DNSSEC Debugger - supportfan.gov

Domain Name:

Time: 2025-10-16 11:32:57 UTC

Analyzing DNSSEC problems for supportfan.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 48507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to i.root-servers.net for supportfan.gov/A
	Received 624 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 624 octets ;; HEADER SECTION ;; id = 40751 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251029050000 20251016040000 61809 . wrXdMYtqe8N5NxVRj1wv7fhdWzTNqt0g07CWHrF3xPfqWZxU3EkItAGGqoqVkWuFE6BXt+4fpyV5 QcIuZ0aahnGj21lEiAVCWBN7Q4AT0OAHK52DEZ+KjH6WyCKcevKQubIB/Oi2KnUPQsw9KohIcia1 /+W0PSSDcmFKERQnhiiHMwcvOxAfNB/9/SRxyKgKeTRm6XS1XVc6BYV6RoMAfYlNBwqcK4a9Z710 h2j7W+eiDQ6ieBe8ogDSBtBXSCchSrA8hNmaxRUvXk+CBCPvariwvNL7NI9LB8vl0vxGzBKprCQS W3elaaCz4oUwMQP5vnNUFoDvMScuByNAKLYVJQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 6497 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251029050000 20251016040000 61809 . wrXdMYtqe8N5NxVRj1wv7fhdWzTNqt0g07CWHrF3xPfqWZxU3EkItAGGqoqVkWuFE6BXt+4fpyV5 QcIuZ0aahnGj21lEiAVCWBN7Q4AT0OAHK52DEZ+KjH6WyCKcevKQubIB/Oi2KnUPQsw9KohIcia1 /+W0PSSDcmFKERQnhiiHMwcvOxAfNB/9/SRxyKgKeTRm6XS1XVc6BYV6RoMAfYlNBwqcK4a9Z710 h2j7W+eiDQ6ieBe8ogDSBtBXSCchSrA8hNmaxRUvXk+CBCPvariwvNL7NI9LB8vl0vxGzBKprCQS W3elaaCz4oUwMQP5vnNUFoDvMScuByNAKLYVJQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 28998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251029050000 20251016040000 61809 . wrXdMYtqe8N5NxVRj1wv7fhdWzTNqt0g07CWHrF3xPfqWZxU3EkItAGGqoqVkWuFE6BXt+4fpyV5 QcIuZ0aahnGj21lEiAVCWBN7Q4AT0OAHK52DEZ+KjH6WyCKcevKQubIB/Oi2KnUPQsw9KohIcia1 /+W0PSSDcmFKERQnhiiHMwcvOxAfNB/9/SRxyKgKeTRm6XS1XVc6BYV6RoMAfYlNBwqcK4a9Z710 h2j7W+eiDQ6ieBe8ogDSBtBXSCchSrA8hNmaxRUvXk+CBCPvariwvNL7NI9LB8vl0vxGzBKprCQS W3elaaCz4oUwMQP5vnNUFoDvMScuByNAKLYVJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251029050000 20251016040000 61809 . wrXdMYtqe8N5NxVRj1wv7fhdWzTNqt0g07CWHrF3xPfqWZxU3EkItAGGqoqVkWuFE6BXt+4fpyV5 QcIuZ0aahnGj21lEiAVCWBN7Q4AT0OAHK52DEZ+KjH6WyCKcevKQubIB/Oi2KnUPQsw9KohIcia1 /+W0PSSDcmFKERQnhiiHMwcvOxAfNB/9/SRxyKgKeTRm6XS1XVc6BYV6RoMAfYlNBwqcK4a9Z710 h2j7W+eiDQ6ieBe8ogDSBtBXSCchSrA8hNmaxRUvXk+CBCPvariwvNL7NI9LB8vl0vxGzBKprCQS W3elaaCz4oUwMQP5vnNUFoDvMScuByNAKLYVJQ== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 14768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for supportfan.gov/A
	Received 368 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 368 octets ;; HEADER SECTION ;; id = 15519 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) supportfan.gov. 10800 IN NS a1-63.akam.net. supportfan.gov. 10800 IN NS a14-64.akam.net. supportfan.gov. 10800 IN NS a26-65.akam.net. supportfan.gov. 10800 IN NS a3-66.akam.net. supportfan.gov. 10800 IN NS a8-67.akam.net. supportfan.gov. 10800 IN NS a9-64.akam.net. supportfan.gov. 3600 IN DS ( 14950 8 2 42c682eecb189e5881de85e19cde7de089afd5d48aea3939d93aee7f2821cb33 ) supportfan.gov. 3600 IN DS ( 48241 8 2 9b120ca2fba2a390f2b17f24600b14784c56743fc3c8112b11e62984c7a4f9c3 ) supportfan.gov. 3600 IN RRSIG ( DS 13 2 3600 20251017123257 20251015103257 35496 gov. X1eXv6t4Oxk+zeFl4flQU1zJOzEIXgc+6xB61psX0bD1Shr5/0R3cTm/zyIoV0/IYv/tNzzkyM7+ ps7IMTdR3w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for supportfan.gov/DNSKEY
	Received 368 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 368 octets ;; HEADER SECTION ;; id = 16053 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) supportfan.gov. 10800 IN NS a1-63.akam.net. supportfan.gov. 10800 IN NS a14-64.akam.net. supportfan.gov. 10800 IN NS a26-65.akam.net. supportfan.gov. 10800 IN NS a3-66.akam.net. supportfan.gov. 10800 IN NS a8-67.akam.net. supportfan.gov. 10800 IN NS a9-64.akam.net. supportfan.gov. 3600 IN DS ( 14950 8 2 42c682eecb189e5881de85e19cde7de089afd5d48aea3939d93aee7f2821cb33 ) supportfan.gov. 3600 IN DS ( 48241 8 2 9b120ca2fba2a390f2b17f24600b14784c56743fc3c8112b11e62984c7a4f9c3 ) supportfan.gov. 3600 IN RRSIG ( DS 13 2 3600 20251017123257 20251015103257 35496 gov. l0qGL1bhXgtGZfXYCn802Mm6cRa7dY2gV6KtN9aO+Q3RwOxbl8aVyDky2EWiuL4h+olYVQWLkSBA djDmUGR89g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone supportfan.gov

supportfan.gov

	Checking DS between gov and supportfan.gov
	Query to d.ns.gov for supportfan.gov/DS
	Received 238 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 238 octets ;; HEADER SECTION ;; id = 62894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN DS ;; ANSWER SECTION (3 records) supportfan.gov. 3600 IN DS ( 14950 8 2 42c682eecb189e5881de85e19cde7de089afd5d48aea3939d93aee7f2821cb33 ) supportfan.gov. 3600 IN DS ( 48241 8 2 9b120ca2fba2a390f2b17f24600b14784c56743fc3c8112b11e62984c7a4f9c3 ) supportfan.gov. 3600 IN RRSIG ( DS 13 2 3600 20251017123257 20251015103257 35496 gov. 9pBhmryRA6y8Iad0y/cPXfPjY+jLasr+yBEuTlk9KJxzFu+JzK7beZS3hWS2HxszO6qDnkkPgf1y +O1IVOOgIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for supportfan.gov in the gov zone
	DS=14950/SHA-256 has algorithm RSASHA256
	DS=48241/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`supportfan.gov. 3600 IN RRSIG ( DS 13 2 3600 20251017123257 20251015103257 35496 gov. 9pBhmryRA6y8Iad0y/cPXfPjY+jLasr+yBEuTlk9KJxzFu+JzK7beZS3hWS2HxszO6qDnkkPgf1y +O1IVOOgIw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14950/SHA-256 is now in the chain-of-trust
	DS=48241/SHA-256 is now in the chain-of-trust
	`supportfan.gov. 3600 IN DS ( 14950 8 2 42c682eecb189e5881de85e19cde7de089afd5d48aea3939d93aee7f2821cb33 )`
	`supportfan.gov. 3600 IN DS ( 48241 8 2 9b120ca2fba2a390f2b17f24600b14784c56743fc3c8112b11e62984c7a4f9c3 )`
	Query to a9-64.akam.net for supportfan.gov/DNSKEY
	Received 1475 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 1475 octets ;; HEADER SECTION ;; id = 64300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN DNSKEY ;; ANSWER SECTION (5 records) supportfan.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAdTfGMP1SPuvMXrG5aVu2nHBeRHQJYPnmdWcHPjjYNj3XQ6js1JhyXHvgleSU5PE7lkIuYAQ ABdCk+J0eHubImmHWECQNNFq+GNo1vmsCHT00eAsjGBp+SWGGaMGlpvVSe2/Bzp4D418fp9Yayln SLEBE4GGQWvpnIHEtkVW/w2CtMQtiBPFrt27T9NvjIlsbWjewRdKhXYAHXd4GNLNgIhH5Np8yb3J v2LSD0mjZVBUAjUNSL+JG781JT1q2pcJCPAKNgmnNvnruHoV1f7BkVO7WjhdD349e8EB8WF2o5iS fnKYTCMWAJ4wNIovGeaDYEUFuQdE2lhNfgUx33+OgV8= ) ; keytag 59961 supportfan.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAb+V1HBonuX14vLFvnUdpflLKI/M3BwQmoHJscRxninnS1KGywjXv+B03Yhz0V1DetinaUwl AAGD2tSFRDSXznifEOx7JlGtpNQv4jCMs2J4bne/x2v3hpEnPheu9gfaJb582q5eUwkqupHsgFs8 gO452T4GMCO/eIVdqxKIt9ahEJct48usmQA+bBwO0ZsUOCggEj4NPmP9d0n+bAz6rs7KmdCL/bFf WTvwtrcTT8acCVNZQc3zOCfCjPHW+GRbGnfa1Oo8Pq9HAlCixuVNKPQNurd7dHqyl/KlRiFeOKOM ztm6vlSGc/eVfuuc+GHCe1c9mDyfcRYDXNbm3mLgEU8= ) ; keytag 24618 supportfan.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAayGySLaXyZSf1WIqTTWmoQbeonFnVOyF60l4WuCfiVh94zs1dTP8vemnYB5nG0qPFLtCbxA a50TO1q4MybOswYYHOtg2uLW4VRejFwvtaYe8RobKRJIZk7n2oa+NWRfxYB/FReNVOt0SJJXM2mq sb9Q+1CAKKHbr9QX91cEbhFMHivGnOT2hFNsQVC2mlHc7zyXAgawj5Vkn5pTN580xSgftfwQZRzh +R7HjU56s5vvS3SoIheHqjLxThHxc0SZg1ZeFXUJewpfNhOR/d2OcrwUDpYS+UGKTn3g1c8mfrdh U2JBJK/Qt5gVMjBsphxxHebJ7i22j1bMZ7LiI7Aw4ME= ) ; keytag 48241 supportfan.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20260822104646 20250822101508 48241 supportfan.gov. J+bVkqacIFJVcOST8eH9/XhmJkowXxgyPikSSix6O+udWFJtyB4XdC5Znq63ksAB9FQlcuPxuWLy 5FxEMLFD1V8TEprr4ySUiX9SbP2dyd05ja2JVPaTQwFTT5MvcNJ0UfUKw3nfXWmiDrKg/6UJz5g6 Xphn4tssDTxeq/dYncBw6ICFN3rTGs2yTTD+5iQz9Tm4wPzKBcEKqXV3tyievsVbVea47rog9l5E 60EQrSNMZKd1+AKANfdgzLgWVkMz6aVMf3b6L4yKaAV7+FhrKgI/rxq5SS48ujz65SSzCFcY4x59 aTvQER+2EHIHt+qMSSib39kzo3/oiZp8lb49gA== ) supportfan.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20260822104646 20250822101508 59961 supportfan.gov. DbtZPjy8dhoE8FvGSHVLgOVZd7rjTEUjKl9Om5SPCSp9QmSX3opYVKAtjauhTFKaioB7Qp8lWDTv RqspL+XA3msDvlCefz4RDO23jAeVJjy7u8lVLVTV+pY9WTS42Y20fGyBH0LyPJLWjEXhvLKc0Z9x 3LE38tpbQWYkw4iLfHHWvZmygw7OzzeTbApSf/rxYdRZ2P5YY33IQyc+rm33as0qPLGwnly6PxK5 WxBmPQGeS0uOPgEXGxUlKncSdplyBAvU3XRXCjeLtoDG642hbnPyRrV2/2LSba7FeQVQbJ8Sz8kp 4jjWJVw67Om11KGBACMCJtfHYF4Slxjc8oWXsw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for supportfan.gov
	`supportfan.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAdTfGMP1SPuvMXrG5aVu2nHBeRHQJYPnmdWcHPjjYNj3XQ6js1JhyXHvgleSU5PE7lkIuYAQ ABdCk+J0eHubImmHWECQNNFq+GNo1vmsCHT00eAsjGBp+SWGGaMGlpvVSe2/Bzp4D418fp9Yayln SLEBE4GGQWvpnIHEtkVW/w2CtMQtiBPFrt27T9NvjIlsbWjewRdKhXYAHXd4GNLNgIhH5Np8yb3J v2LSD0mjZVBUAjUNSL+JG781JT1q2pcJCPAKNgmnNvnruHoV1f7BkVO7WjhdD349e8EB8WF2o5iS fnKYTCMWAJ4wNIovGeaDYEUFuQdE2lhNfgUx33+OgV8= ) ; keytag 59961`
	`supportfan.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAb+V1HBonuX14vLFvnUdpflLKI/M3BwQmoHJscRxninnS1KGywjXv+B03Yhz0V1DetinaUwl AAGD2tSFRDSXznifEOx7JlGtpNQv4jCMs2J4bne/x2v3hpEnPheu9gfaJb582q5eUwkqupHsgFs8 gO452T4GMCO/eIVdqxKIt9ahEJct48usmQA+bBwO0ZsUOCggEj4NPmP9d0n+bAz6rs7KmdCL/bFf WTvwtrcTT8acCVNZQc3zOCfCjPHW+GRbGnfa1Oo8Pq9HAlCixuVNKPQNurd7dHqyl/KlRiFeOKOM ztm6vlSGc/eVfuuc+GHCe1c9mDyfcRYDXNbm3mLgEU8= ) ; keytag 24618`
	`supportfan.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAayGySLaXyZSf1WIqTTWmoQbeonFnVOyF60l4WuCfiVh94zs1dTP8vemnYB5nG0qPFLtCbxA a50TO1q4MybOswYYHOtg2uLW4VRejFwvtaYe8RobKRJIZk7n2oa+NWRfxYB/FReNVOt0SJJXM2mq sb9Q+1CAKKHbr9QX91cEbhFMHivGnOT2hFNsQVC2mlHc7zyXAgawj5Vkn5pTN580xSgftfwQZRzh +R7HjU56s5vvS3SoIheHqjLxThHxc0SZg1ZeFXUJewpfNhOR/d2OcrwUDpYS+UGKTn3g1c8mfrdh U2JBJK/Qt5gVMjBsphxxHebJ7i22j1bMZ7LiI7Aw4ME= ) ; keytag 48241`
	DNSKEY=48241/SEP is now in the chain-of-trust
	DS=48241/SHA-256 verifies DNSKEY=48241/SEP
	DS=14950/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`supportfan.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20260822104646 20250822101508 48241 supportfan.gov. J+bVkqacIFJVcOST8eH9/XhmJkowXxgyPikSSix6O+udWFJtyB4XdC5Znq63ksAB9FQlcuPxuWLy 5FxEMLFD1V8TEprr4ySUiX9SbP2dyd05ja2JVPaTQwFTT5MvcNJ0UfUKw3nfXWmiDrKg/6UJz5g6 Xphn4tssDTxeq/dYncBw6ICFN3rTGs2yTTD+5iQz9Tm4wPzKBcEKqXV3tyievsVbVea47rog9l5E 60EQrSNMZKd1+AKANfdgzLgWVkMz6aVMf3b6L4yKaAV7+FhrKgI/rxq5SS48ujz65SSzCFcY4x59 aTvQER+2EHIHt+qMSSib39kzo3/oiZp8lb49gA== )`
	`supportfan.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20260822104646 20250822101508 59961 supportfan.gov. DbtZPjy8dhoE8FvGSHVLgOVZd7rjTEUjKl9Om5SPCSp9QmSX3opYVKAtjauhTFKaioB7Qp8lWDTv RqspL+XA3msDvlCefz4RDO23jAeVJjy7u8lVLVTV+pY9WTS42Y20fGyBH0LyPJLWjEXhvLKc0Z9x 3LE38tpbQWYkw4iLfHHWvZmygw7OzzeTbApSf/rxYdRZ2P5YY33IQyc+rm33as0qPLGwnly6PxK5 WxBmPQGeS0uOPgEXGxUlKncSdplyBAvU3XRXCjeLtoDG642hbnPyRrV2/2LSba7FeQVQbJ8Sz8kp 4jjWJVw67Om11KGBACMCJtfHYF4Slxjc8oWXsw== )`
	RRSIG=48241 and DNSKEY=48241/SEP verifies the DNSKEY RRset
	RRSIG=59961 and DNSKEY=59961 verifies the DNSKEY RRset
	DNSKEY=59961 is now in the chain-of-trust
	DNSKEY=24618 is now in the chain-of-trust
	Query to a26-65.akam.net for supportfan.gov/A
	Received 811 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 811 octets ;; HEADER SECTION ;; id = 65291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-65.akam.net is authoritative for supportfan.gov
	Found RRSIG signed by supportfan.gov zone
	Query to a8-67.akam.net for supportfan.gov/SOA
	Received 858 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 858 octets ;; HEADER SECTION ;; id = 15460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN SOA ;; ANSWER SECTION (2 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; AUTHORITY SECTION (7 records) supportfan.gov. 900 IN NS a8-67.akam.net. supportfan.gov. 900 IN NS a14-64.akam.net. supportfan.gov. 900 IN NS a26-65.akam.net. supportfan.gov. 900 IN NS a3-66.akam.net. supportfan.gov. 900 IN NS a9-64.akam.net. supportfan.gov. 900 IN NS a1-63.akam.net. supportfan.gov. 900 IN RRSIG ( NS 8 2 900 20260823215508 20250823205649 59961 supportfan.gov. ZCcn2qNQb8xpwKAnU+O+NKVg8oaEy2WSa+D2ywCjb18l+l0nCU5qIaALyIGxvvaZ7uZqMkS9T+Ou TmV2EnnOO1vwRb0+sz9HqHkAFsC3o0DNoyRVrtIBYq0o+2a/UMmci5KUZzqqBYJ9sN2avWo8sKr4 bAeA0DNkhtsBe/9Jl7IbZSPYjOPkDF0W1rwI9zEEiKhWN9uWmjbMrmT6SF7/LCKmQqbBPNlcDMaf BPi9fArsS6i9BVoY4nqvtcTF+t/uUdkaBcTOwEws8xFGxx1UTzs4jhtAwKM/q1pwCdjiUuNm6cfU 9+RnZX41hHo/wBNw/U4meYk63tbAQ0JSgWKG1Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-64.akam.net for supportfan.gov/SOA
	Received 858 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 858 octets ;; HEADER SECTION ;; id = 9720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN SOA ;; ANSWER SECTION (2 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; AUTHORITY SECTION (7 records) supportfan.gov. 900 IN NS a3-66.akam.net. supportfan.gov. 900 IN NS a1-63.akam.net. supportfan.gov. 900 IN NS a26-65.akam.net. supportfan.gov. 900 IN NS a9-64.akam.net. supportfan.gov. 900 IN NS a8-67.akam.net. supportfan.gov. 900 IN NS a14-64.akam.net. supportfan.gov. 900 IN RRSIG ( NS 8 2 900 20260823215508 20250823205649 59961 supportfan.gov. ZCcn2qNQb8xpwKAnU+O+NKVg8oaEy2WSa+D2ywCjb18l+l0nCU5qIaALyIGxvvaZ7uZqMkS9T+Ou TmV2EnnOO1vwRb0+sz9HqHkAFsC3o0DNoyRVrtIBYq0o+2a/UMmci5KUZzqqBYJ9sN2avWo8sKr4 bAeA0DNkhtsBe/9Jl7IbZSPYjOPkDF0W1rwI9zEEiKhWN9uWmjbMrmT6SF7/LCKmQqbBPNlcDMaf BPi9fArsS6i9BVoY4nqvtcTF+t/uUdkaBcTOwEws8xFGxx1UTzs4jhtAwKM/q1pwCdjiUuNm6cfU 9+RnZX41hHo/wBNw/U4meYk63tbAQ0JSgWKG1Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-63.akam.net for supportfan.gov/SOA
	Received 858 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 858 octets ;; HEADER SECTION ;; id = 687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN SOA ;; ANSWER SECTION (2 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; AUTHORITY SECTION (7 records) supportfan.gov. 900 IN NS a14-64.akam.net. supportfan.gov. 900 IN NS a8-67.akam.net. supportfan.gov. 900 IN NS a3-66.akam.net. supportfan.gov. 900 IN NS a26-65.akam.net. supportfan.gov. 900 IN NS a9-64.akam.net. supportfan.gov. 900 IN NS a1-63.akam.net. supportfan.gov. 900 IN RRSIG ( NS 8 2 900 20260823215508 20250823205649 59961 supportfan.gov. ZCcn2qNQb8xpwKAnU+O+NKVg8oaEy2WSa+D2ywCjb18l+l0nCU5qIaALyIGxvvaZ7uZqMkS9T+Ou TmV2EnnOO1vwRb0+sz9HqHkAFsC3o0DNoyRVrtIBYq0o+2a/UMmci5KUZzqqBYJ9sN2avWo8sKr4 bAeA0DNkhtsBe/9Jl7IbZSPYjOPkDF0W1rwI9zEEiKhWN9uWmjbMrmT6SF7/LCKmQqbBPNlcDMaf BPi9fArsS6i9BVoY4nqvtcTF+t/uUdkaBcTOwEws8xFGxx1UTzs4jhtAwKM/q1pwCdjiUuNm6cfU 9+RnZX41hHo/wBNw/U4meYk63tbAQ0JSgWKG1Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-66.akam.net for supportfan.gov/SOA
	Received 858 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 858 octets ;; HEADER SECTION ;; id = 63173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN SOA ;; ANSWER SECTION (2 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; AUTHORITY SECTION (7 records) supportfan.gov. 900 IN NS a3-66.akam.net. supportfan.gov. 900 IN NS a8-67.akam.net. supportfan.gov. 900 IN NS a26-65.akam.net. supportfan.gov. 900 IN NS a9-64.akam.net. supportfan.gov. 900 IN NS a1-63.akam.net. supportfan.gov. 900 IN NS a14-64.akam.net. supportfan.gov. 900 IN RRSIG ( NS 8 2 900 20260823215508 20250823205649 59961 supportfan.gov. ZCcn2qNQb8xpwKAnU+O+NKVg8oaEy2WSa+D2ywCjb18l+l0nCU5qIaALyIGxvvaZ7uZqMkS9T+Ou TmV2EnnOO1vwRb0+sz9HqHkAFsC3o0DNoyRVrtIBYq0o+2a/UMmci5KUZzqqBYJ9sN2avWo8sKr4 bAeA0DNkhtsBe/9Jl7IbZSPYjOPkDF0W1rwI9zEEiKhWN9uWmjbMrmT6SF7/LCKmQqbBPNlcDMaf BPi9fArsS6i9BVoY4nqvtcTF+t/uUdkaBcTOwEws8xFGxx1UTzs4jhtAwKM/q1pwCdjiUuNm6cfU 9+RnZX41hHo/wBNw/U4meYk63tbAQ0JSgWKG1Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a9-64.akam.net for supportfan.gov/SOA
	Received 858 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 858 octets ;; HEADER SECTION ;; id = 54316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN SOA ;; ANSWER SECTION (2 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; AUTHORITY SECTION (7 records) supportfan.gov. 900 IN NS a8-67.akam.net. supportfan.gov. 900 IN NS a3-66.akam.net. supportfan.gov. 900 IN NS a26-65.akam.net. supportfan.gov. 900 IN NS a9-64.akam.net. supportfan.gov. 900 IN NS a1-63.akam.net. supportfan.gov. 900 IN NS a14-64.akam.net. supportfan.gov. 900 IN RRSIG ( NS 8 2 900 20260823215508 20250823205649 59961 supportfan.gov. ZCcn2qNQb8xpwKAnU+O+NKVg8oaEy2WSa+D2ywCjb18l+l0nCU5qIaALyIGxvvaZ7uZqMkS9T+Ou TmV2EnnOO1vwRb0+sz9HqHkAFsC3o0DNoyRVrtIBYq0o+2a/UMmci5KUZzqqBYJ9sN2avWo8sKr4 bAeA0DNkhtsBe/9Jl7IbZSPYjOPkDF0W1rwI9zEEiKhWN9uWmjbMrmT6SF7/LCKmQqbBPNlcDMaf BPi9fArsS6i9BVoY4nqvtcTF+t/uUdkaBcTOwEws8xFGxx1UTzs4jhtAwKM/q1pwCdjiUuNm6cfU 9+RnZX41hHo/wBNw/U4meYk63tbAQ0JSgWKG1Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-65.akam.net for supportfan.gov/A
	Received 811 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 811 octets ;; HEADER SECTION ;; id = 15926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== )`
	RRSIG=59961 and DNSKEY=59961 verifies the SOA RRset

supportfan.gov

	Query to a14-64.akam.net for supportfan.gov/A
	Received 811 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 811 octets ;; HEADER SECTION ;; id = 32342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for supportfan.gov
	Found RRSIG signed by supportfan.gov zone
	Query to a14-64.akam.net for supportfan.gov/A
	Received 811 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 811 octets ;; HEADER SECTION ;; id = 47857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== )`
	RRSIG=59961 and DNSKEY=59961 verifies the SOA RRset

supportfan.gov

	Query to a1-63.akam.net for supportfan.gov/A
	Received 811 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 811 octets ;; HEADER SECTION ;; id = 47255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-63.akam.net is authoritative for supportfan.gov
	Found RRSIG signed by supportfan.gov zone
	Query to a1-63.akam.net for supportfan.gov/A
	Received 811 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 811 octets ;; HEADER SECTION ;; id = 12377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== )`
	RRSIG=59961 and DNSKEY=59961 verifies the SOA RRset

supportfan.gov

	Query to a3-66.akam.net for supportfan.gov/A
	Received 811 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 811 octets ;; HEADER SECTION ;; id = 65337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-66.akam.net is authoritative for supportfan.gov
	Found RRSIG signed by supportfan.gov zone
	Query to a3-66.akam.net for supportfan.gov/A
	Received 811 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 811 octets ;; HEADER SECTION ;; id = 5336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== )`
	RRSIG=59961 and DNSKEY=59961 verifies the SOA RRset

supportfan.gov

	Query to a9-64.akam.net for supportfan.gov/A
	Received 811 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 811 octets ;; HEADER SECTION ;; id = 8519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for supportfan.gov
	Found RRSIG signed by supportfan.gov zone
	Query to a9-64.akam.net for supportfan.gov/A
	Received 811 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 811 octets ;; HEADER SECTION ;; id = 24150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== )`
	RRSIG=59961 and DNSKEY=59961 verifies the SOA RRset

supportfan.gov

	Query to a8-67.akam.net for supportfan.gov/A
	Received 811 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 811 octets ;; HEADER SECTION ;; id = 47091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-67.akam.net is authoritative for supportfan.gov
	Found RRSIG signed by supportfan.gov zone
	Query to a8-67.akam.net for supportfan.gov/A
	Received 811 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 811 octets ;; HEADER SECTION ;; id = 49545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; supportfan.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN NSEC3 ( 1 0 10 64c2ad 20ken02iq5r7lnqadotgok1hjkjn5t7g NS SOA RRSIG DNSKEY NSEC3PARAM ) pqtit6cbr5cdaneg1o28qkcr62senvk4.supportfan.gov. 900 IN RRSIG ( NSEC3 8 3 900 20260823215508 20250823205649 59961 supportfan.gov. fXDEgf3mW5/0uZIBDfNGES67YyDjlsII46KF711xKTEkDLbq+DYUZ5zyVUhrZs9rmNiqGDLFbpwR 73+6CPF94mnmV904oaHtYAvCL+uOUVIEjFEUklrx6LoiSKBlXTKfMlU6QBFsJMk7B4WhqN5Zy8zm jygWGVYl6r/N3dL8/v2CWnT7cLDE5RS/93XMgogosU/bo4DRV1Z3adpklB7WaCDLYGhOSuJSx0Yp ElK91AB0wvhHC54emtlDwABma7OooMYSn5wjf/cg1B9V34JcSh40zWw/dgsPi1I8Cp9NItND8qOw R75WDZmDio99/jk5FbUsFydk2biKAgdHZqzdHQ== ) supportfan.gov. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.gov. 1370 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`supportfan.gov. 900 IN RRSIG ( SOA 8 2 900 20260823215649 20250823205649 59961 supportfan.gov. BUA6YUvq6DvVbrFZZ7/9NvefL+3lggG6vAYi5GKSVkMcZ9RIx4iYloupRXsmL9yc3vHM2qadn9AZ K3bTOk+sRJ1ks6WoRTK/899AGKP6LxbyidJ+GcATX6aiQV07kYaaHFFN9H2DyUC6j5EvrjBceIpk yB4qenpqUSAydG+CwLmCMrvMYETZG7QWMJlqwLeSL6m4Rxog0cRxNaNGGC6VQCjBF3gkw08h/oAM VuJXsd8eQlgK3E9oLV0BuJtn+Tf2gSWI3Ajjo5fuSh69iB6VBDXOAyf4rN5doj4FkrBTYm5wMe+f U1uYCOab7vK/jzwCA0xQD/hTbrCQC490XGUbow== )`
	RRSIG=59961 and DNSKEY=59961 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test supportfan.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: