CUd 0CVrEabD/eGS31apERccjmP8tsi4Uk/UufujEwEOmN0xvjmzIxyRvf9/M19wMP4F6+HeXoVhQXVZ rM2VmLjVhc+K0QmxRL5W2BCYLMMiG9ltoC9DIg== )`
	`ic3.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20250531235959 20240520000000 3503 ic3.gov. zGRfulucmorSV1t+DhJKvt/1KDqqff8cpLk6zogU0O3AWRc94OXAGZwfRyyuUtHRe1yD9JIucsjL OioErltZ4Q== )`
	`ic3.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20241130235959 20240823000000 34754 ic3.gov. GcHtFb/8yeJ3+R1t95u3ya6rgRTRgFdb1bEaJ0q07HriphVtsOWwin1stohiutXaqePeSa9zlTUE /jhw7eZT1g== )`
	`ic3.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241130235959 20240823000000 6781 ic3.gov. YOXdcmMbYo6JFxrmdSMkd9vzR50R+HJai2Ljm+DJvl7P/9EuKQjH5F9jm7c/S9SSEj37M5kEH19K FVVf3QYOrTmrmu4JFehNAggL43XrseU2eyA4afCcMymlLRF+HNBIC44hziNrPHUJWhF2HnRDrYuF w1THGx+7rfNp3+sS+KGzsunI93GqMz7N8YDq17acNUkCytg9dnl8n868TQf2oN+9tZnmdYlCRjk/ 6iqHggGXoEiz5Gc74tUi92pDZ6iY4OHuAH6C071NwCQg19rA9ef9Y9sZ+/DOHnw3tzsHvrQhzJnx UbjniG1GwFQAoDKnVqPyPXGHkT2OB8L4OZfQGQ== )`
	RRSIG=31369 and DNSKEY=31369/SEP verifies the DNSKEY RRset
	RRSIG=3503 and DNSKEY=3503/SEP verifies the DNSKEY RRset
	RRSIG=34754 and DNSKEY=34754 verifies the DNSKEY RRset
	RRSIG=6781 and DNSKEY=6781 verifies the DNSKEY RRset
	DNSKEY=34754 is now in the chain-of-trust
	DNSKEY=10113 is now in the chain-of-trust
	DNSKEY=6781 is now in the chain-of-trust
	Query to dns1.ic3.gov for ic3.gov/A
	Received 466 bytes from 20.141.170.64
	;; Response received from [20.141.170.64] 466 octets ;; HEADER SECTION ;; id = 11816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN A ;; ANSWER SECTION (4 records) ic3.gov. 600 IN A 52.126.48.246 ic3.gov. 600 IN A 20.141.170.64 ic3.gov. 600 IN RRSIG ( A 13 2 600 20241130235959 20240823000000 34754 ic3.gov. 81bFzsNJdlilCfx5wG3HNgJ13NY+jNp1IeswPMM0GZ9NQWMi/w5+lEE6UolrovCC5k3NQW/UXJil pbEIdFReLA== ) ic3.gov. 600 IN RRSIG ( A 8 2 600 20241130235959 20240823000000 6781 ic3.gov. ZrEoR893t0eFVCpJk+dED4f0rZra3EHYsgOh4mhIx9jJ/hPYBbIVgPOEU7p7asUOff7cSiriSJ6v kTDPGjhZQJ+3ZfT6T1h61l2uUYZ10OZXOY+3YeAaxp/j0GWzzuCaKXOy0UjIzA/dV6Vk/OtB4qLK 31qbK4dkW5SuBSdkenkoAvy9QMSS50iyQJjlVClcFr/TuzEwR1sjcTv33BZZy9gh3nHRSJlaeo5W wAdj3ER4GHqBBIeaUhkQoWnogBzvclN/2mllir5uPGLBOVvHSyf+FCZg8Ao97tYHTkzFXldrxU8Y 1oAB3cueE2pHAE7vKVAvaMM0HvB/cKZCTjw0HA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.ic3.gov is authoritative for ic3.gov
	Found RRSIG signed by ic3.gov zone
	Query to dns2.ic3.gov for ic3.gov/SOA
	Received 1031 bytes from 52.126.48.246
	;; Response received from [52.126.48.246] 1031 octets ;; HEADER SECTION ;; id = 51790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN SOA ;; ANSWER SECTION (3 records) ic3.gov. 86400 IN SOA ( dns1.ic3.gov. hostmaster.ic3.gov. 478 ;serial 900 ;refresh 600 ;retry 172800 ;expire 86400 ;minimum ) ic3.gov. 86400 IN RRSIG ( SOA 8 2 86400 20241130235959 20240823000000 6781 ic3.gov. VDZt8pPZ/nugWo+sZ/q+b1Z2+nF00JhNNT/UVnIHeA/s9WpKhvss1krBChj9RtqbAqNtqYrsBvsU KlF1ifBtaiBlqjgjrGoIOJnHG8yBlDr3NoenDPMfXcPkmwu4Paw+6nO01bkkKel2477Wi4OBOrqL 4SmoWe2og1+Ad9XFp9V6Ah6ZsrznMiregEKAOkjoiDZpibNbWAWRECjeMjVAbXPoZBOD8jjadMKE L43arAmTT1rRck0THYrjdAfs/trkEAKmSik3m9VvFkaueNcUBD8B614x8JyqjzzUTalsWBykckk7 qZvv9H45RC0ZfxOiKHm8agtAKlqf2qtGhuansw== ) ic3.gov. 86400 IN RRSIG ( SOA 13 2 86400 20241130235959 20240823000000 34754 ic3.gov. /quXBq/A8CrSe7ZTDwv+mAXk3EMupLNX3f5SuZvKAU/aaQRt1p0Q89ATQ7Pi5moFrLSTlcb3Vb5a gLWFe1buLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (6 records) dns1.ic3.gov. 86400 IN A 20.141.170.64 dns1.ic3.gov. 86400 IN RRSIG ( A 13 3 86400 20241130235959 20240823000000 34754 ic3.gov. VZoeJmEaVv5dtz238d86m91z699Fiag/0AxLYOdy/Dq9NFXMrLDlQ1CJeu7W4JPQg6yCFFXRIYj8 /ThH/GL8+A== ) dns1.ic3.gov. 86400 IN RRSIG ( A 8 3 86400 20241130235959 20240823000000 6781 ic3.gov. mxe5eDbcx8xxCplLiI2Tq2/G2BwgF14X0Kar1D4Hmsdoeq/C0KVrnzqGFnNwmpPyXwpxtCNq/Ixe 4fMgVft9XfkOKxBbfno4X2BlNgR7oIbq7ObjeyiIwkGRlrJbiNI+5Orim8ar57dJq359Dcfm6UF/ y9v/ZO9qHJkiMFJTdxpPI2OCy4NFWdicKCeexPNVM07d3wBrrfE9Q8jXez7573+FSd2iVQZo2fex pc2bAbX85QM1uuRlRcoobTYeq5QGKBH8oScnwjWNDrTz+3C/CCYUe5Qz1T1JxiKXS1yc0OeKrvmb IVECwzyMT7qodBzIoRgn7vUmwPPc8zYm5Hml4A== ) dns1.ic3.gov. 86400 IN AAAA 2001:489a:3102:6::62 dns1.ic3.gov. 86400 IN RRSIG ( AAAA 13 3 86400 20241130235959 20240823000000 34754 ic3.gov. 8WWsfZywnxsZvsjrhx306nqODup2lkGkz46ZSsS/2eZ/EFSRBKYnLgeHh66VHhKB9Cy3NiVJ6NFE ZIrrwpeqqw== ) ;; { "EDNS-VERSION": 0 }
	Query to dns1.ic3.gov for ic3.gov/A
	Received 466 bytes from 20.141.170.64
	;; Response received from [20.141.170.64] 466 octets ;; HEADER SECTION ;; id = 20483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN A ;; ANSWER SECTION (4 records) ic3.gov. 600 IN A 20.141.170.64 ic3.gov. 600 IN A 52.126.48.246 ic3.gov. 600 IN RRSIG ( A 13 2 600 20241130235959 20240823000000 34754 ic3.gov. 81bFzsNJdlilCfx5wG3HNgJ13NY+jNp1IeswPMM0GZ9NQWMi/w5+lEE6UolrovCC5k3NQW/UXJil pbEIdFReLA== ) ic3.gov. 600 IN RRSIG ( A 8 2 600 20241130235959 20240823000000 6781 ic3.gov. ZrEoR893t0eFVCpJk+dED4f0rZra3EHYsgOh4mhIx9jJ/hPYBbIVgPOEU7p7asUOff7cSiriSJ6v kTDPGjhZQJ+3ZfT6T1h61l2uUYZ10OZXOY+3YeAaxp/j0GWzzuCaKXOy0UjIzA/dV6Vk/OtB4qLK 31qbK4dkW5SuBSdkenkoAvy9QMSS50iyQJjlVClcFr/TuzEwR1sjcTv33BZZy9gh3nHRSJlaeo5W wAdj3ER4GHqBBIeaUhkQoWnogBzvclN/2mllir5uPGLBOVvHSyf+FCZg8Ao97tYHTkzFXldrxU8Y 1oAB3cueE2pHAE7vKVAvaMM0HvB/cKZCTjw0HA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ic3.gov A RR has value 20.141.170.64
	ic3.gov A RR has value 52.126.48.246
	Found 2 RRSIGs over A RRset
	`ic3.gov. 600 IN RRSIG ( A 13 2 600 20241130235959 20240823000000 34754 ic3.gov. 81bFzsNJdlilCfx5wG3HNgJ13NY+jNp1IeswPMM0GZ9NQWMi/w5+lEE6UolrovCC5k3NQW/UXJil pbEIdFReLA== )`
	`ic3.gov. 600 IN RRSIG ( A 8 2 600 20241130235959 20240823000000 6781 ic3.gov. ZrEoR893t0eFVCpJk+dED4f0rZra3EHYsgOh4mhIx9jJ/hPYBbIVgPOEU7p7asUOff7cSiriSJ6v kTDPGjhZQJ+3ZfT6T1h61l2uUYZ10OZXOY+3YeAaxp/j0GWzzuCaKXOy0UjIzA/dV6Vk/OtB4qLK 31qbK4dkW5SuBSdkenkoAvy9QMSS50iyQJjlVClcFr/TuzEwR1sjcTv33BZZy9gh3nHRSJlaeo5W wAdj3ER4GHqBBIeaUhkQoWnogBzvclN/2mllir5uPGLBOVvHSyf+FCZg8Ao97tYHTkzFXldrxU8Y 1oAB3cueE2pHAE7vKVAvaMM0HvB/cKZCTjw0HA== )`
	RRSIG=34754 and DNSKEY=34754 verifies the A RRset
	RRSIG=6781 and DNSKEY=6781 verifies the A RRset

ic3.gov

	Query to dns2.ic3.gov for ic3.gov/A
	Received 466 bytes from 52.126.48.246
	;; Response received from [52.126.48.246] 466 octets ;; HEADER SECTION ;; id = 36410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN A ;; ANSWER SECTION (4 records) ic3.gov. 600 IN A 52.126.48.246 ic3.gov. 600 IN A 20.141.170.64 ic3.gov. 600 IN RRSIG ( A 13 2 600 20241130235959 20240823000000 34754 ic3.gov. 81bFzsNJdlilCfx5wG3HNgJ13NY+jNp1IeswPMM0GZ9NQWMi/w5+lEE6UolrovCC5k3NQW/UXJil pbEIdFReLA== ) ic3.gov. 600 IN RRSIG ( A 8 2 600 20241130235959 20240823000000 6781 ic3.gov. ZrEoR893t0eFVCpJk+dED4f0rZra3EHYsgOh4mhIx9jJ/hPYBbIVgPOEU7p7asUOff7cSiriSJ6v kTDPGjhZQJ+3ZfT6T1h61l2uUYZ10OZXOY+3YeAaxp/j0GWzzuCaKXOy0UjIzA/dV6Vk/OtB4qLK 31qbK4dkW5SuBSdkenkoAvy9QMSS50iyQJjlVClcFr/TuzEwR1sjcTv33BZZy9gh3nHRSJlaeo5W wAdj3ER4GHqBBIeaUhkQoWnogBzvclN/2mllir5uPGLBOVvHSyf+FCZg8Ao97tYHTkzFXldrxU8Y 1oAB3cueE2pHAE7vKVAvaMM0HvB/cKZCTjw0HA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.ic3.gov is authoritative for ic3.gov
	Found RRSIG signed by ic3.gov zone
	Query to dns2.ic3.gov for ic3.gov/A
	Received 466 bytes from 52.126.48.246
	;; Response received from [52.126.48.246] 466 octets ;; HEADER SECTION ;; id = 2933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ic3.gov. IN A ;; ANSWER SECTION (4 records) ic3.gov. 600 IN A 20.141.170.64 ic3.gov. 600 IN A 52.126.48.246 ic3.gov. 600 IN RRSIG ( A 13 2 600 20241130235959 20240823000000 34754 ic3.gov. 81bFzsNJdlilCfx5wG3HNgJ13NY+jNp1IeswPMM0GZ9NQWMi/w5+lEE6UolrovCC5k3NQW/UXJil pbEIdFReLA== ) ic3.gov. 600 IN RRSIG ( A 8 2 600 20241130235959 20240823000000 6781 ic3.gov. ZrEoR893t0eFVCpJk+dED4f0rZra3EHYsgOh4mhIx9jJ/hPYBbIVgPOEU7p7asUOff7cSiriSJ6v kTDPGjhZQJ+3ZfT6T1h61l2uUYZ10OZXOY+3YeAaxp/j0GWzzuCaKXOy0UjIzA/dV6Vk/OtB4qLK 31qbK4dkW5SuBSdkenkoAvy9QMSS50iyQJjlVClcFr/TuzEwR1sjcTv33BZZy9gh3nHRSJlaeo5W wAdj3ER4GHqBBIeaUhkQoWnogBzvclN/2mllir5uPGLBOVvHSyf+FCZg8Ao97tYHTkzFXldrxU8Y 1oAB3cueE2pHAE7vKVAvaMM0HvB/cKZCTjw0HA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ic3.gov A RR has value 20.141.170.64
	ic3.gov A RR has value 52.126.48.246
	Found 2 RRSIGs over A RRset
	`ic3.gov. 600 IN RRSIG ( A 13 2 600 20241130235959 20240823000000 34754 ic3.gov. 81bFzsNJdlilCfx5wG3HNgJ13NY+jNp1IeswPMM0GZ9NQWMi/w5+lEE6UolrovCC5k3NQW/UXJil pbEIdFReLA== )`
	`ic3.gov. 600 IN RRSIG ( A 8 2 600 20241130235959 20240823000000 6781 ic3.gov. ZrEoR893t0eFVCpJk+dED4f0rZra3EHYsgOh4mhIx9jJ/hPYBbIVgPOEU7p7asUOff7cSiriSJ6v kTDPGjhZQJ+3ZfT6T1h61l2uUYZ10OZXOY+3YeAaxp/j0GWzzuCaKXOy0UjIzA/dV6Vk/OtB4qLK 31qbK4dkW5SuBSdkenkoAvy9QMSS50iyQJjlVClcFr/TuzEwR1sjcTv33BZZy9gh3nHRSJlaeo5W wAdj3ER4GHqBBIeaUhkQoWnogBzvclN/2mllir5uPGLBOVvHSyf+FCZg8Ao97tYHTkzFXldrxU8Y 1oAB3cueE2pHAE7vKVAvaMM0HvB/cKZCTjw0HA== )`
	RRSIG=34754 and DNSKEY=34754 verifies the A RRset
	RRSIG=6781 and DNSKEY=6781 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ic3.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: