DNSSEC Analyzer - medlineplus.gov

Domain Name:

Time: 2022-01-21 08:54:05 UTC, NTP stratum 16

Analyzing DNSSEC problems for medlineplus.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 41121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to a.root-servers.net for medlineplus.gov/A
	Received 634 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (634 octets) ;; HEADER SECTION ;; id = 32630 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for gov/DNSKEY
	Received 622 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (622 octets) ;; HEADER SECTION ;; id = 28585 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to a.root-servers.net for gov/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (367 octets) ;; HEADER SECTION ;; id = 8609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . QYZBwkOE78sziVDiZS/PIG7elXDeJChPlRas01dMaG2oddT/3DNeLkMZeuaZDGMwRlSxTIxxfwMO t7pKW2gxqTZO9Azxb4kgXVkWHaRZlQy1kMwQHRj7PWwafjT/nxyKDK2lf0xy1Q46RrgFGclx2vNq S07G6URIinnWj95Vbu1TwxVwFEc6M7pwgM7ofrt9O4giToHvOeCVvm/ALa8MFAp4L1J33A2mpg2x x9x3OOiwfxtPtQLbboWoHPkGmK17mvwwG31x8znPcED8Nc6CSZubqQmJ+1RaMnn3vK/Wfoj3lH0V Nwyonc6u4b0E3dY4enCpLaKWdwC+V8+H2YEO7g== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (777 octets) ;; HEADER SECTION ;; id = 16910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030 gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030`
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7030 is now in the chain-of-trust
	Query to d.gov-servers.net for medlineplus.gov/A
	Received 442 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (442 octets) ;; HEADER SECTION ;; id = 6101 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) medlineplus.gov. 86400 IN NS gslb02.nlm.nih.gov. medlineplus.gov. 86400 IN NS gslb03.nlm.nih.gov. medlineplus.gov. 86400 IN NS gslb01.nlm.nih.gov. medlineplus.gov. 3600 IN DS ( 48513 7 2 e1528b97592f4986acf25c5ac6d616d80cd35627204314764d1cec91181e68dd ) medlineplus.gov. 3600 IN DS ( 48513 7 1 dec51ef7e7e21d9376f878169f3d8b2fbd590c4e ) medlineplus.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064024 20220119064024 7030 gov. btwASpDq5VVen2gYuTSO7PIwsF+kRMG/PIe8y4DN9LxOarYaOkRqIVO+fq7F8W8IDNtEyaufgAaW oQtuX4RVnjhhmJ1Rlj/fR+U189/BWQR2kIviRtz/1ADqmMN3YGH4xSbJns/DCaclF3GW9MebRiJW td2Fw/JlmqKavSwlrEch1jYXBKse2Ict54CrtZFBHC1wEpHgQdhmUmOV0xzEoA== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.gov. 86400 IN A 165.112.6.3 gslb03.nlm.nih.gov. 86400 IN A 130.14.252.53 gslb01.nlm.nih.gov. 86400 IN A 130.14.252.50 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for medlineplus.gov/DNSKEY
	Received 442 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (442 octets) ;; HEADER SECTION ;; id = 34803 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) medlineplus.gov. 86400 IN NS gslb02.nlm.nih.gov. medlineplus.gov. 86400 IN NS gslb03.nlm.nih.gov. medlineplus.gov. 86400 IN NS gslb01.nlm.nih.gov. medlineplus.gov. 3600 IN DS ( 48513 7 2 e1528b97592f4986acf25c5ac6d616d80cd35627204314764d1cec91181e68dd ) medlineplus.gov. 3600 IN DS ( 48513 7 1 dec51ef7e7e21d9376f878169f3d8b2fbd590c4e ) medlineplus.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064024 20220119064024 7030 gov. btwASpDq5VVen2gYuTSO7PIwsF+kRMG/PIe8y4DN9LxOarYaOkRqIVO+fq7F8W8IDNtEyaufgAaW oQtuX4RVnjhhmJ1Rlj/fR+U189/BWQR2kIviRtz/1ADqmMN3YGH4xSbJns/DCaclF3GW9MebRiJW td2Fw/JlmqKavSwlrEch1jYXBKse2Ict54CrtZFBHC1wEpHgQdhmUmOV0xzEoA== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.gov. 86400 IN A 165.112.6.3 gslb03.nlm.nih.gov. 86400 IN A 130.14.252.53 gslb01.nlm.nih.gov. 86400 IN A 130.14.252.50 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone medlineplus.gov

medlineplus.gov

	Checking DS between gov and medlineplus.gov
	Query to c.gov-servers.net for medlineplus.gov/DS
	Received 323 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (323 octets) ;; HEADER SECTION ;; id = 22623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.gov. IN DS ;; ANSWER SECTION (3 records) medlineplus.gov. 3600 IN DS ( 48513 7 2 e1528b97592f4986acf25c5ac6d616d80cd35627204314764d1cec91181e68dd ) medlineplus.gov. 3600 IN DS ( 48513 7 1 dec51ef7e7e21d9376f878169f3d8b2fbd590c4e ) medlineplus.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064024 20220119064024 7030 gov. btwASpDq5VVen2gYuTSO7PIwsF+kRMG/PIe8y4DN9LxOarYaOkRqIVO+fq7F8W8IDNtEyaufgAaW oQtuX4RVnjhhmJ1Rlj/fR+U189/BWQR2kIviRtz/1ADqmMN3YGH4xSbJns/DCaclF3GW9MebRiJW td2Fw/JlmqKavSwlrEch1jYXBKse2Ict54CrtZFBHC1wEpHgQdhmUmOV0xzEoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for medlineplus.gov in the gov zone
	DS=48513/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=48513/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`medlineplus.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064024 20220119064024 7030 gov. btwASpDq5VVen2gYuTSO7PIwsF+kRMG/PIe8y4DN9LxOarYaOkRqIVO+fq7F8W8IDNtEyaufgAaW oQtuX4RVnjhhmJ1Rlj/fR+U189/BWQR2kIviRtz/1ADqmMN3YGH4xSbJns/DCaclF3GW9MebRiJW td2Fw/JlmqKavSwlrEch1jYXBKse2Ict54CrtZFBHC1wEpHgQdhmUmOV0xzEoA== )`
	RRSIG=7030 and DNSKEY=7030 verifies the DS RRset
	DS=48513/SHA-256 is now in the chain-of-trust
	`medlineplus.gov. 3600 IN DS ( 48513 7 2 e1528b97592f4986acf25c5ac6d616d80cd35627204314764d1cec91181e68dd )`
	`medlineplus.gov. 3600 IN DS ( 48513 7 1 dec51ef7e7e21d9376f878169f3d8b2fbd590c4e )`
	Query to gslb03.nlm.nih.gov for medlineplus.gov/DNSKEY
	Received 1202 bytes from 130.14.252.53
	;; Response received from 130.14.252.53 (1202 octets) ;; HEADER SECTION ;; id = 47872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.gov. IN DNSKEY ;; ANSWER SECTION (4 records) medlineplus.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAbMM1I/4F7R1Hmr6FfncmUuge5X+g7AcXWVPkKdN5Umlt0il3JNVO7aGg8fjrvb13MU5nNIx gxykOTuxZ/RDXlFClbnhqKXNwq4RTY8DyGTXptodmsWo4XuCGPU5bIyJ8+ZS1JX2ax9xa9y1wqob xtAy7AGYTOuzBIHhVWM7i9/9Z+YqVFmXu5yT8IaXe/QFeK3hzaWGvPEnUcf8CBsivqikGSqI86mM NBqzeHq2YZcUhveba+ND2num60CZsvK+ex1yZ+cWZogIp9hRfmpWdJIa63m8xK3ytGPTKCG2Dkus UhxIt6TOvCGcjQV5jKYqnv53kEZMgZFJa4cNnjsSGG0= ) ; Key ID = 48513 medlineplus.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAab+4Y1ANXLPA1YPiQw70cNn2NcK+aNX+UIw0tnCmFfYZKhBWBMZ1BUU2Ph8M3cT9AN3u+s+ UDBg/7B2kz+LNtxQlmGx7NNOvZzqi7W6FS6ZtHRHJNSlfMV7k69lqDJ4OicaQeYGgku98aVxLQyw Va0aBxnxkAyv5jEDskoWMkGbuGsTmOWB+oz0Xo9jy5m6xWH5rjN32/ARZnDTsKoggif3lN/qZN9p N7J4RWmhqK0X+N0mkC00nTEcloKYPp3bsuvGWibbC7Mti/1aIo//dJ414Sn+pwoTa13IBY1Ty2uz +UZzgdo/5FBWPEvsLvancGy2x1eC5UEApysXdNc18SE= ) ; Key ID = 64082 medlineplus.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20220207203738 20220117193738 48513 medlineplus.gov. mzML+hAL6Jn3Ysy7OCBfq9/08z1ItQFFbdCg02lxXXIQct5NQZKHZxXqugTV4IBsLXaPzl4eWJ/Z HKsjZLt1ziqmnf1p+vkhMd5MewVuKzRH48XTCmXREv2GSZOY85HCUbuE3h+uE/NJ2KlxP/EblCe9 q5KLDpK0LeAiXLxSf9vikck4OGrcao+Jd8BdvgZwOOL5UmDFsgG1hwez/sUM/TVjyrJUtayWpOol v17t8q68o3WJdGmm6J1W8iKiWeWL2qquamu0jUKdvmS/ueHnP+pQvPSEBqkrrZvSC5hI6p3O8iZU A2x4xCcftFsjN84r8+fPX488gns+quhZQWyUwA== ) medlineplus.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20220206083802 20220116073802 64082 medlineplus.gov. dq47BN3bkboaYx23kWh+iLoy/JcGO0t+8E9Zcmx+ZLp0VYnAHkJGEiq12uLm5yVigWtlWAQC5uo1 rwgj7zCq57AsoG0sAXhUhIXOghbI7RVK3J3AFuxwjQGbUAWs4gBlOnLEfkDgJNpJjTju8ht5nA8o NnoiYuOpOG13gtoYonEN9zlx3rsSod/NUNXc3DxnYQwBAUtiBoJVIUgzJxSYP+v3P+TeVxU4wYuT CEpxDBPylvW8b9yS3V9ElIWF8g4rJzfZh9JhKtRQwF58St2dEsyUZjuzLBaUjUmcSFlfxXr4S90C 1mS0OMhUEEPTxNvChVe85hm0xW+l9U+T+SqY3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for medlineplus.gov
	`medlineplus.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAbMM1I/4F7R1Hmr6FfncmUuge5X+g7AcXWVPkKdN5Umlt0il3JNVO7aGg8fjrvb13MU5nNIx gxykOTuxZ/RDXlFClbnhqKXNwq4RTY8DyGTXptodmsWo4XuCGPU5bIyJ8+ZS1JX2ax9xa9y1wqob xtAy7AGYTOuzBIHhVWM7i9/9Z+YqVFmXu5yT8IaXe/QFeK3hzaWGvPEnUcf8CBsivqikGSqI86mM NBqzeHq2YZcUhveba+ND2num60CZsvK+ex1yZ+cWZogIp9hRfmpWdJIa63m8xK3ytGPTKCG2Dkus UhxIt6TOvCGcjQV5jKYqnv53kEZMgZFJa4cNnjsSGG0= ) ; Key ID = 48513`
	`medlineplus.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAab+4Y1ANXLPA1YPiQw70cNn2NcK+aNX+UIw0tnCmFfYZKhBWBMZ1BUU2Ph8M3cT9AN3u+s+ UDBg/7B2kz+LNtxQlmGx7NNOvZzqi7W6FS6ZtHRHJNSlfMV7k69lqDJ4OicaQeYGgku98aVxLQyw Va0aBxnxkAyv5jEDskoWMkGbuGsTmOWB+oz0Xo9jy5m6xWH5rjN32/ARZnDTsKoggif3lN/qZN9p N7J4RWmhqK0X+N0mkC00nTEcloKYPp3bsuvGWibbC7Mti/1aIo//dJ414Sn+pwoTa13IBY1Ty2uz +UZzgdo/5FBWPEvsLvancGy2x1eC5UEApysXdNc18SE= ) ; Key ID = 64082`
	DNSKEY=48513/SEP is now in the chain-of-trust
	DS=48513/SHA-256 verifies DNSKEY=48513/SEP
	DS=48513/SHA-1 verifies DNSKEY=48513/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`medlineplus.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20220207203738 20220117193738 48513 medlineplus.gov. mzML+hAL6Jn3Ysy7OCBfq9/08z1ItQFFbdCg02lxXXIQct5NQZKHZxXqugTV4IBsLXaPzl4eWJ/Z HKsjZLt1ziqmnf1p+vkhMd5MewVuKzRH48XTCmXREv2GSZOY85HCUbuE3h+uE/NJ2KlxP/EblCe9 q5KLDpK0LeAiXLxSf9vikck4OGrcao+Jd8BdvgZwOOL5UmDFsgG1hwez/sUM/TVjyrJUtayWpOol v17t8q68o3WJdGmm6J1W8iKiWeWL2qquamu0jUKdvmS/ueHnP+pQvPSEBqkrrZvSC5hI6p3O8iZU A2x4xCcftFsjN84r8+fPX488gns+quhZQWyUwA== )`
	`medlineplus.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20220206083802 20220116073802 64082 medlineplus.gov. dq47BN3bkboaYx23kWh+iLoy/JcGO0t+8E9Zcmx+ZLp0VYnAHkJGEiq12uLm5yVigWtlWAQC5uo1 rwgj7zCq57AsoG0sAXhUhIXOghbI7RVK3J3AFuxwjQGbUAWs4gBlOnLEfkDgJNpJjTju8ht5nA8o NnoiYuOpOG13gtoYonEN9zlx3rsSod/NUNXc3DxnYQwBAUtiBoJVIUgzJxSYP+v3P+TeVxU4wYuT CEpxDBPylvW8b9yS3V9ElIWF8g4rJzfZh9JhKtRQwF58St2dEsyUZjuzLBaUjUmcSFlfxXr4S90C 1mS0OMhUEEPTxNvChVe85hm0xW+l9U+T+SqY3A== )`
	RRSIG=48513 and DNSKEY=48513/SEP verifies the DNSKEY RRset
	RRSIG=64082 and DNSKEY=64082 verifies the DNSKEY RRset
	DNSKEY=64082 is now in the chain-of-trust
	Query to gslb02.nlm.nih.gov for medlineplus.gov/A
	Received 389 bytes from 165.112.6.3
	;; Response received from 165.112.6.3 (389 octets) ;; HEADER SECTION ;; id = 46242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.gov. IN A ;; ANSWER SECTION (2 records) medlineplus.gov. 30 IN CNAME medlineplus.awsprod.nlm.nih.gov. medlineplus.gov. 30 IN RRSIG ( CNAME 7 2 30 20220206090931 20220116080931 64082 medlineplus.gov. nd0TerkpK94cPiA3bT+Tl32s+0pEaX5kwyZos8MhSKy5Xa/LZHDtCS3VPw826SXjFULykxE5dvda cz7J/ObFnpA5MQpV/Psdx3L222so340UQc4SIXq3Z9peNi+jnLik3mj9vJ4J5e2es19CCg1Px9EW V1iQfQPnmJlZOuqKZ17BiYkdhxW1T/5N4p+iDAZkxMtWT2qjYbiP41aM7budw93CA7kDiH6D3Osw jbvAzLx1aaddtB4lGyWeudOYREzt+JaVknjJPYVcxKKdFXuQ0td1plVhhldkDVQopxugpa6uaIp6 GdCmf+hhyF/VuMa9p7dMe0kTrA8Q1A3uQpCEqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb02.nlm.nih.gov is authoritative for medlineplus.gov
	Found RRSIG signed by medlineplus.gov zone
	medlineplus.gov is a CNAME to medlineplus.awsprod.nlm.nih.gov
	Found 1 RRSIGs over CNAME RRset
	`medlineplus.gov. 30 IN RRSIG ( CNAME 7 2 30 20220206090931 20220116080931 64082 medlineplus.gov. nd0TerkpK94cPiA3bT+Tl32s+0pEaX5kwyZos8MhSKy5Xa/LZHDtCS3VPw826SXjFULykxE5dvda cz7J/ObFnpA5MQpV/Psdx3L222so340UQc4SIXq3Z9peNi+jnLik3mj9vJ4J5e2es19CCg1Px9EW V1iQfQPnmJlZOuqKZ17BiYkdhxW1T/5N4p+iDAZkxMtWT2qjYbiP41aM7budw93CA7kDiH6D3Osw jbvAzLx1aaddtB4lGyWeudOYREzt+JaVknjJPYVcxKKdFXuQ0td1plVhhldkDVQopxugpa6uaIp6 GdCmf+hhyF/VuMa9p7dMe0kTrA8Q1A3uQpCEqw== )`
	RRSIG=64082 and DNSKEY=64082 verifies the CNAME RRset

gov

	Query to a.gov-servers.net for medlineplus.awsprod.nlm.nih.gov/A
	Received 440 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (440 octets) ;; HEADER SECTION ;; id = 64796 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nih.gov. 86400 IN NS ns.nih.gov. nih.gov. 86400 IN NS ns3.nih.gov. nih.gov. 86400 IN NS ns2.nih.gov. nih.gov. 3600 IN DS ( 18384 7 2 a11b5272abc52150efad05abb5625254537ec9c148450cea3c7a63db42eab5ce ) nih.gov. 3600 IN DS 18384 7 1 187cad6c17b96809ac334fcf6841c2ab3989655e nih.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064216 20220119064216 7030 gov. cOQXBBW/ZErH4yeMlu6ahbZLMVz4f41ihWSsAZ/h4poERTQ3EB7WxoChD9wpMbe7OhlwqdYKkj13 81EaaPEi3u3DzQFQ3BJATQzSgxUUpx2l1FT0FKE5Q6cLJLOj/vLKP/K3qATpgDRXImfNkyrkMeHn NuM30XcpCmQtgripE1bLr0Fwq2lPpMxJk/d9BASqqmBDE7B49JnIp5Qktm20dQ== ) ;; ADDITIONAL SECTION (4 records) ns.nih.gov. 86400 IN A 128.231.128.251 ns3.nih.gov. 86400 IN A 165.112.4.230 ns2.nih.gov. 86400 IN A 128.231.64.1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for nih.gov/DNSKEY
	Received 416 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (416 octets) ;; HEADER SECTION ;; id = 2726 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nih.gov. 86400 IN NS ns.nih.gov. nih.gov. 86400 IN NS ns3.nih.gov. nih.gov. 86400 IN NS ns2.nih.gov. nih.gov. 3600 IN DS ( 18384 7 2 a11b5272abc52150efad05abb5625254537ec9c148450cea3c7a63db42eab5ce ) nih.gov. 3600 IN DS 18384 7 1 187cad6c17b96809ac334fcf6841c2ab3989655e nih.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064216 20220119064216 7030 gov. cOQXBBW/ZErH4yeMlu6ahbZLMVz4f41ihWSsAZ/h4poERTQ3EB7WxoChD9wpMbe7OhlwqdYKkj13 81EaaPEi3u3DzQFQ3BJATQzSgxUUpx2l1FT0FKE5Q6cLJLOj/vLKP/K3qATpgDRXImfNkyrkMeHn NuM30XcpCmQtgripE1bLr0Fwq2lPpMxJk/d9BASqqmBDE7B49JnIp5Qktm20dQ== ) ;; ADDITIONAL SECTION (4 records) ns.nih.gov. 86400 IN A 128.231.128.251 ns3.nih.gov. 86400 IN A 165.112.4.230 ns2.nih.gov. 86400 IN A 128.231.64.1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nih.gov

nih.gov

	Checking DS between gov and nih.gov
	Query to a.gov-servers.net for nih.gov/DS
	Received 315 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (315 octets) ;; HEADER SECTION ;; id = 18307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.gov. IN DS ;; ANSWER SECTION (3 records) nih.gov. 3600 IN DS ( 18384 7 2 a11b5272abc52150efad05abb5625254537ec9c148450cea3c7a63db42eab5ce ) nih.gov. 3600 IN DS 18384 7 1 187cad6c17b96809ac334fcf6841c2ab3989655e nih.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064216 20220119064216 7030 gov. cOQXBBW/ZErH4yeMlu6ahbZLMVz4f41ihWSsAZ/h4poERTQ3EB7WxoChD9wpMbe7OhlwqdYKkj13 81EaaPEi3u3DzQFQ3BJATQzSgxUUpx2l1FT0FKE5Q6cLJLOj/vLKP/K3qATpgDRXImfNkyrkMeHn NuM30XcpCmQtgripE1bLr0Fwq2lPpMxJk/d9BASqqmBDE7B49JnIp5Qktm20dQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nih.gov in the gov zone
	DS=18384/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18384/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nih.gov. 3600 IN RRSIG ( DS 8 2 3600 20220126064216 20220119064216 7030 gov. cOQXBBW/ZErH4yeMlu6ahbZLMVz4f41ihWSsAZ/h4poERTQ3EB7WxoChD9wpMbe7OhlwqdYKkj13 81EaaPEi3u3DzQFQ3BJATQzSgxUUpx2l1FT0FKE5Q6cLJLOj/vLKP/K3qATpgDRXImfNkyrkMeHn NuM30XcpCmQtgripE1bLr0Fwq2lPpMxJk/d9BASqqmBDE7B49JnIp5Qktm20dQ== )`
	RRSIG=7030 and DNSKEY=7030 verifies the DS RRset
	DS=18384/SHA-256 is now in the chain-of-trust
	`nih.gov. 3600 IN DS ( 18384 7 2 a11b5272abc52150efad05abb5625254537ec9c148450cea3c7a63db42eab5ce )`
	`nih.gov. 3600 IN DS 18384 7 1 187cad6c17b96809ac334fcf6841c2ab3989655e`
	Query to ns2.nih.gov for nih.gov/DNSKEY
	Received 1237 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (1237 octets) ;; HEADER SECTION ;; id = 23408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; nih.gov. IN DNSKEY ;; ANSWER SECTION (6 records) nih.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAdCLG3UWxTqc9mubAE4ABmRfoUozqLaovlDFUn4zhtLxok/pIprc+msSnfAlNx5zyCuTuQED bJeLoQfpimP7jC1QJ2ehpwoiiFlXuo4TfQ4XCDA65PqcJYOho7TvRK3olqFYp4Mx7pfK8XySxyO7 /zLdGZFCgsQPLwzXVn3XlZGv ) ; Key ID = 48257 nih.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAcSamQRXL2oslCfMqPurCa7I98+AGR2NjZQ+Ov8BDkPU61pE08tCuCgYa3LPLHYhRYjFlws2 TCzeIucgxDKAfxD7h0yGp2YphYhP2HqAp7YBUDgciJqqFPQOYYgw1/7b6kKzL69DCzTMsI1o4ZwP 0jYx5RxVq4K3zWOJ3+484uzL ) ; Key ID = 35873 nih.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAcMaAY3XLsbj1IvtRty9bIDKNGIjY1VKy2rfAtkPCR0bISdDxU/NfbnvUy29+eNOGsR/F18S 23l8/R00bxP79Au0XFo92t7tUz4pVUrGe7b70i2CsO/c9QA0ObZzrTi1wWUBJoeWquP2mA+lIg+p x/dPG7IZS4VR6IjS8do7uLHbib8nWwyJ8Blz9/EWme5HFdiC3u1m/mB7V3c1VG5XJ6QSAUS47zI8 DVtq3xOie4ZhdqlWXTvlAXO6Fc5nTlYFNcbQHOfNYSrjEuVxUaQig3lcePd4BXpWAKjXWxPjzmFI i1yiIr1XSiLEiM4HVhXdoOW2dRmSJNjinEcFFhVLOx8= ) ; Key ID = 18384 nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220124134103 20220120132149 18384 nih.gov. NfdmNGXWoYyvD4O425QoSw0RrPXdwzdezHmz5f7EfSz1IdAaGFKFWHV1HGbeRdx7A6rTWHnMMtji Dwsw+oXb6Rf6lSCFzo//JcXP3zIXVWSlpdEQtzrUbQqIYhGgzbyuiqxuDjEwdsw3CMYRo429Hn/D ffWKdoJTP6GnguOlKMvWcVheklsJuE3uiL9sZM/K2QgRxILmwuILfVqRPgZAAQYfRrHDXmevWAj3 lFhk6Psrf+iRJIt6PXyFMm2t0gIKPYCce2jtGZBNVnkuH3EK3utHd6uDhZ8va2Kldc90+/d+eLqq JQ7DRLmXVqzaE2mMBZtGsmYlpGd05w5KCDkDXw== ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220124134103 20220120132149 35873 nih.gov. JK1RjG57G2IstvKqHaJ8Tbujaq+D8UULCZ1qIPpFDEffS1Ac+3AdzWbaMq6MqyFkNhU2NcXhl3QL Xi0hLZ52A77sLfMkniDTa8K6l7Ro1LhUjB+49llr01PvDlrRhHqGGiClfgshjVJEKW+SfhvRm1Qu SXMu3T7AgIzNYUQD3Gg= ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220124134103 20220120132149 48257 nih.gov. AmNaRneq9hPJI0XgMFhZzHRLfwQBJa04QlXNlL/8VpN5KY5BZkT1GL0pLZb6D+SrQLPJAjPwHq1T s2K4C4aYUqCQVJ3XIOamvkrSgHlYdM4/+yw86TTR61u47e3WAUiMhMfdQtJUhcrETfnxlev83wH+ M3XlC5SWivBLUlZeuIc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 3 DNSKEY records for nih.gov
	`nih.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAdCLG3UWxTqc9mubAE4ABmRfoUozqLaovlDFUn4zhtLxok/pIprc+msSnfAlNx5zyCuTuQED bJeLoQfpimP7jC1QJ2ehpwoiiFlXuo4TfQ4XCDA65PqcJYOho7TvRK3olqFYp4Mx7pfK8XySxyO7 /zLdGZFCgsQPLwzXVn3XlZGv ) ; Key ID = 48257`
	`nih.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAcSamQRXL2oslCfMqPurCa7I98+AGR2NjZQ+Ov8BDkPU61pE08tCuCgYa3LPLHYhRYjFlws2 TCzeIucgxDKAfxD7h0yGp2YphYhP2HqAp7YBUDgciJqqFPQOYYgw1/7b6kKzL69DCzTMsI1o4ZwP 0jYx5RxVq4K3zWOJ3+484uzL ) ; Key ID = 35873`
	`nih.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAcMaAY3XLsbj1IvtRty9bIDKNGIjY1VKy2rfAtkPCR0bISdDxU/NfbnvUy29+eNOGsR/F18S 23l8/R00bxP79Au0XFo92t7tUz4pVUrGe7b70i2CsO/c9QA0ObZzrTi1wWUBJoeWquP2mA+lIg+p x/dPG7IZS4VR6IjS8do7uLHbib8nWwyJ8Blz9/EWme5HFdiC3u1m/mB7V3c1VG5XJ6QSAUS47zI8 DVtq3xOie4ZhdqlWXTvlAXO6Fc5nTlYFNcbQHOfNYSrjEuVxUaQig3lcePd4BXpWAKjXWxPjzmFI i1yiIr1XSiLEiM4HVhXdoOW2dRmSJNjinEcFFhVLOx8= ) ; Key ID = 18384`
	DNSKEY=18384/SEP is now in the chain-of-trust
	DS=18384/SHA-256 verifies DNSKEY=18384/SEP
	DS=18384/SHA-1 verifies DNSKEY=18384/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220124134103 20220120132149 18384 nih.gov. NfdmNGXWoYyvD4O425QoSw0RrPXdwzdezHmz5f7EfSz1IdAaGFKFWHV1HGbeRdx7A6rTWHnMMtji Dwsw+oXb6Rf6lSCFzo//JcXP3zIXVWSlpdEQtzrUbQqIYhGgzbyuiqxuDjEwdsw3CMYRo429Hn/D ffWKdoJTP6GnguOlKMvWcVheklsJuE3uiL9sZM/K2QgRxILmwuILfVqRPgZAAQYfRrHDXmevWAj3 lFhk6Psrf+iRJIt6PXyFMm2t0gIKPYCce2jtGZBNVnkuH3EK3utHd6uDhZ8va2Kldc90+/d+eLqq JQ7DRLmXVqzaE2mMBZtGsmYlpGd05w5KCDkDXw== )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220124134103 20220120132149 35873 nih.gov. JK1RjG57G2IstvKqHaJ8Tbujaq+D8UULCZ1qIPpFDEffS1Ac+3AdzWbaMq6MqyFkNhU2NcXhl3QL Xi0hLZ52A77sLfMkniDTa8K6l7Ro1LhUjB+49llr01PvDlrRhHqGGiClfgshjVJEKW+SfhvRm1Qu SXMu3T7AgIzNYUQD3Gg= )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220124134103 20220120132149 48257 nih.gov. AmNaRneq9hPJI0XgMFhZzHRLfwQBJa04QlXNlL/8VpN5KY5BZkT1GL0pLZb6D+SrQLPJAjPwHq1T s2K4C4aYUqCQVJ3XIOamvkrSgHlYdM4/+yw86TTR61u47e3WAUiMhMfdQtJUhcrETfnxlev83wH+ M3XlC5SWivBLUlZeuIc= )`
	RRSIG=18384 and DNSKEY=18384/SEP verifies the DNSKEY RRset
	RRSIG=35873 and DNSKEY=35873 verifies the DNSKEY RRset
	RRSIG=48257 and DNSKEY=48257 verifies the DNSKEY RRset
	DNSKEY=48257 is now in the chain-of-trust
	DNSKEY=35873 is now in the chain-of-trust
	Query to ns.nih.gov for medlineplus.awsprod.nlm.nih.gov/A
	Received 445 bytes from 128.231.128.251
	;; Response received from 128.231.128.251 (445 octets) ;; HEADER SECTION ;; id = 61090 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.gov. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.gov. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 86400 IN NS ns-1890.awsdns-44.co.uk. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4l6e8rtl1pu85fhrhrtmr5mp6p5kji3 NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20220208005347 20220109001217 180 nlm.nih.gov. XQEO/v8vgEt+Y7HO9eXJDN7CMoMKKTi63tG61gqEdvpDj8bIj7+GvOGMA0vhEO+7+8Hfc1xzFWw6 aUWPefQ/PaID8Ukmc+uN1ZgAMnW78SMEG0LXXT9M+SeJlat6PFbg7Ioh4jL1yp63xwV1Ju6tEOju O9Ed6xR3I469tj31CkA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns2.nih.gov for nlm.nih.gov/DNSKEY
	Received 934 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (934 octets) ;; HEADER SECTION ;; id = 21591 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAbntWeS9hzGDKpL+OaSaPj0Zntg/ekbK91xYtzziKSC40TidxSPyiZowvCpaPe89lLF1sgab Jf95oPxuAeoPn9jYC6KqAS2yaqV3Db5qHvsfmQGDnHydRVKPlukWSjiygZsREKV6y+v8a+Bc6SB/ TmxHr5gRc4YnENrEy7nnFyaV ) ; Key ID = 180 nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAb/4CRmkcv3GpvIWXmE1L/FgSzozV875Ida/SJbDM099Z/GegBKja/xv9SWL6wjIeExtMupr LPPQA/5rLJsyEsEdlL4gX4QE7ipYjdvv1G6spoHuiG6j+JFW5OnoWnrRMTnTs71K5VTESV1Ejq52 eEu7zNz1l0CoiDAR4J6RS6uBg0wxwkJbyuiTmvCxJ1C8802HCaS7RbUJ57VOk8zCVc7BRvWgkyj3 2x3iUTzJGb4awT/lb2WiRbC3t0A722nnzbpcrg4a/NNe4Fur01mNibJoybIU+08idyFTpfsZbK/W YTn1j38KhOncupkyXDYWKUCXMHBG6VC7GKOoKfBM3gE= ) ; Key ID = 51763 nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20220201010500 20220102005914 180 nlm.nih.gov. S1Cr9UpzNGVQYGzXCfw1TCzY6oWTOC/51BxZDcY6rDjqxv32FuHV8HRUXBEpQ+XEzwr9K1NCOuO+ bn8YZBvVZb7VynTojYKsVlk2KKnK5kj1a3RRS3QoBAvCe11Ton5vZKBEy79vavDzSt4VrTdSvfpC EjKj6GJFJtvB4XbU0aY= ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20220201010500 20220102005914 51763 nlm.nih.gov. gji4zuBujdq7b+J/gXy3RbL3ORcll2kHOcb9skCp2eZvzNYJqyjH4mGKGFwWFLDUJeYSzOJKNx4h aaj6moVniy29YSa7KFOY06AvOOYvQ6KAJnwZPSG/z37kRP9xwU4mqP8KBjK4gk0zf2xQIVODZjCw FEtqEtgetfGnGkJggi3LIlEYZg9tcbVa5VcUhVigsS5uJ1VFc/7UqcWdW/kGuebDnG8gRh4apzcx y+hJ48TN9LOZZlqRvsobSdyRfNf/MfVQTIe//l2syBGc9mmcKdqAS4ymonHaBnTwm5+dx286Y6Bk G9IvK99w7Rkvn8ViyWNJ81rjm98aH7/H2n6qWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found child zone nlm.nih.gov
	Attempting to learn nameservers for nlm.nih.gov
	Query to ns2.nih.gov for nlm.nih.gov/NS
	Received 306 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (306 octets) ;; HEADER SECTION ;; id = 28436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN NS ;; ANSWER SECTION (6 records) nlm.nih.gov. 86400 IN NS lhcns1.nlm.nih.gov. nlm.nih.gov. 86400 IN NS ns2.nih.gov. nlm.nih.gov. 86400 IN NS ns3.nih.gov. nlm.nih.gov. 86400 IN NS lhcns2.nlm.nih.gov. nlm.nih.gov. 86400 IN NS ns.nih.gov. nlm.nih.gov. 86400 IN RRSIG ( NS 7 3 86400 20220208005247 20220109001209 180 nlm.nih.gov. CklbxuQ1JzBstYKGULALEUGpy26CRzJUV5w+VGToRAa2B2r9vfuApItcLTwMDDMbA1If+qBQr9lX J8/wvNi16U1gRV0ANvEHwZF3yQlH5AAwMX8PqY9kB4L6a82hICJPpWBDXxvViLMN2kx6l30yip7I DWQ6AYlfWB79/zUZyz0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found nlm.nih.gov nameservers: lhcns1.nlm.nih.gov, ns2.nih.gov, ns3.nih.gov, lhcns2.nlm.nih.gov, ns.nih.gov

nlm.nih.gov

	Checking DS between nih.gov and nlm.nih.gov
	Query to ns2.nih.gov for nlm.nih.gov/DS
	Received 422 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (422 octets) ;; HEADER SECTION ;; id = 4331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN DS ;; ANSWER SECTION (3 records) nlm.nih.gov. 3600 IN DS ( 51763 7 2 a32c11a79666b21afe0b4da2d5d582a6f5bd871aaaed9683d012ac5d55bc92b8 ) nlm.nih.gov. 3600 IN RRSIG ( DS 7 3 3600 20220124183221 20220120175927 35873 nih.gov. WnD0ajtoXWFjusyycOY54y0ucs6vvsOK220qVe8qqmjPZNxNDEdTpOu2NHZ/f6y5H11865MozEEw 9DppeXttGIxYtgUnQFliq8BPeaezgHumppS4wlOFa8mAjeEO5MjUo1ITMMDZEyLExAPq4UQDY4vM tOzH8D3yKHFBB5uCm4o= ) nlm.nih.gov. 3600 IN RRSIG ( DS 7 3 3600 20220124183221 20220120175927 48257 nih.gov. QiNprqU7egxOFGAO+vsKcSIS4W2sBFwOl3bdZp9PY3JmjuyZGBDMLO4mX7iRkc0smHbJKpmdGOmc JDqy/ePt436f1qCjbFr9OLgEtI7sk9K77rHWECTVVv1Jngljy6pcccrRx2jydThfzLfjtbfBSTbq z4Nra6xQeCvTPx4J4s4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 1 DS records for nlm.nih.gov in the nih.gov zone
	DS=51763/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 2 RRSIGs over DS RRset
	`nlm.nih.gov. 3600 IN RRSIG ( DS 7 3 3600 20220124183221 20220120175927 35873 nih.gov. WnD0ajtoXWFjusyycOY54y0ucs6vvsOK220qVe8qqmjPZNxNDEdTpOu2NHZ/f6y5H11865MozEEw 9DppeXttGIxYtgUnQFliq8BPeaezgHumppS4wlOFa8mAjeEO5MjUo1ITMMDZEyLExAPq4UQDY4vM tOzH8D3yKHFBB5uCm4o= )`
	`nlm.nih.gov. 3600 IN RRSIG ( DS 7 3 3600 20220124183221 20220120175927 48257 nih.gov. QiNprqU7egxOFGAO+vsKcSIS4W2sBFwOl3bdZp9PY3JmjuyZGBDMLO4mX7iRkc0smHbJKpmdGOmc JDqy/ePt436f1qCjbFr9OLgEtI7sk9K77rHWECTVVv1Jngljy6pcccrRx2jydThfzLfjtbfBSTbq z4Nra6xQeCvTPx4J4s4= )`
	RRSIG=35873 and DNSKEY=35873 verifies the DS RRset
	RRSIG=48257 and DNSKEY=48257 verifies the DS RRset
	DS=51763/SHA-256 is now in the chain-of-trust
	`nlm.nih.gov. 3600 IN DS ( 51763 7 2 a32c11a79666b21afe0b4da2d5d582a6f5bd871aaaed9683d012ac5d55bc92b8 )`
	Query to ns.nih.gov for nlm.nih.gov/DNSKEY
	Received 934 bytes from 128.231.128.251
	;; Response received from 128.231.128.251 (934 octets) ;; HEADER SECTION ;; id = 4045 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAb/4CRmkcv3GpvIWXmE1L/FgSzozV875Ida/SJbDM099Z/GegBKja/xv9SWL6wjIeExtMupr LPPQA/5rLJsyEsEdlL4gX4QE7ipYjdvv1G6spoHuiG6j+JFW5OnoWnrRMTnTs71K5VTESV1Ejq52 eEu7zNz1l0CoiDAR4J6RS6uBg0wxwkJbyuiTmvCxJ1C8802HCaS7RbUJ57VOk8zCVc7BRvWgkyj3 2x3iUTzJGb4awT/lb2WiRbC3t0A722nnzbpcrg4a/NNe4Fur01mNibJoybIU+08idyFTpfsZbK/W YTn1j38KhOncupkyXDYWKUCXMHBG6VC7GKOoKfBM3gE= ) ; Key ID = 51763 nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAbntWeS9hzGDKpL+OaSaPj0Zntg/ekbK91xYtzziKSC40TidxSPyiZowvCpaPe89lLF1sgab Jf95oPxuAeoPn9jYC6KqAS2yaqV3Db5qHvsfmQGDnHydRVKPlukWSjiygZsREKV6y+v8a+Bc6SB/ TmxHr5gRc4YnENrEy7nnFyaV ) ; Key ID = 180 nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20220201010500 20220102005914 180 nlm.nih.gov. S1Cr9UpzNGVQYGzXCfw1TCzY6oWTOC/51BxZDcY6rDjqxv32FuHV8HRUXBEpQ+XEzwr9K1NCOuO+ bn8YZBvVZb7VynTojYKsVlk2KKnK5kj1a3RRS3QoBAvCe11Ton5vZKBEy79vavDzSt4VrTdSvfpC EjKj6GJFJtvB4XbU0aY= ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20220201010500 20220102005914 51763 nlm.nih.gov. gji4zuBujdq7b+J/gXy3RbL3ORcll2kHOcb9skCp2eZvzNYJqyjH4mGKGFwWFLDUJeYSzOJKNx4h aaj6moVniy29YSa7KFOY06AvOOYvQ6KAJnwZPSG/z37kRP9xwU4mqP8KBjK4gk0zf2xQIVODZjCw FEtqEtgetfGnGkJggi3LIlEYZg9tcbVa5VcUhVigsS5uJ1VFc/7UqcWdW/kGuebDnG8gRh4apzcx y+hJ48TN9LOZZlqRvsobSdyRfNf/MfVQTIe//l2syBGc9mmcKdqAS4ymonHaBnTwm5+dx286Y6Bk G9IvK99w7Rkvn8ViyWNJ81rjm98aH7/H2n6qWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 2 DNSKEY records for nlm.nih.gov
	`nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAb/4CRmkcv3GpvIWXmE1L/FgSzozV875Ida/SJbDM099Z/GegBKja/xv9SWL6wjIeExtMupr LPPQA/5rLJsyEsEdlL4gX4QE7ipYjdvv1G6spoHuiG6j+JFW5OnoWnrRMTnTs71K5VTESV1Ejq52 eEu7zNz1l0CoiDAR4J6RS6uBg0wxwkJbyuiTmvCxJ1C8802HCaS7RbUJ57VOk8zCVc7BRvWgkyj3 2x3iUTzJGb4awT/lb2WiRbC3t0A722nnzbpcrg4a/NNe4Fur01mNibJoybIU+08idyFTpfsZbK/W YTn1j38KhOncupkyXDYWKUCXMHBG6VC7GKOoKfBM3gE= ) ; Key ID = 51763`
	`nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAbntWeS9hzGDKpL+OaSaPj0Zntg/ekbK91xYtzziKSC40TidxSPyiZowvCpaPe89lLF1sgab Jf95oPxuAeoPn9jYC6KqAS2yaqV3Db5qHvsfmQGDnHydRVKPlukWSjiygZsREKV6y+v8a+Bc6SB/ TmxHr5gRc4YnENrEy7nnFyaV ) ; Key ID = 180`
	DNSKEY=51763/SEP is now in the chain-of-trust
	DS=51763/SHA-256 verifies DNSKEY=51763/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20220201010500 20220102005914 180 nlm.nih.gov. S1Cr9UpzNGVQYGzXCfw1TCzY6oWTOC/51BxZDcY6rDjqxv32FuHV8HRUXBEpQ+XEzwr9K1NCOuO+ bn8YZBvVZb7VynTojYKsVlk2KKnK5kj1a3RRS3QoBAvCe11Ton5vZKBEy79vavDzSt4VrTdSvfpC EjKj6GJFJtvB4XbU0aY= )`
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20220201010500 20220102005914 51763 nlm.nih.gov. gji4zuBujdq7b+J/gXy3RbL3ORcll2kHOcb9skCp2eZvzNYJqyjH4mGKGFwWFLDUJeYSzOJKNx4h aaj6moVniy29YSa7KFOY06AvOOYvQ6KAJnwZPSG/z37kRP9xwU4mqP8KBjK4gk0zf2xQIVODZjCw FEtqEtgetfGnGkJggi3LIlEYZg9tcbVa5VcUhVigsS5uJ1VFc/7UqcWdW/kGuebDnG8gRh4apzcx y+hJ48TN9LOZZlqRvsobSdyRfNf/MfVQTIe//l2syBGc9mmcKdqAS4ymonHaBnTwm5+dx286Y6Bk G9IvK99w7Rkvn8ViyWNJ81rjm98aH7/H2n6qWg== )`
	RRSIG=180 and DNSKEY=180 verifies the DNSKEY RRset
	RRSIG=51763 and DNSKEY=51763/SEP verifies the DNSKEY RRset
	DNSKEY=180 is now in the chain-of-trust
	Query to ns2.nih.gov for medlineplus.awsprod.nlm.nih.gov/A
	Received 445 bytes from 128.231.64.1
	;; Response received from 128.231.64.1 (445 octets) ;; HEADER SECTION ;; id = 64619 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.gov. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 86400 IN NS ns-584.awsdns-09.net. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4l6e8rtl1pu85fhrhrtmr5mp6p5kji3 NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20220208005347 20220109001217 180 nlm.nih.gov. XQEO/v8vgEt+Y7HO9eXJDN7CMoMKKTi63tG61gqEdvpDj8bIj7+GvOGMA0vhEO+7+8Hfc1xzFWw6 aUWPefQ/PaID8Ukmc+uN1ZgAMnW78SMEG0LXXT9M+SeJlat6PFbg7Ioh4jL1yp63xwV1Ju6tEOju O9Ed6xR3I469tj31CkA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns3.nih.gov for awsprod.nlm.nih.gov/DNSKEY
	Received 433 bytes from 165.112.4.230
	;; Response received from 165.112.4.230 (433 octets) ;; HEADER SECTION ;; id = 9898 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.gov. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.gov. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 86400 IN NS ns-1125.awsdns-12.org. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4l6e8rtl1pu85fhrhrtmr5mp6p5kji3 NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20220208005347 20220109001217 180 nlm.nih.gov. XQEO/v8vgEt+Y7HO9eXJDN7CMoMKKTi63tG61gqEdvpDj8bIj7+GvOGMA0vhEO+7+8Hfc1xzFWw6 aUWPefQ/PaID8Ukmc+uN1ZgAMnW78SMEG0LXXT9M+SeJlat6PFbg7Ioh4jL1yp63xwV1Ju6tEOju O9Ed6xR3I469tj31CkA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found child zone awsprod.nlm.nih.gov

awsprod.nlm.nih.gov

	Checking DS between nlm.nih.gov and awsprod.nlm.nih.gov
	Query to ns3.nih.gov for awsprod.nlm.nih.gov/DS
	Received 529 bytes from 165.112.4.230
	;; Response received from 165.112.4.230 (529 octets) ;; HEADER SECTION ;; id = 45885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.gov. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlm.nih.gov. 3600 IN SOA ( lhcns1.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 658268196 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nlm.nih.gov. 3600 IN RRSIG ( SOA 7 3 3600 20220220054059 20220121044059 180 nlm.nih.gov. S+quAa3YUsauKIxtBMpg3JnpzGOagkbc56ICDHXvfyLnIxNKqI3GAt/o5lr/gNkoo41M4fcHgNe+ 6iKVtUy/CXQqZHYWdl0W9ji39NMnhp9NhFcPVF60ithsX7bg5VsVscLd2SyGL0Ju2ZJvztdD3X80 kTgYBLX13atJCWT/atk= ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4l6e8rtl1pu85fhrhrtmr5mp6p5kji3 NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20220208005347 20220109001217 180 nlm.nih.gov. XQEO/v8vgEt+Y7HO9eXJDN7CMoMKKTi63tG61gqEdvpDj8bIj7+GvOGMA0vhEO+7+8Hfc1xzFWw6 aUWPefQ/PaID8Ukmc+uN1ZgAMnW78SMEG0LXXT9M+SeJlat6PFbg7Ioh4jL1yp63xwV1Ju6tEOju O9Ed6xR3I469tj31CkA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	No DS records found for awsprod.nlm.nih.gov in the nlm.nih.gov zone
	Query to ns-1890.awsdns-44.co.uk for awsprod.nlm.nih.gov/DNSKEY
	Received 135 bytes from 205.251.199.98
	;; Response received from 205.251.199.98 (135 octets) ;; HEADER SECTION ;; id = 52987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-584.awsdns-09.net for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.194.72
	;; Response received from 205.251.194.72 (264 octets) ;; HEADER SECTION ;; id = 22618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.43 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.39 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.128 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-584.awsdns-09.net is authoritative for medlineplus.awsprod.nlm.nih.gov
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.gov/DNSKEY
	Received 147 bytes from 205.251.192.226
	;; Response received from 205.251.192.226 (147 octets) ;; HEADER SECTION ;; id = 39980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1890.awsdns-44.co.uk for awsprod.nlm.nih.gov/SOA
	Received 249 bytes from 205.251.199.98
	;; Response received from 205.251.199.98 (249 octets) ;; HEADER SECTION ;; id = 515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.gov. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for awsprod.nlm.nih.gov/SOA
	Received 249 bytes from 205.251.192.226
	;; Response received from 205.251.192.226 (249 octets) ;; HEADER SECTION ;; id = 43152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.gov. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1125.awsdns-12.org for awsprod.nlm.nih.gov/SOA
	Received 249 bytes from 205.251.196.101
	;; Response received from 205.251.196.101 (249 octets) ;; HEADER SECTION ;; id = 42296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.gov. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-584.awsdns-09.net for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.194.72
	;; Response received from 205.251.194.72 (264 octets) ;; HEADER SECTION ;; id = 5351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.128 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.39 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.43 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.128
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.39
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.96
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.43
	No RRSIGs found

awsprod.nlm.nih.gov

	Query to ns-1125.awsdns-12.org for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.196.101
	;; Response received from 205.251.196.101 (264 octets) ;; HEADER SECTION ;; id = 43206 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.128 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.39 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.43 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1125.awsdns-12.org is authoritative for medlineplus.awsprod.nlm.nih.gov
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.gov/DNSKEY
	Received 147 bytes from 205.251.192.226
	;; Response received from 205.251.192.226 (147 octets) ;; HEADER SECTION ;; id = 44145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1125.awsdns-12.org for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.196.101
	;; Response received from 205.251.196.101 (264 octets) ;; HEADER SECTION ;; id = 16438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.43 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.39 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.128 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.96
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.43
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.39
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.128
	No RRSIGs found

awsprod.nlm.nih.gov

	Query to ns-1890.awsdns-44.co.uk for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.199.98
	;; Response received from 205.251.199.98 (264 octets) ;; HEADER SECTION ;; id = 57778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.128 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.43 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.39 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1890.awsdns-44.co.uk is authoritative for medlineplus.awsprod.nlm.nih.gov
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.gov/DNSKEY
	Received 147 bytes from 205.251.192.226
	;; Response received from 205.251.192.226 (147 octets) ;; HEADER SECTION ;; id = 59375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1890.awsdns-44.co.uk for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.199.98
	;; Response received from 205.251.199.98 (264 octets) ;; HEADER SECTION ;; id = 42309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.39 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.128 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.43 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.96
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.39
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.128
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.43
	No RRSIGs found

awsprod.nlm.nih.gov

	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.192.226
	;; Response received from 205.251.192.226 (264 octets) ;; HEADER SECTION ;; id = 20647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.43 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.128 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 60 IN A 13.224.214.39 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-226.awsdns-28.com is authoritative for medlineplus.awsprod.nlm.nih.gov
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.gov/DNSKEY
	Received 147 bytes from 205.251.192.226
	;; Response received from 205.251.192.226 (147 octets) ;; HEADER SECTION ;; id = 41000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.gov. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.gov/A
	Received 264 bytes from 205.251.192.226
	;; Response received from 205.251.192.226 (264 octets) ;; HEADER SECTION ;; id = 40612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.gov. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.gov. 59 IN A 13.224.214.96 medlineplus.awsprod.nlm.nih.gov. 59 IN A 13.224.214.43 medlineplus.awsprod.nlm.nih.gov. 59 IN A 13.224.214.39 medlineplus.awsprod.nlm.nih.gov. 59 IN A 13.224.214.128 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.gov. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.96
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.43
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.39
	medlineplus.awsprod.nlm.nih.gov A RR has value 13.224.214.128
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test medlineplus.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: