DNSSEC Debugger - dtic.mil

Domain Name:

Time: 2024-05-21 02:18:24 UTC

Analyzing DNSSEC problems for dtic.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 59579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to j.root-servers.net for dtic.mil/A
	Received 755 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 755 octets ;; HEADER SECTION ;; id = 40550 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240602170000 20240520160000 5613 . IRVuTSCI1DOcttthYtqrzdkjpW0EUjL0vfrIbK6e1B60HO4nuZbeuzgANC45/nu46WoXDEvgq5Df VH+8ZEPdgdxdZEHmPHfgKOvSP4EJtuOtzM1wymTaDmm2ZelSveMYgn3sn/tT0WpV+yArS+M9lBtI 7XQGy1qgKtNA5aeF0tPhIiQTnEKYYNV/DNdJB2OtcDg6D0v7cJ4ymHUexYlxUDYISpeznumHDpXq SjzKu4B1PPFERoax6CNq8Bg1NhDSLpOeDUzXnA3IA4YRPHBkZx3W0lhRkdyRXurfRNI3EnqkXMNf JrgKNhk2n5EFt9p7mz9P2M2z4p4bSViwEE7Phg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for mil/DNSKEY
	Received 753 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 753 octets ;; HEADER SECTION ;; id = 12267 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240602170000 20240520160000 5613 . IRVuTSCI1DOcttthYtqrzdkjpW0EUjL0vfrIbK6e1B60HO4nuZbeuzgANC45/nu46WoXDEvgq5Df VH+8ZEPdgdxdZEHmPHfgKOvSP4EJtuOtzM1wymTaDmm2ZelSveMYgn3sn/tT0WpV+yArS+M9lBtI 7XQGy1qgKtNA5aeF0tPhIiQTnEKYYNV/DNdJB2OtcDg6D0v7cJ4ymHUexYlxUDYISpeznumHDpXq SjzKu4B1PPFERoax6CNq8Bg1NhDSLpOeDUzXnA3IA4YRPHBkZx3W0lhRkdyRXurfRNI3EnqkXMNf JrgKNhk2n5EFt9p7mz9P2M2z4p4bSViwEE7Phg== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to k.root-servers.net for mil/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 49287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240602170000 20240520160000 5613 . IRVuTSCI1DOcttthYtqrzdkjpW0EUjL0vfrIbK6e1B60HO4nuZbeuzgANC45/nu46WoXDEvgq5Df VH+8ZEPdgdxdZEHmPHfgKOvSP4EJtuOtzM1wymTaDmm2ZelSveMYgn3sn/tT0WpV+yArS+M9lBtI 7XQGy1qgKtNA5aeF0tPhIiQTnEKYYNV/DNdJB2OtcDg6D0v7cJ4ymHUexYlxUDYISpeznumHDpXq SjzKu4B1PPFERoax6CNq8Bg1NhDSLpOeDUzXnA3IA4YRPHBkZx3W0lhRkdyRXurfRNI3EnqkXMNf JrgKNhk2n5EFt9p7mz9P2M2z4p4bSViwEE7Phg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20240602170000 20240520160000 5613 . IRVuTSCI1DOcttthYtqrzdkjpW0EUjL0vfrIbK6e1B60HO4nuZbeuzgANC45/nu46WoXDEvgq5Df VH+8ZEPdgdxdZEHmPHfgKOvSP4EJtuOtzM1wymTaDmm2ZelSveMYgn3sn/tT0WpV+yArS+M9lBtI 7XQGy1qgKtNA5aeF0tPhIiQTnEKYYNV/DNdJB2OtcDg6D0v7cJ4ymHUexYlxUDYISpeznumHDpXq SjzKu4B1PPFERoax6CNq8Bg1NhDSLpOeDUzXnA3IA4YRPHBkZx3W0lhRkdyRXurfRNI3EnqkXMNf JrgKNhk2n5EFt9p7mz9P2M2z4p4bSViwEE7Phg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 1061 octets ;; HEADER SECTION ;; id = 37577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdvFYY0hKdDY950UG+j644PdG1GubkMMtu1wtjId9K56g8dkG5PTydnx6vOePTzVK+3n4QJI fg/DgAAwRZqWPfT3WYrI1+xXELYwsivLBnzvYJLF0J3oNnPckylM2ga73YTup6KeeCF4RI5danFQ E4Vc7lFa7SCYOoDCf7BUK3qp ) ; Key ID = 9246 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcCL5yk/t68xKjoUizomCYRHBSEfRfYWpTHoD45ifYStBQQ/BJQp0MQpZMegfiOWIj98Bty6 JfgCvie+hpb8bUnonBNlAd8iTRVlIWLn+vbrcwdKqQ/JGs4nZ+cEhxlWMHxnQzP+WgoXkhGGApGH /qz/TpFJ/gUVE5YuvX8zndYF ) ; Key ID = 45154 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240527111531 20240520111531 16801 mil. Xh/jBSPe/cBmZ8EiKzIoV7WHu5YXdNT1AbmhdJP5J8T0U0wFneGTc84Id4O4Hrh55j+a04i9IcJR 4HyBYoFtijn93OYT+jBl4kRU9XpUed7BWxUEB69yd3HCSoTzGdIYuW2vJSt+wnGr/h0yvZ/iUVN7 xvMZQH/K+3inUl1k37+2FM/5m5mS9/0hoFIBpQUT8spl5o/HReH/YU9pkDNsxKDESWR6Lx2VOUfw eo3uB1IyVVhxxGmr5LdHmst1oHho2eRUz1QbUBWMrRfzl08hjB+ctj/PetiarbLdPEvQaWzGVr2R vnQyvo0jQmxkKfuCS/GO/Kv4ocZinjPbLijinA== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240527111531 20240520111531 45154 mil. SGFzmxVFp0OvrVctC5fGcUB3RGCoYG74We4HpzYSPEp+sJOtO2aPxyHHduZB4cH/OI3xEZc6l3en dv7v40/dwobWVZFnYJBSR8HuOsId0Fxbw19DacXjvVVQHBnHWHTCiWF0UeMxTO++Iq5ocb+oQZfX Jn9TBwZjTBYNTCdZaDY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdvFYY0hKdDY950UG+j644PdG1GubkMMtu1wtjId9K56g8dkG5PTydnx6vOePTzVK+3n4QJI fg/DgAAwRZqWPfT3WYrI1+xXELYwsivLBnzvYJLF0J3oNnPckylM2ga73YTup6KeeCF4RI5danFQ E4Vc7lFa7SCYOoDCf7BUK3qp ) ; Key ID = 9246`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcCL5yk/t68xKjoUizomCYRHBSEfRfYWpTHoD45ifYStBQQ/BJQp0MQpZMegfiOWIj98Bty6 JfgCvie+hpb8bUnonBNlAd8iTRVlIWLn+vbrcwdKqQ/JGs4nZ+cEhxlWMHxnQzP+WgoXkhGGApGH /qz/TpFJ/gUVE5YuvX8zndYF ) ; Key ID = 45154`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240527111531 20240520111531 16801 mil. Xh/jBSPe/cBmZ8EiKzIoV7WHu5YXdNT1AbmhdJP5J8T0U0wFneGTc84Id4O4Hrh55j+a04i9IcJR 4HyBYoFtijn93OYT+jBl4kRU9XpUed7BWxUEB69yd3HCSoTzGdIYuW2vJSt+wnGr/h0yvZ/iUVN7 xvMZQH/K+3inUl1k37+2FM/5m5mS9/0hoFIBpQUT8spl5o/HReH/YU9pkDNsxKDESWR6Lx2VOUfw eo3uB1IyVVhxxGmr5LdHmst1oHho2eRUz1QbUBWMrRfzl08hjB+ctj/PetiarbLdPEvQaWzGVr2R vnQyvo0jQmxkKfuCS/GO/Kv4ocZinjPbLijinA== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240527111531 20240520111531 45154 mil. SGFzmxVFp0OvrVctC5fGcUB3RGCoYG74We4HpzYSPEp+sJOtO2aPxyHHduZB4cH/OI3xEZc6l3en dv7v40/dwobWVZFnYJBSR8HuOsId0Fxbw19DacXjvVVQHBnHWHTCiWF0UeMxTO++Iq5ocb+oQZfX Jn9TBwZjTBYNTCdZaDY= )`
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=45154 and DNSKEY=45154 verifies the DNSKEY RRset
	DNSKEY=9246 is now in the chain-of-trust
	DNSKEY=45154 is now in the chain-of-trust
	Query to con2.nipr.mil for dtic.mil/A
	Received 678 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 678 octets ;; HEADER SECTION ;; id = 53995 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 10800 IN DS ( 4528 13 2 0342a1f27e5c177c479ee65ed8d326271111c2eed636aa825861ec3526975c8e ) DTIC.MIL. 10800 IN DS 4528 13 1 bd6c2acb238a182f52c9e1ede927dfb70778bcb3 DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240527111531 20240520111531 45154 mil. LfCj5KDuk9ul13ZpUi4p4bvXd0gth61k3q41tZxNT7Pl+H82/n2SDKP3VtIMPsnktLyUA52z6gMJ 2WZWvmMDK2AqjpRmz2HhE1m652ushBxykaVkwzzmgnMJ3DKxvOl0IV1EGcC5SNgXzs3uwN6Q9GKN aYWTtJCUNZirlE28A/Q= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to con1.nipr.mil for dtic.mil/DNSKEY
	Received 678 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 678 octets ;; HEADER SECTION ;; id = 49445 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 10800 IN DS ( 4528 13 2 0342a1f27e5c177c479ee65ed8d326271111c2eed636aa825861ec3526975c8e ) DTIC.MIL. 10800 IN DS 4528 13 1 bd6c2acb238a182f52c9e1ede927dfb70778bcb3 DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240527111531 20240520111531 45154 mil. LfCj5KDuk9ul13ZpUi4p4bvXd0gth61k3q41tZxNT7Pl+H82/n2SDKP3VtIMPsnktLyUA52z6gMJ 2WZWvmMDK2AqjpRmz2HhE1m652ushBxykaVkwzzmgnMJ3DKxvOl0IV1EGcC5SNgXzs3uwN6Q9GKN aYWTtJCUNZirlE28A/Q= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dtic.mil

dtic.mil

	Checking DS between mil and dtic.mil
	Query to con1.nipr.mil for dtic.mil/DS
	Received 292 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 292 octets ;; HEADER SECTION ;; id = 50411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DS ;; ANSWER SECTION (3 records) DTIC.MIL. 10800 IN DS ( 4528 13 2 0342a1f27e5c177c479ee65ed8d326271111c2eed636aa825861ec3526975c8e ) DTIC.MIL. 10800 IN DS 4528 13 1 bd6c2acb238a182f52c9e1ede927dfb70778bcb3 DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240527111531 20240520111531 45154 mil. LfCj5KDuk9ul13ZpUi4p4bvXd0gth61k3q41tZxNT7Pl+H82/n2SDKP3VtIMPsnktLyUA52z6gMJ 2WZWvmMDK2AqjpRmz2HhE1m652ushBxykaVkwzzmgnMJ3DKxvOl0IV1EGcC5SNgXzs3uwN6Q9GKN aYWTtJCUNZirlE28A/Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dtic.mil in the mil zone
	DS=4528/SHA-1 uses a deprecated digest algorithm
	DS=4528/SHA-256 has algorithm ECDSAP256SHA256
	DS=4528/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240527111531 20240520111531 45154 mil. LfCj5KDuk9ul13ZpUi4p4bvXd0gth61k3q41tZxNT7Pl+H82/n2SDKP3VtIMPsnktLyUA52z6gMJ 2WZWvmMDK2AqjpRmz2HhE1m652ushBxykaVkwzzmgnMJ3DKxvOl0IV1EGcC5SNgXzs3uwN6Q9GKN aYWTtJCUNZirlE28A/Q= )`
	RRSIG=45154 and DNSKEY=45154 verifies the DS RRset
	DS=4528/SHA-256 is now in the chain-of-trust
	`DTIC.MIL. 10800 IN DS ( 4528 13 2 0342a1f27e5c177c479ee65ed8d326271111c2eed636aa825861ec3526975c8e )`
	`DTIC.MIL. 10800 IN DS 4528 13 1 bd6c2acb238a182f52c9e1ede927dfb70778bcb3`
	Query to DNS1.NIPR.MIL for dtic.mil/DNSKEY
	Received 485 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 485 octets ;; HEADER SECTION ;; id = 6892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (5 records) dtic.mil. 2945 IN DNSKEY ( 256 3 13 HTcdG1QRzn6ccfRav6FDAk7W1r6plmQopj38HXOAi4R/kIV2ir4OiOe7ZLDiUpuSeQ2ADRyB1T5p jLGDZBbqfQ== ) ; Key ID = 34355 dtic.mil. 2945 IN DNSKEY ( 257 3 13 ywwQtPueK8ZsrvyJw3XCXxXFU3ge8FeF8ujJcxZtsKNQYgDZtHWagVXadp9TE9JcXnQzzs9qTymc svdvTzaSAQ== ) ; Key ID = 4528 dtic.mil. 2945 IN DNSKEY ( 256 3 13 mL49LME1kKnaKfjumpc2zQZpnDo9uogLEXMdLS951NiNY3g9uFFbu6TP2yMlvuif2lr0K1rFiVa2 tcjC6XbYuA== ) ; Key ID = 2043 dtic.mil. 2945 IN RRSIG ( DNSKEY 13 2 86400 20240521225959 20240514220000 2043 dtic.mil. XdPaf4aeV+Ktma6aOMGN20hp+TPReK3Iad8epcqyZ19jzoq3ikLqyXczJsz+c0buaNBHhqEqiqNa qFj6wcIYfw== ) dtic.mil. 2945 IN RRSIG ( DNSKEY 13 2 86400 20240521225959 20240514220000 4528 dtic.mil. wj5F/asKweUG0kLdhm3dfw2RrVuGqjc/YsYr3e9Ubn4UarL0oooDQpi25mQNP97PGiRmbBL+yisq HucYOLJ6mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for dtic.mil
	`dtic.mil. 2945 IN DNSKEY ( 256 3 13 HTcdG1QRzn6ccfRav6FDAk7W1r6plmQopj38HXOAi4R/kIV2ir4OiOe7ZLDiUpuSeQ2ADRyB1T5p jLGDZBbqfQ== ) ; Key ID = 34355`
	`dtic.mil. 2945 IN DNSKEY ( 257 3 13 ywwQtPueK8ZsrvyJw3XCXxXFU3ge8FeF8ujJcxZtsKNQYgDZtHWagVXadp9TE9JcXnQzzs9qTymc svdvTzaSAQ== ) ; Key ID = 4528`
	`dtic.mil. 2945 IN DNSKEY ( 256 3 13 mL49LME1kKnaKfjumpc2zQZpnDo9uogLEXMdLS951NiNY3g9uFFbu6TP2yMlvuif2lr0K1rFiVa2 tcjC6XbYuA== ) ; Key ID = 2043`
	DNSKEY=4528/SEP is now in the chain-of-trust
	DS=4528/SHA-256 verifies DNSKEY=4528/SEP
	DS=4528/SHA-1 verifies DNSKEY=4528/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dtic.mil. 2945 IN RRSIG ( DNSKEY 13 2 86400 20240521225959 20240514220000 2043 dtic.mil. XdPaf4aeV+Ktma6aOMGN20hp+TPReK3Iad8epcqyZ19jzoq3ikLqyXczJsz+c0buaNBHhqEqiqNa qFj6wcIYfw== )`
	`dtic.mil. 2945 IN RRSIG ( DNSKEY 13 2 86400 20240521225959 20240514220000 4528 dtic.mil. wj5F/asKweUG0kLdhm3dfw2RrVuGqjc/YsYr3e9Ubn4UarL0oooDQpi25mQNP97PGiRmbBL+yisq HucYOLJ6mw== )`
	RRSIG=2043 and DNSKEY=2043 verifies the DNSKEY RRset
	RRSIG=4528 and DNSKEY=4528/SEP verifies the DNSKEY RRset
	DNSKEY=34355 is now in the chain-of-trust
	DNSKEY=2043 is now in the chain-of-trust
	Query to DNS5.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 32817 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5868 IN A 214.48.252.101 dtic.mil. 5868 IN A 214.48.248.101 dtic.mil. 5868 IN A 214.48.244.101 dtic.mil. 5868 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS6.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 36219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86145 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 5396 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86145 IN RRSIG ( SOA 13 2 86400 20240528014519 20240521004519 2043 dtic.mil. ih6AIiuSWpoauRESuAm5AfXSiJBcDeGqCIqDiCHhbYXoOOcXN7eZWLujp3LDFUMPveF8RMGq0EoX 099D87+ROw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 41657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86145 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 5396 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86145 IN RRSIG ( SOA 13 2 86400 20240528014519 20240521004519 2043 dtic.mil. ih6AIiuSWpoauRESuAm5AfXSiJBcDeGqCIqDiCHhbYXoOOcXN7eZWLujp3LDFUMPveF8RMGq0EoX 099D87+ROw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 43764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86145 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 5396 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86145 IN RRSIG ( SOA 13 2 86400 20240528014519 20240521004519 2043 dtic.mil. ih6AIiuSWpoauRESuAm5AfXSiJBcDeGqCIqDiCHhbYXoOOcXN7eZWLujp3LDFUMPveF8RMGq0EoX 099D87+ROw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 13337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86145 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 5396 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86145 IN RRSIG ( SOA 13 2 86400 20240528014519 20240521004519 2043 dtic.mil. ih6AIiuSWpoauRESuAm5AfXSiJBcDeGqCIqDiCHhbYXoOOcXN7eZWLujp3LDFUMPveF8RMGq0EoX 099D87+ROw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 46274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86145 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 5396 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86145 IN RRSIG ( SOA 13 2 86400 20240528014519 20240521004519 2043 dtic.mil. ih6AIiuSWpoauRESuAm5AfXSiJBcDeGqCIqDiCHhbYXoOOcXN7eZWLujp3LDFUMPveF8RMGq0EoX 099D87+ROw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 62340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5867 IN A 214.48.252.101 dtic.mil. 5867 IN A 214.48.248.101 dtic.mil. 5867 IN A 214.48.244.101 dtic.mil. 5867 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5867 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== )`
	RRSIG=2043 and DNSKEY=2043 verifies the A RRset

dtic.mil

	Query to DNS1.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 21818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5362 IN A 214.48.248.101 dtic.mil. 5362 IN A 214.48.244.101 dtic.mil. 5362 IN A 214.48.252.101 dtic.mil. 5362 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS1.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 21184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5362 IN A 214.48.248.101 dtic.mil. 5362 IN A 214.48.244.101 dtic.mil. 5362 IN A 214.48.252.101 dtic.mil. 5362 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5362 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== )`
	RRSIG=2043 and DNSKEY=2043 verifies the A RRset

dtic.mil

	Query to DNS2.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 16451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5362 IN A 214.48.248.101 dtic.mil. 5362 IN A 214.48.244.101 dtic.mil. 5362 IN A 214.48.252.101 dtic.mil. 5362 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS2.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 55366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5361 IN A 214.48.248.101 dtic.mil. 5361 IN A 214.48.244.101 dtic.mil. 5361 IN A 214.48.252.101 dtic.mil. 5361 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5361 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== )`
	RRSIG=2043 and DNSKEY=2043 verifies the A RRset

dtic.mil

	Query to DNS3.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5866 IN A 214.48.252.101 dtic.mil. 5866 IN A 214.48.248.101 dtic.mil. 5866 IN A 214.48.244.101 dtic.mil. 5866 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS3.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 11265 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5866 IN A 214.48.252.101 dtic.mil. 5866 IN A 214.48.248.101 dtic.mil. 5866 IN A 214.48.244.101 dtic.mil. 5866 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5866 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== )`
	RRSIG=2043 and DNSKEY=2043 verifies the A RRset

dtic.mil

	Query to DNS6.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 15875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5361 IN A 214.48.248.101 dtic.mil. 5361 IN A 214.48.244.101 dtic.mil. 5361 IN A 214.48.252.101 dtic.mil. 5361 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS6.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 50186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5361 IN A 214.48.248.101 dtic.mil. 5361 IN A 214.48.244.101 dtic.mil. 5361 IN A 214.48.252.101 dtic.mil. 5361 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5361 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== )`
	RRSIG=2043 and DNSKEY=2043 verifies the A RRset

dtic.mil

	Query to DNS4.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 189 octets ;; HEADER SECTION ;; id = 22040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 7200 IN A 214.48.244.101 dtic.mil. 7200 IN A 214.48.248.101 dtic.mil. 7200 IN A 214.48.252.101 dtic.mil. 7200 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS4.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 189 octets ;; HEADER SECTION ;; id = 5821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 7200 IN A 214.48.244.101 dtic.mil. 7200 IN A 214.48.248.101 dtic.mil. 7200 IN A 214.48.252.101 dtic.mil. 7200 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 7200 IN RRSIG ( A 13 2 7200 20240526171009 20240519163628 2043 dtic.mil. DV3Ih+Gtp5krMSU/c2Q1ukEJmQJ+yeD4QMdvbJ3onmgqHDtbx5odU/gqpSaoMi60PRNlXUIwcUe/ OxmBff49vA== )`
	RRSIG=2043 and DNSKEY=2043 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dtic.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: