DNSSEC Debugger - pki-lab.gov

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-05 18:26:19 UTC

Analyzing DNSSEC problems for pki-lab.gov

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 29415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to c.root-servers.net for pki-lab.gov/A
	Received 618 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 618 octets ;; HEADER SECTION ;; id = 44274 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260918170000 20260905160000 57780 . RH2qyfrbEY9eGBbEWkstKDJ+fXr8pPh+UtGlu9grlWLavfqEdlbUQ2pjdYZ0J1n448cmDH/ACFf4 EnaptT7815eKxd7CXAIhSW4+KVKXbG6aIhxQ4iogpOFBSXfwXF9nPnDfOAM/QquKdaWGKcn4vJHV oUrcHhLBmh7RzqR+CI6AVz+GFWbYYusRa8aEauv9ZyKM3SQnOmLEnapic2XCUymPvd8uP/L7KJYE 8gdpUWSX20cgOgfdtK2hVoVVFcPS8gKEQGYb8b++GDlxxILvNVE++eNnVjPq7PU5PQQF4tghc9DV 5tdrI4vO2bIvbhhps2knMyX7quQbG/oFXMBXZA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for gov/DNSKEY
	Received 613 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 613 octets ;; HEADER SECTION ;; id = 4296 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260918170000 20260905160000 57780 . RH2qyfrbEY9eGBbEWkstKDJ+fXr8pPh+UtGlu9grlWLavfqEdlbUQ2pjdYZ0J1n448cmDH/ACFf4 EnaptT7815eKxd7CXAIhSW4+KVKXbG6aIhxQ4iogpOFBSXfwXF9nPnDfOAM/QquKdaWGKcn4vJHV oUrcHhLBmh7RzqR+CI6AVz+GFWbYYusRa8aEauv9ZyKM3SQnOmLEnapic2XCUymPvd8uP/L7KJYE 8gdpUWSX20cgOgfdtK2hVoVVFcPS8gKEQGYb8b++GDlxxILvNVE++eNnVjPq7PU5PQQF4tghc9DV 5tdrI4vO2bIvbhhps2knMyX7quQbG/oFXMBXZA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 59342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260918170000 20260905160000 57780 . RH2qyfrbEY9eGBbEWkstKDJ+fXr8pPh+UtGlu9grlWLavfqEdlbUQ2pjdYZ0J1n448cmDH/ACFf4 EnaptT7815eKxd7CXAIhSW4+KVKXbG6aIhxQ4iogpOFBSXfwXF9nPnDfOAM/QquKdaWGKcn4vJHV oUrcHhLBmh7RzqR+CI6AVz+GFWbYYusRa8aEauv9ZyKM3SQnOmLEnapic2XCUymPvd8uP/L7KJYE 8gdpUWSX20cgOgfdtK2hVoVVFcPS8gKEQGYb8b++GDlxxILvNVE++eNnVjPq7PU5PQQF4tghc9DV 5tdrI4vO2bIvbhhps2knMyX7quQbG/oFXMBXZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260918170000 20260905160000 57780 . RH2qyfrbEY9eGBbEWkstKDJ+fXr8pPh+UtGlu9grlWLavfqEdlbUQ2pjdYZ0J1n448cmDH/ACFf4 EnaptT7815eKxd7CXAIhSW4+KVKXbG6aIhxQ4iogpOFBSXfwXF9nPnDfOAM/QquKdaWGKcn4vJHV oUrcHhLBmh7RzqR+CI6AVz+GFWbYYusRa8aEauv9ZyKM3SQnOmLEnapic2XCUymPvd8uP/L7KJYE 8gdpUWSX20cgOgfdtK2hVoVVFcPS8gKEQGYb8b++GDlxxILvNVE++eNnVjPq7PU5PQQF4tghc9DV 5tdrI4vO2bIvbhhps2knMyX7quQbG/oFXMBXZA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 3044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261027110638 20260827110638 2536 gov. PtRLa+tjVuHiye3klDjS7yugV+CJgjvDc9nmgh/T1kZfHsYlKKP7AZC5rN3tuCnWUBN0JLaqMvvB aOtx0rt13Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261027110638 20260827110638 2536 gov. PtRLa+tjVuHiye3klDjS7yugV+CJgjvDc9nmgh/T1kZfHsYlKKP7AZC5rN3tuCnWUBN0JLaqMvvB aOtx0rt13Q== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for pki-lab.gov/A
	Received 361 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 361 octets ;; HEADER SECTION ;; id = 14942 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) pki-lab.gov. 10800 IN NS dns1.pki-lab.gov. pki-lab.gov. 10800 IN NS dns2.pki-lab.gov. pki-lab.gov. 3600 IN DS ( 42970 8 2 77cee42c452a49758025161c41bcb5243644a61c32e5009fa85b69ae29d08179 ) pki-lab.gov. 3600 IN DS ( 63664 8 2 9ec7799e8628b1d69446d3b3e50390096d0b5343143377e483c49b6d14773625 ) pki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260906192619 20260904172619 35496 gov. D6M4pLXNkHOPMb42SmBxVg+K+sqWXGf2dyV2rpO/19BHSAST79Y3qSbKGLL/h0YsNZFvc5fZyexw XaJ3Dtsftw== ) ;; ADDITIONAL SECTION (5 records) dns1.pki-lab.gov. 3600 IN A 199.167.92.100 dns1.pki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.pki-lab.gov. 3600 IN A 199.167.93.100 dns2.pki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for pki-lab.gov/DNSKEY
	Received 361 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 361 octets ;; HEADER SECTION ;; id = 51810 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pki-lab.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) pki-lab.gov. 10800 IN NS dns1.pki-lab.gov. pki-lab.gov. 10800 IN NS dns2.pki-lab.gov. pki-lab.gov. 3600 IN DS ( 42970 8 2 77cee42c452a49758025161c41bcb5243644a61c32e5009fa85b69ae29d08179 ) pki-lab.gov. 3600 IN DS ( 63664 8 2 9ec7799e8628b1d69446d3b3e50390096d0b5343143377e483c49b6d14773625 ) pki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260906192619 20260904172619 35496 gov. gNB/fC21AAL4gT8gJFDd4qERMgU2CqvJMVwU2GhhWXtrAhi+DCfb8PCE0JJubvAf5kR1soTYCNN7 MKwsuURmAw== ) ;; ADDITIONAL SECTION (5 records) dns1.pki-lab.gov. 3600 IN A 199.167.92.100 dns1.pki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.pki-lab.gov. 3600 IN A 199.167.93.100 dns2.pki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Found child zone pki-lab.gov

pki-lab.gov

	Checking DS between gov and pki-lab.gov
	Query to a.ns.gov for pki-lab.gov/DS
	Received 235 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 235 octets ;; HEADER SECTION ;; id = 32645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pki-lab.gov. IN DS ;; ANSWER SECTION (3 records) pki-lab.gov. 3600 IN DS ( 42970 8 2 77cee42c452a49758025161c41bcb5243644a61c32e5009fa85b69ae29d08179 ) pki-lab.gov. 3600 IN DS ( 63664 8 2 9ec7799e8628b1d69446d3b3e50390096d0b5343143377e483c49b6d14773625 ) pki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260906192619 20260904172619 35496 gov. neNlG+Uysij+RFsltnaCTp1ZvsloDrMf8hXBBtstUREttqNtxef4LGxdMGvZ0reXWveU9e78i8ry gimfJ/GEng== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for pki-lab.gov in the gov zone
	DS=42970/SHA-256 has algorithm RSASHA256
	DS=63664/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260906192619 20260904172619 35496 gov. neNlG+Uysij+RFsltnaCTp1ZvsloDrMf8hXBBtstUREttqNtxef4LGxdMGvZ0reXWveU9e78i8ry gimfJ/GEng== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=42970/SHA-256 is now in the chain-of-trust
	DS=63664/SHA-256 is now in the chain-of-trust
	`pki-lab.gov. 3600 IN DS ( 42970 8 2 77cee42c452a49758025161c41bcb5243644a61c32e5009fa85b69ae29d08179 )`
	`pki-lab.gov. 3600 IN DS ( 63664 8 2 9ec7799e8628b1d69446d3b3e50390096d0b5343143377e483c49b6d14773625 )`
	Query to dns1.pki-lab.gov for pki-lab.gov/DNSKEY
	Unknown host dns1.pki-lab.gov
	Query to dns2.pki-lab.gov for pki-lab.gov/DNSKEY
	Received 2340 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 2340 octets ;; HEADER SECTION ;; id = 52762 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pki-lab.gov. IN DNSKEY ;; ANSWER SECTION (8 records) pki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc8TIkBCgX7jyUlgnu0Jwaco+pU3KRHqZ9z+OJQfmLkQ3Qfv2xFncCzZaRoorDzrmDVij1Ar rK25c2MEeqYRosmsB+gTul4Ye5kmnGGK5RXGFqB5uYKp0A6+rkAl2dfTlgi1HOfImqhWXZ8unfxn 1BjoG0UYCS5+NEkeqeu9vF5kW7stdzHUt3y4w0usSXyhiaVyWYUfGxGTX3UG30fExiVZu5rW+KYZ Xt0hbjjYDJ1aFjbmkC2cmDBQOq7NmjCja8wfo8O9vdlPkN0/8+REckSe9XG43GBmKySsGHkPtMmo u0N/vyaVY6EKFRkc2nP0SIbHwVR3iKXaf11ZgsdSeAs= ) ; keytag 42970 pki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcRf/Uy5bhWhp/3BJBU8qMl3iKTqYHqN1qwqgv9LPQk2ZgzYYG8TuGiQu4oOwnzC2VMSlZUk 0eSX5a4wb1772g3eNz2sD9tXfQaNLE8o/DSxf/RLj0Tn5TUXws1kAhf5S62LK9cXc6n/VdEFfdJ2 tjJ/P/V2FSaO+3kp4PaTTXXsceeB1snweK1h+iDLQLwZcW1c91n2Ad9QgaGCnqr4H8sR6qwrmaOx H5lVsLInc3fZWvf6ANjR/A+CTSnnb0Yxpo5Lnh+W199j0zYP+P+YO+Oro+iGOTFD4tyXK3xRM3oj 2I1zEEKk/yHSovaarXVDOIi5/CbvUTlQ0yK336vZJ/0= ) ; keytag 63664 pki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaZ9P23ZB9nTJgpH06i9BjG3E3/yJQr+Mb5U0W3k/nlrCeWtHK9YV9PiwweeeFs7mdAcCsvT BBdYkVm8X/XeUK46xchNMC49PtzAdUOY00bQgmt6fJhfRY98ZqUyQGFhwQ9tM4DeAgnIhLb7cmZ6 AnxKBMVfugKALrLZZsZNnA/ftqX12EZbqyliEkar9hMW0lxb/tS9k6fEqdVcHkeZCfHCH4qTx2BZ ZkfO5pCNTB2lMP5l8RuALe1c6+BO69zAnMVxaEu+yJzMUrMO7A2CY2y+nrUbqTJblJ73+VPQngQM 2jM8BPe6up2R1M/QDttk+/eJxQM6TxPnhNg2YjnQp0s= ) ; keytag 54120 pki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcZX6UvRQc+ABktjXTuk33qnY4Z6LoE3erTATUfbb2WjQOe/hDXXW5l5osJpyPztE/E7m1Kh cWZuFCr+s6ukPEVPPF8AhW6MFO5Hf3JHE4A+UhmxdUDcujH0MPcdHp0bx+3AoTPVD3y0fllLjKJB nQmVcqLM7+iUwOU2sFiQVxOx07jHKQ7oHFx2t3cf6BbyopHzgcMRgDqp55jZmS9KnKkG6x2gy/lS SlaL7egk+gh+HJ4bkZqEZd8dxxelBZ1TrTh6XtrkLJu4TI+JARCNwybPNXpIBo2aZwlVjRUDJsKD t8liqJDK9rc0Xd8ezCYz3Ru2g8o40U77QGmhoPip8C0= ) ; keytag 26193 pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 42970 pki-lab.gov. g1U23Li/sNEr3hhrquovZiR9O93DgFx0sT8h97mOhTKvPb65RM9e5z0Z70a7wpLH5royFrwmQCQB RF7s8MtUa1KHFavkJIolZeoqQgeJsVpFPEW7ilJ1G2cyqKLDTmBXZIvju4wVS7WQurYfPKal9QQI qPb+wN7+KFe33CYgO3T/i0PJq5mBiFiNseCtumAkgdkR6IYTrvEGToSD2Y8C45NISEd67MGSv5tM DdUfX25w57N36IYlO4Jg+jfN4ddWPj4hmZRJOy0BL2WcnACDlQ5+cOJeKShbhMt+FQb87la/T/fn G1ZCGqMJBHe+Tvp3TrV5DNgKJcZeTlhK6yDvCA== ) pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 63664 pki-lab.gov. JN3DPahENrQ+dAGFm+DuE8hCEUkR8lm7rx7v6zXNsXM8+w3V+8DbBguaTOKZIcTtPq+6sawqkfEd fs2V1bvUXDQouYd01S5rS4hIGg2ZikLtDZcsXYYUwvFSj/XfPAcsAYThWY7XMFTCyuAOfzGuP8V2 03vTxZkCi1cge1LSMg7bPFVxoniLiLfK37m8TEpNHgPMXnBMfG9t7EUpDVvbgPN2TyeljI9rXR3s WIudR1HYIaaSDVddsZOTQb6NqV0FrxAOBZMf/uge0u/X++ZGxAHiPOcD21DhL/HOSQVRB4nkBl+Y fBke2uQPhxpOKUxiEMTyZe/CpRrIUxzlygTE6Q== ) pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 54120 pki-lab.gov. FwmaAXqwyL8t5xUDGAY53jd+QA3LCnYqM2pMwsXmV2PpwtDWCOESC37xkxTRRiJOdM6f+v7rbxj1 mbg4YYDbz8uyRrcEqVstEWZ34ruSxDizc1BFV7n/bYmIr7qF0kNutJNPcxQyYPFQukYaiex8aR79 oze9K6aQ2muUAHHpOaeHvNj54mft4s0mGsX/U8oqjdyiOpDPlSXyxMjL2iWtvkxGpx8Fb6Wn7zNT 9/3mTdueMh69csoEkmblqu6tENoiuCZQC60XH/uPYuIDHoO6+7TKwVtm15zF3OYhRdZMlVixftM/ IKPc0/9M9A8YkiCpZn8++XBk+6phfHi2/R72oQ== ) pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 26193 pki-lab.gov. gL4xhFxsI1mtmue8N0y7HcYOenTbQ+XCfhwSvYQNtjoVIqsVHNPzWWgLGdl06yDxsjVK95OAYJeu yHsMd+eVFcethyqU/TIZUTjNXxPoGTvBFHeL5ITtCX4x/Xe7cFSh7eWNkPUWBs/1RIb884mHhBPu AJEmtvr5waBajy8bnXZSKbnEgROKW1hG3TGrAyYq1mtvnvKFNTG+YwBJm5VS17PM2GxmXnEGkRfz hK3+jSdMmj8oYySTh0N3w5y0uJLnc2Pd+9E7jdk82ZuUVPI1jxUZM02I9OTzvtz7F5qg+3Pb/Ia1 DlZQC6VXKWfIQLkjzUOVxI83g43CSkF6bI1CBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for pki-lab.gov
	`pki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc8TIkBCgX7jyUlgnu0Jwaco+pU3KRHqZ9z+OJQfmLkQ3Qfv2xFncCzZaRoorDzrmDVij1Ar rK25c2MEeqYRosmsB+gTul4Ye5kmnGGK5RXGFqB5uYKp0A6+rkAl2dfTlgi1HOfImqhWXZ8unfxn 1BjoG0UYCS5+NEkeqeu9vF5kW7stdzHUt3y4w0usSXyhiaVyWYUfGxGTX3UG30fExiVZu5rW+KYZ Xt0hbjjYDJ1aFjbmkC2cmDBQOq7NmjCja8wfo8O9vdlPkN0/8+REckSe9XG43GBmKySsGHkPtMmo u0N/vyaVY6EKFRkc2nP0SIbHwVR3iKXaf11ZgsdSeAs= ) ; keytag 42970`
	`pki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcRf/Uy5bhWhp/3BJBU8qMl3iKTqYHqN1qwqgv9LPQk2ZgzYYG8TuGiQu4oOwnzC2VMSlZUk 0eSX5a4wb1772g3eNz2sD9tXfQaNLE8o/DSxf/RLj0Tn5TUXws1kAhf5S62LK9cXc6n/VdEFfdJ2 tjJ/P/V2FSaO+3kp4PaTTXXsceeB1snweK1h+iDLQLwZcW1c91n2Ad9QgaGCnqr4H8sR6qwrmaOx H5lVsLInc3fZWvf6ANjR/A+CTSnnb0Yxpo5Lnh+W199j0zYP+P+YO+Oro+iGOTFD4tyXK3xRM3oj 2I1zEEKk/yHSovaarXVDOIi5/CbvUTlQ0yK336vZJ/0= ) ; keytag 63664`
	`pki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaZ9P23ZB9nTJgpH06i9BjG3E3/yJQr+Mb5U0W3k/nlrCeWtHK9YV9PiwweeeFs7mdAcCsvT BBdYkVm8X/XeUK46xchNMC49PtzAdUOY00bQgmt6fJhfRY98ZqUyQGFhwQ9tM4DeAgnIhLb7cmZ6 AnxKBMVfugKALrLZZsZNnA/ftqX12EZbqyliEkar9hMW0lxb/tS9k6fEqdVcHkeZCfHCH4qTx2BZ ZkfO5pCNTB2lMP5l8RuALe1c6+BO69zAnMVxaEu+yJzMUrMO7A2CY2y+nrUbqTJblJ73+VPQngQM 2jM8BPe6up2R1M/QDttk+/eJxQM6TxPnhNg2YjnQp0s= ) ; keytag 54120`
	`pki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcZX6UvRQc+ABktjXTuk33qnY4Z6LoE3erTATUfbb2WjQOe/hDXXW5l5osJpyPztE/E7m1Kh cWZuFCr+s6ukPEVPPF8AhW6MFO5Hf3JHE4A+UhmxdUDcujH0MPcdHp0bx+3AoTPVD3y0fllLjKJB nQmVcqLM7+iUwOU2sFiQVxOx07jHKQ7oHFx2t3cf6BbyopHzgcMRgDqp55jZmS9KnKkG6x2gy/lS SlaL7egk+gh+HJ4bkZqEZd8dxxelBZ1TrTh6XtrkLJu4TI+JARCNwybPNXpIBo2aZwlVjRUDJsKD t8liqJDK9rc0Xd8ezCYz3Ru2g8o40U77QGmhoPip8C0= ) ; keytag 26193`
	DNSKEY=42970/SEP is now in the chain-of-trust
	DS=42970/SHA-256 verifies DNSKEY=42970/SEP
	DNSKEY=63664/SEP is now in the chain-of-trust
	DS=63664/SHA-256 verifies DNSKEY=63664/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 42970 pki-lab.gov. g1U23Li/sNEr3hhrquovZiR9O93DgFx0sT8h97mOhTKvPb65RM9e5z0Z70a7wpLH5royFrwmQCQB RF7s8MtUa1KHFavkJIolZeoqQgeJsVpFPEW7ilJ1G2cyqKLDTmBXZIvju4wVS7WQurYfPKal9QQI qPb+wN7+KFe33CYgO3T/i0PJq5mBiFiNseCtumAkgdkR6IYTrvEGToSD2Y8C45NISEd67MGSv5tM DdUfX25w57N36IYlO4Jg+jfN4ddWPj4hmZRJOy0BL2WcnACDlQ5+cOJeKShbhMt+FQb87la/T/fn G1ZCGqMJBHe+Tvp3TrV5DNgKJcZeTlhK6yDvCA== )`
	`pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 63664 pki-lab.gov. JN3DPahENrQ+dAGFm+DuE8hCEUkR8lm7rx7v6zXNsXM8+w3V+8DbBguaTOKZIcTtPq+6sawqkfEd fs2V1bvUXDQouYd01S5rS4hIGg2ZikLtDZcsXYYUwvFSj/XfPAcsAYThWY7XMFTCyuAOfzGuP8V2 03vTxZkCi1cge1LSMg7bPFVxoniLiLfK37m8TEpNHgPMXnBMfG9t7EUpDVvbgPN2TyeljI9rXR3s WIudR1HYIaaSDVddsZOTQb6NqV0FrxAOBZMf/uge0u/X++ZGxAHiPOcD21DhL/HOSQVRB4nkBl+Y fBke2uQPhxpOKUxiEMTyZe/CpRrIUxzlygTE6Q== )`
	`pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 54120 pki-lab.gov. FwmaAXqwyL8t5xUDGAY53jd+QA3LCnYqM2pMwsXmV2PpwtDWCOESC37xkxTRRiJOdM6f+v7rbxj1 mbg4YYDbz8uyRrcEqVstEWZ34ruSxDizc1BFV7n/bYmIr7qF0kNutJNPcxQyYPFQukYaiex8aR79 oze9K6aQ2muUAHHpOaeHvNj54mft4s0mGsX/U8oqjdyiOpDPlSXyxMjL2iWtvkxGpx8Fb6Wn7zNT 9/3mTdueMh69csoEkmblqu6tENoiuCZQC60XH/uPYuIDHoO6+7TKwVtm15zF3OYhRdZMlVixftM/ IKPc0/9M9A8YkiCpZn8++XBk+6phfHi2/R72oQ== )`
	`pki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260909150849 20260902140849 26193 pki-lab.gov. gL4xhFxsI1mtmue8N0y7HcYOenTbQ+XCfhwSvYQNtjoVIqsVHNPzWWgLGdl06yDxsjVK95OAYJeu yHsMd+eVFcethyqU/TIZUTjNXxPoGTvBFHeL5ITtCX4x/Xe7cFSh7eWNkPUWBs/1RIb884mHhBPu AJEmtvr5waBajy8bnXZSKbnEgROKW1hG3TGrAyYq1mtvnvKFNTG+YwBJm5VS17PM2GxmXnEGkRfz hK3+jSdMmj8oYySTh0N3w5y0uJLnc2Pd+9E7jdk82ZuUVPI1jxUZM02I9OTzvtz7F5qg+3Pb/Ia1 DlZQC6VXKWfIQLkjzUOVxI83g43CSkF6bI1CBg== )`
	RRSIG=42970 and DNSKEY=42970/SEP verifies the DNSKEY RRset
	RRSIG=63664 and DNSKEY=63664/SEP verifies the DNSKEY RRset
	RRSIG=54120 and DNSKEY=54120 verifies the DNSKEY RRset
	RRSIG=26193 and DNSKEY=26193 verifies the DNSKEY RRset
	DNSKEY=54120 is now in the chain-of-trust
	DNSKEY=26193 is now in the chain-of-trust
	Query to dns1.pki-lab.gov for pki-lab.gov/A
	Received 1376 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1376 octets ;; HEADER SECTION ;; id = 22887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pki-lab.gov. 86400 IN SOA ( dns1.pki-lab.gov. hostmaster.dns1.pki-lab.gov. 2026062302 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) pki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260908113315 20260901103315 54120 pki-lab.gov. lGwS4+v868AINE9hKX1TNBIhlwqQfdajuS06P4lBkJeeVStg5EKzHMvhJgVMsSP4U5A9S1p/rQLv BWbTalLS15cDR+GlEWU/SZlO+74hQKrJpvwes86hwnQWLCKcPWkvU6xboeK0XJebiqHLXrKK1xkb SSAKe1T+JXu8bBCM+EU9h3glWvHfDcYZPoXmmFtM24HS3pBjIWn+PL7ed/lI45uNYW6yJ9Clpp9T hRuYtWPy83bsUeLH/bKTRFLRSzBnoe8KxADvxWrs+fV4PKyO8/m6z0cS9e1cile58/KRodqiG0X1 /wS0VAn4zR7mJ48tvpFtVkliowR/D8YYPGshRA== ) pki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260908113315 20260901103315 26193 pki-lab.gov. LjJFTdOQDw8DV2pxy1sGtPgmzYPw9w7q6u25xROLAkSt7uyS3/Yb6PJwochYdLSII2aXWUF5W2Ia keMkJjl6WdVWZzGPaajnEIfrhoJWdkEPZ5wIkN1dZy5tMGdAXU23GpUujY6nyhBqMVV+o+tUFdl+ 6WwBQoETu4ug1xH+hE+RX/EM0do1wPW0v33buAywe4d9pV3Pd4qBK1iICIQET12r+0cB1aU2yxLm q+aO/0inpRUsNiO8R/fLrjPNjkJOjpbxW6OhL8wDt4MEikVLrISXuR2ExHglBhfigWDRroAD/Mg6 d19BycCXkKe08//chDhE/6fXubbXUooFLox6Xg== ) 3cp1lcvfi1snncpmui20scq0b1i56t4c.pki-lab.gov. 86400 IN NSEC3 ( 1 0 1 1f68e95ee71afd60 3cp1lcvfi1snncpmui20scq0b1i56t4d NS SOA RRSIG DNSKEY NSEC3PARAM ) 3cp1lcvfi1snncpmui20scq0b1i56t4c.pki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260912182619 20260905172619 54120 pki-lab.gov. R+5Qt6bGqkbFX5HFXoLgImdyjvYb8UmlSuMPxOeYKa0YeHxZ7HSB10raSG8ip7KJfgrsAHclDKnh liehUTRAaQRZn/D3eFmvwpKczJMx1t1zdyg2EDmgOy3S4EUJXRpEintmKFZ4bzuHG0TMKQxwjcKw BujwrDe2CI1PSwv0nd4lKsft2aSagCUXv+UFvdp7Ld6DSLvDkW6iVNDs10m8cPiEtGaxgtzDRAKE 1fE43100Fexgh8VWdeW1LAjfgX9Ss1P8LKV/Jr1ehQrhWr/LWL4YV77zw05qi3DAMvvtrBBrk3a+ fewp3nmf6NvyDukpApRt3WgF1wMhEnsjt9RmjQ== ) 3cp1lcvfi1snncpmui20scq0b1i56t4c.pki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260912182619 20260905172619 26193 pki-lab.gov. iNQce+Doa/+c2pt7X/zyFra8OJeM+yv1zo+HUMkXvf1We9tH9CrZptEbgK6DaGSvYLGt/24GZC0+ f7g7R+Hy1rmxgIPNFTA+Z6Aocs63CDtXO1ae7h9Yrank9FXUksNq9mKe1Ginuha2J6HkROt7wPYC uJE4toDPG36aS5qMS6qXV7DJirFAXy0SiVBQXi6UJIZGeEgbuSH0mwP1oIJlEfUDiktAjAViwgw0 b2YnLshvKq/T9Fh0KLP7b7gtGDvUtXYeqklAiwmENc0858lkVGZbzwSpiJFSt7G04Z2Q4Hoezxxo 1F2XLGDA+OiJcDiLet3fRZV43jHDWvUOGt1a8w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.pki-lab.gov is authoritative for pki-lab.gov
	Found RRSIG signed by pki-lab.gov zone
	Query to dns2.pki-lab.gov for pki-lab.gov/SOA
	Received 3801 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 3801 octets ;; HEADER SECTION ;; id = 11874 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pki-lab.gov. IN SOA ;; ANSWER SECTION (3 records) pki-lab.gov. 86400 IN SOA ( dns1.pki-lab.gov. hostmaster.dns1.pki-lab.gov. 2026062302 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) pki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260909150849 20260902140849 54120 pki-lab.gov. lZ0WpC1DZFThMExuXrLWAbr8oJCjOQYfewFa2Gsb1YaHmze67Lm1fd7D6OxgIxcjT+Wg24tM6zFO +D/jd2gZPcGEiFZJObH4MhQpmgwpzOCkNZClwbSbgqBoX8pMSg92EPbX+K5n6U0fa0xPxxBuXZGo 7ykacZTHiSZIb48Fa9GC0T2N7QvRDfriZAxxa+qH8DRmqR6i08TxEvDwe0UXdb9A8B9TO9Lf7OR7 DH07SIo3dEyeuaA6ChZTeW8kj1RbXdQb0FQmjUTH1yJx9zWN/UdG3BOFS4rExU/BQXM4+hts6K/O vd+tRNopBaMdW2iBN/bd1o1IigsE6cIbcdn37A== ) pki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260909150849 20260902140849 26193 pki-lab.gov. vTLgFjmnkW9cqAHDH/VP/lQ95DOt6qtiQR26mwqgeruyey1hz6lGVwYaPi6DLR05z+Gvjhtj1lsG UWZYsCpdTeaO50lfBhMqcyXCdTnmNg1Dy7opPxR1X6uyuilGAkiMHdV6ZWWT6eW8PuHERj0Akq5j U1Dtmf5m3CG+dT5iObLmB8nn6OXj00cn/Y7t1i9iW/xmdmcXc8TQZK1OA0NRG1WEPomjmRR4WW9s BTaIWVhaNUBYUcvOBzLEN0f3ICbyK927zsB1WMIQOQpzkFHzfubyo7v+l3VDJpBBkyTyIAJdUNN1 y2c73HWVg3vuDF+PFoqD6sNfPsbSr+zhYnYC5Q== ) ;; AUTHORITY SECTION (4 records) pki-lab.gov. 500 IN NS dns2.pki-lab.gov. pki-lab.gov. 500 IN NS dns1.pki-lab.gov. pki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20260909150758 20260902140758 54120 pki-lab.gov. QjEanlGzt2+7cYDL2Gt3gcyfzrX7eoDyCBEKYgfOaeLNcp2NNKrjG70TjSSs7papURc/GwRX/vN3 kbDJS6wAuSZbHoGd7kUppYNCme1ZelX/R2RuFra4rnlCuUt1cu/6sOOLCyFNWI5hIjG/0DmjT2CC n9qCySjM2niA0AS8++PwCEn8GRgHBfVscHS+7pba94RF2T0nCH2/h0wLIJ5mzgmZJFIGGFwoxDOr tGWAV2fUBHtAyxGnXBP+8wrZtvhYuC01F1owQ/cZB5FlWcPr/kztAmYegpWVT9jSzNVUm3ogu26j kMELSzbGk+0u+MCtlnse//q6pkY9utPrLvLoUg== ) pki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20260909150758 20260902140758 26193 pki-lab.gov. ElM0Nt/+K6IEUxsRPfaHr5woulTVyUw3dEeAofDpupSF8IpkLgmdSN2SECm31iyO+JHyP4RPn4o+ vXCS66oLCf3YEehWEmCR+YgfkLinJqfVtZAfM6f8qbVwZu1iGds8SlLxGf3ekOlTJXcfc71/PI8Q JVZAGqQ0N13z7RpphjvNRZpnIrKK61YuuSplXAnaePDFdIV2kuGnZYRMK+gmYO/ArvM3DaXsrIOK msnPPPZJsH+52Z0w3cgdC0DGArFl8oJSWrir9JdwnJG2Siq9W5KCvlvJvxks/7DTFIpjI+IQZ/AJ LOkUJ6sg+mSBungQhayY0S1BRhIKBfxPH5eBTw== ) ;; ADDITIONAL SECTION (13 records) dns1.pki-lab.gov. 500 IN A 199.167.92.100 dns1.pki-lab.gov. 500 IN RRSIG ( A 8 3 500 20260909150758 20260902140758 54120 pki-lab.gov. pV8ysfpwT1F4NUKHlvzBpF+rc5hiucj+1gEtg1mlPhlcDn/qTgqNcIzUo3fa6S9vIo50/XI13qsh I33Qp7FlFal+u8J9XK8ZeaP32phg4TfXJsih8t0bDvzbg4507/DT67DI0jbbeE4MjL1x/zBFkPtd 8X5cmV8E2h5FD1vmlbYSOvsr4eSLm0+761mubk15so/P5HKnq4XrxmdgpBMcovgu2eg1JzPzY7li AstUWjDYXYN8c0S322YJnbW1EZr1hlkA4iCUo6Wn2jdF3syMS1udtfBjCG4LLW+OgNapmeN0hKlK pk4UK78boF+Xwrv637/DT/Lftaw7XArpLFcKRQ== ) dns1.pki-lab.gov. 500 IN RRSIG ( A 8 3 500 20260909150758 20260902140758 26193 pki-lab.gov. KYDWXMO1TKTwtZ21UnVcgLyKTIxBm8egmkmL6o5TxjNi+Y0tYk8MwannzKBVPHJGR2f1R+FpVOI6 kKQ00N6qGBnBbetMybuT7Har8yP533WDFhSU9sEv38IiU9a5vHeldxXB9CqtdL0GgK7oQO8XrWb+ wwUr4nxwCT+ftYScZBDgpck5XGcUBxKZG4wl2ephJkIaWaoAMq8jcMrz+ZLD8DurGK5X0bC+uXS5 FnDNrGQJmuJ4dPLGKOSPFAvO1EfxZ8d2Vc8DZttqBJP9SOtz8e90UhDzwPInYb+OAyNTVaNgbwm/ 6OWmFeq5UZvWv9zfOpvPOqDKDKVfGD8j+Xhlzw== ) dns2.pki-lab.gov. 500 IN A 199.167.93.100 dns2.pki-lab.gov. 500 IN RRSIG ( A 8 3 500 20260909150758 20260902140758 54120 pki-lab.gov. Ys1RSFfpiLNTkZCH4hmOuEYHj+2fnPAveK2hcNjc1a/r8qhr/ZDs+tc0gKaWEHnuzsNCgMvgh2hf /pLelRkahHRme3YthVLDZHK6HCU4u8z+HIOijB3rmCKabMyKPBobF2dnmWm1/dIRxdAYDPxkqqfY EeIaRu/Sp1up4ryG9KgF87lu2pWofQ6zgdTzNxanSR7DzIf9tshpR2+VtzsoUPskSFAfJPbUoYAX foVHjQ0dFOmIu+B6Td7YlWbH9NkPpXdcRORy4aBWeCr6aTYzalX+N0dnEzo75Y4czQs22aPfDSIz rw8XpBc8KwJbakJlhPzatCUfti7bwAhMNuXs9Q== ) dns2.pki-lab.gov. 500 IN RRSIG ( A 8 3 500 20260909150758 20260902140758 26193 pki-lab.gov. J9YhVKgtvdp0XZKGX3V31avmcogGcpqCQXCtR2g179L0NTyr307ob+kAhQjCr9T4z8OTsVwqu/zQ IcSc2GLJ7FNZsGY2GUPmJ4xAGdbXlsMruymGyOKngRF2anqrQG9f3w4RfhY4IGngyfkjSd+QUmcw EZbmHXd/4xyjK+BEq4PHUrZbEuVe3/ldZ5OGNjA93ocPC/pP+Xexrn6RGKUOFwfvsCZb82AjgNcc eKDuJx21MoOO1RqxTMpbJXC0IpbXmE7qenUpcfIwXI8ES1ovfLEA+ScBt7Ur5x8JyRCiHv8rH5l/ 6DK5g1edpEuJ48kPFnpKMhu1hMe55EaDvoptfg== ) dns1.pki-lab.gov. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.pki-lab.gov. 500 IN RRSIG ( AAAA 8 3 500 20260909150758 20260902140758 54120 pki-lab.gov. DyVWM7LTgSLJI0aOR1rbDCbINXN/ORYA0Fm8yf/zBAQ9pD25cmMwl1/7PNBTp60mjBK1fjRy678+ cb30au1eFWNUwLOBIztytte+KzKpQw7ZNNtLHOf/gpsIXv6BU6b+mkNYUiJsWfVpKTbw4sfSS77W 8TbWjvWduO3mEUS1StJcYsrw7HpdCCC6A1Jrj+5l8CFYXYYfQWQgCqWh3E9hUR5A76HBBA/0P0zx YIcxtWpQ6RYl1GOTr2EweJb9d5VQ4/uBUH9EklfEj767LvOuI3GcfXn5oxuXv/tpt1ip0NHpi9UO 4j+JVsh2BiKHF0gPinqr9vSHAUd2+1JY0dPWJg== ) dns1.pki-lab.gov. 500 IN RRSIG ( AAAA 8 3 500 20260909150758 20260902140758 26193 pki-lab.gov. lxBVO/uA4qusXupwnKh7KKdID/t4+VrwpMV/OC0yJpvDGMxV1nH5bqfTLEmk2qxap0XfoCok32Z0 RPe2lmbfYyTe+8T0OEr9VYLQVrEOGCBTpYSkgGSads30Or6W7l6uZxja/BVXdAftKMU5FRoXWLQL WaOXQd0fjHzHvq5BPFXIcjCkLJt0ndL09eUMP/PdyXrl+1QNZ46HrvsKc4Y8HdInSVfIvI9Z0VXN 2JYSObCw4zhEohgmGhXUMd3gEs0ofss2I+hjqu6A2HnB1rpfEk3dM7QLLeSEpdQY57ilA5FpsCfN 3yvDM6voax9wTy/Iigag2Se0n1Y1c8ZctiP3fQ== ) dns2.pki-lab.gov. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.pki-lab.gov. 500 IN RRSIG ( AAAA 8 3 500 20260909150758 20260902140758 54120 pki-lab.gov. gTKK+DdnT44Czzoo5ZvtdG0m+Q+ykO/mrIqGADF4YjH7j2DluMLHJ2dEEarkSWocNSnNP1wchw+F sVK+pjTpuBUqClSOYYhJ+3xkD2YaXZ+AkhqevJ2OLwOYx2rcVi8+37pLLcblOvs6gVHA1LkQBTv6 vvCbWWsL8fO8PF2HV+tuWYaRiW3O42w2sX2k/AuCehPFRrnd/Z1Frm7teBA0K3C084J85hVeOI56 AWFSvMsY6e2KBY+UhnrW/McetKEBJDchTekG0sEcBsEeYFDcDRq/0lO8b6PtCxr7+InLKo5rpjy2 guqIdmD2FQT8H5Ma1wZFZYiVjj3ySicwPmFXZg== ) dns2.pki-lab.gov. 500 IN RRSIG ( AAAA 8 3 500 20260909150758 20260902140758 26193 pki-lab.gov. o2lU2ddJfT0JsGa61LBSd6p1DFxrRsMd06xHS7Kz2bZFUesja8u21iJjtQCgZmjzT4FqynN6zw/f RcIL0gO/jvlsQT9teoePLJviKfvIbsGPcEaCQGIRxsHbKdV5dPMXEP0QNrk08v4AohGGeBD6Z+1U t4eKUAVGex/qdxIWkEnUM5/yTmxuKKnYzoh6+ck3XmlDqwJu0udbiic7vGgh4t2l+Qk5ai9HwUgE 7Zr8Lol1FpttxVvLKlYMhZFLC2vp590Vb+JaYQmsierntlkwuatLr8eNSHu+x9Mh0APaLpV2JXso kLsao77arstkR8D4zGCz7lC/fnI/DUfhq9C+nw== ) ;; { "EDNS-VERSION": 0 }
	Query to dns1.pki-lab.gov for pki-lab.gov/A
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`pki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260908113315 20260901103315 54120 pki-lab.gov. lGwS4+v868AINE9hKX1TNBIhlwqQfdajuS06P4lBkJeeVStg5EKzHMvhJgVMsSP4U5A9S1p/rQLv BWbTalLS15cDR+GlEWU/SZlO+74hQKrJpvwes86hwnQWLCKcPWkvU6xboeK0XJebiqHLXrKK1xkb SSAKe1T+JXu8bBCM+EU9h3glWvHfDcYZPoXmmFtM24HS3pBjIWn+PL7ed/lI45uNYW6yJ9Clpp9T hRuYtWPy83bsUeLH/bKTRFLRSzBnoe8KxADvxWrs+fV4PKyO8/m6z0cS9e1cile58/KRodqiG0X1 /wS0VAn4zR7mJ48tvpFtVkliowR/D8YYPGshRA== )`
	`pki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260908113315 20260901103315 26193 pki-lab.gov. LjJFTdOQDw8DV2pxy1sGtPgmzYPw9w7q6u25xROLAkSt7uyS3/Yb6PJwochYdLSII2aXWUF5W2Ia keMkJjl6WdVWZzGPaajnEIfrhoJWdkEPZ5wIkN1dZy5tMGdAXU23GpUujY6nyhBqMVV+o+tUFdl+ 6WwBQoETu4ug1xH+hE+RX/EM0do1wPW0v33buAywe4d9pV3Pd4qBK1iICIQET12r+0cB1aU2yxLm q+aO/0inpRUsNiO8R/fLrjPNjkJOjpbxW6OhL8wDt4MEikVLrISXuR2ExHglBhfigWDRroAD/Mg6 d19BycCXkKe08//chDhE/6fXubbXUooFLox6Xg== )`
	RRSIG=54120 and DNSKEY=54120 verifies the SOA RRset
	RRSIG=26193 and DNSKEY=26193 verifies the SOA RRset

pki-lab.gov

	Query to dns2.pki-lab.gov for pki-lab.gov/A
	Timeout querying dns2.pki-lab.gov/199.167.93.100 for pki-lab.gov/A
	All Queries to dns2.pki-lab.gov for pki-lab.gov/A timed out or failed
	No response from pki-lab.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pki-lab.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: