DNSSEC Debugger - pubmed.ncbi.nlm.nih.gov

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-24 22:52:06 UTC

Analyzing DNSSEC problems for pubmed.ncbi.nlm.nih.gov

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1414 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1414 octets ;; HEADER SECTION ;; id = 26654 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to l.root-servers.net for pubmed.ncbi.nlm.nih.gov/A
	Received 630 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 630 octets ;; HEADER SECTION ;; id = 61414 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20261007170000 20260924160000 57780 . avrNjY/9r7ArS6IUjs9mZypawt6llVXw+x9GV4YYve3V+LN23mHhxuOBnz3japjh3zmENkVy9hdo ARiNT83WUONhcVPEx2UbSzBY7sA0u5w4LK2ov4VOJJH+uE8rLR2051ZEbsdIjVOONm/b9ryNgtra 22jrqk8jksLMop/KPwvPtB5kkb6vDM5PQRq4o8u9uifDWpdinvOHa/k8LBEyRMk6CEA+uApAOKzQ aIZQYVc3Ht8KMQdikDGZXlOBVaLcO6AFIOtZpmNP3SgVytSSx2/gTJ4hg7p1bdWmQCWutfSYvDB2 4BntTXEvzpJwRmNeFLiuug5KXlkfuliiS0dpSA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 3565 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20261007170000 20260924160000 57780 . avrNjY/9r7ArS6IUjs9mZypawt6llVXw+x9GV4YYve3V+LN23mHhxuOBnz3japjh3zmENkVy9hdo ARiNT83WUONhcVPEx2UbSzBY7sA0u5w4LK2ov4VOJJH+uE8rLR2051ZEbsdIjVOONm/b9ryNgtra 22jrqk8jksLMop/KPwvPtB5kkb6vDM5PQRq4o8u9uifDWpdinvOHa/k8LBEyRMk6CEA+uApAOKzQ aIZQYVc3Ht8KMQdikDGZXlOBVaLcO6AFIOtZpmNP3SgVytSSx2/gTJ4hg7p1bdWmQCWutfSYvDB2 4BntTXEvzpJwRmNeFLiuug5KXlkfuliiS0dpSA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 6496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20261007170000 20260924160000 57780 . avrNjY/9r7ArS6IUjs9mZypawt6llVXw+x9GV4YYve3V+LN23mHhxuOBnz3japjh3zmENkVy9hdo ARiNT83WUONhcVPEx2UbSzBY7sA0u5w4LK2ov4VOJJH+uE8rLR2051ZEbsdIjVOONm/b9ryNgtra 22jrqk8jksLMop/KPwvPtB5kkb6vDM5PQRq4o8u9uifDWpdinvOHa/k8LBEyRMk6CEA+uApAOKzQ aIZQYVc3Ht8KMQdikDGZXlOBVaLcO6AFIOtZpmNP3SgVytSSx2/gTJ4hg7p1bdWmQCWutfSYvDB2 4BntTXEvzpJwRmNeFLiuug5KXlkfuliiS0dpSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20261007170000 20260924160000 57780 . avrNjY/9r7ArS6IUjs9mZypawt6llVXw+x9GV4YYve3V+LN23mHhxuOBnz3japjh3zmENkVy9hdo ARiNT83WUONhcVPEx2UbSzBY7sA0u5w4LK2ov4VOJJH+uE8rLR2051ZEbsdIjVOONm/b9ryNgtra 22jrqk8jksLMop/KPwvPtB5kkb6vDM5PQRq4o8u9uifDWpdinvOHa/k8LBEyRMk6CEA+uApAOKzQ aIZQYVc3Ht8KMQdikDGZXlOBVaLcO6AFIOtZpmNP3SgVytSSx2/gTJ4hg7p1bdWmQCWutfSYvDB2 4BntTXEvzpJwRmNeFLiuug5KXlkfuliiS0dpSA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 51801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261120110642 20260920110642 2536 gov. cfy+HEpjo649lgn0nmaZm2dw0PRBEIyKW7LtCSFSDTfc5dt/MTrQAxq5b6QAG5LqJnvI9gWiBeUg ios+M1nt8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261120110642 20260920110642 2536 gov. cfy+HEpjo649lgn0nmaZm2dw0PRBEIyKW7LtCSFSDTfc5dt/MTrQAxq5b6QAG5LqJnvI9gWiBeUg ios+M1nt8g== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 432 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 432 octets ;; HEADER SECTION ;; id = 12059 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nih.gov. 10800 IN NS ns.nih.gov. nih.gov. 10800 IN NS ns2.nih.gov. nih.gov. 10800 IN NS ns3.nih.gov. nih.gov. 3600 IN DS ( 36469 8 2 4dd8f9c4c445b7588d2b8fd48af7a754777ace002521c05c1992db1cf2f09eed ) nih.gov. 3600 IN DS ( 51547 8 2 b18e5d91bb477a4040d5cbfa22de598224340d0168856aefaeeedadd192bdcf5 ) nih.gov. 3600 IN RRSIG ( DS 13 2 3600 20260925235206 20260923215206 35496 gov. wT1WEVQDWGMFnRc9YcgT2/tNxoFKjB5gsD/a+dO/suynLl1F60YXm3wdQIsTMv+1qUFtU2f9fort +EpaKJD2Dg== ) ;; ADDITIONAL SECTION (7 records) ns.nih.gov. 3600 IN A 128.231.128.251 ns.nih.gov. 3600 IN AAAA 2607:f220:404:101::80e7:80fb ns2.nih.gov. 3600 IN A 128.231.64.1 ns2.nih.gov. 3600 IN AAAA 2607:f220:418:4101::80e7:401 ns3.nih.gov. 3600 IN A 165.112.4.230 ns3.nih.gov. 3600 IN AAAA 2607:f220:402:1801::a570:4e6 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for nih.gov/DNSKEY
	Received 416 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 416 octets ;; HEADER SECTION ;; id = 64281 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nih.gov. 10800 IN NS ns.nih.gov. nih.gov. 10800 IN NS ns2.nih.gov. nih.gov. 10800 IN NS ns3.nih.gov. nih.gov. 3600 IN DS ( 36469 8 2 4dd8f9c4c445b7588d2b8fd48af7a754777ace002521c05c1992db1cf2f09eed ) nih.gov. 3600 IN DS ( 51547 8 2 b18e5d91bb477a4040d5cbfa22de598224340d0168856aefaeeedadd192bdcf5 ) nih.gov. 3600 IN RRSIG ( DS 13 2 3600 20260925235206 20260923215206 35496 gov. +MlZeLJN2vXSjGvjcsTbmaEFkPNE0IjVlvWNuOAGwLsYQm5nNPbr7PSahOS5UnG2BTjVjsc0Moh9 iOQgAppxrw== ) ;; ADDITIONAL SECTION (7 records) ns.nih.gov. 3600 IN A 128.231.128.251 ns.nih.gov. 3600 IN AAAA 2607:f220:404:101::80e7:80fb ns2.nih.gov. 3600 IN A 128.231.64.1 ns2.nih.gov. 3600 IN AAAA 2607:f220:418:4101::80e7:401 ns3.nih.gov. 3600 IN A 165.112.4.230 ns3.nih.gov. 3600 IN AAAA 2607:f220:402:1801::a570:4e6 ;; { "EDNS-VERSION": 0 }
	Found child zone nih.gov

nih.gov

	Checking DS between gov and nih.gov
	Query to a.ns.gov for nih.gov/DS
	Received 231 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 231 octets ;; HEADER SECTION ;; id = 39224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nih.gov. IN DS ;; ANSWER SECTION (3 records) nih.gov. 3600 IN DS ( 36469 8 2 4dd8f9c4c445b7588d2b8fd48af7a754777ace002521c05c1992db1cf2f09eed ) nih.gov. 3600 IN DS ( 51547 8 2 b18e5d91bb477a4040d5cbfa22de598224340d0168856aefaeeedadd192bdcf5 ) nih.gov. 3600 IN RRSIG ( DS 13 2 3600 20260925235206 20260923215206 35496 gov. 00LiJPz6a2o6H1LJ1GCbVmD7e5bR7zn+VRdmBpmgBPoFBeOEwehcuMe/AAwFwhZ0rDQvHitri5IQ QMsugWLbfg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for nih.gov in the gov zone
	DS=36469/SHA-256 has algorithm RSASHA256
	DS=51547/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nih.gov. 3600 IN RRSIG ( DS 13 2 3600 20260925235206 20260923215206 35496 gov. 00LiJPz6a2o6H1LJ1GCbVmD7e5bR7zn+VRdmBpmgBPoFBeOEwehcuMe/AAwFwhZ0rDQvHitri5IQ QMsugWLbfg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=36469/SHA-256 is now in the chain-of-trust
	DS=51547/SHA-256 is now in the chain-of-trust
	`nih.gov. 3600 IN DS ( 36469 8 2 4dd8f9c4c445b7588d2b8fd48af7a754777ace002521c05c1992db1cf2f09eed )`
	`nih.gov. 3600 IN DS ( 51547 8 2 b18e5d91bb477a4040d5cbfa22de598224340d0168856aefaeeedadd192bdcf5 )`
	Query to ns2.nih.gov for nih.gov/DNSKEY
	Received 1070 bytes from 128.231.64.1
	;; Response received from [128.231.64.1] 1070 octets ;; HEADER SECTION ;; id = 4176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nih.gov. IN DNSKEY ;; ANSWER SECTION (5 records) nih.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbvtkTfmRJHrk4ADITMzkY0LvXviazwWzRzmG7gHDn5ircmlP6Rvo3WetpBi4bKy4T8ahk3Q +IhanmDXVLkrrRyR9HJ+7cxTJA/dk8PC09F7i+xKyRGhFxLvxCFo0qBxckGYC/UhTjXyCk5tdIAG lVPQSDBA0TjqjNz0RGP9xgEt ) ; keytag 10578 nih.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAa++YcItdlslCVNF3kTc2GSInUb7hqV0/XsQvE8tTd57LpjizdwFScEVuPc+c96vciAbVIHc tomn2+qWUX/xtHo6X4cDCfKrtl625iimZmxDFEMI+X3pSWlOwqzK/enlQ+HZSYDHL+8ci1LtD3Kc xExJo1REC8mjh2IS5ycuQ0TM2uU8ue66KXQGp/jhMFk37xsaH61BDU6ZZFZmPQizkl76adlj+bbq Z9i1jybnYrP6VFv1OUTyZZ0QEym8WkH8Coi1Fxepk8gb1/SCKDJvZKizoKsVyyWM4m5kOQOBNcMK HuL2815uko1hE+8BewpW6KEYkH3kTZXBpw0gTeFubnU= ) ; keytag 51547 nih.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAeGR47q+IMK7ZVlV7VD4zGauxb2rDNlFcZQyixeSigXBAy4QfjMRzpIiSqInugz0pZ9Vm73K WLzLX4hY5FeOMRwZh/+6Wc7HMEZzlTLL6a6Fs4bIke3HUdzTnFJdgCtEn7NkJTN01X8228XA0Dti GGkve6AGoNL+IeHCvk4EaIW3 ) ; keytag 46195 nih.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260928173259 20260924165252 10578 nih.gov. XhqBGWMGSgnduRQwGQydtx2z4lPOFz4/bUmy6QaUshC4ZFGeVLnhto4Zc7seNpVtoa4j+1x51t1X gZGRROgfC/XX4U6oYledTYXywKxyc6qpo4GSyn7KUvN6m8jqHTXFVDqLrEpb7u9r/1/BzXEyq390 +Wyvg/Q+pPhGZ55wsjE= ) nih.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260928173259 20260924165252 51547 nih.gov. lcfMKKC4so6nzBm6+NgjZUdarFL3gNRn7+r3ji12Hb3yVhByMuJwYHWTDcxeTnROc0JFA4xAPBDo PFhrDzavUZdsUaYmsVHq70O2gveB1SrI1+9GquH+wGVtEcUc/fgx4q18RjZJJJL/eaKumd+G6TQe o/Mk7K64CJVH6mmlUYrSvur5+QaRTKKzsjpQ35pLVB2CZ7QAAIW1VGbEv653jnlYrrBhkJwR0M/i cMADbk5O0JssRp5jHDjVu98iBLtg71UC3tCWIDjVm6tK9GXFHSXA+YrBmtW4g46Py7Py/KBqeswa /6SgoROWbCeW16dmnnCnr6RusKEQHLvTDOrNYQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nih.gov
	`nih.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbvtkTfmRJHrk4ADITMzkY0LvXviazwWzRzmG7gHDn5ircmlP6Rvo3WetpBi4bKy4T8ahk3Q +IhanmDXVLkrrRyR9HJ+7cxTJA/dk8PC09F7i+xKyRGhFxLvxCFo0qBxckGYC/UhTjXyCk5tdIAG lVPQSDBA0TjqjNz0RGP9xgEt ) ; keytag 10578`
	`nih.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAa++YcItdlslCVNF3kTc2GSInUb7hqV0/XsQvE8tTd57LpjizdwFScEVuPc+c96vciAbVIHc tomn2+qWUX/xtHo6X4cDCfKrtl625iimZmxDFEMI+X3pSWlOwqzK/enlQ+HZSYDHL+8ci1LtD3Kc xExJo1REC8mjh2IS5ycuQ0TM2uU8ue66KXQGp/jhMFk37xsaH61BDU6ZZFZmPQizkl76adlj+bbq Z9i1jybnYrP6VFv1OUTyZZ0QEym8WkH8Coi1Fxepk8gb1/SCKDJvZKizoKsVyyWM4m5kOQOBNcMK HuL2815uko1hE+8BewpW6KEYkH3kTZXBpw0gTeFubnU= ) ; keytag 51547`
	`nih.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAeGR47q+IMK7ZVlV7VD4zGauxb2rDNlFcZQyixeSigXBAy4QfjMRzpIiSqInugz0pZ9Vm73K WLzLX4hY5FeOMRwZh/+6Wc7HMEZzlTLL6a6Fs4bIke3HUdzTnFJdgCtEn7NkJTN01X8228XA0Dti GGkve6AGoNL+IeHCvk4EaIW3 ) ; keytag 46195`
	DNSKEY=51547/SEP is now in the chain-of-trust
	DS=51547/SHA-256 verifies DNSKEY=51547/SEP
	DS=36469/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nih.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260928173259 20260924165252 10578 nih.gov. XhqBGWMGSgnduRQwGQydtx2z4lPOFz4/bUmy6QaUshC4ZFGeVLnhto4Zc7seNpVtoa4j+1x51t1X gZGRROgfC/XX4U6oYledTYXywKxyc6qpo4GSyn7KUvN6m8jqHTXFVDqLrEpb7u9r/1/BzXEyq390 +Wyvg/Q+pPhGZ55wsjE= )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260928173259 20260924165252 51547 nih.gov. lcfMKKC4so6nzBm6+NgjZUdarFL3gNRn7+r3ji12Hb3yVhByMuJwYHWTDcxeTnROc0JFA4xAPBDo PFhrDzavUZdsUaYmsVHq70O2gveB1SrI1+9GquH+wGVtEcUc/fgx4q18RjZJJJL/eaKumd+G6TQe o/Mk7K64CJVH6mmlUYrSvur5+QaRTKKzsjpQ35pLVB2CZ7QAAIW1VGbEv653jnlYrrBhkJwR0M/i cMADbk5O0JssRp5jHDjVu98iBLtg71UC3tCWIDjVm6tK9GXFHSXA+YrBmtW4g46Py7Py/KBqeswa /6SgoROWbCeW16dmnnCnr6RusKEQHLvTDOrNYQ== )`
	RRSIG=10578 and DNSKEY=10578 verifies the DNSKEY RRset
	RRSIG=51547 and DNSKEY=51547/SEP verifies the DNSKEY RRset
	DNSKEY=10578 is now in the chain-of-trust
	DNSKEY=46195 is now in the chain-of-trust
	Query to ns3.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 372 bytes from 165.112.4.230
	;; Response received from [165.112.4.230] 372 octets ;; HEADER SECTION ;; id = 54055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (2 records) pubmed.ncbi.nlm.nih.gov. 86400 IN A 34.107.134.59 pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to ns.nih.gov for nlm.nih.gov/DNSKEY
	Received 763 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 763 octets ;; HEADER SECTION ;; id = 37180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (3 records) nlm.nih.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAdEfby2fEEjCJLPI2B0FiRQAVH62jo+s/Dgqfol5Eeep84vdKtdtL0M5iWz0baX16WDPeLIA bkE5wUC5oZZ+NVryV/4kTPYbgrR4LHYIKygZrysTluYZLTh4g6Ne44jSa3wLAtLNxIBs5L4tUv/k tCjh6Sd84L3lHcujyvym6SJ5ur5VdY2CBYEMB8sFAKWJb31gYK/5uvWe448DV7RgTYPWm9qBXUSq +Oe2ODve9U3Vrv29cHVSEHnk2Pu4g6YPSryyP4EafjXBBGjoldbD2NGG5AqW6Wh8/YypZ78TYKLd URcDjDB9L0Yp+JujeSRcLJIM6XKJJUOy/9usZLdAHGs= ) ; keytag 30269 nlm.nih.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbzEqnIcqPxx+x78v5dBiiXznIaNTxhUjIh2a7a2GCXYUFI8ofEuGNFuZexiYKhNe675iTtH p5FMiRfTNWJTFWTVimsz/yIOaRN+74vW62Ja4qeJC1GGq9hXf7fXJ1+QTCTmbVBVQfnzxaeHlIkB YiyTecaJFuGQupzrkyHJwe1X ) ; keytag 53479 nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 8 3 3600 20260929052118 20260908100006 30269 nlm.nih.gov. UsJ/J+a9Ox7C5blBafzKitjzg0Q9FI02GmAJCOo+Fdib3uKOxetAVm4BtQtgGs+NNHHPXtOzwYtU R/iX32AX5bvVl/QJ8//VKSl7cTJGskkR3YDp+nyH4o0YWBoSs8igTgvYJN2OoJgqicW6IJZwHMBY ovCnyJn2yXPNlr0zmNw1DjqpK42ejErGDFSwcy5OzixYGHWu0tuKd7oUwAklvQhuV+KL58rmgI8l wP3ckHMU+jjSZhwwE92ZNomqxqVm32w+/Lq3/tTxGjBuuG0XZmjb99nJev3X16lgzbFOgDxAzDoH 2W6xnvHdmXLZkHRhU5fEvExzGltEzUUek5AoYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nlm.nih.gov
	Attempting to learn nameservers for nlm.nih.gov
	Query to ns.nih.gov for nlm.nih.gov/NS
	Received 1078 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 1078 octets ;; HEADER SECTION ;; id = 20139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN NS ;; ANSWER SECTION (6 records) nlm.nih.gov. 86400 IN NS lhcns2.nlm.nih.gov. nlm.nih.gov. 86400 IN NS lhcns1.nlm.nih.gov. nlm.nih.gov. 86400 IN NS ns.nih.gov. nlm.nih.gov. 86400 IN NS ns2.nih.gov. nlm.nih.gov. 86400 IN NS ns3.nih.gov. nlm.nih.gov. 86400 IN RRSIG ( NS 8 3 86400 20261005110006 20260905105506 53479 nlm.nih.gov. s02tbVmELnGbOUF0MZgPEVV2lqO2YQTUobnMHtjLpCk17Bvb91+oDSmdr1HkFcJGNfGRWBVlqBUF rC5j+9pWaX5I38LZ/g2VyRu90BoxYHsZ0+2MoS40q3fpDdnmZwpDtdMfDBNfd4L0o2uiZ5wlPT1F V2slo7a2/vtoCOppJtA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (9 records) lhcns1.nlm.nih.gov. 3600 IN A 130.14.55.72 lhcns2.nlm.nih.gov. 3600 IN A 130.14.55.128 lhcns1.nlm.nih.gov. 3600 IN AAAA 2607:f220:41e:7055::72 lhcns2.nlm.nih.gov. 3600 IN AAAA 2607:f220:41e:7055::128 lhcns1.nlm.nih.gov. 3600 IN RRSIG ( A 8 4 3600 20261005110006 20260905105506 53479 nlm.nih.gov. BD9vpdWqfNetU1EpsEfz8r0V4eYq/89yUQdzd6+dIzneeSnVfi5SS8TTLaqfVlKmDs/DJ6n2xry+ 2SAEDBZZD8ERuGHWwbQ93rrIT/8cu+7BoD/vy3YgfOKiShMMUNgMvcNmogeJB+BuvVH0cCnSV3T6 TlTSo5N1GbytE80rgD0= ) lhcns1.nlm.nih.gov. 3600 IN RRSIG ( AAAA 8 4 3600 20261005110006 20260905105506 53479 nlm.nih.gov. l7ucfzOWolzGKA4jtAOHLyZES6pH/+Ov7Bu/F6n/CrPgerG0trmLb3w7wewhTYOGEwcOltiaoLJT ep66841/V2xmM9vZYpeI5SF6FxF45uK05fdFmFEvkKYj0hkhBCDE+HwNfdyyDaoyb0dualARIng/ CpT9V3IWnWsY76Drkkg= ) lhcns2.nlm.nih.gov. 3600 IN RRSIG ( A 8 4 3600 20261005110006 20260905105506 53479 nlm.nih.gov. Ld5QIjr7h8h+3djLu6U0C4Hoqk4LIwCrHsG3q56P978yX2rC94Vveg34hL85gK/1mMHZOeaDNGNb dx7TfBbLLbYezqSUa1yz6ArekeaYUB7ipyBio5h5qYnk6jjBe85dmA/hbswA2K8oQfJn097WHaJf W2TNJozzXjCHtTLle0o= ) lhcns2.nlm.nih.gov. 3600 IN RRSIG ( AAAA 8 4 3600 20261005110006 20260905105506 53479 nlm.nih.gov. XlB+23gHjQrZGaKX+u0Aguwoa2b0myHf5Wqk9LKMZEe9/n6yVvakrqZBRM4Rxt99Df7pbfaEG4ve urEg+rp7dUhq37a++UGD5jzvTgnNQoOY+nOyrY8JvUtTLYS+xZeZHIPkMCesaiVAmRI42hJcy0s5 3jJkdI5qvgcBKGi+TgU= ) ;; { "EDNS-VERSION": 0 }
	Found nlm.nih.gov nameservers: lhcns2.nlm.nih.gov, lhcns1.nlm.nih.gov, ns.nih.gov, ns2.nih.gov, ns3.nih.gov

nlm.nih.gov

	Checking DS between nih.gov and nlm.nih.gov
	Query to ns.nih.gov for nlm.nih.gov/DS
	Received 303 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 303 octets ;; HEADER SECTION ;; id = 36903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN DS ;; ANSWER SECTION (3 records) nlm.nih.gov. 3600 IN DS ( 39122 8 2 aea70e256fbc9eed1b7efc4c34986409739512539aad03b5330732b9ef72588e ) nlm.nih.gov. 3600 IN DS ( 30269 8 2 a588fdfb07b146c8e9ba561c9c85290402606dc1590475d777a8042c12444e60 ) nlm.nih.gov. 3600 IN RRSIG ( DS 8 3 3600 20260928122801 20260924121958 10578 nih.gov. Flish+HWm16yaAXajNJQ5X652fob7a70HqCJhGwKHs8NeF94dxDVDN+v6feVez3QqMk3ePTac1nW 2MDvXpyxYMjdqaqmBsY5Bfj/y3Y09db4mp6bxuZS5dyEawoCMLRIpUJycMVHwGePvGEGTwo/oHfa GHhOZs1HhPShsCFM8s0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for nlm.nih.gov in the nih.gov zone
	DS=39122/SHA-256 has algorithm RSASHA256
	DS=30269/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nlm.nih.gov. 3600 IN RRSIG ( DS 8 3 3600 20260928122801 20260924121958 10578 nih.gov. Flish+HWm16yaAXajNJQ5X652fob7a70HqCJhGwKHs8NeF94dxDVDN+v6feVez3QqMk3ePTac1nW 2MDvXpyxYMjdqaqmBsY5Bfj/y3Y09db4mp6bxuZS5dyEawoCMLRIpUJycMVHwGePvGEGTwo/oHfa GHhOZs1HhPShsCFM8s0= )`
	RRSIG=10578 and DNSKEY=10578 verifies the DS RRset
	DS=39122/SHA-256 is now in the chain-of-trust
	DS=30269/SHA-256 is now in the chain-of-trust
	`nlm.nih.gov. 3600 IN DS ( 39122 8 2 aea70e256fbc9eed1b7efc4c34986409739512539aad03b5330732b9ef72588e )`
	`nlm.nih.gov. 3600 IN DS ( 30269 8 2 a588fdfb07b146c8e9ba561c9c85290402606dc1590475d777a8042c12444e60 )`
	Query to lhcns2.nlm.nih.gov for nlm.nih.gov/DNSKEY
	Received 763 bytes from 130.14.55.128
	;; Response received from [130.14.55.128] 763 octets ;; HEADER SECTION ;; id = 36600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (3 records) nlm.nih.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAdEfby2fEEjCJLPI2B0FiRQAVH62jo+s/Dgqfol5Eeep84vdKtdtL0M5iWz0baX16WDPeLIA bkE5wUC5oZZ+NVryV/4kTPYbgrR4LHYIKygZrysTluYZLTh4g6Ne44jSa3wLAtLNxIBs5L4tUv/k tCjh6Sd84L3lHcujyvym6SJ5ur5VdY2CBYEMB8sFAKWJb31gYK/5uvWe448DV7RgTYPWm9qBXUSq +Oe2ODve9U3Vrv29cHVSEHnk2Pu4g6YPSryyP4EafjXBBGjoldbD2NGG5AqW6Wh8/YypZ78TYKLd URcDjDB9L0Yp+JujeSRcLJIM6XKJJUOy/9usZLdAHGs= ) ; keytag 30269 nlm.nih.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbzEqnIcqPxx+x78v5dBiiXznIaNTxhUjIh2a7a2GCXYUFI8ofEuGNFuZexiYKhNe675iTtH p5FMiRfTNWJTFWTVimsz/yIOaRN+74vW62Ja4qeJC1GGq9hXf7fXJ1+QTCTmbVBVQfnzxaeHlIkB YiyTecaJFuGQupzrkyHJwe1X ) ; keytag 53479 nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 8 3 3600 20260929052118 20260908100006 30269 nlm.nih.gov. UsJ/J+a9Ox7C5blBafzKitjzg0Q9FI02GmAJCOo+Fdib3uKOxetAVm4BtQtgGs+NNHHPXtOzwYtU R/iX32AX5bvVl/QJ8//VKSl7cTJGskkR3YDp+nyH4o0YWBoSs8igTgvYJN2OoJgqicW6IJZwHMBY ovCnyJn2yXPNlr0zmNw1DjqpK42ejErGDFSwcy5OzixYGHWu0tuKd7oUwAklvQhuV+KL58rmgI8l wP3ckHMU+jjSZhwwE92ZNomqxqVm32w+/Lq3/tTxGjBuuG0XZmjb99nJev3X16lgzbFOgDxAzDoH 2W6xnvHdmXLZkHRhU5fEvExzGltEzUUek5AoYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nlm.nih.gov
	`nlm.nih.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAdEfby2fEEjCJLPI2B0FiRQAVH62jo+s/Dgqfol5Eeep84vdKtdtL0M5iWz0baX16WDPeLIA bkE5wUC5oZZ+NVryV/4kTPYbgrR4LHYIKygZrysTluYZLTh4g6Ne44jSa3wLAtLNxIBs5L4tUv/k tCjh6Sd84L3lHcujyvym6SJ5ur5VdY2CBYEMB8sFAKWJb31gYK/5uvWe448DV7RgTYPWm9qBXUSq +Oe2ODve9U3Vrv29cHVSEHnk2Pu4g6YPSryyP4EafjXBBGjoldbD2NGG5AqW6Wh8/YypZ78TYKLd URcDjDB9L0Yp+JujeSRcLJIM6XKJJUOy/9usZLdAHGs= ) ; keytag 30269`
	`nlm.nih.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbzEqnIcqPxx+x78v5dBiiXznIaNTxhUjIh2a7a2GCXYUFI8ofEuGNFuZexiYKhNe675iTtH p5FMiRfTNWJTFWTVimsz/yIOaRN+74vW62Ja4qeJC1GGq9hXf7fXJ1+QTCTmbVBVQfnzxaeHlIkB YiyTecaJFuGQupzrkyHJwe1X ) ; keytag 53479`
	DNSKEY=30269/SEP is now in the chain-of-trust
	DS=30269/SHA-256 verifies DNSKEY=30269/SEP
	DS=39122/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 8 3 3600 20260929052118 20260908100006 30269 nlm.nih.gov. UsJ/J+a9Ox7C5blBafzKitjzg0Q9FI02GmAJCOo+Fdib3uKOxetAVm4BtQtgGs+NNHHPXtOzwYtU R/iX32AX5bvVl/QJ8//VKSl7cTJGskkR3YDp+nyH4o0YWBoSs8igTgvYJN2OoJgqicW6IJZwHMBY ovCnyJn2yXPNlr0zmNw1DjqpK42ejErGDFSwcy5OzixYGHWu0tuKd7oUwAklvQhuV+KL58rmgI8l wP3ckHMU+jjSZhwwE92ZNomqxqVm32w+/Lq3/tTxGjBuuG0XZmjb99nJev3X16lgzbFOgDxAzDoH 2W6xnvHdmXLZkHRhU5fEvExzGltEzUUek5AoYA== )`
	RRSIG=30269 and DNSKEY=30269/SEP verifies the DNSKEY RRset
	DNSKEY=53479 is now in the chain-of-trust
	Query to ns.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 372 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 372 octets ;; HEADER SECTION ;; id = 47381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (2 records) pubmed.ncbi.nlm.nih.gov. 86400 IN A 34.107.134.59 pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to ns3.nih.gov for ncbi.nlm.nih.gov/DNSKEY
	Received 901 bytes from 165.112.4.230
	;; Response received from [165.112.4.230] 901 octets ;; HEADER SECTION ;; id = 17351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (3 records) ncbi.nlm.nih.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAckbjcIcrq6FtRGMe7V+tGEUQ4qLIBOkJphv9sf4mSEKnS2gewnpk5VaneemJg5K9WhHKfk6 IcFkuliVe0BrshwCbiDyEiN2u6mmYO9qGROOLWQAfcpE2l1P4XdJ9GfT57CL8ilu/myAuo6MgPXn 94CAXBPPVg9cNl9Q5QsQPSyYXdjcJUerLYo0QAcb7GRHlCor/nWxUX+BKZ7gvcl1zo1HYPinKP54 vGDYI5AFqBYn4lujwWgIrpeISxdBdsOlskp56JwgEyEt+dBUloFQG8agiRKyjl27ZDCBu5y95wIy CvbjkAAUvqGfvS6/9JajhConHPfpZECJOVbp9kWgBOc= ) ; keytag 16545 ncbi.nlm.nih.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZpv1rD4NfzPl48ycuzC23w9Oz5w+DJTGuSo4aY6Hjs5McEkMGafG+f+/KVKQJNGOLc3sz0N RWN8O87f4zbS/ohcfYRe59lJdCqHVG1xfYrzGro0PXtqUlqNhBdwvJVeBODffYZAvKrot7RNADeZ 8DSS1EVUdQ+GwGx+KjRWfnUqjvj9wmn0IxWFlPmlAhmx8365k4nocmzgIFMdOWbCpmojzRAqP26+ +AACtPzurFZ1UDp+gr0TnCHYJjTKno7K0she8b0n2QaCPZ4e29P0NUsfCsoPnYzy9CzuLAnl36YW KbmS1lVDYAlRh6LAjA4xDeqgfMsmAjncDYvYqN+ZJ80= ) ; keytag 38815 ncbi.nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 8 4 3600 20261014152602 20260919144308 38815 ncbi.nlm.nih.gov. TAjG981IWr66tPRK5TDQKyM9xp4aroKI2opiiqTY1bPCvI+v56+T+E2owlu86CEZOXXRih1rw08r Z1g0Y58JIlBzCgSbMB5bsZcFV56tVVlIbTEFHHmjwi1LgzYryYBrL56YWN0BSQKeBoprX6laGRMO QTN003F+RSuqAwMqFNKnoyS3BovicIMifsgHEn+b/y2llW9UIVw6jCtIzaYkPcSYa4LSKFFlj6w7 BmJc7CKPlIZcskc98V/qZT4/xIQWXanNcrT7VBMl61zUp6lJZH2BodIgSf3gfAKuqWTaBiMVHGek LdI61c+khShTYbrNf4lQsMF7Qh1GbqzyAfaASA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ncbi.nlm.nih.gov
	Attempting to learn nameservers for ncbi.nlm.nih.gov
	Query to lhcns1.nlm.nih.gov for ncbi.nlm.nih.gov/NS
	Received 897 bytes from 130.14.55.72
	;; Response received from [130.14.55.72] 897 octets ;; HEADER SECTION ;; id = 23409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN NS ;; ANSWER SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (6 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN RRSIG ( A 8 5 604800 20261006212751 20260911210604 16545 ncbi.nlm.nih.gov. TuZWhWaNO0CAxQiNyylgqgW+/wZXtRCJrJr4iFpfISvoD41DdaEiGP+Cg5QOom9EfidiO6x2M+pC mSb3jZyuk5Cz/PeZ6/OjrWOi1PxiNEy/QzDLjlrl7hLtrkmZvgOHuYusL1hdRsBFVWAM+NtgKRji 8HGDGYNDhtOtr68k33aY+7kBfDkEGwIVtAB7VYUvGPwtQxvnezF6g60NpfOk0z95fawfsazpoYHI IkLg4yH+aSXFoP42yK644/PHOGStVv3tQuSVwcBl8xn1pz6mMtBRd52sEaUthiywkISUEwqa8gUg s1vHxI7wJ3z+HNnpCvSywaNIxjfhIGV0jhQg3w== ) ;; { "EDNS-VERSION": 0 }
	Found ncbi.nlm.nih.gov nameservers: lhcns2.nlm.nih.gov, ns.nih.gov, ns2.nih.gov, dns2-ncbi.ncbi.nlm.nih.gov, ns3.nih.gov, lhcns1.nlm.nih.gov, dns1-ncbi.ncbi.nlm.nih.gov

ncbi.nlm.nih.gov

	Checking DS between nlm.nih.gov and ncbi.nlm.nih.gov
	Query to lhcns2.nlm.nih.gov for ncbi.nlm.nih.gov/DS
	Received 264 bytes from 130.14.55.128
	;; Response received from [130.14.55.128] 264 octets ;; HEADER SECTION ;; id = 51435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN DS ;; ANSWER SECTION (2 records) ncbi.nlm.nih.gov. 3600 IN DS ( 38815 8 2 8a57e2b59da1249da71b8a5fd47742182c4ae2c0c573692f61ef3fe3207c5a04 ) ncbi.nlm.nih.gov. 3600 IN RRSIG ( DS 8 4 3600 20261005110006 20260905105506 53479 nlm.nih.gov. dPhrstDebOFD0JmbhDGAwoCmnznIUTiiJ/6JTN7J+iwq6HsDnCYU0ifvVb0ITH9Sxb+5afsUbzBB iba1+xEj95bSkKqgRhx9b0u9mFyF7KvfJzEqDx7gY1b40jQQy1NgBQljV5LJbEG4PJ588TMSTIUs iCZrlPfDGGkrT2wWAjU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ncbi.nlm.nih.gov in the nlm.nih.gov zone
	DS=38815/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ncbi.nlm.nih.gov. 3600 IN RRSIG ( DS 8 4 3600 20261005110006 20260905105506 53479 nlm.nih.gov. dPhrstDebOFD0JmbhDGAwoCmnznIUTiiJ/6JTN7J+iwq6HsDnCYU0ifvVb0ITH9Sxb+5afsUbzBB iba1+xEj95bSkKqgRhx9b0u9mFyF7KvfJzEqDx7gY1b40jQQy1NgBQljV5LJbEG4PJ588TMSTIUs iCZrlPfDGGkrT2wWAjU= )`
	RRSIG=53479 and DNSKEY=53479 verifies the DS RRset
	DS=38815/SHA-256 is now in the chain-of-trust
	`ncbi.nlm.nih.gov. 3600 IN DS ( 38815 8 2 8a57e2b59da1249da71b8a5fd47742182c4ae2c0c573692f61ef3fe3207c5a04 )`
	Query to dns2-ncbi.ncbi.nlm.nih.gov for ncbi.nlm.nih.gov/DNSKEY
	Received 901 bytes from 130.14.29.32
	;; Response received from [130.14.29.32] 901 octets ;; HEADER SECTION ;; id = 44077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (3 records) ncbi.nlm.nih.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZpv1rD4NfzPl48ycuzC23w9Oz5w+DJTGuSo4aY6Hjs5McEkMGafG+f+/KVKQJNGOLc3sz0N RWN8O87f4zbS/ohcfYRe59lJdCqHVG1xfYrzGro0PXtqUlqNhBdwvJVeBODffYZAvKrot7RNADeZ 8DSS1EVUdQ+GwGx+KjRWfnUqjvj9wmn0IxWFlPmlAhmx8365k4nocmzgIFMdOWbCpmojzRAqP26+ +AACtPzurFZ1UDp+gr0TnCHYJjTKno7K0she8b0n2QaCPZ4e29P0NUsfCsoPnYzy9CzuLAnl36YW KbmS1lVDYAlRh6LAjA4xDeqgfMsmAjncDYvYqN+ZJ80= ) ; keytag 38815 ncbi.nlm.nih.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAckbjcIcrq6FtRGMe7V+tGEUQ4qLIBOkJphv9sf4mSEKnS2gewnpk5VaneemJg5K9WhHKfk6 IcFkuliVe0BrshwCbiDyEiN2u6mmYO9qGROOLWQAfcpE2l1P4XdJ9GfT57CL8ilu/myAuo6MgPXn 94CAXBPPVg9cNl9Q5QsQPSyYXdjcJUerLYo0QAcb7GRHlCor/nWxUX+BKZ7gvcl1zo1HYPinKP54 vGDYI5AFqBYn4lujwWgIrpeISxdBdsOlskp56JwgEyEt+dBUloFQG8agiRKyjl27ZDCBu5y95wIy CvbjkAAUvqGfvS6/9JajhConHPfpZECJOVbp9kWgBOc= ) ; keytag 16545 ncbi.nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 8 4 3600 20261014152602 20260919144308 38815 ncbi.nlm.nih.gov. TAjG981IWr66tPRK5TDQKyM9xp4aroKI2opiiqTY1bPCvI+v56+T+E2owlu86CEZOXXRih1rw08r Z1g0Y58JIlBzCgSbMB5bsZcFV56tVVlIbTEFHHmjwi1LgzYryYBrL56YWN0BSQKeBoprX6laGRMO QTN003F+RSuqAwMqFNKnoyS3BovicIMifsgHEn+b/y2llW9UIVw6jCtIzaYkPcSYa4LSKFFlj6w7 BmJc7CKPlIZcskc98V/qZT4/xIQWXanNcrT7VBMl61zUp6lJZH2BodIgSf3gfAKuqWTaBiMVHGek LdI61c+khShTYbrNf4lQsMF7Qh1GbqzyAfaASA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ncbi.nlm.nih.gov
	`ncbi.nlm.nih.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZpv1rD4NfzPl48ycuzC23w9Oz5w+DJTGuSo4aY6Hjs5McEkMGafG+f+/KVKQJNGOLc3sz0N RWN8O87f4zbS/ohcfYRe59lJdCqHVG1xfYrzGro0PXtqUlqNhBdwvJVeBODffYZAvKrot7RNADeZ 8DSS1EVUdQ+GwGx+KjRWfnUqjvj9wmn0IxWFlPmlAhmx8365k4nocmzgIFMdOWbCpmojzRAqP26+ +AACtPzurFZ1UDp+gr0TnCHYJjTKno7K0she8b0n2QaCPZ4e29P0NUsfCsoPnYzy9CzuLAnl36YW KbmS1lVDYAlRh6LAjA4xDeqgfMsmAjncDYvYqN+ZJ80= ) ; keytag 38815`
	`ncbi.nlm.nih.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAckbjcIcrq6FtRGMe7V+tGEUQ4qLIBOkJphv9sf4mSEKnS2gewnpk5VaneemJg5K9WhHKfk6 IcFkuliVe0BrshwCbiDyEiN2u6mmYO9qGROOLWQAfcpE2l1P4XdJ9GfT57CL8ilu/myAuo6MgPXn 94CAXBPPVg9cNl9Q5QsQPSyYXdjcJUerLYo0QAcb7GRHlCor/nWxUX+BKZ7gvcl1zo1HYPinKP54 vGDYI5AFqBYn4lujwWgIrpeISxdBdsOlskp56JwgEyEt+dBUloFQG8agiRKyjl27ZDCBu5y95wIy CvbjkAAUvqGfvS6/9JajhConHPfpZECJOVbp9kWgBOc= ) ; keytag 16545`
	DNSKEY=38815/SEP is now in the chain-of-trust
	DS=38815/SHA-256 verifies DNSKEY=38815/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ncbi.nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 8 4 3600 20261014152602 20260919144308 38815 ncbi.nlm.nih.gov. TAjG981IWr66tPRK5TDQKyM9xp4aroKI2opiiqTY1bPCvI+v56+T+E2owlu86CEZOXXRih1rw08r Z1g0Y58JIlBzCgSbMB5bsZcFV56tVVlIbTEFHHmjwi1LgzYryYBrL56YWN0BSQKeBoprX6laGRMO QTN003F+RSuqAwMqFNKnoyS3BovicIMifsgHEn+b/y2llW9UIVw6jCtIzaYkPcSYa4LSKFFlj6w7 BmJc7CKPlIZcskc98V/qZT4/xIQWXanNcrT7VBMl61zUp6lJZH2BodIgSf3gfAKuqWTaBiMVHGek LdI61c+khShTYbrNf4lQsMF7Qh1GbqzyAfaASA== )`
	RRSIG=38815 and DNSKEY=38815/SEP verifies the DNSKEY RRset
	DNSKEY=16545 is now in the chain-of-trust
	Query to ns.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	ns.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to dns2-ncbi.ncbi.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/DNSKEY
	Received 793 bytes from 130.14.29.32
	;; Response received from [130.14.29.32] 793 octets ;; HEADER SECTION ;; id = 713 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN NSEC3 ( 1 0 0 - jl6qdjdgb5pf4chg9gjoh7irer59109j A TXT AAAA RRSIG ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN RRSIG ( NSEC3 8 5 86400 20261008031816 20260913025511 16545 ncbi.nlm.nih.gov. ZDPQ4uLrq6QVsRQkEBOUla6DL13z7vrlNorlAHQ0hrAbnoi0VV73crgPTaNLI+oF/Vrqb5U5leJ2 dByIHFezr/wLAVHIX/uxL3t0/RAoyaIR0ny/42/EMbsKOpbk4x0jTTelfMyyCcGSivWUHtAavA3+ mjk4cDc/m+APZd6ulXmEq0KtAZh7ZVaFJz4nMmrbKlrr+37wzk7FZuWtCGvlO+b9BnN2V/gSDFp6 aNuqvl0SFTaDUv/zWOZLQXO5AKwT2UbSLxChCZC7F0oBXUsi0AJQ+YBzZLtYI6u/Fa6alwQrHalC G7BjtJZhHMRnEyt2KP3N4ocJ7tRCfm+LEB6e8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ncbi.nlm.nih.gov zone
	Query to ns2.nih.gov for ncbi.nlm.nih.gov/SOA
	Received 403 bytes from 128.231.64.1
	;; Response received from [128.231.64.1] 403 octets ;; HEADER SECTION ;; id = 52901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN SOA ;; ANSWER SECTION (2 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lhcns2.nlm.nih.gov for ncbi.nlm.nih.gov/SOA
	Received 941 bytes from 130.14.55.128
	;; Response received from [130.14.55.128] 941 octets ;; HEADER SECTION ;; id = 25598 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN SOA ;; ANSWER SECTION (2 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	Query to ns3.nih.gov for ncbi.nlm.nih.gov/SOA
	Received 403 bytes from 165.112.4.230
	;; Response received from [165.112.4.230] 403 octets ;; HEADER SECTION ;; id = 59225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN SOA ;; ANSWER SECTION (2 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lhcns1.nlm.nih.gov for ncbi.nlm.nih.gov/SOA
	Received 941 bytes from 130.14.55.72
	;; Response received from [130.14.55.72] 941 octets ;; HEADER SECTION ;; id = 47474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN SOA ;; ANSWER SECTION (2 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	Query to dns1-ncbi.ncbi.nlm.nih.gov for ncbi.nlm.nih.gov/SOA
	Received 934 bytes from 130.14.29.31
	;; Response received from [130.14.29.31] 934 octets ;; HEADER SECTION ;; id = 49601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN SOA ;; ANSWER SECTION (2 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	Query to dns2-ncbi.ncbi.nlm.nih.gov for ncbi.nlm.nih.gov/SOA
	Received 934 bytes from 130.14.29.32
	;; Response received from [130.14.29.32] 934 octets ;; HEADER SECTION ;; id = 33508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ncbi.nlm.nih.gov. IN SOA ;; ANSWER SECTION (2 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	Query to ns.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	pubmed.ncbi.nlm.nih.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== )`
	RRSIG=16545 and DNSKEY=16545 verifies the A RRset

ncbi.nlm.nih.gov

	Query to dns1-ncbi.ncbi.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 913 bytes from 130.14.29.31
	;; Response received from [130.14.29.31] 913 octets ;; HEADER SECTION ;; id = 8474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (2 records) pubmed.ncbi.nlm.nih.gov. 86400 IN A 34.107.134.59 pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	dns1-ncbi.ncbi.nlm.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to lhcns1.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/DNSKEY
	Received 793 bytes from 130.14.55.72
	;; Response received from [130.14.55.72] 793 octets ;; HEADER SECTION ;; id = 34803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN NSEC3 ( 1 0 0 - jl6qdjdgb5pf4chg9gjoh7irer59109j A TXT AAAA RRSIG ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN RRSIG ( NSEC3 8 5 86400 20261008031816 20260913025511 16545 ncbi.nlm.nih.gov. ZDPQ4uLrq6QVsRQkEBOUla6DL13z7vrlNorlAHQ0hrAbnoi0VV73crgPTaNLI+oF/Vrqb5U5leJ2 dByIHFezr/wLAVHIX/uxL3t0/RAoyaIR0ny/42/EMbsKOpbk4x0jTTelfMyyCcGSivWUHtAavA3+ mjk4cDc/m+APZd6ulXmEq0KtAZh7ZVaFJz4nMmrbKlrr+37wzk7FZuWtCGvlO+b9BnN2V/gSDFp6 aNuqvl0SFTaDUv/zWOZLQXO5AKwT2UbSLxChCZC7F0oBXUsi0AJQ+YBzZLtYI6u/Fa6alwQrHalC G7BjtJZhHMRnEyt2KP3N4ocJ7tRCfm+LEB6e8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ncbi.nlm.nih.gov zone
	Query to dns1-ncbi.ncbi.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	pubmed.ncbi.nlm.nih.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== )`
	RRSIG=16545 and DNSKEY=16545 verifies the A RRset

ncbi.nlm.nih.gov

	Query to ns2.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 372 bytes from 128.231.64.1
	;; Response received from [128.231.64.1] 372 octets ;; HEADER SECTION ;; id = 32624 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (2 records) pubmed.ncbi.nlm.nih.gov. 86400 IN A 34.107.134.59 pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to lhcns2.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/DNSKEY
	Received 793 bytes from 130.14.55.128
	;; Response received from [130.14.55.128] 793 octets ;; HEADER SECTION ;; id = 47455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN NSEC3 ( 1 0 0 - jl6qdjdgb5pf4chg9gjoh7irer59109j A TXT AAAA RRSIG ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN RRSIG ( NSEC3 8 5 86400 20261008031816 20260913025511 16545 ncbi.nlm.nih.gov. ZDPQ4uLrq6QVsRQkEBOUla6DL13z7vrlNorlAHQ0hrAbnoi0VV73crgPTaNLI+oF/Vrqb5U5leJ2 dByIHFezr/wLAVHIX/uxL3t0/RAoyaIR0ny/42/EMbsKOpbk4x0jTTelfMyyCcGSivWUHtAavA3+ mjk4cDc/m+APZd6ulXmEq0KtAZh7ZVaFJz4nMmrbKlrr+37wzk7FZuWtCGvlO+b9BnN2V/gSDFp6 aNuqvl0SFTaDUv/zWOZLQXO5AKwT2UbSLxChCZC7F0oBXUsi0AJQ+YBzZLtYI6u/Fa6alwQrHalC G7BjtJZhHMRnEyt2KP3N4ocJ7tRCfm+LEB6e8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ncbi.nlm.nih.gov zone
	Query to ns2.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	pubmed.ncbi.nlm.nih.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== )`
	RRSIG=16545 and DNSKEY=16545 verifies the A RRset

ncbi.nlm.nih.gov

	Query to lhcns2.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 920 bytes from 130.14.55.128
	;; Response received from [130.14.55.128] 920 octets ;; HEADER SECTION ;; id = 60717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (2 records) pubmed.ncbi.nlm.nih.gov. 86400 IN A 34.107.134.59 pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	lhcns2.nlm.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to dns2-ncbi.ncbi.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/DNSKEY
	Found RRSIG signed by ncbi.nlm.nih.gov zone
	Query to lhcns2.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	pubmed.ncbi.nlm.nih.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== )`
	RRSIG=16545 and DNSKEY=16545 verifies the A RRset

ncbi.nlm.nih.gov

	Query to lhcns1.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 920 bytes from 130.14.55.72
	;; Response received from [130.14.55.72] 920 octets ;; HEADER SECTION ;; id = 10515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (2 records) pubmed.ncbi.nlm.nih.gov. 86400 IN A 34.107.134.59 pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	lhcns1.nlm.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to lhcns1.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/DNSKEY
	Found RRSIG signed by ncbi.nlm.nih.gov zone
	Query to lhcns1.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	pubmed.ncbi.nlm.nih.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== )`
	RRSIG=16545 and DNSKEY=16545 verifies the A RRset

ncbi.nlm.nih.gov

	Query to dns2-ncbi.ncbi.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	Received 913 bytes from 130.14.29.32
	;; Response received from [130.14.29.32] 913 octets ;; HEADER SECTION ;; id = 55390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN A ;; ANSWER SECTION (2 records) pubmed.ncbi.nlm.nih.gov. 86400 IN A 34.107.134.59 pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== ) ;; AUTHORITY SECTION (8 records) ncbi.nlm.nih.gov. 604800 IN NS ns2.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns1.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns2-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS ns3.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS dns1-ncbi.ncbi.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN NS lhcns2.nlm.nih.gov. ncbi.nlm.nih.gov. 604800 IN RRSIG ( NS 8 4 604800 20261015040145 20260920030734 16545 ncbi.nlm.nih.gov. Pev/fyb9r9A2jJubv+bPJjnxDpZUwN1oQPOzrfjUVcwT22SH1Adbc/TjeXRPX/z7jWOUojJAl++w zLcNPZpKdQQsIkED1YKRmyAT4s6fPV8Xldq5UFOFb4h90BWtAENuSSLfjlYI3tGG1pXKZx/EbaVj P0rxl9bZKyaNJq/5bu5hohqNJdDSFe+6M52y16CYDlmCIVGVrvsEhxcPUkca5mr1IO/IBX51RL27 l0sVQXA1MM6SpF4Efk9O8i1QXzQEE9/rqNFZYF4LpgwMPaJb0HFbFm50ofdmUk/VPz30zfB+8vot iUNPx5t0PvmRU7io3WoDFthuFH3AmX1FsjVyRw== ) ;; ADDITIONAL SECTION (5 records) dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN A 130.14.29.32 dns1-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::31 dns2-ncbi.ncbi.nlm.nih.gov. 604800 IN AAAA 2607:f220:41e:4290::32 ;; { "EDNS-VERSION": 0 }
	dns2-ncbi.ncbi.nlm.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to ns3.nih.gov for pubmed.ncbi.nlm.nih.gov/DNSKEY
	Received 793 bytes from 165.112.4.230
	;; Response received from [165.112.4.230] 793 octets ;; HEADER SECTION ;; id = 25972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pubmed.ncbi.nlm.nih.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ncbi.nlm.nih.gov. 86400 IN SOA ( dns1-ncbi.ncbi.nlm.nih.gov. systems.ncbi.nlm.nih.gov. 2026091812 ;serial 32400 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ncbi.nlm.nih.gov. 86400 IN RRSIG ( SOA 8 4 86400 20261019194810 20260924184810 16545 ncbi.nlm.nih.gov. LldR8aXe6W0lKxdcRoKZQ8F83OJdpSKdUo57+Tt51E57+dU2sDdCotayCGj0Op4Q8s0VacfgiwZ9 Cs5N1oXdig6kSm/J/jwvaWdR7/B9Jc2X6AWDyCerHy5fkxwYjZL1hWOCHHK4bYnvTFt2Csn3v4bR VlHcTjLm4GelV2isVWC4HOCecwojkjGagszn6vZlJcTanvqYTVI/UuXPWipHnSrKEnw+Iu2TjwJ9 rB11U6b9Dfe/4VY1JBFMSGMFFweMYWP2eylWSrfkqBqqDY/gxRfk3hmtNXCTkL1sBt55kcXebfKC rOcDFH54AWRCBTRTM0XjaO3UcGXYWh6JuTBxqQ== ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN NSEC3 ( 1 0 0 - jl6qdjdgb5pf4chg9gjoh7irer59109j A TXT AAAA RRSIG ) JJEE4DUTCKGC35KN7BIP9LODUEBJE33N.ncbi.nlm.nih.gov. 86400 IN RRSIG ( NSEC3 8 5 86400 20261008031816 20260913025511 16545 ncbi.nlm.nih.gov. ZDPQ4uLrq6QVsRQkEBOUla6DL13z7vrlNorlAHQ0hrAbnoi0VV73crgPTaNLI+oF/Vrqb5U5leJ2 dByIHFezr/wLAVHIX/uxL3t0/RAoyaIR0ny/42/EMbsKOpbk4x0jTTelfMyyCcGSivWUHtAavA3+ mjk4cDc/m+APZd6ulXmEq0KtAZh7ZVaFJz4nMmrbKlrr+37wzk7FZuWtCGvlO+b9BnN2V/gSDFp6 aNuqvl0SFTaDUv/zWOZLQXO5AKwT2UbSLxChCZC7F0oBXUsi0AJQ+YBzZLtYI6u/Fa6alwQrHalC G7BjtJZhHMRnEyt2KP3N4ocJ7tRCfm+LEB6e8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ncbi.nlm.nih.gov zone
	Query to dns2-ncbi.ncbi.nlm.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	pubmed.ncbi.nlm.nih.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== )`
	RRSIG=16545 and DNSKEY=16545 verifies the A RRset

ncbi.nlm.nih.gov

	Query to ns3.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	ns3.nih.gov is authoritative for pubmed.ncbi.nlm.nih.gov
	Query to ns3.nih.gov for pubmed.ncbi.nlm.nih.gov/DNSKEY
	Found RRSIG signed by ncbi.nlm.nih.gov zone
	Query to ns3.nih.gov for pubmed.ncbi.nlm.nih.gov/A
	pubmed.ncbi.nlm.nih.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`pubmed.ncbi.nlm.nih.gov. 86400 IN RRSIG ( A 8 5 86400 20261011060115 20260916055622 16545 ncbi.nlm.nih.gov. q2acbYdNIxHCgioyf9mSlAmMYjbmGPZOGntRhjlZu3IqkAapLsefNJbQGOkobRLal5ZDMGxmxTIl JZGaYoNCIvTUndiU3ITJigQLYDQWWEaP1IHa90GqfV0uQodnVoVtwakNUGWXi2/T7AkRxxcGO6nG 06fu9DwMwYQDieiOtUx5CeoisW3U0pCGHnAQH1wQPH9oRot62GzpETY1jzMcgWNCbFZCcZ5no6VE L7v27SBp5JmE3KY0WAKvk4WgMaqrfJTppRToZqak7YyWw/5ihYkzCokzlPNrpZHDxcfshwnbL3es bdK32l3gYxKK7iLfV2V7WScTcM0w7ksk2T1Z6w== )`
	RRSIG=16545 and DNSKEY=16545 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pubmed.ncbi.nlm.nih.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: