DNSSEC Analyzer

Domain Name:

Time: 2021-10-16 12:35:43 UTC, NTP stratum 16

Analyzing DNSSEC problems for srs.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 33676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to l.root-servers.net for srs.gov/A
	Received 626 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (626 octets) ;; HEADER SECTION ;; id = 45695 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (622 octets) ;; HEADER SECTION ;; id = 60945 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (367 octets) ;; HEADER SECTION ;; id = 31822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for gov/DNSKEY
	Received 957 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (957 octets) ;; HEADER SECTION ;; id = 35758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (4 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=6229 is now in the chain-of-trust
	DNSKEY=57735 is now in the chain-of-trust
	Query to a.gov-servers.net for srs.gov/A
	Received 675 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (675 octets) ;; HEADER SECTION ;; id = 45969 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) srs.gov. 86400 IN NS ns1.srs.gov. srs.gov. 86400 IN NS adns2.es.net. srs.gov. 86400 IN NS adns1.es.net. srs.gov. 3600 IN DS 39636 7 1 590f84e60dc53e85ba91b6b0666eaed7cdd0ac8b srs.gov. 3600 IN DS 9547 8 1 cbe0fd0b60bd3fbd5f74fdd0231a2ddb81741a43 srs.gov. 3600 IN DS 62151 7 1 419076798ce92750f035c1d51bf804a11507086c srs.gov. 3600 IN DS 7755 7 1 b37a855d192739a2a79b8db6688e3220d301c121 srs.gov. 3600 IN DS ( 39636 7 2 285d38e8d870882099ad5cb9f983406c53d262db4737cd4c0ea5eede2e95fa43 ) srs.gov. 3600 IN DS ( 9547 8 2 37086953d071510d2741be28d17398b8383100cd62d8895afe93e76955698372 ) srs.gov. 3600 IN DS ( 62151 7 2 bb3716b4142fc3d067c7bc505e2f678f4c582274f823f54bb574840369be2a36 ) srs.gov. 3600 IN DS ( 7755 7 2 8398046afb0b7f2cf0b9518ef25605cfb1da099c355d1f8ae0ad34a6b18182a9 ) srs.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194035 20211015194035 6229 gov. DksQqObM1Gtz5xmqP5WgL7lTN6fUqmddkgBCRf/SAJI7ieNR15/qrKY/2TgU8al3D7gdU3tY2l+E Pb8V5JwC0jd4HANNw+pqI42D1qcfj6byvcHcAV8nqdEUC3VxevY/3+Ea5GeGbQpaqR3s7pk2RnjE j5JknkWsYfnN0jdOsGsG+3YdJxk4GgF2fidzPgyzlhSHjTh/Zsa0lrDyP2AJVA== ) ;; ADDITIONAL SECTION (3 records) ns1.srs.gov. 86400 IN A 192.33.240.10 ns1.srs.gov. 86400 IN AAAA 2620:b0:8000:2012::17 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for srs.gov/DNSKEY
	Received 675 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (675 octets) ;; HEADER SECTION ;; id = 56803 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) srs.gov. 86400 IN NS ns1.srs.gov. srs.gov. 86400 IN NS adns2.es.net. srs.gov. 86400 IN NS adns1.es.net. srs.gov. 3600 IN DS 39636 7 1 590f84e60dc53e85ba91b6b0666eaed7cdd0ac8b srs.gov. 3600 IN DS 9547 8 1 cbe0fd0b60bd3fbd5f74fdd0231a2ddb81741a43 srs.gov. 3600 IN DS 62151 7 1 419076798ce92750f035c1d51bf804a11507086c srs.gov. 3600 IN DS 7755 7 1 b37a855d192739a2a79b8db6688e3220d301c121 srs.gov. 3600 IN DS ( 39636 7 2 285d38e8d870882099ad5cb9f983406c53d262db4737cd4c0ea5eede2e95fa43 ) srs.gov. 3600 IN DS ( 9547 8 2 37086953d071510d2741be28d17398b8383100cd62d8895afe93e76955698372 ) srs.gov. 3600 IN DS ( 62151 7 2 bb3716b4142fc3d067c7bc505e2f678f4c582274f823f54bb574840369be2a36 ) srs.gov. 3600 IN DS ( 7755 7 2 8398046afb0b7f2cf0b9518ef25605cfb1da099c355d1f8ae0ad34a6b18182a9 ) srs.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194035 20211015194035 6229 gov. DksQqObM1Gtz5xmqP5WgL7lTN6fUqmddkgBCRf/SAJI7ieNR15/qrKY/2TgU8al3D7gdU3tY2l+E Pb8V5JwC0jd4HANNw+pqI42D1qcfj6byvcHcAV8nqdEUC3VxevY/3+Ea5GeGbQpaqR3s7pk2RnjE j5JknkWsYfnN0jdOsGsG+3YdJxk4GgF2fidzPgyzlhSHjTh/Zsa0lrDyP2AJVA== ) ;; ADDITIONAL SECTION (3 records) ns1.srs.gov. 86400 IN A 192.33.240.10 ns1.srs.gov. 86400 IN AAAA 2620:b0:8000:2012::17 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone srs.gov

srs.gov

	Checking DS between gov and srs.gov
	Query to d.gov-servers.net for srs.gov/DS
	Received 567 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (567 octets) ;; HEADER SECTION ;; id = 44891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN DS ;; ANSWER SECTION (9 records) srs.gov. 3600 IN DS 39636 7 1 590f84e60dc53e85ba91b6b0666eaed7cdd0ac8b srs.gov. 3600 IN DS 9547 8 1 cbe0fd0b60bd3fbd5f74fdd0231a2ddb81741a43 srs.gov. 3600 IN DS 62151 7 1 419076798ce92750f035c1d51bf804a11507086c srs.gov. 3600 IN DS 7755 7 1 b37a855d192739a2a79b8db6688e3220d301c121 srs.gov. 3600 IN DS ( 39636 7 2 285d38e8d870882099ad5cb9f983406c53d262db4737cd4c0ea5eede2e95fa43 ) srs.gov. 3600 IN DS ( 9547 8 2 37086953d071510d2741be28d17398b8383100cd62d8895afe93e76955698372 ) srs.gov. 3600 IN DS ( 62151 7 2 bb3716b4142fc3d067c7bc505e2f678f4c582274f823f54bb574840369be2a36 ) srs.gov. 3600 IN DS ( 7755 7 2 8398046afb0b7f2cf0b9518ef25605cfb1da099c355d1f8ae0ad34a6b18182a9 ) srs.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194035 20211015194035 6229 gov. DksQqObM1Gtz5xmqP5WgL7lTN6fUqmddkgBCRf/SAJI7ieNR15/qrKY/2TgU8al3D7gdU3tY2l+E Pb8V5JwC0jd4HANNw+pqI42D1qcfj6byvcHcAV8nqdEUC3VxevY/3+Ea5GeGbQpaqR3s7pk2RnjE j5JknkWsYfnN0jdOsGsG+3YdJxk4GgF2fidzPgyzlhSHjTh/Zsa0lrDyP2AJVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 8 DS records for srs.gov in the gov zone
	DS=39636/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=9547/SHA-1 has algorithm RSASHA256
	DS=62151/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=7755/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=39636/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=9547/SHA-256 has algorithm RSASHA256
	DS=62151/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=7755/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`srs.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194035 20211015194035 6229 gov. DksQqObM1Gtz5xmqP5WgL7lTN6fUqmddkgBCRf/SAJI7ieNR15/qrKY/2TgU8al3D7gdU3tY2l+E Pb8V5JwC0jd4HANNw+pqI42D1qcfj6byvcHcAV8nqdEUC3VxevY/3+Ea5GeGbQpaqR3s7pk2RnjE j5JknkWsYfnN0jdOsGsG+3YdJxk4GgF2fidzPgyzlhSHjTh/Zsa0lrDyP2AJVA== )`
	RRSIG=6229 and DNSKEY=6229 verifies the DS RRset
	DS=39636/SHA-1 is now in the chain-of-trust
	DS=9547/SHA-1 is now in the chain-of-trust
	DS=62151/SHA-1 is now in the chain-of-trust
	DS=7755/SHA-1 is now in the chain-of-trust
	`srs.gov. 3600 IN DS 39636 7 1 590f84e60dc53e85ba91b6b0666eaed7cdd0ac8b`
	`srs.gov. 3600 IN DS 9547 8 1 cbe0fd0b60bd3fbd5f74fdd0231a2ddb81741a43`
	`srs.gov. 3600 IN DS 62151 7 1 419076798ce92750f035c1d51bf804a11507086c`
	`srs.gov. 3600 IN DS 7755 7 1 b37a855d192739a2a79b8db6688e3220d301c121`
	`srs.gov. 3600 IN DS ( 39636 7 2 285d38e8d870882099ad5cb9f983406c53d262db4737cd4c0ea5eede2e95fa43 )`
	`srs.gov. 3600 IN DS ( 9547 8 2 37086953d071510d2741be28d17398b8383100cd62d8895afe93e76955698372 )`
	`srs.gov. 3600 IN DS ( 62151 7 2 bb3716b4142fc3d067c7bc505e2f678f4c582274f823f54bb574840369be2a36 )`
	`srs.gov. 3600 IN DS ( 7755 7 2 8398046afb0b7f2cf0b9518ef25605cfb1da099c355d1f8ae0ad34a6b18182a9 )`
	Query to ns1.srs.gov for srs.gov/DNSKEY
	Received 4014 bytes from 192.33.240.10
	;; Response received from 192.33.240.10 (4014 octets) ;; HEADER SECTION ;; id = 44811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 14 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN DNSKEY ;; ANSWER SECTION (14 records) srs.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAb0GaFD2UlCek2zoKke1czWYtSE/T8QyHcY4ce2NgP6jZ3cCuxlLls945SxKSfcm8tKSNCOH rWjER+Hatsq7w86M8S6fRhChpDiABqFpM+RsD32T7madX15kCEhY+uNnv4XZihCpMbVwY8IM53RW fQ9MYzg4FVfsQS5DTQkvKOwe6mdm5As+yct6bFqUjcrfoYY2gDGq/ao4nno9N48fNBo4SeclmbTS k/Cn7fdtPJToIyrg4QAyd//8IVKDYh+IC3SZ4eOm9NkXFdJGvNBtgKS4WDYdGVCW1RFiJqYKCBkL 49cv+Aua+h08cOTKMoSWhpbyJ8xwkZwD96uENjPiEU0= ) ; Key ID = 43880 srs.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAaJmNW5xuOutd0l0st6O3BJms4aPStdGNfexMw93l1PCOGr1OL/rcPRfJiqYsgxOgoGlJrGL S3vpQupIScrFOYZf77TuEOyUhN4RYlXWl3xgMJyS80BQDCt0mRvXbBaYa9EPLGVkAzmc1qbEVWII hxlv/rdVKwYQBmaCthu+y9XMy2RhdVH5LWdWS3IZlF+cE35OTquN96zM3TUiwkVOFJlo56k0EXhl SdriSpPYggsJzxreo+8nGeC6GWbMvNaNZn8/lhcRq1jyZWATCUR+DhA4aQU1T9gidb8QYQz54iW4 8DiG5tpkSB94mTW9hghlHSbddvCmZjRd6HqJTebNkcM= ) ; Key ID = 12213 srs.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbm7SqnQJf/uJltg4Wv31rrM1te2DsfRce2In3Ol5xPM3NP8/CGLPuaL4fa5nunZZoS6Ljxt P6MEjMEelRNnDf/fb+C6oYafJ7Ewp+N7hUxOarE7GBCCSjDz3r0azqnLDD6HDW9V8ErCygSmulro Uh7qXVsOSXe3OaPLoqSOPO4lrIU4QKU1ZrjGxl0tvEfHIcP2bnfwn9l1rzH4iwRnrZSYout6sMFq Tnxw0bpSEqDUdu3IGKXP+3EgLPxlXoKd+tMZS/GSymE7OS5W3lNYuGPRomgD0h3+rEq3fCf155yD 4AJOqYnGdx/Lub3W79qkldy2fClEVzXNhKeVGAn0UCc= ) ; Key ID = 9547 srs.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAbcfPwa/V6LsuwyLwWAHUS9tlqYw+Y9Js7Zgy8jKitN8OJo/V2t52jvfdB2nPQ7hSy7Tuob+ Fqdn23XuRQBH9/WzsyqDJT+k9I9tJCR1DbHPHdx7HuotiRReALPAdSavNE9kIHC/0a4MVgsHrkFU Ga4TE8tZhujfWpVoktupIyhNjKlEy71BiRp396JC+GDT4bCO0FK0HN3rjN8vYI0U9u39XC2fZ9Vl kgdGtdLOHaV8nONpafsh6DDH5aT6neVT1pBdcCwzTeAOrIsWu3cNcJBu1t5+6DoPXrmxH1Ptk16F 0XmJVi+fbreF2jBAU7qBYOzYZoYSp4f41B2oY3nGN1k= ) ; Key ID = 7755 srs.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAdsrjeNhUVctLXTb6n+yg5gRlVAOLLtEm0inaqGycbp2nu9BmmuUmHkOLM6H4Jsv9j8AMNId QO26Jk0H9CrFWFBigxzC5ZhX8oJonl95tJ64Mi6HeAFExlNdmzasE3mPWL4423tMN0OmttKzCgQ3 VQi1F/iXzIchU3PEpA/WvuH+MH1NP7o1I1enUPKrurLyMq3BP6jquAsKzPd8Fl2/BpDdixk/LHBb UFQl7sBZtWOMuRXcudiPYaQobVYXxzU0pyLrt0DxQWmdkgoVFGIEd1JkrgLxff+wzoJymEOeDDL0 aC8cK+IwZzMQ0fMoW+qcaKQMpgOqzFkYiomScq8hVak= ) ; Key ID = 39636 srs.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAeas9b4pHAOMFU1Nk6GC7SrFVZLnF62k/NDwaAH/Z9VCPbGw3eL12SleP+VjBPFdNRj2nhVj 3hhPV4LzL7mLC67dFbGHcrATjdfmXPJr6cdaTJaGij/Ln02vMUNE9IEVa9Nq189T32t2I+JVSECB NTtik4Zp7JWZgbwIzZRNnP6uOAT/BMEDZP67YlfjvNzL6NhG6pP4fW4rVaNNvkGLBZYBTZ360Cy8 I9eNDTX5JuZsYHW3t4fHPTNyR3ElaRygCCd1rc8xwIkeWHjk7VU0wwOOm3VEZtWyN+inhniT/32Z QpQqcUuy/Pd/ptSFwTsP1TevmnbUHnr2/b/u2mwK0fM= ) ; Key ID = 62151 srs.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAZnC/+v/qnOFsy27KJ3J7YtK4UBAfYuKfW8AMjmyiOP4A3ZsnLg1kSK1FUBqzcQlDZB7OhX1 039UORsCArg+hnkYdM1Si4Z4/fuio4D/hOaUUAIgbFPvvyobMu6vypAd7mEiiwPDQ/3dvLeR8zvS uUE0M/4xQ1O9TN086NaLBOuDFBfnSAlxluPM8gcyppVFnOw5i9xXTDy7Yi8rCGwr6X8sMc7CRuqg a+Thyxfx6VlX23fsQ1apWzdAZ0D1op4vqq0JWwYHjYSjtZbquA9MT8a6Q2lFetNUEeiqaEs2vbsb AjXhgJqR9WSVs+jRI3qRVvRCYcL5G40XKgQwwFzuas0= ) ; Key ID = 56909 srs.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAZCyXBnzxLpguBRMTSczVgiuC3/f989Hi2C91/fMvvrhvel4Fq0pJZNe7sVCpxO6LG6FreWL i9sF/r+qZJtneSGGy3lVcIr84XONA1yo3Ut7BNf2ugLe69AXTdViru9AHCD67M09cpUprRxRGJAD HUnsinm1JRMVW1NJKkfc9+/tzQ/Rj8oigXNCZa7oVBpVhpvW426F1u5aup9KE3V+cq+QD3y3oFzB Qacl1ON6Q8NBQSAEjkRguABU7JatutvRoL5GGOe/5I0iriJtIOFaWecBoxIdOGSq1sYqnwPrgxbz A1yeRVkbGbFsmH7rzKpCHntcqAV/u/JhY2nJAkOuamc= ) ; Key ID = 5523 srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 7755 srs.gov. LoQ/vWY19qtGV/p19dWF3vhNZT6mUlVDDsaXEfZc/E4M/eOwBYM10V3qDPs117RzGNn0h9VwLUd6 LJoSMS1OkzQUJKgGlHyYJEAaJTrE4i4dBOZxAKl5hJoOhFNqcv5Hximbp3HhuPhWjKvq5M5H2GOC 8y5I1/xhFXt+P5/xLDV4LTHi6pBRDPcfFsEioI+xuK/tpxXNF1MMVWcc51qC1Kt7a813cjO153v/ CuGT2L8qFLRF0THETbcTm6IcOT2gcqI46EZjwroM/mAqWXs/dDfu+zW54QL5XCZ43Ytew2X6OggW F3fYwrA9PW42/Dr5CG66QxL2Qo07/FJZ0jkbtw== ) srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 39636 srs.gov. PyLqp+aWWGOxya00qrcls510RNWB6U9EIkY421cGa376GgtEa+sC7CjeghwNEseP5Y61wvG/JpwM 5EpVTqO1/GhPO8ucqG0XTHV24SoBWfvp20WMlKb+cHYJM0f93X07oUG4877Md1YHS5Zr2NaOwb7j IUWD6hkIWpLtlQujAqRj17KadMmMgqeTV27cr7pbp16tXVMVvc6MO/UMhPgK7WYcKHDlUeZ6zbwh 4kMen7vfBN2Gt4L/r8Ai9IXjHz5Bi93oIo65VHAALuakzn7HonMGW6azK0JIX3HiDh2eA7Yu+7sO G5Hyr0EEgSYyth7DQQVCoLM2+iW/2c8CGG168A== ) srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 43880 srs.gov. XvQbwcW0IlLmrbEFwZJDXE1HWG2iuYISpHYY/sCtWUwNwUYhp8+zKelWk2DtgGRxtzTWGY7roGA2 OatJ4/FtFmtodBunSBtVyMfrd2aSYpX/1EYAbshiZ/bA/YkrVkaaVSdhi/e3iWyi9tVG8TrVtScf ALpsBvMqsjZ+04IddaOzlZk3A3JUGd+V02nE2KjWr/Ua1YzdMsSE5J79oUoHd6ylnqMW3sdBgSFH 7HU326qjo1hOn+r0/tTjWI4/oq7IS0rivpG/uMBgwsOpMPDgUXxouxNyRbBuYcgploTtxQk+gMJu Nc7reHhKSOezjJ0XIGv0fSvAqWl/72bWihS7Og== ) srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 62151 srs.gov. VfgVt2DvOkZcunQ45aSygzZLxIx9PjeWDnumn2CPiu61Hg1Vv/uAQOFEIIwPB+l7SjCVOZhXsx6E l7uA30ojQk3vOEcZ3f1YnOaTwVdpjxfOK7fTeAy8s6AVp0nxMZxAWKlb2eKqWFkkMp975rUOGet8 2OGr+J+TvpjGcOlcNS22w2wZ4fh3da1rON/WRXkPywPrsQCSrdNqOBHz2Ikw5nVWyH7OgO4qJWtB JFLDnblJSGFf5yLip/b+YMIycAmtBfersudqDOSVdWBIn/rQijtYkB0IcRAeKpj38q+gHAMwhezz kexXchCr0EDWhES7Hku6buUYvrT7ZxEmb8ynQA== ) srs.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20211020035219 20211016033014 9547 srs.gov. btbQLgBDO5RgetuM83jtiEcfxLc4tQobmfqAmz4PHUczlFlfi3LQV1xSpWMfizcaiIRYGtPQYiMM MfopZRPEEOkA6DibK8dnvYKj6SR15yqL4fzjYGIH7174MZzo8x+dDFqaNdKWt+61ynxXnWaMlha+ NGd5ZsR4klBfRdG7YdWZMnkKLqnCfxvqmy0/EHcib928luC2kRVByeBiRYE4H+0GHh1bcnGZjesB 65ts/8UJJRivMGVGjfREAyFXyYofNHEK3sielPtj7BgTlRqLORqTrNkj6OzCfhN6yNC5PRXrp1qm Gat9bJsgppTYvzReraxSd32IL6Qz0xZb1WF4yQ== ) srs.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20211020035219 20211016033014 12213 srs.gov. HTQENuCjJmrlXXkFrbPkYKCmR9DP5NjJ6lVQT/sHu18LqaJQWh+RBHUWV9UhIl+1Uy+xwIiUV7LY 1iwxi+cceWNcpC7yOjm1nhB1V0znvvgaV3Ae8uVo1RN44YlLr9yIdt6ZtZTrUx2pk1PMkpYvcp+6 OclPROdm3Kcn/tJcmDzcImW7gwysmhUmQIoz7ODMV/5iKFANrj7Byk2L7zF5hzGkOrWYRhaA87uD gEy5FtcEZl2y07kcpTiSfJl2rmF5/MiM7GzAhaBs55w0txrsx7k0nJ0f72WlSHMKukjTDPoN2jXg G5vp7e+wlny6xNfn9tjR3/9emC/Y+PjaWzFcqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 8 DNSKEY records for srs.gov
	`srs.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAb0GaFD2UlCek2zoKke1czWYtSE/T8QyHcY4ce2NgP6jZ3cCuxlLls945SxKSfcm8tKSNCOH rWjER+Hatsq7w86M8S6fRhChpDiABqFpM+RsD32T7madX15kCEhY+uNnv4XZihCpMbVwY8IM53RW fQ9MYzg4FVfsQS5DTQkvKOwe6mdm5As+yct6bFqUjcrfoYY2gDGq/ao4nno9N48fNBo4SeclmbTS k/Cn7fdtPJToIyrg4QAyd//8IVKDYh+IC3SZ4eOm9NkXFdJGvNBtgKS4WDYdGVCW1RFiJqYKCBkL 49cv+Aua+h08cOTKMoSWhpbyJ8xwkZwD96uENjPiEU0= ) ; Key ID = 43880`
	`srs.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAaJmNW5xuOutd0l0st6O3BJms4aPStdGNfexMw93l1PCOGr1OL/rcPRfJiqYsgxOgoGlJrGL S3vpQupIScrFOYZf77TuEOyUhN4RYlXWl3xgMJyS80BQDCt0mRvXbBaYa9EPLGVkAzmc1qbEVWII hxlv/rdVKwYQBmaCthu+y9XMy2RhdVH5LWdWS3IZlF+cE35OTquN96zM3TUiwkVOFJlo56k0EXhl SdriSpPYggsJzxreo+8nGeC6GWbMvNaNZn8/lhcRq1jyZWATCUR+DhA4aQU1T9gidb8QYQz54iW4 8DiG5tpkSB94mTW9hghlHSbddvCmZjRd6HqJTebNkcM= ) ; Key ID = 12213`
	`srs.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbm7SqnQJf/uJltg4Wv31rrM1te2DsfRce2In3Ol5xPM3NP8/CGLPuaL4fa5nunZZoS6Ljxt P6MEjMEelRNnDf/fb+C6oYafJ7Ewp+N7hUxOarE7GBCCSjDz3r0azqnLDD6HDW9V8ErCygSmulro Uh7qXVsOSXe3OaPLoqSOPO4lrIU4QKU1ZrjGxl0tvEfHIcP2bnfwn9l1rzH4iwRnrZSYout6sMFq Tnxw0bpSEqDUdu3IGKXP+3EgLPxlXoKd+tMZS/GSymE7OS5W3lNYuGPRomgD0h3+rEq3fCf155yD 4AJOqYnGdx/Lub3W79qkldy2fClEVzXNhKeVGAn0UCc= ) ; Key ID = 9547`
	`srs.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAbcfPwa/V6LsuwyLwWAHUS9tlqYw+Y9Js7Zgy8jKitN8OJo/V2t52jvfdB2nPQ7hSy7Tuob+ Fqdn23XuRQBH9/WzsyqDJT+k9I9tJCR1DbHPHdx7HuotiRReALPAdSavNE9kIHC/0a4MVgsHrkFU Ga4TE8tZhujfWpVoktupIyhNjKlEy71BiRp396JC+GDT4bCO0FK0HN3rjN8vYI0U9u39XC2fZ9Vl kgdGtdLOHaV8nONpafsh6DDH5aT6neVT1pBdcCwzTeAOrIsWu3cNcJBu1t5+6DoPXrmxH1Ptk16F 0XmJVi+fbreF2jBAU7qBYOzYZoYSp4f41B2oY3nGN1k= ) ; Key ID = 7755`
	`srs.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAdsrjeNhUVctLXTb6n+yg5gRlVAOLLtEm0inaqGycbp2nu9BmmuUmHkOLM6H4Jsv9j8AMNId QO26Jk0H9CrFWFBigxzC5ZhX8oJonl95tJ64Mi6HeAFExlNdmzasE3mPWL4423tMN0OmttKzCgQ3 VQi1F/iXzIchU3PEpA/WvuH+MH1NP7o1I1enUPKrurLyMq3BP6jquAsKzPd8Fl2/BpDdixk/LHBb UFQl7sBZtWOMuRXcudiPYaQobVYXxzU0pyLrt0DxQWmdkgoVFGIEd1JkrgLxff+wzoJymEOeDDL0 aC8cK+IwZzMQ0fMoW+qcaKQMpgOqzFkYiomScq8hVak= ) ; Key ID = 39636`
	`srs.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAeas9b4pHAOMFU1Nk6GC7SrFVZLnF62k/NDwaAH/Z9VCPbGw3eL12SleP+VjBPFdNRj2nhVj 3hhPV4LzL7mLC67dFbGHcrATjdfmXPJr6cdaTJaGij/Ln02vMUNE9IEVa9Nq189T32t2I+JVSECB NTtik4Zp7JWZgbwIzZRNnP6uOAT/BMEDZP67YlfjvNzL6NhG6pP4fW4rVaNNvkGLBZYBTZ360Cy8 I9eNDTX5JuZsYHW3t4fHPTNyR3ElaRygCCd1rc8xwIkeWHjk7VU0wwOOm3VEZtWyN+inhniT/32Z QpQqcUuy/Pd/ptSFwTsP1TevmnbUHnr2/b/u2mwK0fM= ) ; Key ID = 62151`
	`srs.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAZnC/+v/qnOFsy27KJ3J7YtK4UBAfYuKfW8AMjmyiOP4A3ZsnLg1kSK1FUBqzcQlDZB7OhX1 039UORsCArg+hnkYdM1Si4Z4/fuio4D/hOaUUAIgbFPvvyobMu6vypAd7mEiiwPDQ/3dvLeR8zvS uUE0M/4xQ1O9TN086NaLBOuDFBfnSAlxluPM8gcyppVFnOw5i9xXTDy7Yi8rCGwr6X8sMc7CRuqg a+Thyxfx6VlX23fsQ1apWzdAZ0D1op4vqq0JWwYHjYSjtZbquA9MT8a6Q2lFetNUEeiqaEs2vbsb AjXhgJqR9WSVs+jRI3qRVvRCYcL5G40XKgQwwFzuas0= ) ; Key ID = 56909`
	`srs.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAZCyXBnzxLpguBRMTSczVgiuC3/f989Hi2C91/fMvvrhvel4Fq0pJZNe7sVCpxO6LG6FreWL i9sF/r+qZJtneSGGy3lVcIr84XONA1yo3Ut7BNf2ugLe69AXTdViru9AHCD67M09cpUprRxRGJAD HUnsinm1JRMVW1NJKkfc9+/tzQ/Rj8oigXNCZa7oVBpVhpvW426F1u5aup9KE3V+cq+QD3y3oFzB Qacl1ON6Q8NBQSAEjkRguABU7JatutvRoL5GGOe/5I0iriJtIOFaWecBoxIdOGSq1sYqnwPrgxbz A1yeRVkbGbFsmH7rzKpCHntcqAV/u/JhY2nJAkOuamc= ) ; Key ID = 5523`
	DNSKEY=9547/SEP is now in the chain-of-trust
	DS=9547/SHA-1 verifies DNSKEY=9547/SEP
	DS=9547/SHA-256 verifies DNSKEY=9547/SEP
	DNSKEY=7755/SEP is now in the chain-of-trust
	DS=7755/SHA-1 verifies DNSKEY=7755/SEP
	DS=7755/SHA-256 verifies DNSKEY=7755/SEP
	DNSKEY=39636/SEP is now in the chain-of-trust
	DS=39636/SHA-1 verifies DNSKEY=39636/SEP
	DS=39636/SHA-256 verifies DNSKEY=39636/SEP
	DNSKEY=62151/SEP is now in the chain-of-trust
	DS=62151/SHA-1 verifies DNSKEY=62151/SEP
	DS=62151/SHA-256 verifies DNSKEY=62151/SEP
	Found 6 RRSIGs over DNSKEY RRset
	`srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 7755 srs.gov. LoQ/vWY19qtGV/p19dWF3vhNZT6mUlVDDsaXEfZc/E4M/eOwBYM10V3qDPs117RzGNn0h9VwLUd6 LJoSMS1OkzQUJKgGlHyYJEAaJTrE4i4dBOZxAKl5hJoOhFNqcv5Hximbp3HhuPhWjKvq5M5H2GOC 8y5I1/xhFXt+P5/xLDV4LTHi6pBRDPcfFsEioI+xuK/tpxXNF1MMVWcc51qC1Kt7a813cjO153v/ CuGT2L8qFLRF0THETbcTm6IcOT2gcqI46EZjwroM/mAqWXs/dDfu+zW54QL5XCZ43Ytew2X6OggW F3fYwrA9PW42/Dr5CG66QxL2Qo07/FJZ0jkbtw== )`
	`srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 39636 srs.gov. PyLqp+aWWGOxya00qrcls510RNWB6U9EIkY421cGa376GgtEa+sC7CjeghwNEseP5Y61wvG/JpwM 5EpVTqO1/GhPO8ucqG0XTHV24SoBWfvp20WMlKb+cHYJM0f93X07oUG4877Md1YHS5Zr2NaOwb7j IUWD6hkIWpLtlQujAqRj17KadMmMgqeTV27cr7pbp16tXVMVvc6MO/UMhPgK7WYcKHDlUeZ6zbwh 4kMen7vfBN2Gt4L/r8Ai9IXjHz5Bi93oIo65VHAALuakzn7HonMGW6azK0JIX3HiDh2eA7Yu+7sO G5Hyr0EEgSYyth7DQQVCoLM2+iW/2c8CGG168A== )`
	`srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 43880 srs.gov. XvQbwcW0IlLmrbEFwZJDXE1HWG2iuYISpHYY/sCtWUwNwUYhp8+zKelWk2DtgGRxtzTWGY7roGA2 OatJ4/FtFmtodBunSBtVyMfrd2aSYpX/1EYAbshiZ/bA/YkrVkaaVSdhi/e3iWyi9tVG8TrVtScf ALpsBvMqsjZ+04IddaOzlZk3A3JUGd+V02nE2KjWr/Ua1YzdMsSE5J79oUoHd6ylnqMW3sdBgSFH 7HU326qjo1hOn+r0/tTjWI4/oq7IS0rivpG/uMBgwsOpMPDgUXxouxNyRbBuYcgploTtxQk+gMJu Nc7reHhKSOezjJ0XIGv0fSvAqWl/72bWihS7Og== )`
	`srs.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20211020035219 20211016033014 62151 srs.gov. VfgVt2DvOkZcunQ45aSygzZLxIx9PjeWDnumn2CPiu61Hg1Vv/uAQOFEIIwPB+l7SjCVOZhXsx6E l7uA30ojQk3vOEcZ3f1YnOaTwVdpjxfOK7fTeAy8s6AVp0nxMZxAWKlb2eKqWFkkMp975rUOGet8 2OGr+J+TvpjGcOlcNS22w2wZ4fh3da1rON/WRXkPywPrsQCSrdNqOBHz2Ikw5nVWyH7OgO4qJWtB JFLDnblJSGFf5yLip/b+YMIycAmtBfersudqDOSVdWBIn/rQijtYkB0IcRAeKpj38q+gHAMwhezz kexXchCr0EDWhES7Hku6buUYvrT7ZxEmb8ynQA== )`
	`srs.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20211020035219 20211016033014 9547 srs.gov. btbQLgBDO5RgetuM83jtiEcfxLc4tQobmfqAmz4PHUczlFlfi3LQV1xSpWMfizcaiIRYGtPQYiMM MfopZRPEEOkA6DibK8dnvYKj6SR15yqL4fzjYGIH7174MZzo8x+dDFqaNdKWt+61ynxXnWaMlha+ NGd5ZsR4klBfRdG7YdWZMnkKLqnCfxvqmy0/EHcib928luC2kRVByeBiRYE4H+0GHh1bcnGZjesB 65ts/8UJJRivMGVGjfREAyFXyYofNHEK3sielPtj7BgTlRqLORqTrNkj6OzCfhN6yNC5PRXrp1qm Gat9bJsgppTYvzReraxSd32IL6Qz0xZb1WF4yQ== )`
	`srs.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20211020035219 20211016033014 12213 srs.gov. HTQENuCjJmrlXXkFrbPkYKCmR9DP5NjJ6lVQT/sHu18LqaJQWh+RBHUWV9UhIl+1Uy+xwIiUV7LY 1iwxi+cceWNcpC7yOjm1nhB1V0znvvgaV3Ae8uVo1RN44YlLr9yIdt6ZtZTrUx2pk1PMkpYvcp+6 OclPROdm3Kcn/tJcmDzcImW7gwysmhUmQIoz7ODMV/5iKFANrj7Byk2L7zF5hzGkOrWYRhaA87uD gEy5FtcEZl2y07kcpTiSfJl2rmF5/MiM7GzAhaBs55w0txrsx7k0nJ0f72WlSHMKukjTDPoN2jXg G5vp7e+wlny6xNfn9tjR3/9emC/Y+PjaWzFcqw== )`
	RRSIG=7755 and DNSKEY=7755/SEP verifies the DNSKEY RRset
	RRSIG=39636 and DNSKEY=39636/SEP verifies the DNSKEY RRset
	RRSIG=43880 and DNSKEY=43880 verifies the DNSKEY RRset
	RRSIG=62151 and DNSKEY=62151/SEP verifies the DNSKEY RRset
	RRSIG=9547 and DNSKEY=9547/SEP verifies the DNSKEY RRset
	RRSIG=12213 and DNSKEY=12213 verifies the DNSKEY RRset
	DNSKEY=43880 is now in the chain-of-trust
	DNSKEY=12213 is now in the chain-of-trust
	DNSKEY=56909 is now in the chain-of-trust
	DNSKEY=5523 is now in the chain-of-trust
	Query to ns1.srs.gov for srs.gov/A
	Received 1353 bytes from 192.33.240.10
	;; Response received from 192.33.240.10 (1353 octets) ;; HEADER SECTION ;; id = 54957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) srs.gov. 900 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN NSEC3 ( 1 0 10 f1b13acc 168rbs256jth970nfoh7eprc0aelen51 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 7 3 900 20211019201422 20211015193032 43880 srs.gov. R+k8Mcu8m2s2LNnTEns330k2oqNeoeD/JAmwRJX4giN/2dCmHdwdkeWHMKxphllL02nSyiqBfDtT 2OKCfk4UnSwceRLaFiBNAzv1eKAZSKNq0TDOEarrXcnuY2Y+18uLv8AiM7TVe9TWVq3G8O/W+XKj 7vzgRCIDghyfakIFv1DqH1VjEAcm3ueuT9c7AB+NTDBzEZS0fpv7mNvQ/R1zm4GnP8Bma4UsFPPY M/cT/6oRsDbTiPLev9cU1l5Q9jc7QxzhoQF4CcRQpG+QQPGcZxXe00YdwFLDBOs665i3TfDmCWR6 2He3oSdP0die76N7/wws4sPu6ZCvKVukgtTalg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 8 3 900 20211019201422 20211015193032 12213 srs.gov. DwEoudyjr2kbZJ5+/3mapcT7Bpzb5DrMabcuSE+WOheBUsLiP2Dp3JyKoWTFR8rTUlAIwVwkS5eE g0lcr5WBuZjnFoUvIii1BTR0lgbWaB1dOnBWGy99VT5lDYqw2rjPB4eTnPG02Ml6/gdUWJG2vbg1 agUEpIDpTfQ9MKIOrrH43viBNcGjGlr4F+mUCaAvovNYIIoK8jEPObtCtk6aPMddrVHj61TQAsRU A6jTsY6GucjqLX9LeLXmjw6mDeXP9ggcZtZ6i/TZJabiD0GOQxJXmuskHJQmRKi77v2We0ki8hWo zV33hzUtmbUMQBKgcLvDaZsPhrasQFoIM1EkTw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.srs.gov is authoritative for srs.gov
	Found RRSIG signed by srs.gov zone
	Query to adns1.es.net for srs.gov/SOA
	Received 679 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (679 octets) ;; HEADER SECTION ;; id = 19270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN SOA ;; ANSWER SECTION (3 records) srs.gov. 10800 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 10800 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 10800 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to adns2.es.net for srs.gov/SOA
	Received 2553 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (2553 octets) ;; HEADER SECTION ;; id = 60547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN SOA ;; ANSWER SECTION (3 records) srs.gov. 10800 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 10800 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 10800 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) ;; AUTHORITY SECTION (5 records) srs.gov. 10800 IN NS adns2.es.net. srs.gov. 10800 IN NS adns1.es.net. srs.gov. 10800 IN NS ns1.srs.gov. srs.gov. 10800 IN RRSIG ( NS 7 2 10800 20211019212351 20211015210321 43880 srs.gov. O4PcDgDUROVDW+Y12otw7DiGae8fmCrofZz8e+OAfeBzKx3kHHYkyWq0hHeMEUAXdbb0LQ4ozV4G NvYHFj3IKsPuR+o6d4Et2WNVZB6w28WaH0ZTbIvDhpGNJcm2wYl6Tn8DZ0AmhT1wGGd42SvymbL2 EWi5qc+c2ANJp7/UBPOsyPazBgNFcYt9vyzBQL2EQdGRPPK1GGGt7f9PWqsNaTd6qCNOG41HPrNI Q6U6A4eMteZJvWnxyh+23rsHLdjhnK+65KHQQM+E8YqUGPG1U6/JbkXaqd8y0I6jbfbeeFu+mjp/ p2iTPbikJf4osm0NfGHvY8oAY4B/h4heQqlQpA== ) srs.gov. 10800 IN RRSIG ( NS 8 2 10800 20211019212351 20211015210321 12213 srs.gov. b6kh1qS/f12Wm1q6JxGWusgfhtKNqqw//IlKAWIuKu+A88RPJ6+nBpyJvglAUnBATrqhV0PuEtdi D4qfj3ncwl7Nb1nXc/TDMSok8y4awdR+oAJNI5wsZSy4MtqfauJpTUI6A1K3P3Y/27oKNXXGHFwA DGIK8ZWhBsJPJcC9PnOBzHvkqUBRpwVriGeRdikr2n4ckEMI2jrBK5kdSiU3/QW1dac9n6PNBLm8 ABeGnB3IhWzrzK9GGPJQJo0REP7AgPUNk0dZJngcCeWOq4ce+Hft1w1O+kB9X4oIwxV6g9cY6WAv PgGbmuBDDtshIK53PIxUXbweB+C5AJ9kWT62qA== ) ;; ADDITIONAL SECTION (7 records) ns1.srs.gov. 10800 IN A 192.33.240.10 ns1.srs.gov. 10800 IN AAAA 2620:b0:8000:2012::17 ns1.srs.gov. 10800 IN RRSIG ( A 7 3 10800 20211019235806 20211015232641 43880 srs.gov. Twyg3G/04BhIYrQhEX2SijSbMdmPcoDCFD7LN9A3aLfK0CDJK7AGX/gIRd4Yab9j9JKOm4OXO7Qz eRa48E4F9ks0L2nlpIudTXKlMt7K1r0zghHUELD6a3oL6RZ293XXrISPMMnmNEe4eMMtlXSjevBx LZxULv5/P6C7v89tK0G6lBrJa6juDL3gHi35qQYWYrZfK6ZPHz2XfsniuRFXoP9+M8SrZ8yhe45s BbKxe6a9/mbJ5BRlb3Yfk66JL4xXOLG35Eht24hpyynN3jKRpCdorKmUYa90EAfzsd8Zfg7PiY61 59IBoJvFF91zVHkrqWo0m16QKPLiWMEFlcKOWQ== ) ns1.srs.gov. 10800 IN RRSIG ( A 8 3 10800 20211019235806 20211015232641 12213 srs.gov. D7quXyIKl6bikTEsowTSx2sWM4YC01vtepSiA7q/OGklSFQF0eNu4Bv40qeGLuWaNIiaeiVLkivX NYWkcyxmjoebqiCbun1ldpVQbpQboMbfejZHbMRkpo8QfKjyJsafEbz5r9WHsnFH4+vLvO1zplIp ra9/lGPbpTPRiA7e6Vx+VH8REy/VE/MpjGrPgbOgGFrlZFKt51Is9pBF5nf8mRohjs8UzOHt+nhn UEy+3jBWkbVDSYznvaufDjRSEsLztvcbcGOwABx2BfIRocwJ49JhDV1bvs+k1/Ij5qxENx73/7hB 0tDhuPRDav6daeQE7H9htZqukpspO+G5giVgRA== ) ns1.srs.gov. 10800 IN RRSIG ( AAAA 7 3 10800 20211019235806 20211015232641 43880 srs.gov. ZO6pzxIvL5E34sV2qz9CvIVuJ3xdtRD+fjuAyTqzLbejc+PhBlvU3aZZHgQKhnPYa01b5incKLY3 l0aOznjMz5w4KxnPw9xA2wuKKBH3OOEyywU0djW6qcH+VhmtC2sWnh7bDLxqiZNK90fnk5OkI5TP NG46SY+qfVXj6vA7b+T/NSm41UQ9IhXjkOOB1s3cvXXpkPp056mWntfh/Ng6QNZmxDLDNAzgsM1p k/uAn84uShmTDeFa485sVGiblJGnLGZTim6qauZnl9VhR/a1/QcamyaX50Z7YAHymhgn5XS/jwGI vzqNGBG0sm9JHoE0+uuPA62swU/HCICtqNFPww== ) ns1.srs.gov. 10800 IN RRSIG ( AAAA 8 3 10800 20211019235806 20211015232641 12213 srs.gov. F4Albdr/nhmvUkIDdrkZ6RLIYZlnWQ/Br3gZtARAz3GDM9zL+7jE/vMXEUL8s3Vcy2TbM48okkNe Qa1+pENernI/l+brAJur5TgONaPgqNwVtnDfvLLEubh1uypZ2wQtaNwubAbn4w56JYjCAQNbt1TJ pL9shu5RdfyT0Occ+KUNcNHwG/4oW2C6KyYKKIyMubmSTqc8wo/eikM4oPwu7sQcGR8YAOQDW1rZ aDlhHutzzv9ww4Rw37+CZvVU6Ibn+tDa7lg1EE7cuTLDmuePQ/+Z83mweke8aJ2lU/iICj+8PvE6 vUr4dSHlTuznT1Er1qXYjxj6AiOa8aKDLfjR6w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.srs.gov for srs.gov/A
	Received 1353 bytes from 192.33.240.10
	;; Response received from 192.33.240.10 (1353 octets) ;; HEADER SECTION ;; id = 52845 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) srs.gov. 900 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN NSEC3 ( 1 0 10 f1b13acc 168rbs256jth970nfoh7eprc0aelen51 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 7 3 900 20211019201422 20211015193032 43880 srs.gov. R+k8Mcu8m2s2LNnTEns330k2oqNeoeD/JAmwRJX4giN/2dCmHdwdkeWHMKxphllL02nSyiqBfDtT 2OKCfk4UnSwceRLaFiBNAzv1eKAZSKNq0TDOEarrXcnuY2Y+18uLv8AiM7TVe9TWVq3G8O/W+XKj 7vzgRCIDghyfakIFv1DqH1VjEAcm3ueuT9c7AB+NTDBzEZS0fpv7mNvQ/R1zm4GnP8Bma4UsFPPY M/cT/6oRsDbTiPLev9cU1l5Q9jc7QxzhoQF4CcRQpG+QQPGcZxXe00YdwFLDBOs665i3TfDmCWR6 2He3oSdP0die76N7/wws4sPu6ZCvKVukgtTalg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 8 3 900 20211019201422 20211015193032 12213 srs.gov. DwEoudyjr2kbZJ5+/3mapcT7Bpzb5DrMabcuSE+WOheBUsLiP2Dp3JyKoWTFR8rTUlAIwVwkS5eE g0lcr5WBuZjnFoUvIii1BTR0lgbWaB1dOnBWGy99VT5lDYqw2rjPB4eTnPG02Ml6/gdUWJG2vbg1 agUEpIDpTfQ9MKIOrrH43viBNcGjGlr4F+mUCaAvovNYIIoK8jEPObtCtk6aPMddrVHj61TQAsRU A6jTsY6GucjqLX9LeLXmjw6mDeXP9ggcZtZ6i/TZJabiD0GOQxJXmuskHJQmRKi77v2We0ki8hWo zV33hzUtmbUMQBKgcLvDaZsPhrasQFoIM1EkTw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== )`
	`srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== )`
	RRSIG=43880 and DNSKEY=43880 verifies the SOA RRset
	RRSIG=12213 and DNSKEY=12213 verifies the SOA RRset

srs.gov

	Query to adns2.es.net for srs.gov/A
	Received 1353 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (1353 octets) ;; HEADER SECTION ;; id = 62400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) srs.gov. 900 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN NSEC3 ( 1 0 10 f1b13acc 168rbs256jth970nfoh7eprc0aelen51 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 7 3 900 20211019201422 20211015193032 43880 srs.gov. R+k8Mcu8m2s2LNnTEns330k2oqNeoeD/JAmwRJX4giN/2dCmHdwdkeWHMKxphllL02nSyiqBfDtT 2OKCfk4UnSwceRLaFiBNAzv1eKAZSKNq0TDOEarrXcnuY2Y+18uLv8AiM7TVe9TWVq3G8O/W+XKj 7vzgRCIDghyfakIFv1DqH1VjEAcm3ueuT9c7AB+NTDBzEZS0fpv7mNvQ/R1zm4GnP8Bma4UsFPPY M/cT/6oRsDbTiPLev9cU1l5Q9jc7QxzhoQF4CcRQpG+QQPGcZxXe00YdwFLDBOs665i3TfDmCWR6 2He3oSdP0die76N7/wws4sPu6ZCvKVukgtTalg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 8 3 900 20211019201422 20211015193032 12213 srs.gov. DwEoudyjr2kbZJ5+/3mapcT7Bpzb5DrMabcuSE+WOheBUsLiP2Dp3JyKoWTFR8rTUlAIwVwkS5eE g0lcr5WBuZjnFoUvIii1BTR0lgbWaB1dOnBWGy99VT5lDYqw2rjPB4eTnPG02Ml6/gdUWJG2vbg1 agUEpIDpTfQ9MKIOrrH43viBNcGjGlr4F+mUCaAvovNYIIoK8jEPObtCtk6aPMddrVHj61TQAsRU A6jTsY6GucjqLX9LeLXmjw6mDeXP9ggcZtZ6i/TZJabiD0GOQxJXmuskHJQmRKi77v2We0ki8hWo zV33hzUtmbUMQBKgcLvDaZsPhrasQFoIM1EkTw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns2.es.net is authoritative for srs.gov
	Found RRSIG signed by srs.gov zone
	Query to adns2.es.net for srs.gov/A
	Received 1353 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (1353 octets) ;; HEADER SECTION ;; id = 21585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) srs.gov. 900 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN NSEC3 ( 1 0 10 f1b13acc 168rbs256jth970nfoh7eprc0aelen51 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 7 3 900 20211019201422 20211015193032 43880 srs.gov. R+k8Mcu8m2s2LNnTEns330k2oqNeoeD/JAmwRJX4giN/2dCmHdwdkeWHMKxphllL02nSyiqBfDtT 2OKCfk4UnSwceRLaFiBNAzv1eKAZSKNq0TDOEarrXcnuY2Y+18uLv8AiM7TVe9TWVq3G8O/W+XKj 7vzgRCIDghyfakIFv1DqH1VjEAcm3ueuT9c7AB+NTDBzEZS0fpv7mNvQ/R1zm4GnP8Bma4UsFPPY M/cT/6oRsDbTiPLev9cU1l5Q9jc7QxzhoQF4CcRQpG+QQPGcZxXe00YdwFLDBOs665i3TfDmCWR6 2He3oSdP0die76N7/wws4sPu6ZCvKVukgtTalg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 8 3 900 20211019201422 20211015193032 12213 srs.gov. DwEoudyjr2kbZJ5+/3mapcT7Bpzb5DrMabcuSE+WOheBUsLiP2Dp3JyKoWTFR8rTUlAIwVwkS5eE g0lcr5WBuZjnFoUvIii1BTR0lgbWaB1dOnBWGy99VT5lDYqw2rjPB4eTnPG02Ml6/gdUWJG2vbg1 agUEpIDpTfQ9MKIOrrH43viBNcGjGlr4F+mUCaAvovNYIIoK8jEPObtCtk6aPMddrVHj61TQAsRU A6jTsY6GucjqLX9LeLXmjw6mDeXP9ggcZtZ6i/TZJabiD0GOQxJXmuskHJQmRKi77v2We0ki8hWo zV33hzUtmbUMQBKgcLvDaZsPhrasQFoIM1EkTw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== )`
	`srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== )`
	RRSIG=43880 and DNSKEY=43880 verifies the SOA RRset
	RRSIG=12213 and DNSKEY=12213 verifies the SOA RRset

srs.gov

	Query to adns1.es.net for srs.gov/A
	Received 1353 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (1353 octets) ;; HEADER SECTION ;; id = 22794 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) srs.gov. 900 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN NSEC3 ( 1 0 10 f1b13acc 168rbs256jth970nfoh7eprc0aelen51 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 7 3 900 20211019201422 20211015193032 43880 srs.gov. R+k8Mcu8m2s2LNnTEns330k2oqNeoeD/JAmwRJX4giN/2dCmHdwdkeWHMKxphllL02nSyiqBfDtT 2OKCfk4UnSwceRLaFiBNAzv1eKAZSKNq0TDOEarrXcnuY2Y+18uLv8AiM7TVe9TWVq3G8O/W+XKj 7vzgRCIDghyfakIFv1DqH1VjEAcm3ueuT9c7AB+NTDBzEZS0fpv7mNvQ/R1zm4GnP8Bma4UsFPPY M/cT/6oRsDbTiPLev9cU1l5Q9jc7QxzhoQF4CcRQpG+QQPGcZxXe00YdwFLDBOs665i3TfDmCWR6 2He3oSdP0die76N7/wws4sPu6ZCvKVukgtTalg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 8 3 900 20211019201422 20211015193032 12213 srs.gov. DwEoudyjr2kbZJ5+/3mapcT7Bpzb5DrMabcuSE+WOheBUsLiP2Dp3JyKoWTFR8rTUlAIwVwkS5eE g0lcr5WBuZjnFoUvIii1BTR0lgbWaB1dOnBWGy99VT5lDYqw2rjPB4eTnPG02Ml6/gdUWJG2vbg1 agUEpIDpTfQ9MKIOrrH43viBNcGjGlr4F+mUCaAvovNYIIoK8jEPObtCtk6aPMddrVHj61TQAsRU A6jTsY6GucjqLX9LeLXmjw6mDeXP9ggcZtZ6i/TZJabiD0GOQxJXmuskHJQmRKi77v2We0ki8hWo zV33hzUtmbUMQBKgcLvDaZsPhrasQFoIM1EkTw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns1.es.net is authoritative for srs.gov
	Found RRSIG signed by srs.gov zone
	Query to adns1.es.net for srs.gov/A
	Received 1353 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (1353 octets) ;; HEADER SECTION ;; id = 62436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; srs.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) srs.gov. 900 IN SOA ( ns1.srs.gov. network-team.srs.gov. 2012046350 ;serial 10800 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== ) srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN NSEC3 ( 1 0 10 f1b13acc 168rbs256jth970nfoh7eprc0aelen51 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 7 3 900 20211019201422 20211015193032 43880 srs.gov. R+k8Mcu8m2s2LNnTEns330k2oqNeoeD/JAmwRJX4giN/2dCmHdwdkeWHMKxphllL02nSyiqBfDtT 2OKCfk4UnSwceRLaFiBNAzv1eKAZSKNq0TDOEarrXcnuY2Y+18uLv8AiM7TVe9TWVq3G8O/W+XKj 7vzgRCIDghyfakIFv1DqH1VjEAcm3ueuT9c7AB+NTDBzEZS0fpv7mNvQ/R1zm4GnP8Bma4UsFPPY M/cT/6oRsDbTiPLev9cU1l5Q9jc7QxzhoQF4CcRQpG+QQPGcZxXe00YdwFLDBOs665i3TfDmCWR6 2He3oSdP0die76N7/wws4sPu6ZCvKVukgtTalg== ) 0PJCQ5HI0CRTBBJVCKA6RONGBNL0D2V8.srs.gov. 900 IN RRSIG ( NSEC3 8 3 900 20211019201422 20211015193032 12213 srs.gov. DwEoudyjr2kbZJ5+/3mapcT7Bpzb5DrMabcuSE+WOheBUsLiP2Dp3JyKoWTFR8rTUlAIwVwkS5eE g0lcr5WBuZjnFoUvIii1BTR0lgbWaB1dOnBWGy99VT5lDYqw2rjPB4eTnPG02Ml6/gdUWJG2vbg1 agUEpIDpTfQ9MKIOrrH43viBNcGjGlr4F+mUCaAvovNYIIoK8jEPObtCtk6aPMddrVHj61TQAsRU A6jTsY6GucjqLX9LeLXmjw6mDeXP9ggcZtZ6i/TZJabiD0GOQxJXmuskHJQmRKi77v2We0ki8hWo zV33hzUtmbUMQBKgcLvDaZsPhrasQFoIM1EkTw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`srs.gov. 900 IN RRSIG ( SOA 7 2 10800 20211020043014 20211016033014 43880 srs.gov. HdnwpT9RJIn+B56FKWKqpNaEWI6tJdHFigzxBydRKkqxn9IVU4l2YhtSIfHO4bloqBEI+QJ5g7Sp 9t6hVlAY3/nxD/74BcSFwnBY8LR0tlSmUdiGwBvjJdWCE1iTNRi25TKJIU9g+PAhf5VYboAW6GFM d1SyJ/8EORn5hhc1zgcJjH6Z7TG4Hav9ApD/xwP8CqWfip8yQ2ppwyP+KcF4KeUvefMLxJAGkXOC ylvBuBj0lhc+TVSWlzek+3/82irdV4l4gzVmXalrLrDswqJvpeoH/oa1sUoYvjyC/8Yy4CSbTugd Il/eicvOlj5OMHomKzQdQJ9YP122iuvISa+ARg== )`
	`srs.gov. 900 IN RRSIG ( SOA 8 2 10800 20211020043014 20211016033014 12213 srs.gov. CICIlqWgLq25u+lD9wj61c4eN040aLPVbP/Bp2ki67U9vUKx5wMKaOvB4aOxXGZtOewaKkFH2toI eKF/GhbJ4DC0qL1zTphFz0WZTMVvzB7B+RC7gPGvhi2oqBIXJPz9u8kNIzatv2KkUBqufU5cMqPl 5NfS72cZyEkRI1qK2+LESafJnonWyphOngrZj96b/cDMp63ukg7D0up4ClNKbwy2Biu3HsEfJWLk KHqPGScvlsPZBW7we11zoAdI7IBCFINnfTic+/9R/r8w38O2V89MKDxHDU2JI9G1p4ccX7u3bpN5 1xEihrrZKowMkfTfh5hbaZ7PJJPYDvYgww/xkg== )`
	RRSIG=43880 and DNSKEY=43880 verifies the SOA RRset
	RRSIG=12213 and DNSKEY=12213 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test srs.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: