DNSSEC Debugger - pcast.gov

Domain Name:

Time: 2024-10-13 02:04:34 UTC

Analyzing DNSSEC problems for pcast.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 27735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241101000000 20241011000000 20326 . aA+m3YA9Bcrh9TblnApamOx9eSL7dPcKbcFsVBvqD7UlHGz0GY8iHeR8OXvjIKg0Y9qw7mgN1N4v Ok0DXpMAxzbtPeUGEmnvIsGS0TJKF+mFELMOne5Qno7//GMWbaZ5fr7KlMPL514OXzFM+RgA7w5H s28QV/fLAOHsvp7yokvPhZ6wOCHsvkgox/gZ1KAhMJI7zW16NYgBXViFBsjKh6POQeLeT1iH2tYN L+QkVApGib3MN0F4VhcpCPhJp7bsEnCXrWiRxULzq5OyFljKHtbX/0W03PDBQSwSCHq/ute5mksE h3jmJFc/p7OX/zE2/3vluUYY6uR5XXf1I8hbvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241101000000 20241011000000 20326 . aA+m3YA9Bcrh9TblnApamOx9eSL7dPcKbcFsVBvqD7UlHGz0GY8iHeR8OXvjIKg0Y9qw7mgN1N4v Ok0DXpMAxzbtPeUGEmnvIsGS0TJKF+mFELMOne5Qno7//GMWbaZ5fr7KlMPL514OXzFM+RgA7w5H s28QV/fLAOHsvp7yokvPhZ6wOCHsvkgox/gZ1KAhMJI7zW16NYgBXViFBsjKh6POQeLeT1iH2tYN L+QkVApGib3MN0F4VhcpCPhJp7bsEnCXrWiRxULzq5OyFljKHtbX/0W03PDBQSwSCHq/ute5mksE h3jmJFc/p7OX/zE2/3vluUYY6uR5XXf1I8hbvA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to c.root-servers.net for pcast.gov/A
	Received 619 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 619 octets ;; HEADER SECTION ;; id = 63346 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 60523 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to g.root-servers.net for gov/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 50520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 38062 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241130110534 20240930110534 2536 gov. h+Iyb0tqmydmCz6R4wG6Ldr2zopf1WBr/SM7MutctneoFWjCjO/k0ErdVLVoXEXenkMNv5My6iIv oCnmSrJeOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241130110534 20240930110534 2536 gov. h+Iyb0tqmydmCz6R4wG6Ldr2zopf1WBr/SM7MutctneoFWjCjO/k0ErdVLVoXEXenkMNv5My6iIv oCnmSrJeOQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for pcast.gov/A
	Received 320 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 320 octets ;; HEADER SECTION ;; id = 60060 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 10800 IN NS foxbat.doe.gov. pcast.gov. 10800 IN NS fulcrum.doe.gov. pcast.gov. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe ) pcast.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030434 20241012010434 35496 gov. g4fJvaI2vaMoxDHn4XGE9hLkyrY6pdwV1bzmyhbpwvad4087JwaK9qls6xonF/qCcNtsQXg72Caq AJqM8CuF2Q== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.gov. 3600 IN A 205.254.143.110 foxbat.doe.gov. 3600 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.gov. 3600 IN A 205.254.144.110 fulcrum.doe.gov. 3600 IN AAAA 2607:f368:1000:1100::53 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for pcast.gov/DNSKEY
	Received 320 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 320 octets ;; HEADER SECTION ;; id = 40029 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 10800 IN NS foxbat.doe.gov. pcast.gov. 10800 IN NS fulcrum.doe.gov. pcast.gov. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe ) pcast.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030434 20241012010434 35496 gov. 3NF056ocQKQa4tUiUIA6TCb4TNDaftkAS7CoATBeomtlQ0tZc6YtkgBWksd9GvGrN6xALOjhgyR6 iWfE74LgsQ== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.gov. 3600 IN A 205.254.143.110 foxbat.doe.gov. 3600 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.gov. 3600 IN A 205.254.144.110 fulcrum.doe.gov. 3600 IN AAAA 2607:f368:1000:1100::53 ;; { "EDNS-VERSION": 0 }
	Found child zone pcast.gov

pcast.gov

	Checking DS between gov and pcast.gov
	Query to c.ns.gov for pcast.gov/DS
	Received 185 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 185 octets ;; HEADER SECTION ;; id = 30278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN DS ;; ANSWER SECTION (2 records) pcast.gov. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe ) pcast.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030434 20241012010434 35496 gov. nwSOOdx5OTEWJrnqL/6weGfJGyR1qoPgQtZD5/UjW5niBHWcnb/WC5zDciDq/x1THujl8+WCI38w XLBX/Whc+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for pcast.gov in the gov zone
	DS=62839/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pcast.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030434 20241012010434 35496 gov. nwSOOdx5OTEWJrnqL/6weGfJGyR1qoPgQtZD5/UjW5niBHWcnb/WC5zDciDq/x1THujl8+WCI38w XLBX/Whc+Q== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=62839/SHA-256 is now in the chain-of-trust
	`pcast.gov. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe )`
	Query to foxbat.doe.gov for pcast.gov/DNSKEY
	Received 1972 bytes from 205.254.143.110
	;; Response received from [205.254.143.110] 1972 octets ;; HEADER SECTION ;; id = 64428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN DNSKEY ;; ANSWER SECTION (5 records) pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAbnOzG2BiQnTG9kcERFjvWfHrYfmD2qeCYewFypKD7rqpM2pmbjyn1QdSwjyiB6PDTKavNeL y9jHwZDtA8v0hfchj0us5CmBWAiQCF6rP9nQhAT/k7H8ygQa2tOFWaGbMjzLD7kSrkLyZE/wmeHA sxBlAILIAttZ4BpxtKIDD6C6qr8DLE5IDPdpO1ydNJ4e+2KbbZDJsZ70z/5A8tfS066AvJYnBABv S2QrVMhTD7U0cd2in7o7u+9BSkIIyKu50yS8ypCexZTfyy8/86HUxv6c1nKY2Ht59CdJjU9ZMNaq Jyo4pTYbcXnJRRK5cDcR5Jvpmt55IFHiVAehDlKM3/c= ) ; Key ID = 59265 pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAZy+wgjINzNYrXbgJ5FF+4Os85GAz0e4FqZWqzAPtUf+d0ibCCnqnydx+kNSCIMC39ZMIkvv XJWfTH2opBtNIKl0ZiAikre4ezzATQ+yf+lVsZ4ZlXb6k1S4kFKUUHpHezP/TEBxTmCjMs9WRXav OaP49IL3HMXTrlSjk1jUHZgpDMPPdZmp1YOq/znprNEHbYPODyTs3LbmQPG6VbxsgbCXNoLzWlg8 EPovemNQmzSm4yxLhBdRNn7CJCRGkr8un4Pa8+fBIawizyRn2gIbf+XmKXDCGsBa/lyyz3GOdI7N IXzYxJkI/711Mz36QoADBuLJfbHjJHKgcKUDvXHGu1k= ) ; Key ID = 47808 pcast.gov. 300 IN DNSKEY ( 257 3 8 AwEAAceysPV7QhX8GSaCqtwpS4rphb1ldA9Q96xCRpYV+PY0ksr00J7Rn3Ghq29KmczoUygGQ3tc lwpvislAliVGGza8j7WEbnyfhKi0iz03Wybsuor6wlSmVfYPVMQvQxv4xnOEdDWL+3sFlUex6Yue HOS1tT4mSKXd+ix5JKH3DxFeOa+EpHinz3jpxwvO90T5ZedcawunecnAMO0cs0L8ADK+53u8RP0A HOpHtnjk/fFC0+DufCTWDZuSFCtUJx24kys5spOYHCFxfAz4odXTT8jasZF7GZBu+b64PjPvmf/v JIfODpYaLR4uh/GeuPLDIbzYV49H96fVhB0cAHgcUCRmgQpyNV2VKHu3/gUgfvd//w51QZDn7F4b CSDlSQ4txa58KY1KZQBLgWLtnFqmUy2NnEriJp4UhLPwwR1TiXtp9Hs/zcEjHd1EAU+c7paTxNSQ aRNpvSx4fW8fT4Ev98sGEzgJPP6LBq6q3hIsiywWruSS2tORD3hDzB1ldYxuOMe8yNAg6bLNjM6a k2d+ah/hZZmfD1JWUMXP46D9aRak6wrJrLVxQo6K1SQzP8uWHLNAOp19uhv4kvqu/jAlWkuO631n 4scSGkOvIBWbtjLj3P2qccaSlThB/l9cM9ekqiFcXUGmN7MD0sm3Ygdm1nYM7JshPS4xhzI5bp7M Xcj5 ) ; Key ID = 62839 pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20241207021506 20240908011506 47808 pcast.gov. RC2Qwhq/PMosT+WBOyIAIynfiC/HCsysWRINXm0wCu+Hx63NUl368qoMLYZVCv4I8RHpwVxj5taI UFB453zYOtrqi9NTgeboW6DsUCn7AvBR1kPOBUmey54QKYWlDVzGoecHrC8ssQNtz9bzL24nJh7G 8RWM+ez7grgN8VVhJ6NhjbBNMYEHSIRedm0Ey2LbqdPbOr6Co6f8Dl2ujz8Q9lVT4YJUODaTztRs qqBvc7eDNP9FnbSgjDi6yuRJeGSXxwaZIZnE4YwQnZgrtb6TamggDxRmAIBwVbGZli1aikLvKXnr ovHOldCh6jdFOHQg8gUN16El6+nM/XKBP4isbg== ) pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20241207021506 20240908011506 62839 pcast.gov. vMqVtFC38bm3xvJ+iTll71bykfqmyxjAGc/f4z+nvBylgQLvIiKGMpOMsd3YS9GYXpC5xOt54ubS 2aDwp0nhM2uVpARb/+TbOG+zIZtmVBrYL1MUs+ldVB0ZbdmFMkXfRxAa0oSG2AfblJFAXKZy9Bhe FCdiZM4YKnOpMTbz4lyySKl1dRwb2OyfD40Y6dK4UhFUvnTn2nMVB2eBl192e/ZbmRD36KRR1tuS 13wqKV6gLgll49uDs30Mh9KnjV3e0nKbdFrK23sPLnBmOXhCDYhI61lw7hu7QAz3XaTbbihj5Tqe 75WLwGAgmLU6dmdgs9nLQ3+LY9nREDeSOa7LdFFNipiDauiCxK2zA2rohIwtvaxXD2L1+eIY40D6 wUEWFydffx/Tjenk8a/GfNdMBR6ozB0pjyZrhS88/HQljwT2nKTM2qWb3WQ9+hrXs5gSMeF+TtJy g1mYBWoV9BUYaxHIZ/Nbq10cyf2F+FNcSnorOVLFP0sz/gBJVCGDBJPRKSnUORW1rlIxSfMmRpGl Yq+5bbQ6PNFCIA5l6VJ12wKi9Td5e4M0opdUaT48QIbH9VR5R1ncLJ0EtbknNuSeQvGM0PREHCc0 vxPph4Kqs0QrGC7+wwSPG3IjqvajeH8DkecbFCFgXxxuDuaM912/P9yFh5HWC+ZKMhfwuKbOn1c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for pcast.gov
	`pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAbnOzG2BiQnTG9kcERFjvWfHrYfmD2qeCYewFypKD7rqpM2pmbjyn1QdSwjyiB6PDTKavNeL y9jHwZDtA8v0hfchj0us5CmBWAiQCF6rP9nQhAT/k7H8ygQa2tOFWaGbMjzLD7kSrkLyZE/wmeHA sxBlAILIAttZ4BpxtKIDD6C6qr8DLE5IDPdpO1ydNJ4e+2KbbZDJsZ70z/5A8tfS066AvJYnBABv S2QrVMhTD7U0cd2in7o7u+9BSkIIyKu50yS8ypCexZTfyy8/86HUxv6c1nKY2Ht59CdJjU9ZMNaq Jyo4pTYbcXnJRRK5cDcR5Jvpmt55IFHiVAehDlKM3/c= ) ; Key ID = 59265`
	`pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAZy+wgjINzNYrXbgJ5FF+4Os85GAz0e4FqZWqzAPtUf+d0ibCCnqnydx+kNSCIMC39ZMIkvv XJWfTH2opBtNIKl0ZiAikre4ezzATQ+yf+lVsZ4ZlXb6k1S4kFKUUHpHezP/TEBxTmCjMs9WRXav OaP49IL3HMXTrlSjk1jUHZgpDMPPdZmp1YOq/znprNEHbYPODyTs3LbmQPG6VbxsgbCXNoLzWlg8 EPovemNQmzSm4yxLhBdRNn7CJCRGkr8un4Pa8+fBIawizyRn2gIbf+XmKXDCGsBa/lyyz3GOdI7N IXzYxJkI/711Mz36QoADBuLJfbHjJHKgcKUDvXHGu1k= ) ; Key ID = 47808`
	pcast.gov. 300 IN DNSKEY ( 257 3 8 AwEAAceysPV7QhX8GSaCqtwpS4rphb1ldA9Q96xCRpYV+PY0ksr00J7Rn3Ghq29KmczoUygGQ3tc lwpvislAliVGGza8j7WEbnyfhKi0iz03Wybsuor6wlSmVfYPVMQvQxv4xnOEdDWL+3sFlUex6Yue HOS1tT4mSKXd+ix5JKH3DxFeOa+EpHinz3jpxwvO90T5ZedcawunecnAMO0cs0L8ADK+53u8RP0A HOpHtnjk/fFC0+DufCTWDZuSFCtUJx24kys5spOYHCFxfAz4odXTT8jasZF7GZBu+b64PjPvmf/v JIfODpYaLR4uh/GeuPLDIbzYV49H96fVhB0cAHgcUCRmgQpyNV2VKHu3/gUgfvd//w51QZDn7F4b CSDlSQ4txa58KY1KZQBLgWLtnFqmUy2NnEriJp4UhLPwwR1TiXtp9Hs/zcEjHd1EAU+c7paTxNSQ aRNpvSx4fW8fT4Ev98sGEzgJPP6LBq6q3hIsiywWruSS2tORD3hDzB1ldYxuOMe8yNAg6bLNjM6a k2d+ah/hZZmfD1JWUMXP46D9aRak6wrJrLVxQo6K1SQzP8uWHLNAOp19uhv4kvqu/jAlWkuO631n 4scSGkOvIBWbtjLj3P2qccaSlThB/l9cM9ekqiFcXUGmN7MD0sm3Ygdm1nYM7JshPS4xhzI5bp7M Xcj5 ) ; Key ID = 62839
	DNSKEY=62839/SEP is now in the chain-of-trust
	DS=62839/SHA-256 verifies DNSKEY=62839/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20241207021506 20240908011506 47808 pcast.gov. RC2Qwhq/PMosT+WBOyIAIynfiC/HCsysWRINXm0wCu+Hx63NUl368qoMLYZVCv4I8RHpwVxj5taI UFB453zYOtrqi9NTgeboW6DsUCn7AvBR1kPOBUmey54QKYWlDVzGoecHrC8ssQNtz9bzL24nJh7G 8RWM+ez7grgN8VVhJ6NhjbBNMYEHSIRedm0Ey2LbqdPbOr6Co6f8Dl2ujz8Q9lVT4YJUODaTztRs qqBvc7eDNP9FnbSgjDi6yuRJeGSXxwaZIZnE4YwQnZgrtb6TamggDxRmAIBwVbGZli1aikLvKXnr ovHOldCh6jdFOHQg8gUN16El6+nM/XKBP4isbg== )`
	pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20241207021506 20240908011506 62839 pcast.gov. vMqVtFC38bm3xvJ+iTll71bykfqmyxjAGc/f4z+nvBylgQLvIiKGMpOMsd3YS9GYXpC5xOt54ubS 2aDwp0nhM2uVpARb/+TbOG+zIZtmVBrYL1MUs+ldVB0ZbdmFMkXfRxAa0oSG2AfblJFAXKZy9Bhe FCdiZM4YKnOpMTbz4lyySKl1dRwb2OyfD40Y6dK4UhFUvnTn2nMVB2eBl192e/ZbmRD36KRR1tuS 13wqKV6gLgll49uDs30Mh9KnjV3e0nKbdFrK23sPLnBmOXhCDYhI61lw7hu7QAz3XaTbbihj5Tqe 75WLwGAgmLU6dmdgs9nLQ3+LY9nREDeSOa7LdFFNipiDauiCxK2zA2rohIwtvaxXD2L1+eIY40D6 wUEWFydffx/Tjenk8a/GfNdMBR6ozB0pjyZrhS88/HQljwT2nKTM2qWb3WQ9+hrXs5gSMeF+TtJy g1mYBWoV9BUYaxHIZ/Nbq10cyf2F+FNcSnorOVLFP0sz/gBJVCGDBJPRKSnUORW1rlIxSfMmRpGl Yq+5bbQ6PNFCIA5l6VJ12wKi9Td5e4M0opdUaT48QIbH9VR5R1ncLJ0EtbknNuSeQvGM0PREHCc0 vxPph4Kqs0QrGC7+wwSPG3IjqvajeH8DkecbFCFgXxxuDuaM912/P9yFh5HWC+ZKMhfwuKbOn1c= )
	RRSIG=47808 and DNSKEY=47808 verifies the DNSKEY RRset
	RRSIG=62839 and DNSKEY=62839/SEP verifies the DNSKEY RRset
	DNSKEY=59265 is now in the chain-of-trust
	DNSKEY=47808 is now in the chain-of-trust
	Query to fulcrum.doe.gov for pcast.gov/A
	Received 792 bytes from 205.254.144.110
	;; Response received from [205.254.144.110] 792 octets ;; HEADER SECTION ;; id = 2898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2024010208 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20241207021506 20240908011506 47808 pcast.gov. etTqBy+f8Nymd40BPPDwaC9OULqYHK0OtZ/LO8EG7o53ccdRzvOyAfg0p7nZNRpN5Wnc/fbZLzF+ IuJjTfjTywv9uZY67lnmzciYrNQ2v+834b/cS52HEYfP3x2UPTGKLs1U/gTLHI2pEWsEquGSTZ0m FSsN2HOcRmASdDLYdSrEtMHLQiD6ctEyqKDc8sytuH5oKUmx6bCNOJHEyuyAzieR6VHj9kld+yj3 fqchqybF6NNZ60Jo47wr/INThRSDyf5Ot/RRuJKDzoRu/0Nx7qITB9CLqab2RFvnsb0wNVs/HBUQ qcgKpTQygZA4qCxT85xGCGx7+e73SsCEK5tcxw== ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN NSEC3 ( 1 0 100 4380845a699c2f60 2phfvcn8knujnkp7pnvpdgu9fq6mjaf5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20241207021506 20240908011506 47808 pcast.gov. bNQCs8R3I2+UEWCzACxQ8CUjSHP0rpASK2qcu/5N5Lsb5fL3F9FuY78L5h5Du03DpxUro+VcBtmR cvBk+DHIa/GTFVMWbA99TKh+mYO5TKmiw2Bn9AIsSSwAEjP64IPcH69eK6xFee5ViZM8eCWT3mvi 3yLhObm31jYR2i2QLTRmoR+LfwRpdxljHAYYwkwaGtn/w//w3M84PubXjAsqlCV0KpQpEe+qQKGq ruau/XQLWRP/AE/KZ2yMogvUY6wSbz1FKbY3OBnrbiiFixfrzj8w5tIoo1NEa7v5GIQl6aYGxHPH phaqxejz2Hd96F23sGBhx4T/VA+VXVQ0wS3V6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fulcrum.doe.gov is authoritative for pcast.gov
	Found RRSIG signed by pcast.gov zone
	Query to foxbat.doe.gov for pcast.gov/SOA
	Received 407 bytes from 205.254.143.110
	;; Response received from [205.254.143.110] 407 octets ;; HEADER SECTION ;; id = 5778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN SOA ;; ANSWER SECTION (2 records) pcast.gov. 86400 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2024010208 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 86400 IN RRSIG ( SOA 8 2 86400 20241207021506 20240908011506 47808 pcast.gov. etTqBy+f8Nymd40BPPDwaC9OULqYHK0OtZ/LO8EG7o53ccdRzvOyAfg0p7nZNRpN5Wnc/fbZLzF+ IuJjTfjTywv9uZY67lnmzciYrNQ2v+834b/cS52HEYfP3x2UPTGKLs1U/gTLHI2pEWsEquGSTZ0m FSsN2HOcRmASdDLYdSrEtMHLQiD6ctEyqKDc8sytuH5oKUmx6bCNOJHEyuyAzieR6VHj9kld+yj3 fqchqybF6NNZ60Jo47wr/INThRSDyf5Ot/RRuJKDzoRu/0Nx7qITB9CLqab2RFvnsb0wNVs/HBUQ qcgKpTQygZA4qCxT85xGCGx7+e73SsCEK5tcxw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to fulcrum.doe.gov for pcast.gov/A
	Received 792 bytes from 205.254.144.110
	;; Response received from [205.254.144.110] 792 octets ;; HEADER SECTION ;; id = 61359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2024010208 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20241207021506 20240908011506 47808 pcast.gov. etTqBy+f8Nymd40BPPDwaC9OULqYHK0OtZ/LO8EG7o53ccdRzvOyAfg0p7nZNRpN5Wnc/fbZLzF+ IuJjTfjTywv9uZY67lnmzciYrNQ2v+834b/cS52HEYfP3x2UPTGKLs1U/gTLHI2pEWsEquGSTZ0m FSsN2HOcRmASdDLYdSrEtMHLQiD6ctEyqKDc8sytuH5oKUmx6bCNOJHEyuyAzieR6VHj9kld+yj3 fqchqybF6NNZ60Jo47wr/INThRSDyf5Ot/RRuJKDzoRu/0Nx7qITB9CLqab2RFvnsb0wNVs/HBUQ qcgKpTQygZA4qCxT85xGCGx7+e73SsCEK5tcxw== ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN NSEC3 ( 1 0 100 4380845a699c2f60 2phfvcn8knujnkp7pnvpdgu9fq6mjaf5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20241207021506 20240908011506 47808 pcast.gov. bNQCs8R3I2+UEWCzACxQ8CUjSHP0rpASK2qcu/5N5Lsb5fL3F9FuY78L5h5Du03DpxUro+VcBtmR cvBk+DHIa/GTFVMWbA99TKh+mYO5TKmiw2Bn9AIsSSwAEjP64IPcH69eK6xFee5ViZM8eCWT3mvi 3yLhObm31jYR2i2QLTRmoR+LfwRpdxljHAYYwkwaGtn/w//w3M84PubXjAsqlCV0KpQpEe+qQKGq ruau/XQLWRP/AE/KZ2yMogvUY6wSbz1FKbY3OBnrbiiFixfrzj8w5tIoo1NEa7v5GIQl6aYGxHPH phaqxejz2Hd96F23sGBhx4T/VA+VXVQ0wS3V6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20241207021506 20240908011506 47808 pcast.gov. etTqBy+f8Nymd40BPPDwaC9OULqYHK0OtZ/LO8EG7o53ccdRzvOyAfg0p7nZNRpN5Wnc/fbZLzF+ IuJjTfjTywv9uZY67lnmzciYrNQ2v+834b/cS52HEYfP3x2UPTGKLs1U/gTLHI2pEWsEquGSTZ0m FSsN2HOcRmASdDLYdSrEtMHLQiD6ctEyqKDc8sytuH5oKUmx6bCNOJHEyuyAzieR6VHj9kld+yj3 fqchqybF6NNZ60Jo47wr/INThRSDyf5Ot/RRuJKDzoRu/0Nx7qITB9CLqab2RFvnsb0wNVs/HBUQ qcgKpTQygZA4qCxT85xGCGx7+e73SsCEK5tcxw== )`
	RRSIG=47808 and DNSKEY=47808 verifies the SOA RRset

pcast.gov

	Query to foxbat.doe.gov for pcast.gov/A
	Received 792 bytes from 205.254.143.110
	;; Response received from [205.254.143.110] 792 octets ;; HEADER SECTION ;; id = 6652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2024010208 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20241207021506 20240908011506 47808 pcast.gov. etTqBy+f8Nymd40BPPDwaC9OULqYHK0OtZ/LO8EG7o53ccdRzvOyAfg0p7nZNRpN5Wnc/fbZLzF+ IuJjTfjTywv9uZY67lnmzciYrNQ2v+834b/cS52HEYfP3x2UPTGKLs1U/gTLHI2pEWsEquGSTZ0m FSsN2HOcRmASdDLYdSrEtMHLQiD6ctEyqKDc8sytuH5oKUmx6bCNOJHEyuyAzieR6VHj9kld+yj3 fqchqybF6NNZ60Jo47wr/INThRSDyf5Ot/RRuJKDzoRu/0Nx7qITB9CLqab2RFvnsb0wNVs/HBUQ qcgKpTQygZA4qCxT85xGCGx7+e73SsCEK5tcxw== ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN NSEC3 ( 1 0 100 4380845a699c2f60 2phfvcn8knujnkp7pnvpdgu9fq6mjaf5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20241207021506 20240908011506 47808 pcast.gov. bNQCs8R3I2+UEWCzACxQ8CUjSHP0rpASK2qcu/5N5Lsb5fL3F9FuY78L5h5Du03DpxUro+VcBtmR cvBk+DHIa/GTFVMWbA99TKh+mYO5TKmiw2Bn9AIsSSwAEjP64IPcH69eK6xFee5ViZM8eCWT3mvi 3yLhObm31jYR2i2QLTRmoR+LfwRpdxljHAYYwkwaGtn/w//w3M84PubXjAsqlCV0KpQpEe+qQKGq ruau/XQLWRP/AE/KZ2yMogvUY6wSbz1FKbY3OBnrbiiFixfrzj8w5tIoo1NEa7v5GIQl6aYGxHPH phaqxejz2Hd96F23sGBhx4T/VA+VXVQ0wS3V6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	foxbat.doe.gov is authoritative for pcast.gov
	Found RRSIG signed by pcast.gov zone
	Query to foxbat.doe.gov for pcast.gov/A
	Received 792 bytes from 205.254.143.110
	;; Response received from [205.254.143.110] 792 octets ;; HEADER SECTION ;; id = 31186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pcast.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2024010208 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20241207021506 20240908011506 47808 pcast.gov. etTqBy+f8Nymd40BPPDwaC9OULqYHK0OtZ/LO8EG7o53ccdRzvOyAfg0p7nZNRpN5Wnc/fbZLzF+ IuJjTfjTywv9uZY67lnmzciYrNQ2v+834b/cS52HEYfP3x2UPTGKLs1U/gTLHI2pEWsEquGSTZ0m FSsN2HOcRmASdDLYdSrEtMHLQiD6ctEyqKDc8sytuH5oKUmx6bCNOJHEyuyAzieR6VHj9kld+yj3 fqchqybF6NNZ60Jo47wr/INThRSDyf5Ot/RRuJKDzoRu/0Nx7qITB9CLqab2RFvnsb0wNVs/HBUQ qcgKpTQygZA4qCxT85xGCGx7+e73SsCEK5tcxw== ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN NSEC3 ( 1 0 100 4380845a699c2f60 2phfvcn8knujnkp7pnvpdgu9fq6mjaf5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) MUNB2E1HNQVOQS0M8PSL7C2OMDS0GUB3.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20241207021506 20240908011506 47808 pcast.gov. bNQCs8R3I2+UEWCzACxQ8CUjSHP0rpASK2qcu/5N5Lsb5fL3F9FuY78L5h5Du03DpxUro+VcBtmR cvBk+DHIa/GTFVMWbA99TKh+mYO5TKmiw2Bn9AIsSSwAEjP64IPcH69eK6xFee5ViZM8eCWT3mvi 3yLhObm31jYR2i2QLTRmoR+LfwRpdxljHAYYwkwaGtn/w//w3M84PubXjAsqlCV0KpQpEe+qQKGq ruau/XQLWRP/AE/KZ2yMogvUY6wSbz1FKbY3OBnrbiiFixfrzj8w5tIoo1NEa7v5GIQl6aYGxHPH phaqxejz2Hd96F23sGBhx4T/VA+VXVQ0wS3V6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20241207021506 20240908011506 47808 pcast.gov. etTqBy+f8Nymd40BPPDwaC9OULqYHK0OtZ/LO8EG7o53ccdRzvOyAfg0p7nZNRpN5Wnc/fbZLzF+ IuJjTfjTywv9uZY67lnmzciYrNQ2v+834b/cS52HEYfP3x2UPTGKLs1U/gTLHI2pEWsEquGSTZ0m FSsN2HOcRmASdDLYdSrEtMHLQiD6ctEyqKDc8sytuH5oKUmx6bCNOJHEyuyAzieR6VHj9kld+yj3 fqchqybF6NNZ60Jo47wr/INThRSDyf5Ot/RRuJKDzoRu/0Nx7qITB9CLqab2RFvnsb0wNVs/HBUQ qcgKpTQygZA4qCxT85xGCGx7+e73SsCEK5tcxw== )`
	RRSIG=47808 and DNSKEY=47808 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pcast.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: