DNSSEC Analyzer - usdebitcard.gov

Domain Name:

Time: 2020-09-26 19:14:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for usdebitcard.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (1139 bytes) ;; HEADER SECTION ;; id = 5995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=26116 is now in the chain-of-trust
	Query to d.root-servers.net for usdebitcard.gov/A
	Received 670 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (670 bytes) ;; HEADER SECTION ;; id = 8364 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to i.root-servers.net for gov/DNSKEY
	Received 658 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (658 bytes) ;; HEADER SECTION ;; id = 7964 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 48554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for gov in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 9052 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to d.gov-servers.net for usdebitcard.gov/A
	Received 456 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (456 bytes) ;; HEADER SECTION ;; id = 64111 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) usdebitcard.gov. 86400 IN NS ns1.treasury.gov. usdebitcard.gov. 86400 IN NS ns3.treasury.gov. usdebitcard.gov. 3600 IN DS ( 42199 8 1 4b896973001c88e78e46cc07eeb5d424a2fc7936 ) usdebitcard.gov. 3600 IN DS ( 42199 8 2 f977b7744ff7220cc420a59d340104851365a7ae142ac7a4f414a370b5e18a28 ) usdebitcard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. tPtbf3O2OYflLZCN0rqFp7Y83c9TFBaNfF2JmQ9cuM7g23wu7p/f0252F/5xlbegD7GDJRb6Okcs aQUWJbO0luT2sAWdh6gR5Q2IcPUEO/zLgp1oAXc/QlPGTENMutzv1WKey7lBk9VUdECwZ/Il7Ir0 N3LNrQRSgUENhaIVshpP5/k7ZxVZwTdkq4MfAIA56n7T5bfLokh+WUFhmeq6lw== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.gov. 86400 IN A 166.123.208.249 ns1.treasury.gov. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.gov. 86400 IN A 164.95.95.155 ns3.treasury.gov. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for usdebitcard.gov/DNSKEY
	Received 456 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (456 bytes) ;; HEADER SECTION ;; id = 1507 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) usdebitcard.gov. 86400 IN NS ns1.treasury.gov. usdebitcard.gov. 86400 IN NS ns3.treasury.gov. usdebitcard.gov. 3600 IN DS ( 42199 8 1 4b896973001c88e78e46cc07eeb5d424a2fc7936 ) usdebitcard.gov. 3600 IN DS ( 42199 8 2 f977b7744ff7220cc420a59d340104851365a7ae142ac7a4f414a370b5e18a28 ) usdebitcard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. tPtbf3O2OYflLZCN0rqFp7Y83c9TFBaNfF2JmQ9cuM7g23wu7p/f0252F/5xlbegD7GDJRb6Okcs aQUWJbO0luT2sAWdh6gR5Q2IcPUEO/zLgp1oAXc/QlPGTENMutzv1WKey7lBk9VUdECwZ/Il7Ir0 N3LNrQRSgUENhaIVshpP5/k7ZxVZwTdkq4MfAIA56n7T5bfLokh+WUFhmeq6lw== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.gov. 86400 IN A 166.123.208.249 ns1.treasury.gov. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.gov. 86400 IN A 164.95.95.155 ns3.treasury.gov. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone usdebitcard.gov

usdebitcard.gov

	Checking DS between gov and usdebitcard.gov
	Query to b.gov-servers.net for usdebitcard.gov/DS
	Received 323 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (323 bytes) ;; HEADER SECTION ;; id = 41323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN DS ;; ANSWER SECTION (3 records) usdebitcard.gov. 3600 IN DS ( 42199 8 1 4b896973001c88e78e46cc07eeb5d424a2fc7936 ) usdebitcard.gov. 3600 IN DS ( 42199 8 2 f977b7744ff7220cc420a59d340104851365a7ae142ac7a4f414a370b5e18a28 ) usdebitcard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. tPtbf3O2OYflLZCN0rqFp7Y83c9TFBaNfF2JmQ9cuM7g23wu7p/f0252F/5xlbegD7GDJRb6Okcs aQUWJbO0luT2sAWdh6gR5Q2IcPUEO/zLgp1oAXc/QlPGTENMutzv1WKey7lBk9VUdECwZ/Il7Ir0 N3LNrQRSgUENhaIVshpP5/k7ZxVZwTdkq4MfAIA56n7T5bfLokh+WUFhmeq6lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for usdebitcard.gov in the gov zone
	DS=42199/SHA-1 has algorithm RSASHA256
	DS=42199/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`usdebitcard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. tPtbf3O2OYflLZCN0rqFp7Y83c9TFBaNfF2JmQ9cuM7g23wu7p/f0252F/5xlbegD7GDJRb6Okcs aQUWJbO0luT2sAWdh6gR5Q2IcPUEO/zLgp1oAXc/QlPGTENMutzv1WKey7lBk9VUdECwZ/Il7Ir0 N3LNrQRSgUENhaIVshpP5/k7ZxVZwTdkq4MfAIA56n7T5bfLokh+WUFhmeq6lw== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=42199/SHA-1 is now in the chain-of-trust
	`usdebitcard.gov. 3600 IN DS ( 42199 8 1 4b896973001c88e78e46cc07eeb5d424a2fc7936 )`
	`usdebitcard.gov. 3600 IN DS ( 42199 8 2 f977b7744ff7220cc420a59d340104851365a7ae142ac7a4f414a370b5e18a28 )`
	Query to ns3.treasury.gov for usdebitcard.gov/DNSKEY
	Received 690 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (690 bytes) ;; HEADER SECTION ;; id = 58122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN DNSKEY ;; ANSWER SECTION (4 records) usdebitcard.gov. 300 IN DNSKEY ( 257 3 8 AwEAAcvvqlHo1uin8/uQnVNnWG2WjSeIY84aLuuA0EOKH3S75oCEcVFAqCVRK5FOHx/En/kQlh3V K5Am/m5uklUnS07rpXrDzBYYcbuxKI/heCn67N4Oh1S4K+Q/4tiC2o5sTPosjGtqEiXmtg3ImSUm hvQV8YYCpiPC6Iy6AVt8Wpu3 ) ; Key ID = 42199 usdebitcard.gov. 300 IN DNSKEY ( 256 3 8 AwEAAbGPkWXNgRgKtj/v+fv31pGOu7XUd3tTPfl6hQuyzDuKOgN4OojgFluhSeiVF0d9CEtfZn3J X4GXwgq8MqIeulU25jAX//6sRkRhB42AZD606wAXeDxtFdKWf4dewevREd/XAMCGhjFybbxj74kT pCqh+j/hnyjY4iCMp5AzWgep ) ; Key ID = 33795 usdebitcard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003050159 20200926050159 42199 usdebitcard.gov. B8gL8W26AeZ//EfAp1Y8BXP/2aBrmo/SLlNicgh3aJ+PZ0iSvS9jiie30JpACeW4bcw96Fhr5Neq xbC/easTO5gubpls7BR3kuZtiqDLwzUlrunC7Oy6oJoU3koo2YHy6j3cFFTEhXeXmzcbwemRhqJZ SHl7g/UViyGnh8UMHJI= ) usdebitcard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003050159 20200926050159 33795 usdebitcard.gov. a9HkQOgK0Qpf34V0/BsWz4pQMrH35OvVzJTSElmqrOtkIOHC0A5IKQtV3haPVHL4C20Y3pmgqrpt M0bTi4ZicY2gWWruoHTyj/o+gmwzOy7NupTDPRj8xIYp7eobH3RV0TLncfJR6xGaEEihr4Va3hna niDaMlPZDYkfrdi4V+M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for usdebitcard.gov
	`usdebitcard.gov. 300 IN DNSKEY ( 257 3 8 AwEAAcvvqlHo1uin8/uQnVNnWG2WjSeIY84aLuuA0EOKH3S75oCEcVFAqCVRK5FOHx/En/kQlh3V K5Am/m5uklUnS07rpXrDzBYYcbuxKI/heCn67N4Oh1S4K+Q/4tiC2o5sTPosjGtqEiXmtg3ImSUm hvQV8YYCpiPC6Iy6AVt8Wpu3 ) ; Key ID = 42199`
	`usdebitcard.gov. 300 IN DNSKEY ( 256 3 8 AwEAAbGPkWXNgRgKtj/v+fv31pGOu7XUd3tTPfl6hQuyzDuKOgN4OojgFluhSeiVF0d9CEtfZn3J X4GXwgq8MqIeulU25jAX//6sRkRhB42AZD606wAXeDxtFdKWf4dewevREd/XAMCGhjFybbxj74kT pCqh+j/hnyjY4iCMp5AzWgep ) ; Key ID = 33795`
	DNSKEY=42199/SEP is now in the chain-of-trust
	DS=42199/SHA-1 verifies DNSKEY=42199/SEP
	DS=42199/SHA-256 verifies DNSKEY=42199/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`usdebitcard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003050159 20200926050159 42199 usdebitcard.gov. B8gL8W26AeZ//EfAp1Y8BXP/2aBrmo/SLlNicgh3aJ+PZ0iSvS9jiie30JpACeW4bcw96Fhr5Neq xbC/easTO5gubpls7BR3kuZtiqDLwzUlrunC7Oy6oJoU3koo2YHy6j3cFFTEhXeXmzcbwemRhqJZ SHl7g/UViyGnh8UMHJI= )`
	`usdebitcard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003050159 20200926050159 33795 usdebitcard.gov. a9HkQOgK0Qpf34V0/BsWz4pQMrH35OvVzJTSElmqrOtkIOHC0A5IKQtV3haPVHL4C20Y3pmgqrpt M0bTi4ZicY2gWWruoHTyj/o+gmwzOy7NupTDPRj8xIYp7eobH3RV0TLncfJR6xGaEEihr4Va3hna niDaMlPZDYkfrdi4V+M= )`
	RRSIG=42199 and DNSKEY=42199/SEP verifies the DNSKEY RRset
	RRSIG=33795 and DNSKEY=33795 verifies the DNSKEY RRset
	DNSKEY=33795 is now in the chain-of-trust
	Query to ns3.treasury.gov for usdebitcard.gov/A
	Received 1935 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1935 bytes) ;; HEADER SECTION ;; id = 56859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN A ;; ANSWER SECTION (3 records) usdebitcard.gov. 900 IN A 66.151.225.246 usdebitcard.gov. 900 IN A 66.151.225.245 usdebitcard.gov. 900 IN RRSIG ( A 8 2 900 20201002160157 20200925160157 33795 usdebitcard.gov. AlXw5SN5XMOTVcDEHtpEo2hgdhRDpO3geY8JPCuwQxy/uB4y3BLzyyvPKY1Jg0MRuXPzK8KWHRnM HQSbw06Y88k281zfkYWVzQZPo4+so7lhev+aqySR+foEzopgMwREwIb5l6W5OjEiVJMINBgVCOPS XAh0bnxPED7Nxy56BXA= ) ;; AUTHORITY SECTION (3 records) usdebitcard.gov. 300 IN NS ns3.treasury.gov. usdebitcard.gov. 300 IN NS ns1.treasury.gov. usdebitcard.gov. 300 IN RRSIG ( NS 8 2 300 20201002130026 20200925130026 33795 usdebitcard.gov. hMy5ERxwlyfngy1WhwI3cJTXNU9mGsgk9P42tkpxSCzljaCA/apY5N7zj/JkVN6ZGw1EB+3cpegO xtSfFOC/EpGnIVYQ0xuNlYKqEJqumMCoI/a+onkoUO0yquY3qYCj54FZEbTT84ponRMZXH8eb/3n dE5V9ks8vMkbOZQcTw4= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201001132308 20200924132308 22148 treasury.gov. XCrF7AuNeH9RRXGlYTdMJM0gCSzZRugwcSjxW6MDRZ5zn7NnMcwATtPw3R1hwyJf36SeBacrGq3T 2p+bjfYbS9QsR5XEzIVyeoJ6J2e36Z6ldc9hdcTu4KimxLJOUwfmMGdO76rMgbR0/zMeuUDZnY38 /y52m30vo2lT6993FfY= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002052637 20200925052637 22148 treasury.gov. AG77FZXctZztpOjdfpt7tvC3dlLQFUtowIKEMzJT7OeId2eNinETqGmBrrJwmPqpfHrGs1WMqhv5 1RIH8C0iI/2LVJG2GdIdhkMZWQAq+gz4QttI6ZSyWjGU3a7rl4OxKiOUsTenceKoLmaDali5GQst WD0upshDlNjpLBkfQVc= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20200930020933 20200923020933 22148 treasury.gov. enu2/ZISm6zONAU9QnJBq51hvZrXfCOwoAKFh0hoQTqTvF6NTy/jeMq/1Yp+0XVzeH4VhroXb+3V nSrrdXmrtHKNmwlrA+Se/F/HpQf2ZtfR3ld18ZBYghun4PqmzQhgtUpGdw3WclMdELRQwqZE8y56 +OoTYLdL34j3E2+qSNE= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IbwWGfhVc0ekWeI4TuQwCH+0JKs3qS2tvnAAEM+Uw63cCxhX2U6zwyElKw4R9iob7BdDcpw8cqav xXTRQQMnVzMPzpnsBcn66xiKF6/YDjAY3wAPsuKlaT2rGxRwDwrY2GT3O4pCXkONEl0hbaitwoH+ HXjIzPEsFDlgtLoMNhk= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	usdebitcard.gov is authoritative for usdebitcard.gov
	Found RRSIG signed by usdebitcard.gov zone
	Query to ns3.treasury.gov for usdebitcard.gov/SOA
	Received 1958 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1958 bytes) ;; HEADER SECTION ;; id = 41834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN SOA ;; ANSWER SECTION (2 records) usdebitcard.gov. 300 IN SOA ( ns1.treasury.gov. ecb-hosting.fiscal.treasury.gov. 2007125315 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) usdebitcard.gov. 300 IN RRSIG ( SOA 8 2 300 20201001151314 20200924151314 33795 usdebitcard.gov. OqRpKFANLt11e/N5auFGZooUeIUI0dhkD/UxSDnN8fDeDNUUlMGqblgX6EHygEU9VmHxoClZaGTO ieLpRA/nLne88v3C3+jS41rSgHBnrtCAcPENx5f9rcRJDsK6rQBloihYPkYUBnfOe0tpZB6/qhWB iUuBRWvI92LW1ZqwKc4= ) ;; AUTHORITY SECTION (3 records) usdebitcard.gov. 300 IN NS ns3.treasury.gov. usdebitcard.gov. 300 IN NS ns1.treasury.gov. usdebitcard.gov. 300 IN RRSIG ( NS 8 2 300 20201002135126 20200925135126 33795 usdebitcard.gov. gIVXju3HFvPRRot6LTQvC+zB5vUyQT45B4qPhgYmgFsgA+pWeV5zRPOEzy9g0VJCk4vb7KldZq66 TbwNmqIKNrtPuvIAkeL1bTk2UOmILdBJvCXb28SG3osI8H+BRl3T7HwcRJfZB/o3MHpPlytMjp8F L4HtTOxke83qhDTxkWI= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IFNlZMt2lN0Q2kqzlSpRVa8ToCGP0c87BDYv5h4B6P2HW64jdzK57toVBNqxvaR50g/fAr7q1KC1 fKiYMp3dz3T0Fbknhp/1LWC9+7npY17GkLD3oH4iYxqDsmwDSbmIbpUFFScW6lkJ5zGt0OJJpX8t 4ihNMA/rTaLP4rcmjDM= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001132310 20200924132310 22148 treasury.gov. FnR5W8V7r00nl39XJDoIpZ4Reirdr0P8OTQA0v35N1p+OZSYP5DowINvtO4HuksS9QGTfau4opIE 6aUC4UORA7G+sg7BffAhyDdNwwtoVc603rbFQ6lkoer5LKzD+4HiOSz3we1eAtjac2rUEpzK5mUo YD4JJkn8xzfLinvuzoE= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002052633 20200925052633 22148 treasury.gov. RRmFNtnPRJ1kPPlpsmm+Vl2M8EG8Wh/qR88EdW8ZFvMLHNMAS9z6zmFuD7kDYMy/Gcegs/zi86S/ N/x+rUsvTqayRvD81J9Z9KdNTrE7s3tNuQqSIDug19xAXNeupwaiCBOyvXRJRLHiE+cH+8aObD7J yssqsGXGh4DO3TxNgfo= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IbwWGfhVc0ekWeI4TuQwCH+0JKs3qS2tvnAAEM+Uw63cCxhX2U6zwyElKw4R9iob7BdDcpw8cqav xXTRQQMnVzMPzpnsBcn66xiKF6/YDjAY3wAPsuKlaT2rGxRwDwrY2GT3O4pCXkONEl0hbaitwoH+ HXjIzPEsFDlgtLoMNhk= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.gov for usdebitcard.gov/SOA
	Received 1958 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1958 bytes) ;; HEADER SECTION ;; id = 45628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN SOA ;; ANSWER SECTION (2 records) usdebitcard.gov. 300 IN SOA ( ns1.treasury.gov. ecb-hosting.fiscal.treasury.gov. 2007125315 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) usdebitcard.gov. 300 IN RRSIG ( SOA 8 2 300 20201001131209 20200924131209 33795 usdebitcard.gov. WQEI0glEYn1FwgOiRL7pJQGlmkmrYJ5mmhlPkOdpUx5ecEf+bWX2KchOzqGI9E7RLjEPq5COja2c +Cp17FEpjp6mm7pbOVWJJ+LGcIm/nQ7xSoxy+HClmWdcj4ikT6Js7Giqgu15HT6kPPSBUjYrCPfj FjD4T5w70l0OCaEESMg= ) ;; AUTHORITY SECTION (3 records) usdebitcard.gov. 300 IN NS ns1.treasury.gov. usdebitcard.gov. 300 IN NS ns3.treasury.gov. usdebitcard.gov. 300 IN RRSIG ( NS 8 2 300 20201001021614 20200924021614 33795 usdebitcard.gov. kq9FWuQETcsnEMdQXdyviiE4ODlbWpTMUC0CHJfu14y3Kjq7aqm1mQUd1j4avi5/OBctwbm/JujM okY3ktIMbgJHjdP4ZjCLFoR3UTuDHQZUDB6zXnMEadfsW056tWXaGhTy/fSgTY5M+RwVCq6mTLYV ZMrpig+8F4noxTCclDY= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201001021007 20200924021007 22148 treasury.gov. AWBv2+pYa7cIHOshLYG9sNqRxK6bDxmp3+WSN+XlK/xAgZFLATzWNY0p/0hrFhvq9xAEIyWN9R1y nZEk9JDlS1C62lB7trP2wS6xxdvDXwM+wiNxJR8t1l5tBd29/FykrFBhPwJXJDN5pEIE3zsyzGgm B3SEwP9EVDMIy8fRPyY= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001021007 20200924021007 22148 treasury.gov. Tzg29tI7mxJJ3Pv4R1FCkVisBqYT8BpQ+1LmKG3jIrGGBvjTKcklBVrinvJHQlQzffD6ce04GfId DIhTSdF1wvzN2gEDao5V5j6xWPeruaqMLXTpqyj0Yw9JijZc3dDuDLHuD8WXY7UNVpjN3svWslOY osZZZJYxdZt+bq3YZIc= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201001021007 20200924021007 22148 treasury.gov. iCLeDpk0tLXT0010RUpvX2AbuiUW8XDolIKlXdK6egDMY0/2oGWGRf2UXaIpsNuilctW5Ne+lO65 qeE6Qgyq/yNoXrQmUVsEmXerUJok1APf3Y0SR4hnFHnSFo6ltYwdtwjypklAJegTiB0gi0Vs+FeN +DaS/X8ZUEv3YQ0w130= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001021007 20200924021007 22148 treasury.gov. hnrXsjCGSkwq87xjYRt7ja8i5eOwsotNEmKueDEuqEfmkFfToXiLZdy4wFakZksTHmtZRgbE38La +o/jaOpsfPRh44cS/X+dgEenJqtIWHJKyB90YPA+JY0kDWpaHELZiywTb7iJV0HqgTaZ81K9+GtA 0JSPm5E9dDkWsbDARgA= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.treasury.gov for usdebitcard.gov/A
	Received 1935 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1935 bytes) ;; HEADER SECTION ;; id = 56441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usdebitcard.gov. IN A ;; ANSWER SECTION (3 records) usdebitcard.gov. 900 IN A 66.151.225.245 usdebitcard.gov. 900 IN A 66.151.225.246 usdebitcard.gov. 900 IN RRSIG ( A 8 2 900 20201002140756 20200925140756 33795 usdebitcard.gov. ZUETaQ6XRBzcJGFMfUzdj8Jk0XpCXMo4kbLxzPRxaimZ0uydfV1qLiqj5EqL9ae2FzDSIEZkdLDA kNWLMBLFpk0CUHCC6drENum8Hpl+Clu13b6cOU2MRWMTaziQ/E2Izi118onwPGk43bvrzKbdlJ1S freqBC0tGxPotGzuxjg= ) ;; AUTHORITY SECTION (3 records) usdebitcard.gov. 300 IN NS ns1.treasury.gov. usdebitcard.gov. 300 IN NS ns3.treasury.gov. usdebitcard.gov. 300 IN RRSIG ( NS 8 2 300 20201002130809 20200925130809 33795 usdebitcard.gov. fYqa1nUWRB27gy5SuXW1RA7wLZZgdrAUHEejo0MJyfpOlMh0wezR81Rr+z7oWYuLPmjz0GxWhtBf /f8nF1cUVhAfosvCEUhbg3guYJyN4XVHNbVe6uQRYpBg17HIdz32xDFIIlIctuAPL/tJuVH04INI XTWEKozpLRCH/BQ8jYA= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IFNlZMt2lN0Q2kqzlSpRVa8ToCGP0c87BDYv5h4B6P2HW64jdzK57toVBNqxvaR50g/fAr7q1KC1 fKiYMp3dz3T0Fbknhp/1LWC9+7npY17GkLD3oH4iYxqDsmwDSbmIbpUFFScW6lkJ5zGt0OJJpX8t 4ihNMA/rTaLP4rcmjDM= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002052636 20200925052636 22148 treasury.gov. AMLBd5O6vRS12085axXsuKtm12ljuy2Uu1rLWxBo0zRvcxby6M+mg9hD+5MdWMobLKlWp057aedB Z+wfC/IYyHnHuFU/I17/7Y1U/4z00f8bgUP2jZ5n2dIs2FhtL3m9I1iG9YP+oayZujzYW2/2aCBK B7n9A53JAJaxCUHEFPY= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201001132303 20200924132303 22148 treasury.gov. ReqqTW6THnLEKLVoyk42M0MvFdcVJaIWjugWhYQ0dmBAZ0SBdve8ik2IAeSf4dpPIf6OH24//gg/ TrC9Skg+KYhVzmVBMc9A/EPQMW1tcP0D4bBsekpL25Nq/Kb/BA4olBcY7fRfqLKrb/CUvBbody4w UqIkIREQraq1dSBmYxk= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002052635 20200925052635 22148 treasury.gov. VjYf3tzazTH5MpcthagEBQyGeKP3CUle//QU0LVTTrbJEwFPwZVC1zRs6/OcRQDhU3CyuRQNC0ii 0brdRcGaiZOtpYb/GPOGhkBAxdASzsjQlLx3d6SvG4GOSlQ0maVdhowYCuUyizjB2e/XxEqe1gPg L/w7HTHGajAE2ToSJjI= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	usdebitcard.gov A RR has value 66.151.225.245
	usdebitcard.gov A RR has value 66.151.225.246
	Found 1 RRSIGs over A RRset
	`usdebitcard.gov. 900 IN RRSIG ( A 8 2 900 20201002140756 20200925140756 33795 usdebitcard.gov. ZUETaQ6XRBzcJGFMfUzdj8Jk0XpCXMo4kbLxzPRxaimZ0uydfV1qLiqj5EqL9ae2FzDSIEZkdLDA kNWLMBLFpk0CUHCC6drENum8Hpl+Clu13b6cOU2MRWMTaziQ/E2Izi118onwPGk43bvrzKbdlJ1S freqBC0tGxPotGzuxjg= )`
	RRSIG=33795 and DNSKEY=33795 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test usdebitcard.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: