DNSSEC Debugger - senate.gov

Domain Name:

Time: 2026-01-23 11:17:34 UTC

Analyzing DNSSEC problems for senate.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 14259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to d.root-servers.net for senate.gov/A
	Received 617 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 617 octets ;; HEADER SECTION ;; id = 3583 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . CLvvZW0zMDKpHFKtAclhMNkpUUqpfJETd/NG7hyjVuFz2/KnKnX0OtdsiKFaf3SIlIoATVtwHpkc Z8aXqhiK4i58aKmFYOZEMxuIEiNpAXFKyfJOMidu47VjCynL4ZkBF4C6RIb8+7bl8WSke3Dhmsep D9i7W/KETNUub7s5zrAEZucuvSjmt1PN2niYEAIJGTLOdvz8+dxUS+F+eTP/V+wpyzvzCVRbnFC1 JK0QF6YwvH2u8GENAHoWRoRGs8J2tisvBfKGbGrylQbT/NeThSQutnTVibuVvbhyZVYE+RxHU6TD GtT+Vp38U+D8lIo2Np2zxpGYMXF91IWuQ5uFHA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 613 octets ;; HEADER SECTION ;; id = 45936 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . CLvvZW0zMDKpHFKtAclhMNkpUUqpfJETd/NG7hyjVuFz2/KnKnX0OtdsiKFaf3SIlIoATVtwHpkc Z8aXqhiK4i58aKmFYOZEMxuIEiNpAXFKyfJOMidu47VjCynL4ZkBF4C6RIb8+7bl8WSke3Dhmsep D9i7W/KETNUub7s5zrAEZucuvSjmt1PN2niYEAIJGTLOdvz8+dxUS+F+eTP/V+wpyzvzCVRbnFC1 JK0QF6YwvH2u8GENAHoWRoRGs8J2tisvBfKGbGrylQbT/NeThSQutnTVibuVvbhyZVYE+RxHU6TD GtT+Vp38U+D8lIo2Np2zxpGYMXF91IWuQ5uFHA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 51224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . CLvvZW0zMDKpHFKtAclhMNkpUUqpfJETd/NG7hyjVuFz2/KnKnX0OtdsiKFaf3SIlIoATVtwHpkc Z8aXqhiK4i58aKmFYOZEMxuIEiNpAXFKyfJOMidu47VjCynL4ZkBF4C6RIb8+7bl8WSke3Dhmsep D9i7W/KETNUub7s5zrAEZucuvSjmt1PN2niYEAIJGTLOdvz8+dxUS+F+eTP/V+wpyzvzCVRbnFC1 JK0QF6YwvH2u8GENAHoWRoRGs8J2tisvBfKGbGrylQbT/NeThSQutnTVibuVvbhyZVYE+RxHU6TD GtT+Vp38U+D8lIo2Np2zxpGYMXF91IWuQ5uFHA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . CLvvZW0zMDKpHFKtAclhMNkpUUqpfJETd/NG7hyjVuFz2/KnKnX0OtdsiKFaf3SIlIoATVtwHpkc Z8aXqhiK4i58aKmFYOZEMxuIEiNpAXFKyfJOMidu47VjCynL4ZkBF4C6RIb8+7bl8WSke3Dhmsep D9i7W/KETNUub7s5zrAEZucuvSjmt1PN2niYEAIJGTLOdvz8+dxUS+F+eTP/V+wpyzvzCVRbnFC1 JK0QF6YwvH2u8GENAHoWRoRGs8J2tisvBfKGbGrylQbT/NeThSQutnTVibuVvbhyZVYE+RxHU6TD GtT+Vp38U+D8lIo2Np2zxpGYMXF91IWuQ5uFHA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 57231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for senate.gov/A
	Received 314 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 314 octets ;; HEADER SECTION ;; id = 867 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) senate.gov. 10800 IN NS ns1-139.akam.net. senate.gov. 10800 IN NS ns1-201.akam.net. senate.gov. 10800 IN NS use1.akam.net. senate.gov. 10800 IN NS use4.akam.net. senate.gov. 10800 IN NS use5.akam.net. senate.gov. 10800 IN NS usw2.akam.net. senate.gov. 3600 IN DS ( 23321 8 2 45ba30bc098077054c912045a346b35ba838b4ee73500b199b3a67d89d006470 ) senate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260124121734 20260122101734 35496 gov. dWh8+nGMNh/SfJA267w7peRcvgwRaWe/hRnIHnWhoG2gP7HngRXbLkRuzXSGVBO9d6C7OcC9CQNx 96UEDYHQEg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for senate.gov/DNSKEY
	Received 314 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 314 octets ;; HEADER SECTION ;; id = 59516 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) senate.gov. 10800 IN NS ns1-139.akam.net. senate.gov. 10800 IN NS ns1-201.akam.net. senate.gov. 10800 IN NS use1.akam.net. senate.gov. 10800 IN NS use4.akam.net. senate.gov. 10800 IN NS use5.akam.net. senate.gov. 10800 IN NS usw2.akam.net. senate.gov. 3600 IN DS ( 23321 8 2 45ba30bc098077054c912045a346b35ba838b4ee73500b199b3a67d89d006470 ) senate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260124121734 20260122101734 35496 gov. Hwr4eQ48AAz5rT8BxESij/LNOFuRppOR5QNw034wtFl/g2uXA/Lbp0E8E8c/726wWoQzbixC8QRI wE32EuUZ4Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone senate.gov

senate.gov

	Checking DS between gov and senate.gov
	Query to d.ns.gov for senate.gov/DS
	Received 186 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 186 octets ;; HEADER SECTION ;; id = 64298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN DS ;; ANSWER SECTION (2 records) senate.gov. 3600 IN DS ( 23321 8 2 45ba30bc098077054c912045a346b35ba838b4ee73500b199b3a67d89d006470 ) senate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260124121734 20260122101734 35496 gov. gpbD+F3NwSggGsqDGbFpHxhBgw08hxohRNGL7HKoKSD6hAGqn0cD9YE/dc3pHeD9V7LmOtQB3O7l czXhrB0HaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for senate.gov in the gov zone
	DS=23321/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`senate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260124121734 20260122101734 35496 gov. gpbD+F3NwSggGsqDGbFpHxhBgw08hxohRNGL7HKoKSD6hAGqn0cD9YE/dc3pHeD9V7LmOtQB3O7l czXhrB0HaQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=23321/SHA-256 is now in the chain-of-trust
	`senate.gov. 3600 IN DS ( 23321 8 2 45ba30bc098077054c912045a346b35ba838b4ee73500b199b3a67d89d006470 )`
	Query to use1.akam.net for senate.gov/DNSKEY
	Received 909 bytes from 72.246.46.64
	;; Response received from [72.246.46.64] 909 octets ;; HEADER SECTION ;; id = 37616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN DNSKEY ;; ANSWER SECTION (4 records) senate.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAbKS3Ale1dOJk5uzSEzMZEgTH23agbfvPW5NjpDcpk9wCJZ3dNNWeqennhVTAqwidm3t8a5a e5QlySMAhK51Xh0VT7b+4/ST+aHf3IsScH4iSDXl0aCFeEBUdifNG8vCiEFW2s+A3Uw0ZNO1/LH9 k33EU9ZuPNs26mHz9jmhE2vx ) ; keytag 24916 senate.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAdsK85fs3vTR/mow1puxT+RtE7UdUGY/4USfx+sYMKvYE5kL//gscitEpBONrJ/bl7akuaif CLCvmiLUNN/68O6ztdu47+IN5AuNXm2IzVJHKeDwhmrZjtwm1iWfo1MZub90FXq1o+9mT8Zzvv5m WYRpqMpd1U+cAua62W69hLuJ ) ; keytag 8896 senate.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAb3wSGpgTKAf+vy9R5WiRKzvWT4gRL4a4nyOQ2nKG/E/jfDLFFUZGDyyaNgg4rkP2GbvG2TS jGrd4vGVD/M7eDQVSxEoDQwPZkGHCrGh/BpzzlPcIIrSo0h3s630DjTr9Bc69lPqswWBJg4XqeBl CEILMbgm2Hw+Zeh9WdKYrBDriT+v9Th59tCzO0LrZmq8QMjd1xkDagN804mE3Ggxr/BeqtOUDmUe Z32XT/t+bY9Le1IZ8o/lEzoixolxZnJm1/4CbhXfZ44QtVKInYzXjhFoDSvuUjd+XTBdtGeJWqTs z4FCDViqdggp388EKRi98qd0FOfDwr6+W3nUGPvGRAs= ) ; keytag 23321 senate.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260126092437 20260123082437 23321 senate.gov. NnUo2t0js41qubPyDWxC919M/rQR3yytaBMmJ6TSkhIBfnlhIuzLoJKcB1PJ21bTuRs51Qs+71aW G4PwNOtwVqiQFej5t/I76WoeAxPXwqVBgeaRfLyIwusK7uNEv/zBzNHm6vVUwSo9pKM1HGHNeafQ eUQKl4p78hz/7WdkzuCvWBh2JZau4C/d+y2oxI2AQFEeslXgBIZhWamVUZn4cDBTkSuDGaEu7xyK 3wCM5kF5MRfvVxG9FywdVYKns6xE8RfR4EJyuskBoCucwGmK1GPKe/qfhPe74M7yqCfr7d5k2pve xgYnO5AXFXybwa9BQskkApyeyHeEj63QWjc8EA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for senate.gov
	`senate.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAbKS3Ale1dOJk5uzSEzMZEgTH23agbfvPW5NjpDcpk9wCJZ3dNNWeqennhVTAqwidm3t8a5a e5QlySMAhK51Xh0VT7b+4/ST+aHf3IsScH4iSDXl0aCFeEBUdifNG8vCiEFW2s+A3Uw0ZNO1/LH9 k33EU9ZuPNs26mHz9jmhE2vx ) ; keytag 24916`
	`senate.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAdsK85fs3vTR/mow1puxT+RtE7UdUGY/4USfx+sYMKvYE5kL//gscitEpBONrJ/bl7akuaif CLCvmiLUNN/68O6ztdu47+IN5AuNXm2IzVJHKeDwhmrZjtwm1iWfo1MZub90FXq1o+9mT8Zzvv5m WYRpqMpd1U+cAua62W69hLuJ ) ; keytag 8896`
	`senate.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAb3wSGpgTKAf+vy9R5WiRKzvWT4gRL4a4nyOQ2nKG/E/jfDLFFUZGDyyaNgg4rkP2GbvG2TS jGrd4vGVD/M7eDQVSxEoDQwPZkGHCrGh/BpzzlPcIIrSo0h3s630DjTr9Bc69lPqswWBJg4XqeBl CEILMbgm2Hw+Zeh9WdKYrBDriT+v9Th59tCzO0LrZmq8QMjd1xkDagN804mE3Ggxr/BeqtOUDmUe Z32XT/t+bY9Le1IZ8o/lEzoixolxZnJm1/4CbhXfZ44QtVKInYzXjhFoDSvuUjd+XTBdtGeJWqTs z4FCDViqdggp388EKRi98qd0FOfDwr6+W3nUGPvGRAs= ) ; keytag 23321`
	DNSKEY=23321/SEP is now in the chain-of-trust
	DS=23321/SHA-256 verifies DNSKEY=23321/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`senate.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260126092437 20260123082437 23321 senate.gov. NnUo2t0js41qubPyDWxC919M/rQR3yytaBMmJ6TSkhIBfnlhIuzLoJKcB1PJ21bTuRs51Qs+71aW G4PwNOtwVqiQFej5t/I76WoeAxPXwqVBgeaRfLyIwusK7uNEv/zBzNHm6vVUwSo9pKM1HGHNeafQ eUQKl4p78hz/7WdkzuCvWBh2JZau4C/d+y2oxI2AQFEeslXgBIZhWamVUZn4cDBTkSuDGaEu7xyK 3wCM5kF5MRfvVxG9FywdVYKns6xE8RfR4EJyuskBoCucwGmK1GPKe/qfhPe74M7yqCfr7d5k2pve xgYnO5AXFXybwa9BQskkApyeyHeEj63QWjc8EA== )`
	RRSIG=23321 and DNSKEY=23321/SEP verifies the DNSKEY RRset
	DNSKEY=24916 is now in the chain-of-trust
	DNSKEY=8896 is now in the chain-of-trust
	Query to use5.akam.net for senate.gov/A
	Received 225 bytes from 2.16.40.64
	;; Response received from [2.16.40.64] 225 octets ;; HEADER SECTION ;; id = 63218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 184.24.33.50 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. asJ9YepiQtZCKkJ/9+xaj0/n/C/apS8NMCA2za6b6PmfgAAZDh7dEsUNzXQIVvJZd0hXvgPnIpIT f1uoUz5hBojU6h+9rcDccwOjKVJN9n10VYCxna1qy0VCN02cjVcjjejzTEB9BefsrFeWX+8hFgn/ pWagKX+t0k833+1IP1s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use5.akam.net is authoritative for senate.gov
	Found RRSIG signed by senate.gov zone
	Query to use4.akam.net for senate.gov/SOA
	Received 563 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 563 octets ;; HEADER SECTION ;; id = 8196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN SOA ;; ANSWER SECTION (2 records) senate.gov. 10800 IN SOA ( sen-dmzp.senate.gov. saanoc.saa.senate.gov. 2008109479 ;serial 1800 ;refresh 900 ;retry 2592000 ;expire 900 ;minimum ) senate.gov. 10800 IN RRSIG ( SOA 8 2 10800 20260126092437 20260123082437 8896 senate.gov. ADQsTcURLYd+sXPkh73+637IKEJdXSz9gN9OIMhgwkuWAxnJsXL5TCUlNXMcm1WSxjc/Z9FQAVHJ 6ecnabx0YJ1IkM7in/29Z4O6QRzZwwQAgb3M8Xmp8H+qgJXZc+CQDM7cR3/rj1+ODYWjODn/KMpK MzV2Slm/aLHUJHPnFRc= ) ;; AUTHORITY SECTION (7 records) senate.gov. 10800 IN NS ns1-201.akam.net. senate.gov. 10800 IN NS ns1-139.akam.net. senate.gov. 10800 IN NS use1.akam.net. senate.gov. 10800 IN NS use4.akam.net. senate.gov. 10800 IN NS use5.akam.net. senate.gov. 10800 IN NS usw2.akam.net. senate.gov. 10800 IN RRSIG ( NS 8 2 10800 20260126092437 20260123082437 8896 senate.gov. IONHh989jh3WYazdGwedzmvie6N5CbYiUvMi8mgflmmiBPUlPVpoh90QPWtXWo4XmqKSRY+w2euj hDbLyn+bS7bMCbTNrKKP8WVg5gn/dH5Z1dOXHOwRs9u/00bZ5xL5cwn7ldbKPs6OZI5JLpwFYPGQ 0G2WZAXU9jss7fEoD1U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-139.akam.net for senate.gov/SOA
	Received 563 bytes from 193.108.91.139
	;; Response received from [193.108.91.139] 563 octets ;; HEADER SECTION ;; id = 43508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN SOA ;; ANSWER SECTION (2 records) senate.gov. 10800 IN SOA ( sen-dmzp.senate.gov. saanoc.saa.senate.gov. 2008109479 ;serial 1800 ;refresh 900 ;retry 2592000 ;expire 900 ;minimum ) senate.gov. 10800 IN RRSIG ( SOA 8 2 10800 20260126092437 20260123082437 8896 senate.gov. ADQsTcURLYd+sXPkh73+637IKEJdXSz9gN9OIMhgwkuWAxnJsXL5TCUlNXMcm1WSxjc/Z9FQAVHJ 6ecnabx0YJ1IkM7in/29Z4O6QRzZwwQAgb3M8Xmp8H+qgJXZc+CQDM7cR3/rj1+ODYWjODn/KMpK MzV2Slm/aLHUJHPnFRc= ) ;; AUTHORITY SECTION (7 records) senate.gov. 10800 IN NS usw2.akam.net. senate.gov. 10800 IN NS ns1-201.akam.net. senate.gov. 10800 IN NS use5.akam.net. senate.gov. 10800 IN NS use4.akam.net. senate.gov. 10800 IN NS use1.akam.net. senate.gov. 10800 IN NS ns1-139.akam.net. senate.gov. 10800 IN RRSIG ( NS 8 2 10800 20260126092437 20260123082437 8896 senate.gov. IONHh989jh3WYazdGwedzmvie6N5CbYiUvMi8mgflmmiBPUlPVpoh90QPWtXWo4XmqKSRY+w2euj hDbLyn+bS7bMCbTNrKKP8WVg5gn/dH5Z1dOXHOwRs9u/00bZ5xL5cwn7ldbKPs6OZI5JLpwFYPGQ 0G2WZAXU9jss7fEoD1U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-201.akam.net for senate.gov/SOA
	Received 563 bytes from 193.108.91.201
	;; Response received from [193.108.91.201] 563 octets ;; HEADER SECTION ;; id = 50480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN SOA ;; ANSWER SECTION (2 records) senate.gov. 10800 IN SOA ( sen-dmzp.senate.gov. saanoc.saa.senate.gov. 2008109479 ;serial 1800 ;refresh 900 ;retry 2592000 ;expire 900 ;minimum ) senate.gov. 10800 IN RRSIG ( SOA 8 2 10800 20260126092437 20260123082437 8896 senate.gov. ADQsTcURLYd+sXPkh73+637IKEJdXSz9gN9OIMhgwkuWAxnJsXL5TCUlNXMcm1WSxjc/Z9FQAVHJ 6ecnabx0YJ1IkM7in/29Z4O6QRzZwwQAgb3M8Xmp8H+qgJXZc+CQDM7cR3/rj1+ODYWjODn/KMpK MzV2Slm/aLHUJHPnFRc= ) ;; AUTHORITY SECTION (7 records) senate.gov. 10800 IN NS ns1-139.akam.net. senate.gov. 10800 IN NS ns1-201.akam.net. senate.gov. 10800 IN NS usw2.akam.net. senate.gov. 10800 IN NS use1.akam.net. senate.gov. 10800 IN NS use4.akam.net. senate.gov. 10800 IN NS use5.akam.net. senate.gov. 10800 IN RRSIG ( NS 8 2 10800 20260126092437 20260123082437 8896 senate.gov. IONHh989jh3WYazdGwedzmvie6N5CbYiUvMi8mgflmmiBPUlPVpoh90QPWtXWo4XmqKSRY+w2euj hDbLyn+bS7bMCbTNrKKP8WVg5gn/dH5Z1dOXHOwRs9u/00bZ5xL5cwn7ldbKPs6OZI5JLpwFYPGQ 0G2WZAXU9jss7fEoD1U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usw2.akam.net for senate.gov/SOA
	Received 563 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 563 octets ;; HEADER SECTION ;; id = 40105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN SOA ;; ANSWER SECTION (2 records) senate.gov. 10800 IN SOA ( sen-dmzp.senate.gov. saanoc.saa.senate.gov. 2008109479 ;serial 1800 ;refresh 900 ;retry 2592000 ;expire 900 ;minimum ) senate.gov. 10800 IN RRSIG ( SOA 8 2 10800 20260126092437 20260123082437 8896 senate.gov. ADQsTcURLYd+sXPkh73+637IKEJdXSz9gN9OIMhgwkuWAxnJsXL5TCUlNXMcm1WSxjc/Z9FQAVHJ 6ecnabx0YJ1IkM7in/29Z4O6QRzZwwQAgb3M8Xmp8H+qgJXZc+CQDM7cR3/rj1+ODYWjODn/KMpK MzV2Slm/aLHUJHPnFRc= ) ;; AUTHORITY SECTION (7 records) senate.gov. 10800 IN NS usw2.akam.net. senate.gov. 10800 IN NS use1.akam.net. senate.gov. 10800 IN NS ns1-201.akam.net. senate.gov. 10800 IN NS ns1-139.akam.net. senate.gov. 10800 IN NS use4.akam.net. senate.gov. 10800 IN NS use5.akam.net. senate.gov. 10800 IN RRSIG ( NS 8 2 10800 20260126092437 20260123082437 8896 senate.gov. IONHh989jh3WYazdGwedzmvie6N5CbYiUvMi8mgflmmiBPUlPVpoh90QPWtXWo4XmqKSRY+w2euj hDbLyn+bS7bMCbTNrKKP8WVg5gn/dH5Z1dOXHOwRs9u/00bZ5xL5cwn7ldbKPs6OZI5JLpwFYPGQ 0G2WZAXU9jss7fEoD1U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use1.akam.net for senate.gov/SOA
	Received 563 bytes from 72.246.46.64
	;; Response received from [72.246.46.64] 563 octets ;; HEADER SECTION ;; id = 14070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN SOA ;; ANSWER SECTION (2 records) senate.gov. 10800 IN SOA ( sen-dmzp.senate.gov. saanoc.saa.senate.gov. 2008109479 ;serial 1800 ;refresh 900 ;retry 2592000 ;expire 900 ;minimum ) senate.gov. 10800 IN RRSIG ( SOA 8 2 10800 20260126092437 20260123082437 8896 senate.gov. ADQsTcURLYd+sXPkh73+637IKEJdXSz9gN9OIMhgwkuWAxnJsXL5TCUlNXMcm1WSxjc/Z9FQAVHJ 6ecnabx0YJ1IkM7in/29Z4O6QRzZwwQAgb3M8Xmp8H+qgJXZc+CQDM7cR3/rj1+ODYWjODn/KMpK MzV2Slm/aLHUJHPnFRc= ) ;; AUTHORITY SECTION (7 records) senate.gov. 10800 IN NS use4.akam.net. senate.gov. 10800 IN NS usw2.akam.net. senate.gov. 10800 IN NS use1.akam.net. senate.gov. 10800 IN NS ns1-139.akam.net. senate.gov. 10800 IN NS ns1-201.akam.net. senate.gov. 10800 IN NS use5.akam.net. senate.gov. 10800 IN RRSIG ( NS 8 2 10800 20260126092437 20260123082437 8896 senate.gov. IONHh989jh3WYazdGwedzmvie6N5CbYiUvMi8mgflmmiBPUlPVpoh90QPWtXWo4XmqKSRY+w2euj hDbLyn+bS7bMCbTNrKKP8WVg5gn/dH5Z1dOXHOwRs9u/00bZ5xL5cwn7ldbKPs6OZI5JLpwFYPGQ 0G2WZAXU9jss7fEoD1U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use5.akam.net for senate.gov/A
	Received 225 bytes from 2.16.40.64
	;; Response received from [2.16.40.64] 225 octets ;; HEADER SECTION ;; id = 30359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 184.24.33.50 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. asJ9YepiQtZCKkJ/9+xaj0/n/C/apS8NMCA2za6b6PmfgAAZDh7dEsUNzXQIVvJZd0hXvgPnIpIT f1uoUz5hBojU6h+9rcDccwOjKVJN9n10VYCxna1qy0VCN02cjVcjjejzTEB9BefsrFeWX+8hFgn/ pWagKX+t0k833+1IP1s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	senate.gov A RR has value 184.24.33.50
	Found 1 RRSIGs over A RRset
	`senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. asJ9YepiQtZCKkJ/9+xaj0/n/C/apS8NMCA2za6b6PmfgAAZDh7dEsUNzXQIVvJZd0hXvgPnIpIT f1uoUz5hBojU6h+9rcDccwOjKVJN9n10VYCxna1qy0VCN02cjVcjjejzTEB9BefsrFeWX+8hFgn/ pWagKX+t0k833+1IP1s= )`
	RRSIG=8896 and DNSKEY=8896 verifies the A RRset

senate.gov

	Query to ns1-139.akam.net for senate.gov/A
	Received 225 bytes from 193.108.91.139
	;; Response received from [193.108.91.139] 225 octets ;; HEADER SECTION ;; id = 25717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 23.196.115.72 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. a9ck6xZ5xbU/ot0xLshFwlUMbMd9Xfnngra6uHoSiKxeoTtzL+kvx6GyL/44oVJPXhh825jLJSxw 9sLAJ76KEcNkjueviXiCitDe3r+2gypoNMB3taZGx5bXPS9R2XJ1AZPdzyRoY2aAgeGh33wiMkb0 HfHTEsUjnh0ihVAjNOY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-139.akam.net is authoritative for senate.gov
	Found RRSIG signed by senate.gov zone
	Query to ns1-139.akam.net for senate.gov/A
	Received 225 bytes from 193.108.91.139
	;; Response received from [193.108.91.139] 225 octets ;; HEADER SECTION ;; id = 34700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 23.213.81.63 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. WSl60zyWi7N6I817IH1j6LPihchZpS1BrCHR9paZ8NFKtoBu/CWbcIcyB5ixtcD4Z31LUNW39mf6 yK0YEicYG2uXQP5flcJl18dq8h/JNGjWwMz4p0XfqmvzmhEoAzWCRTQ2zg5jfxly8tfH8qX3FGmN 7hMul0hY9uDKa0bPClQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	senate.gov A RR has value 23.213.81.63
	Found 1 RRSIGs over A RRset
	`senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. WSl60zyWi7N6I817IH1j6LPihchZpS1BrCHR9paZ8NFKtoBu/CWbcIcyB5ixtcD4Z31LUNW39mf6 yK0YEicYG2uXQP5flcJl18dq8h/JNGjWwMz4p0XfqmvzmhEoAzWCRTQ2zg5jfxly8tfH8qX3FGmN 7hMul0hY9uDKa0bPClQ= )`
	RRSIG=8896 and DNSKEY=8896 verifies the A RRset

senate.gov

	Query to usw2.akam.net for senate.gov/A
	Received 225 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 225 octets ;; HEADER SECTION ;; id = 8512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 23.42.85.86 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. d861YfZWXElj5W8PXYnvTUwyLCLHKfAzjyGHz25SEQCyj8i0tVrkea0DmseahS7nK59OgszEKo8C c9s4T1Tok+4YZ/qeY4QkGilMb2Gzaq71Uw4Lfa5eaBh7haicaCXopzdwuip8MfW54pEF7nf6sN2f nPqebj5Y52kVf0kebPE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usw2.akam.net is authoritative for senate.gov
	Found RRSIG signed by senate.gov zone
	Query to usw2.akam.net for senate.gov/A
	Received 225 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 225 octets ;; HEADER SECTION ;; id = 49557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 23.42.85.86 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. d861YfZWXElj5W8PXYnvTUwyLCLHKfAzjyGHz25SEQCyj8i0tVrkea0DmseahS7nK59OgszEKo8C c9s4T1Tok+4YZ/qeY4QkGilMb2Gzaq71Uw4Lfa5eaBh7haicaCXopzdwuip8MfW54pEF7nf6sN2f nPqebj5Y52kVf0kebPE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	senate.gov A RR has value 23.42.85.86
	Found 1 RRSIGs over A RRset
	`senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. d861YfZWXElj5W8PXYnvTUwyLCLHKfAzjyGHz25SEQCyj8i0tVrkea0DmseahS7nK59OgszEKo8C c9s4T1Tok+4YZ/qeY4QkGilMb2Gzaq71Uw4Lfa5eaBh7haicaCXopzdwuip8MfW54pEF7nf6sN2f nPqebj5Y52kVf0kebPE= )`
	RRSIG=8896 and DNSKEY=8896 verifies the A RRset

senate.gov

	Query to use1.akam.net for senate.gov/A
	Received 225 bytes from 72.246.46.64
	;; Response received from [72.246.46.64] 225 octets ;; HEADER SECTION ;; id = 41738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 2.17.85.25 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. Sz/Tvd6mH5FLxtYEMYcBV4xGcq4mDo4UMphBZkelEkRm/7wj5iuz6qu0gQl9105rO0uu8+LrFXgZ 7y3DwH9WTO1uDOws4JbwNaevtnwWt3ip4nSZmIMG1z03PSsoe82d8w67iFlvdAU8CyT4Ug67eIlW 5MAPA1MWKkEzBVb4zYs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use1.akam.net is authoritative for senate.gov
	Found RRSIG signed by senate.gov zone
	Query to use1.akam.net for senate.gov/A
	Received 225 bytes from 72.246.46.64
	;; Response received from [72.246.46.64] 225 octets ;; HEADER SECTION ;; id = 50528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 23.37.69.35 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. ZwmhaB3bRiO1kC4CJwQs5Vrxjar36oWPKjdGKA0pXDvwdHrYPf2e0w4FBk4gDczJlpT3JtKMsuSL cpV/kOGO7r9akeB47QHZVHOrGuomuunWw8FbU3Tny7uQv9h2cIxRpDdR2u3uGnhJeSEOIp95ETl5 6G/JnuptiAH8jP61i8Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	senate.gov A RR has value 23.37.69.35
	Found 1 RRSIGs over A RRset
	`senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. ZwmhaB3bRiO1kC4CJwQs5Vrxjar36oWPKjdGKA0pXDvwdHrYPf2e0w4FBk4gDczJlpT3JtKMsuSL cpV/kOGO7r9akeB47QHZVHOrGuomuunWw8FbU3Tny7uQv9h2cIxRpDdR2u3uGnhJeSEOIp95ETl5 6G/JnuptiAH8jP61i8Q= )`
	RRSIG=8896 and DNSKEY=8896 verifies the A RRset

senate.gov

	Query to ns1-201.akam.net for senate.gov/A
	Received 225 bytes from 193.108.91.201
	;; Response received from [193.108.91.201] 225 octets ;; HEADER SECTION ;; id = 33941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 23.196.115.72 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. a9ck6xZ5xbU/ot0xLshFwlUMbMd9Xfnngra6uHoSiKxeoTtzL+kvx6GyL/44oVJPXhh825jLJSxw 9sLAJ76KEcNkjueviXiCitDe3r+2gypoNMB3taZGx5bXPS9R2XJ1AZPdzyRoY2aAgeGh33wiMkb0 HfHTEsUjnh0ihVAjNOY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-201.akam.net is authoritative for senate.gov
	Found RRSIG signed by senate.gov zone
	Query to ns1-201.akam.net for senate.gov/A
	Received 225 bytes from 193.108.91.201
	;; Response received from [193.108.91.201] 225 octets ;; HEADER SECTION ;; id = 8307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 23.213.81.63 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. WSl60zyWi7N6I817IH1j6LPihchZpS1BrCHR9paZ8NFKtoBu/CWbcIcyB5ixtcD4Z31LUNW39mf6 yK0YEicYG2uXQP5flcJl18dq8h/JNGjWwMz4p0XfqmvzmhEoAzWCRTQ2zg5jfxly8tfH8qX3FGmN 7hMul0hY9uDKa0bPClQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	senate.gov A RR has value 23.213.81.63
	Found 1 RRSIGs over A RRset
	`senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. WSl60zyWi7N6I817IH1j6LPihchZpS1BrCHR9paZ8NFKtoBu/CWbcIcyB5ixtcD4Z31LUNW39mf6 yK0YEicYG2uXQP5flcJl18dq8h/JNGjWwMz4p0XfqmvzmhEoAzWCRTQ2zg5jfxly8tfH8qX3FGmN 7hMul0hY9uDKa0bPClQ= )`
	RRSIG=8896 and DNSKEY=8896 verifies the A RRset

senate.gov

	Query to use4.akam.net for senate.gov/A
	Received 225 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 225 octets ;; HEADER SECTION ;; id = 42929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 104.81.165.239 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. kz4zC3nH7Fblezk+GYvMLyoq2SQlVcxGB+np5tNcCqlnErA3EUNvXWEACmVwWoD8OnekYmHnPAqf Iw5fdOiurVJimnC5AuCV/dPcLZw1mEwF8e3WhYFKDGwuwUc0wz7VvXl+vQMXhwAbLV+Mf1ac+f1r S31+Ex+cthrvUh7N8A8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use4.akam.net is authoritative for senate.gov
	Found RRSIG signed by senate.gov zone
	Query to use4.akam.net for senate.gov/A
	Received 225 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 225 octets ;; HEADER SECTION ;; id = 29448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; senate.gov. IN A ;; ANSWER SECTION (2 records) senate.gov. 20 IN A 104.81.165.239 senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. kz4zC3nH7Fblezk+GYvMLyoq2SQlVcxGB+np5tNcCqlnErA3EUNvXWEACmVwWoD8OnekYmHnPAqf Iw5fdOiurVJimnC5AuCV/dPcLZw1mEwF8e3WhYFKDGwuwUc0wz7VvXl+vQMXhwAbLV+Mf1ac+f1r S31+Ex+cthrvUh7N8A8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	senate.gov A RR has value 104.81.165.239
	Found 1 RRSIGs over A RRset
	`senate.gov. 20 IN RRSIG ( A 8 2 20 20260126092437 20260123082437 8896 senate.gov. kz4zC3nH7Fblezk+GYvMLyoq2SQlVcxGB+np5tNcCqlnErA3EUNvXWEACmVwWoD8OnekYmHnPAqf Iw5fdOiurVJimnC5AuCV/dPcLZw1mEwF8e3WhYFKDGwuwUc0wz7VvXl+vQMXhwAbLV+Mf1ac+f1r S31+Ex+cthrvUh7N8A8= )`
	RRSIG=8896 and DNSKEY=8896 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test senate.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: