DNSSEC Analyzer - wizard.gov

Domain Name:

Time: 2020-09-26 17:29:36 UTC, NTP stratum 4

Analyzing DNSSEC problems for wizard.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (1139 bytes) ;; HEADER SECTION ;; id = 32588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=26116 is now in the chain-of-trust
	Query to i.root-servers.net for wizard.gov/A
	Received 665 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (665 bytes) ;; HEADER SECTION ;; id = 31966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for gov/DNSKEY
	Received 658 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (658 bytes) ;; HEADER SECTION ;; id = 9260 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 56886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for gov in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 14965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to c.gov-servers.net for wizard.gov/A
	Received 451 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (451 bytes) ;; HEADER SECTION ;; id = 32747 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) wizard.gov. 86400 IN NS ns3.treasury.gov. wizard.gov. 86400 IN NS ns1.treasury.gov. wizard.gov. 3600 IN DS ( 29806 8 2 0bb50bd7f4052e21c63aafab7543e829ade0406d7eddc913ffa8336e05358885 ) wizard.gov. 3600 IN DS 29806 8 1 9a76db0f458b46f649f9bf51ace4fb46d2fe7b43 wizard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. sbqlkkGTG2ppJRIcS/d8VL258kN3uqtEtc9MgI639P2PyCZz3M42JkBQP9BZAtpQQunBEDGAblFQ jnUyNf5N1JAvbMA6ZgLLJtU1U2JakQrhAg18J78yP6j3SmtwDsylPrNFWl7vtIXDF5WCG44AXaUw SXsEVXYMKQxbmIS4Bfr1i06YBrI8Zod+4NBGrKL2mB5YMN5GzFTQnEUI5d8pGQ== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.gov. 86400 IN A 164.95.95.155 ns3.treasury.gov. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.gov. 86400 IN A 166.123.208.249 ns1.treasury.gov. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for wizard.gov/DNSKEY
	Received 451 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (451 bytes) ;; HEADER SECTION ;; id = 12614 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) wizard.gov. 86400 IN NS ns3.treasury.gov. wizard.gov. 86400 IN NS ns1.treasury.gov. wizard.gov. 3600 IN DS ( 29806 8 2 0bb50bd7f4052e21c63aafab7543e829ade0406d7eddc913ffa8336e05358885 ) wizard.gov. 3600 IN DS 29806 8 1 9a76db0f458b46f649f9bf51ace4fb46d2fe7b43 wizard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. sbqlkkGTG2ppJRIcS/d8VL258kN3uqtEtc9MgI639P2PyCZz3M42JkBQP9BZAtpQQunBEDGAblFQ jnUyNf5N1JAvbMA6ZgLLJtU1U2JakQrhAg18J78yP6j3SmtwDsylPrNFWl7vtIXDF5WCG44AXaUw SXsEVXYMKQxbmIS4Bfr1i06YBrI8Zod+4NBGrKL2mB5YMN5GzFTQnEUI5d8pGQ== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.gov. 86400 IN A 164.95.95.155 ns3.treasury.gov. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.gov. 86400 IN A 166.123.208.249 ns1.treasury.gov. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone wizard.gov

wizard.gov

	Checking DS between gov and wizard.gov
	Query to a.gov-servers.net for wizard.gov/DS
	Received 318 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (318 bytes) ;; HEADER SECTION ;; id = 11974 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN DS ;; ANSWER SECTION (3 records) wizard.gov. 3600 IN DS ( 29806 8 2 0bb50bd7f4052e21c63aafab7543e829ade0406d7eddc913ffa8336e05358885 ) wizard.gov. 3600 IN DS 29806 8 1 9a76db0f458b46f649f9bf51ace4fb46d2fe7b43 wizard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. sbqlkkGTG2ppJRIcS/d8VL258kN3uqtEtc9MgI639P2PyCZz3M42JkBQP9BZAtpQQunBEDGAblFQ jnUyNf5N1JAvbMA6ZgLLJtU1U2JakQrhAg18J78yP6j3SmtwDsylPrNFWl7vtIXDF5WCG44AXaUw SXsEVXYMKQxbmIS4Bfr1i06YBrI8Zod+4NBGrKL2mB5YMN5GzFTQnEUI5d8pGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for wizard.gov in the gov zone
	DS=29806/SHA-256 has algorithm RSASHA256
	DS=29806/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wizard.gov. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. sbqlkkGTG2ppJRIcS/d8VL258kN3uqtEtc9MgI639P2PyCZz3M42JkBQP9BZAtpQQunBEDGAblFQ jnUyNf5N1JAvbMA6ZgLLJtU1U2JakQrhAg18J78yP6j3SmtwDsylPrNFWl7vtIXDF5WCG44AXaUw SXsEVXYMKQxbmIS4Bfr1i06YBrI8Zod+4NBGrKL2mB5YMN5GzFTQnEUI5d8pGQ== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=29806/SHA-256 is now in the chain-of-trust
	`wizard.gov. 3600 IN DS ( 29806 8 2 0bb50bd7f4052e21c63aafab7543e829ade0406d7eddc913ffa8336e05358885 )`
	`wizard.gov. 3600 IN DS 29806 8 1 9a76db0f458b46f649f9bf51ace4fb46d2fe7b43`
	Query to ns3.treasury.gov for wizard.gov/DNSKEY
	Received 675 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (675 bytes) ;; HEADER SECTION ;; id = 62534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN DNSKEY ;; ANSWER SECTION (4 records) wizard.gov. 300 IN DNSKEY ( 257 3 8 AwEAAedUH71NPqyiQ6wQBjpKtoZ/RXiMXZOxlqt4ytfDIeJRFzftacpU3qoxqpmQi7YZ00sIdPyJ E5QAanRI8FjzvXQNf6MzT7IM9+wBQLUFFhqRviNGb4FmjDkVl5w3kbXyiBm2V9oVljd52IS38yjn dZVqHwUfiAgzwZ4432ljnqQJ ) ; Key ID = 29806 wizard.gov. 300 IN DNSKEY ( 256 3 8 AwEAAb8IkkZ0HHEJX1odZ+bgCXMI5WITDLTkFaDV8Z+STxEPtN5wexdQi1zboEuxKHyP4fmVb07W ykJGM1hGlOyxuJ1iHR5PHqbTo1oWZjVgQE9oqfWABA8LLPve511E/hqRXYO3Sv7YY4gKpS8SmV3r pM0rKghDsJuoGJhwqeBp8/4D ) ; Key ID = 47475 wizard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003043527 20200926043527 29806 wizard.gov. pozqEmb/FeYTUuBRYz8PSUOKz0Lfq4+5y6QvtBh05NIqhmTZczzv9vl0JFHwkmDBXq93AhgISFzJ 1tR6fQKIIPWVoI+v1ziIVEiZ+1CW1wX3s7MCmbXmnwfT/ydJDtEBJt+2bg4cojG1v3fKmsSQ+9ks nkg1gFCel8iD/zih0Uo= ) wizard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003043527 20200926043527 47475 wizard.gov. QUOyJ7qJu6ItE5S2zdDyM+zjJfsiq9sWd1n5IuyrjgVwREYjiGyJ88Bsj8HEZt1khjYrk6madWQw gY4RjwiGrQEB6CN6QhWgZH5e/Tfjndb1O/epQDWchraWhTFBqa0BlzCrNE2WZU7/gpwM0h9o+3NA 0QY+tuA9sYFmmY+7F0E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wizard.gov
	`wizard.gov. 300 IN DNSKEY ( 257 3 8 AwEAAedUH71NPqyiQ6wQBjpKtoZ/RXiMXZOxlqt4ytfDIeJRFzftacpU3qoxqpmQi7YZ00sIdPyJ E5QAanRI8FjzvXQNf6MzT7IM9+wBQLUFFhqRviNGb4FmjDkVl5w3kbXyiBm2V9oVljd52IS38yjn dZVqHwUfiAgzwZ4432ljnqQJ ) ; Key ID = 29806`
	`wizard.gov. 300 IN DNSKEY ( 256 3 8 AwEAAb8IkkZ0HHEJX1odZ+bgCXMI5WITDLTkFaDV8Z+STxEPtN5wexdQi1zboEuxKHyP4fmVb07W ykJGM1hGlOyxuJ1iHR5PHqbTo1oWZjVgQE9oqfWABA8LLPve511E/hqRXYO3Sv7YY4gKpS8SmV3r pM0rKghDsJuoGJhwqeBp8/4D ) ; Key ID = 47475`
	DNSKEY=29806/SEP is now in the chain-of-trust
	DS=29806/SHA-256 verifies DNSKEY=29806/SEP
	DS=29806/SHA-1 verifies DNSKEY=29806/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`wizard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003043527 20200926043527 29806 wizard.gov. pozqEmb/FeYTUuBRYz8PSUOKz0Lfq4+5y6QvtBh05NIqhmTZczzv9vl0JFHwkmDBXq93AhgISFzJ 1tR6fQKIIPWVoI+v1ziIVEiZ+1CW1wX3s7MCmbXmnwfT/ydJDtEBJt+2bg4cojG1v3fKmsSQ+9ks nkg1gFCel8iD/zih0Uo= )`
	`wizard.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20201003043527 20200926043527 47475 wizard.gov. QUOyJ7qJu6ItE5S2zdDyM+zjJfsiq9sWd1n5IuyrjgVwREYjiGyJ88Bsj8HEZt1khjYrk6madWQw gY4RjwiGrQEB6CN6QhWgZH5e/Tfjndb1O/epQDWchraWhTFBqa0BlzCrNE2WZU7/gpwM0h9o+3NA 0QY+tuA9sYFmmY+7F0E= )`
	RRSIG=29806 and DNSKEY=29806/SEP verifies the DNSKEY RRset
	RRSIG=47475 and DNSKEY=47475 verifies the DNSKEY RRset
	DNSKEY=47475 is now in the chain-of-trust
	Query to ns3.treasury.gov for wizard.gov/A
	Received 1904 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1904 bytes) ;; HEADER SECTION ;; id = 17201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN A ;; ANSWER SECTION (2 records) wizard.gov. 300 IN A 166.123.219.80 wizard.gov. 300 IN RRSIG ( A 8 2 300 20201002135939 20200925135939 47475 wizard.gov. mZY81PEhIPYWQvMkTy9YWggFir1h7vmWIPfd53fExICOCJEPhUoIpVV3PbJ1pOIxSAckb5iy9pgN /eYar6FPlhCO9WRNOX3kRdvYrG0/twb1SdTW644kKsNZgQJJxNjVSRfEBJGyie4/cPUQEYLQHXf7 yNXbnGeT9g6vNYkEXV4= ) ;; AUTHORITY SECTION (3 records) wizard.gov. 300 IN NS ns3.treasury.gov. wizard.gov. 300 IN NS ns1.treasury.gov. wizard.gov. 300 IN RRSIG ( NS 8 2 300 20201002114328 20200925114328 47475 wizard.gov. Tu+GQMIsxUjgIqWEkn/J3dK7jwQUcBhEDuV1PlZ7aNXZuaQAqH/TsTjJSQoYhLl2crjbCHdpz2xB SeTv7VpfyCkLrhF/7D0lQqA7bGaUyPOetFPY8o/TBPsLgKzLLTq/RL0WkHPV6HK4F+5uYnSsh5KD qdzHo/D3unmIBpTWj9U= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IFNlZMt2lN0Q2kqzlSpRVa8ToCGP0c87BDYv5h4B6P2HW64jdzK57toVBNqxvaR50g/fAr7q1KC1 fKiYMp3dz3T0Fbknhp/1LWC9+7npY17GkLD3oH4iYxqDsmwDSbmIbpUFFScW6lkJ5zGt0OJJpX8t 4ihNMA/rTaLP4rcmjDM= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002052636 20200925052636 22148 treasury.gov. AMLBd5O6vRS12085axXsuKtm12ljuy2Uu1rLWxBo0zRvcxby6M+mg9hD+5MdWMobLKlWp057aedB Z+wfC/IYyHnHuFU/I17/7Y1U/4z00f8bgUP2jZ5n2dIs2FhtL3m9I1iG9YP+oayZujzYW2/2aCBK B7n9A53JAJaxCUHEFPY= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201001132303 20200924132303 22148 treasury.gov. ReqqTW6THnLEKLVoyk42M0MvFdcVJaIWjugWhYQ0dmBAZ0SBdve8ik2IAeSf4dpPIf6OH24//gg/ TrC9Skg+KYhVzmVBMc9A/EPQMW1tcP0D4bBsekpL25Nq/Kb/BA4olBcY7fRfqLKrb/CUvBbody4w UqIkIREQraq1dSBmYxk= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002052635 20200925052635 22148 treasury.gov. VjYf3tzazTH5MpcthagEBQyGeKP3CUle//QU0LVTTrbJEwFPwZVC1zRs6/OcRQDhU3CyuRQNC0ii 0brdRcGaiZOtpYb/GPOGhkBAxdASzsjQlLx3d6SvG4GOSlQ0maVdhowYCuUyizjB2e/XxEqe1gPg L/w7HTHGajAE2ToSJjI= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	wizard.gov is authoritative for wizard.gov
	Found RRSIG signed by wizard.gov zone
	Query to ns3.treasury.gov for wizard.gov/SOA
	Received 1943 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1943 bytes) ;; HEADER SECTION ;; id = 12382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN SOA ;; ANSWER SECTION (2 records) wizard.gov. 300 IN SOA ( ns1.treasury.gov. ecb-hosting.fiscal.treasury.gov. 226669 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) wizard.gov. 300 IN RRSIG ( SOA 8 2 300 20201002201725 20200925201725 47475 wizard.gov. J+5Pv/W+h6znbz6zrqvaekNCUOibGqkvkK8NnkAhqVlLNzoTDyVgoAUnUwEwpHyTVYNo7nbm7FcU UJ0Ig5+LiBim49E2aUOXYn0dJicWdJJQAwHxxpDdeX9Mb8Ew2JV5RLI5zBa5E8kEfq2+y+8y1tDj yJ6I/jnRJMri4TD+IiU= ) ;; AUTHORITY SECTION (3 records) wizard.gov. 300 IN NS ns3.treasury.gov. wizard.gov. 300 IN NS ns1.treasury.gov. wizard.gov. 300 IN RRSIG ( NS 8 2 300 20201002114742 20200925114742 47475 wizard.gov. UNV4VqJ1rwcaThAUJ83kpyCOWpyNZskIWj/aAYbCxsYfAfqtmd86NV5QH6pfAUUEYZM3+05nIocc ulGuHnXo4oeDell5NPLq3GYYUNoiJ5ISiJ6KMaypH+gemynatu6j/Ikl1iegsuFYQc81uZb4zGqn fez0tnA2dlpca0WRWoA= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IFNlZMt2lN0Q2kqzlSpRVa8ToCGP0c87BDYv5h4B6P2HW64jdzK57toVBNqxvaR50g/fAr7q1KC1 fKiYMp3dz3T0Fbknhp/1LWC9+7npY17GkLD3oH4iYxqDsmwDSbmIbpUFFScW6lkJ5zGt0OJJpX8t 4ihNMA/rTaLP4rcmjDM= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001132303 20200924132303 22148 treasury.gov. IZU9UVIOWP8LhtBn67+KkeZVfSfYdoDJdmYpXNhlMqrDURGYAyxetwXjkce7lp8KwaeuyIGDRKwH L9wLl878QuCb+n/m5WVddyJJpcNvm8X7yc3RCsIIPveP5nYz0yKuIJTj0vyiIZ5cHHYamDXWuMVb 6sOVGKFB1Er83DcV9KI= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002044036 20200925044036 22148 treasury.gov. TubUXNYtPQUMS6odz2oRfAfuoNJw5D0lLABNQ5eXwE838KbNL5vORL/5dmGbATngyHnmwk3OLpaj vKjpoM7DD0QBTHboyUvFbgrpUT1d4GreIy5lTW1Iuc2NAdHZcQM5Y4tSz5BkVQMoC+IdRiPJjqsa eNneB6Ab0+Qy+/qz/ZE= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IbwWGfhVc0ekWeI4TuQwCH+0JKs3qS2tvnAAEM+Uw63cCxhX2U6zwyElKw4R9iob7BdDcpw8cqav xXTRQQMnVzMPzpnsBcn66xiKF6/YDjAY3wAPsuKlaT2rGxRwDwrY2GT3O4pCXkONEl0hbaitwoH+ HXjIzPEsFDlgtLoMNhk= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.gov for wizard.gov/SOA
	Received 1943 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1943 bytes) ;; HEADER SECTION ;; id = 63895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN SOA ;; ANSWER SECTION (2 records) wizard.gov. 300 IN SOA ( ns1.treasury.gov. ecb-hosting.fiscal.treasury.gov. 226669 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) wizard.gov. 300 IN RRSIG ( SOA 8 2 300 20201001090237 20200924090237 47475 wizard.gov. kzzoPP0yFD6Nrw2yYMQJtqFdYlgtkhgxH0AuGGpH0hmXjYgtfBl0TXjHAwj9F1Ot5JCIALCm7yuC 9YKrHFWdTwFupgrTCwZo9lDtVZexXjz0cOC44uddPiXMEtLd6rYaAU6b10vY60EZVxUbt2Tie56j ohSG5KYup/XYhiPWBrw= ) ;; AUTHORITY SECTION (3 records) wizard.gov. 300 IN NS ns3.treasury.gov. wizard.gov. 300 IN NS ns1.treasury.gov. wizard.gov. 300 IN RRSIG ( NS 8 2 300 20201001022351 20200924022351 47475 wizard.gov. SzSPKNDC7RnfuCmdXw89jQdGD0aHad7Wk5klhCSj21sZeUMFYwTY1qYxAe4pDirKI0UC0wykk87u k0aESyO0RzWPCwCmteZOTuVIM4q91iiY7ljaWQPbeZJ8RJ+5/52DwieQlOeeFHwQiRbesUGzLB7+ X4q0NVHTWledyvkQrrw= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201001021007 20200924021007 22148 treasury.gov. AWBv2+pYa7cIHOshLYG9sNqRxK6bDxmp3+WSN+XlK/xAgZFLATzWNY0p/0hrFhvq9xAEIyWN9R1y nZEk9JDlS1C62lB7trP2wS6xxdvDXwM+wiNxJR8t1l5tBd29/FykrFBhPwJXJDN5pEIE3zsyzGgm B3SEwP9EVDMIy8fRPyY= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001021007 20200924021007 22148 treasury.gov. Tzg29tI7mxJJ3Pv4R1FCkVisBqYT8BpQ+1LmKG3jIrGGBvjTKcklBVrinvJHQlQzffD6ce04GfId DIhTSdF1wvzN2gEDao5V5j6xWPeruaqMLXTpqyj0Yw9JijZc3dDuDLHuD8WXY7UNVpjN3svWslOY osZZZJYxdZt+bq3YZIc= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201001021007 20200924021007 22148 treasury.gov. iCLeDpk0tLXT0010RUpvX2AbuiUW8XDolIKlXdK6egDMY0/2oGWGRf2UXaIpsNuilctW5Ne+lO65 qeE6Qgyq/yNoXrQmUVsEmXerUJok1APf3Y0SR4hnFHnSFo6ltYwdtwjypklAJegTiB0gi0Vs+FeN +DaS/X8ZUEv3YQ0w130= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001021007 20200924021007 22148 treasury.gov. hnrXsjCGSkwq87xjYRt7ja8i5eOwsotNEmKueDEuqEfmkFfToXiLZdy4wFakZksTHmtZRgbE38La +o/jaOpsfPRh44cS/X+dgEenJqtIWHJKyB90YPA+JY0kDWpaHELZiywTb7iJV0HqgTaZ81K9+GtA 0JSPm5E9dDkWsbDARgA= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.treasury.gov for wizard.gov/A
	Received 1904 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1904 bytes) ;; HEADER SECTION ;; id = 47943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wizard.gov. IN A ;; ANSWER SECTION (2 records) wizard.gov. 300 IN A 166.123.219.80 wizard.gov. 300 IN RRSIG ( A 8 2 300 20201002122233 20200925122233 47475 wizard.gov. uQVr4QlevnOISeLapcgZv2QtXFQ2BL5+al5ZXtiwEddroDGm+ZKxNDwbBavDqP/Kui9EVYSOZoiH uz6ejve0YWgXgmjcLq8621MzAEx5oL1CKWjZZfMJB4Uo7wbY8FG/g2nHSGKYoV6b9xe9tggas8ha EX1mO4K4bXjrDJxNduQ= ) ;; AUTHORITY SECTION (3 records) wizard.gov. 300 IN NS ns1.treasury.gov. wizard.gov. 300 IN NS ns3.treasury.gov. wizard.gov. 300 IN RRSIG ( NS 8 2 300 20201002120536 20200925120536 47475 wizard.gov. XjXI+gCedkekruSHchbhQMjtfXhFdZz/CHu6Q8OlOuE1Pa19lGMaeLjyKaMyzO9JJwCQy8o0K0oA 6eJwnHgLE7IBeAEgPVuO02IAgWnQfQZKBTEvBY+FuGwSK4Je7dEf1EapItBLcIlRHroiYI/UzkSu lKsGYX82bDnK6G0c3fs= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IFNlZMt2lN0Q2kqzlSpRVa8ToCGP0c87BDYv5h4B6P2HW64jdzK57toVBNqxvaR50g/fAr7q1KC1 fKiYMp3dz3T0Fbknhp/1LWC9+7npY17GkLD3oH4iYxqDsmwDSbmIbpUFFScW6lkJ5zGt0OJJpX8t 4ihNMA/rTaLP4rcmjDM= ) ns3.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001132307 20200924132307 22148 treasury.gov. N2we3vUhFM8ftd5ES958qa9hH9ZeSbvRL80jU12787ApjqPZoET/GI+7tAloyNoFlsTJCfPGRFEO i26UhfCYWW/s9lSHyya6nfWzsx3Sd1pcapKKrKpuUohMryEHTE+pSYrqqEKpdq6x83MhlWodNOsK M8j98Ah1Tzb/D4HGFQU= ) ns3.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20200930020933 20200923020933 22148 treasury.gov. enu2/ZISm6zONAU9QnJBq51hvZrXfCOwoAKFh0hoQTqTvF6NTy/jeMq/1Yp+0XVzeH4VhroXb+3V nSrrdXmrtHKNmwlrA+Se/F/HpQf2ZtfR3ld18ZBYghun4PqmzQhgtUpGdw3WclMdELRQwqZE8y56 +OoTYLdL34j3E2+qSNE= ) ns1.treasury.gov. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201001132307 20200924132307 22148 treasury.gov. JQVcmI5Fu/zs+UuQaaj5lDiA8quPyVA6eW5r3BkotoJfpsysKDnQsuIdaDAtnXgkfsa+S6RrAgOP rZXx5L7/HCXxXWBsn4Gfo6hCh3XuSgdfpBOYxVG2KgQ1BIzCs8TbYCXabOnfvcRPrPStQQzTSz3Z 61FHko/qAE/vTJeuj2Y= ) ns1.treasury.gov. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	wizard.gov A RR has value 166.123.219.80
	Found 1 RRSIGs over A RRset
	`wizard.gov. 300 IN RRSIG ( A 8 2 300 20201002122233 20200925122233 47475 wizard.gov. uQVr4QlevnOISeLapcgZv2QtXFQ2BL5+al5ZXtiwEddroDGm+ZKxNDwbBavDqP/Kui9EVYSOZoiH uz6ejve0YWgXgmjcLq8621MzAEx5oL1CKWjZZfMJB4Uo7wbY8FG/g2nHSGKYoV6b9xe9tggas8ha EX1mO4K4bXjrDJxNduQ= )`
	RRSIG=47475 and DNSKEY=47475 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test wizard.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: