DNSSEC Analyzer

Domain Name:

Time: 2023-09-24 17:39:47 UTC, NTP stratum 4

Analyzing DNSSEC problems for af.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (1141 octets) ;; HEADER SECTION ;; id = 9026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to e.root-servers.net for af.mil/A
	Received 801 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (801 octets) ;; HEADER SECTION ;; id = 55303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for mil/DNSKEY
	Received 801 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (801 octets) ;; HEADER SECTION ;; id = 12473 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to g.root-servers.net for mil/DS
	Received 415 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (415 octets) ;; HEADER SECTION ;; id = 35520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=62470/SHA-256 has algorithm RSASHA256
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=62470/SHA-256 is now in the chain-of-trust
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (1628 octets) ;; HEADER SECTION ;; id = 36100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to con1.nipr.mil for af.mil/A
	Received 550 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (550 octets) ;; HEADER SECTION ;; id = 45362 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 2725 8 2 1b62e6015f6930699a2e8c8555d14b6f7e40ab974e2443579ce10afeffa93db8 ) AF.MIL. 10800 IN DS 2725 8 1 89ce3ae59dea6afebb0d3d38f52f8f1dccba8b53 AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hrakxkIx55t/hpBxvqz1PbQ/iQoQX6d/iwUHVcjEAMeESpRPKIHqEF+iHQM0E3D5VP7huawTfEvj SJ8CKiWxNDkuDClAV1eqvGDHWssIrIXfPK6tRvReDfQ04fCaTehiFNO4Ngsvwd8Oi8hSnjNCTkla v1qeTeCuPkGbJOmLZxk= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to eur2.nipr.mil for af.mil/DNSKEY
	Received 550 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (550 octets) ;; HEADER SECTION ;; id = 16291 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS 2725 8 1 89ce3ae59dea6afebb0d3d38f52f8f1dccba8b53 AF.MIL. 10800 IN DS ( 2725 8 2 1b62e6015f6930699a2e8c8555d14b6f7e40ab974e2443579ce10afeffa93db8 ) AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hrakxkIx55t/hpBxvqz1PbQ/iQoQX6d/iwUHVcjEAMeESpRPKIHqEF+iHQM0E3D5VP7huawTfEvj SJ8CKiWxNDkuDClAV1eqvGDHWssIrIXfPK6tRvReDfQ04fCaTehiFNO4Ngsvwd8Oi8hSnjNCTkla v1qeTeCuPkGbJOmLZxk= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone af.mil

af.mil

	Checking DS between mil and af.mil
	Query to con1.nipr.mil for af.mil/DS
	Received 288 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (288 octets) ;; HEADER SECTION ;; id = 28721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN DS ;; ANSWER SECTION (3 records) AF.MIL. 10800 IN DS 2725 8 1 89ce3ae59dea6afebb0d3d38f52f8f1dccba8b53 AF.MIL. 10800 IN DS ( 2725 8 2 1b62e6015f6930699a2e8c8555d14b6f7e40ab974e2443579ce10afeffa93db8 ) AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hrakxkIx55t/hpBxvqz1PbQ/iQoQX6d/iwUHVcjEAMeESpRPKIHqEF+iHQM0E3D5VP7huawTfEvj SJ8CKiWxNDkuDClAV1eqvGDHWssIrIXfPK6tRvReDfQ04fCaTehiFNO4Ngsvwd8Oi8hSnjNCTkla v1qeTeCuPkGbJOmLZxk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for af.mil in the mil zone
	DS=2725/SHA-1 has algorithm RSASHA256
	DS=2725/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hrakxkIx55t/hpBxvqz1PbQ/iQoQX6d/iwUHVcjEAMeESpRPKIHqEF+iHQM0E3D5VP7huawTfEvj SJ8CKiWxNDkuDClAV1eqvGDHWssIrIXfPK6tRvReDfQ04fCaTehiFNO4Ngsvwd8Oi8hSnjNCTkla v1qeTeCuPkGbJOmLZxk= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=2725/SHA-1 is now in the chain-of-trust
	`AF.MIL. 10800 IN DS 2725 8 1 89ce3ae59dea6afebb0d3d38f52f8f1dccba8b53`
	`AF.MIL. 10800 IN DS ( 2725 8 2 1b62e6015f6930699a2e8c8555d14b6f7e40ab974e2443579ce10afeffa93db8 )`
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/DNSKEY
	Received 1451 bytes from 132.3.48.148
	;; Response received from 132.3.48.148 (1451 octets) ;; HEADER SECTION ;; id = 38904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (5 records) af.mil. 172229 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; Key ID = 15258 af.mil. 172229 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; Key ID = 495 af.mil. 172229 IN DNSKEY ( 257 3 8 AwEAAc0hxRNfF9KNY14wEVysnyIfgFaSLtVmZWN9KWo3MvxIKhGWDU9EWiRaPgaYs+LjEXQD4bT6 QIg8nfBZh83jiHtQoq7ODVOW5NmIL69PrGKCaec2ZRmX5LPLvD8DOhKsdzmUmWGGvUjRwc2JoewU vu1F2vx+DMeqJjzI6M9rXSCPtOFupdQRPK5dWAPOF9PBgPAv6h1d9EbtR5INba9YO0Y+ATXg+XZP FQOFcjaLULHghDhV1yKKQRSnaieX/GUakUJM6C6M/fNsSYmLtuYFhTOIQ2bbybPKEXRfJFZhafky Nw6ezuQZbohHR/pv6+IV6/4y8FO8/X44fsV/CcKLsns= ) ; Key ID = 2725 af.mil. 172229 IN RRSIG ( DNSKEY 8 2 172800 20230928120812 20230924115621 495 af.mil. isXdRKLluhAlcgTFPrSPAq6HIoV/3fLI/YrqM4jf6SnLXF4pF7i3ypA4u4XrgqadaaVko9U9/ack rgvWnomtL2C3KbKvc2VK3QVAuubMgne0M9GRWHyrMejAdc0Kc2U6Zc3aD4sMqKpgzEQrC1qSlTTT kHYQ/ISp5r8dTIv1/wXZY+phP5l8A5OEeGIbBl4K1hoRfBpXVSJNTThG8vFt1+Swfz7K8+aED6YS POsHvTLI8UhLqzqfbfUMuC5rDywOzeTFUQf3x0DtW1uBvzNHT+oTiZT6mcQJz2huZEf15u7XmxHr 2a3PQGaBZ/VjA2RednuDMgoBd+U10CZnpC0tiQ== ) af.mil. 172229 IN RRSIG ( DNSKEY 8 2 172800 20230928120812 20230924115621 2725 af.mil. gzkMpHcBXIjQpjR+JRR+p39e6P7DQXvQaaCZlHTMj1nAud2b+nkKD4FrZFNVOO1DqaXmhAkoIPZ7 1gKusLaovVLYVBzoR2Kcd3RalEUFbCtwnrJb3Ae5mmIHeg5GQcwp/eqGz4g9Q6NbiAY8YDjQgPn/ LcUc40jTWLWTVU1sQfLB82qr9VLPlzMQu4IlrCSc6nRh1GuOeRsEgy4KQC1UJm95x8Ww14uphWlb QdrYBq9tiWH5Pc1g3iD79OhGMhsVeJgqV1CrwT5JU4Mpc1UlgZzX4Ln+btag4nn+1np1Ly1+eVh4 mB8M35ssgBOahbr7ZJb+1WjSl9pgZzf7qRdqMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for af.mil
	`af.mil. 172229 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; Key ID = 15258`
	`af.mil. 172229 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; Key ID = 495`
	`af.mil. 172229 IN DNSKEY ( 257 3 8 AwEAAc0hxRNfF9KNY14wEVysnyIfgFaSLtVmZWN9KWo3MvxIKhGWDU9EWiRaPgaYs+LjEXQD4bT6 QIg8nfBZh83jiHtQoq7ODVOW5NmIL69PrGKCaec2ZRmX5LPLvD8DOhKsdzmUmWGGvUjRwc2JoewU vu1F2vx+DMeqJjzI6M9rXSCPtOFupdQRPK5dWAPOF9PBgPAv6h1d9EbtR5INba9YO0Y+ATXg+XZP FQOFcjaLULHghDhV1yKKQRSnaieX/GUakUJM6C6M/fNsSYmLtuYFhTOIQ2bbybPKEXRfJFZhafky Nw6ezuQZbohHR/pv6+IV6/4y8FO8/X44fsV/CcKLsns= ) ; Key ID = 2725`
	DNSKEY=2725/SEP is now in the chain-of-trust
	DS=2725/SHA-1 verifies DNSKEY=2725/SEP
	DS=2725/SHA-256 verifies DNSKEY=2725/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`af.mil. 172229 IN RRSIG ( DNSKEY 8 2 172800 20230928120812 20230924115621 495 af.mil. isXdRKLluhAlcgTFPrSPAq6HIoV/3fLI/YrqM4jf6SnLXF4pF7i3ypA4u4XrgqadaaVko9U9/ack rgvWnomtL2C3KbKvc2VK3QVAuubMgne0M9GRWHyrMejAdc0Kc2U6Zc3aD4sMqKpgzEQrC1qSlTTT kHYQ/ISp5r8dTIv1/wXZY+phP5l8A5OEeGIbBl4K1hoRfBpXVSJNTThG8vFt1+Swfz7K8+aED6YS POsHvTLI8UhLqzqfbfUMuC5rDywOzeTFUQf3x0DtW1uBvzNHT+oTiZT6mcQJz2huZEf15u7XmxHr 2a3PQGaBZ/VjA2RednuDMgoBd+U10CZnpC0tiQ== )`
	`af.mil. 172229 IN RRSIG ( DNSKEY 8 2 172800 20230928120812 20230924115621 2725 af.mil. gzkMpHcBXIjQpjR+JRR+p39e6P7DQXvQaaCZlHTMj1nAud2b+nkKD4FrZFNVOO1DqaXmhAkoIPZ7 1gKusLaovVLYVBzoR2Kcd3RalEUFbCtwnrJb3Ae5mmIHeg5GQcwp/eqGz4g9Q6NbiAY8YDjQgPn/ LcUc40jTWLWTVU1sQfLB82qr9VLPlzMQu4IlrCSc6nRh1GuOeRsEgy4KQC1UJm95x8Ww14uphWlb QdrYBq9tiWH5Pc1g3iD79OhGMhsVeJgqV1CrwT5JU4Mpc1UlgZzX4Ln+btag4nn+1np1Ly1+eVh4 mB8M35ssgBOahbr7ZJb+1WjSl9pgZzf7qRdqMA== )`
	RRSIG=495 and DNSKEY=495 verifies the DNSKEY RRset
	RRSIG=2725 and DNSKEY=2725/SEP verifies the DNSKEY RRset
	DNSKEY=15258 is now in the chain-of-trust
	DNSKEY=495 is now in the chain-of-trust
	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.140
	;; Response received from 132.3.48.140 (769 octets) ;; HEADER SECTION ;; id = 19327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 498 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 498 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 498 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 498 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	LACKLAND-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.132
	;; Response received from 132.3.48.132 (392 octets) ;; HEADER SECTION ;; id = 45335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 2376 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092057 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 2376 IN RRSIG ( SOA 8 2 3600 20230928171845 20230924161845 495 af.mil. ppSByVaQCitZBG4t6gN6TmyPY6SkJ2lf6/ZAuAVF0AumX+3YwOZka6K/jVblnOoLE6YCpYIv+WnS 2XH78SL9gebRX+zAVsZuGdVr42Dw1Y7ajoQq9l+GPq/d8xe0yvhrWzSZ2eFk6HFietsQS7RFOlZ0 zR6RVQbPw513yQzKVYJG3GTd81pokOOUQs8uitKFHKZJyIgACEoiojciiRON8nbJvpLC1JROPf04 Yw6m7h7OuI5ArNJJsCiGkd4DDwWfB1x4iIs5uaEkI5b3VizH0O2bqaKF5D1Th07FERpWKQBLa2tN UG2mBjA8/5ZB0UmoXA1UrmikFzvZn/14Au0SbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.156
	;; Response received from 132.3.48.156 (392 octets) ;; HEADER SECTION ;; id = 23179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 2376 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092057 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 2376 IN RRSIG ( SOA 8 2 3600 20230928171845 20230924161845 495 af.mil. ppSByVaQCitZBG4t6gN6TmyPY6SkJ2lf6/ZAuAVF0AumX+3YwOZka6K/jVblnOoLE6YCpYIv+WnS 2XH78SL9gebRX+zAVsZuGdVr42Dw1Y7ajoQq9l+GPq/d8xe0yvhrWzSZ2eFk6HFietsQS7RFOlZ0 zR6RVQbPw513yQzKVYJG3GTd81pokOOUQs8uitKFHKZJyIgACEoiojciiRON8nbJvpLC1JROPf04 Yw6m7h7OuI5ArNJJsCiGkd4DDwWfB1x4iIs5uaEkI5b3VizH0O2bqaKF5D1Th07FERpWKQBLa2tN UG2mBjA8/5ZB0UmoXA1UrmikFzvZn/14Au0SbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.13.10
	;; Response received from 132.3.13.10 (392 octets) ;; HEADER SECTION ;; id = 59887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 2469 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092058 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 2469 IN RRSIG ( SOA 8 2 3600 20230928172027 20230924162027 495 af.mil. ZpgGoMYVKvpjLCFqTjvtOiaMumBDjYtQVaqrVFDy8/l9hkjgjdYcs+8BAviAmM3etogi7Yg63bwb SijtA2BIDG26JUfD3PzMCf0eTn8zvn83+pXRHP07A9TJHAuXZVSQaA5NJ4r5BQH+6fZlQdUhsU1G IAAF/PfROZGMTxerajFEDGZrB30aqpPvxEifXu/Oc0o03EDwCtS5p6pP5dMegd6ANhQ+XUsC/Iwb N0hMeJteQCn2gfhVRGJfj5yQuoPog4EQn5E+9UCovKbO4QUhqgwoihDV6qaooWL4O5NysSY6s65S SvmVyj1VwfRL+qAS3af1CCBrzq3nnujk4MTGQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OSAN-NS10.AFNOC.AF.MIL serial (2023092058) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2023092057)
	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.9.10
	;; Response received from 132.3.9.10 (392 octets) ;; HEADER SECTION ;; id = 60898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 2468 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092058 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 2468 IN RRSIG ( SOA 8 2 3600 20230928172027 20230924162027 495 af.mil. ZpgGoMYVKvpjLCFqTjvtOiaMumBDjYtQVaqrVFDy8/l9hkjgjdYcs+8BAviAmM3etogi7Yg63bwb SijtA2BIDG26JUfD3PzMCf0eTn8zvn83+pXRHP07A9TJHAuXZVSQaA5NJ4r5BQH+6fZlQdUhsU1G IAAF/PfROZGMTxerajFEDGZrB30aqpPvxEifXu/Oc0o03EDwCtS5p6pP5dMegd6ANhQ+XUsC/Iwb N0hMeJteQCn2gfhVRGJfj5yQuoPog4EQn5E+9UCovKbO4QUhqgwoihDV6qaooWL4O5NysSY6s65S SvmVyj1VwfRL+qAS3af1CCBrzq3nnujk4MTGQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	YOKOTA-NS10.AFNOC.AF.MIL serial (2023092058) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2023092057)
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.148
	;; Response received from 132.3.48.148 (392 octets) ;; HEADER SECTION ;; id = 41550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 3263 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092059 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 3263 IN RRSIG ( SOA 8 2 3600 20230928172418 20230924162418 495 af.mil. P/2jEoeTS9CJYtsX8R2W/NCJSZe4/PGvcYU6rKw0t0Qk2aAJlOkIPYsgwU7mgtw26dYQaDVkE22j E8N6vMBwDMY0OnJopE7mspYi0mEo1lBHJ5xsFI04pYijC/6xjwRGogvQdIee6FIpWoGRovsSpxhn b7HBY8pT+lb/hi5P1aIm2xN+j3iT8hp4CK4onPGWVHM27RQK+kYjNBf14LB1QF1BBL5SWNA+5jRS Efkyb4hbxw84iir7pF4XL7NAvmNrH9RlunVw0qwtDSHgC/6RX52RkIXHPIj16mO6X0sVPFpIBjL4 Gs4ssXJn2B/9RhNgN4X34t1XrxYoYcY+2BaKYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	RAMSTEIN-NS2.AFNOC.AF.MIL serial (2023092059) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2023092057)
	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.140
	;; Response received from 132.3.48.140 (769 octets) ;; HEADER SECTION ;; id = 17241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 497 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 497 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 498 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.13.10
	;; Response received from 132.3.13.10 (769 octets) ;; HEADER SECTION ;; id = 14615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 496 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 496 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OSAN-NS10.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.13.10
	;; Response received from 132.3.13.10 (769 octets) ;; HEADER SECTION ;; id = 16349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 496 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 496 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.148
	;; Response received from 132.3.48.148 (769 octets) ;; HEADER SECTION ;; id = 25033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 497 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 497 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	RAMSTEIN-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.148
	;; Response received from 132.3.48.148 (769 octets) ;; HEADER SECTION ;; id = 48978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 497 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 497 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 497 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.156
	;; Response received from 132.3.48.156 (769 octets) ;; HEADER SECTION ;; id = 47065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HICKAM-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.156
	;; Response received from 132.3.48.156 (769 octets) ;; HEADER SECTION ;; id = 63078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.132
	;; Response received from 132.3.48.132 (769 octets) ;; HEADER SECTION ;; id = 48567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GUNTER-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.132
	;; Response received from 132.3.48.132 (769 octets) ;; HEADER SECTION ;; id = 30939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 500 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.9.10
	;; Response received from 132.3.9.10 (769 octets) ;; HEADER SECTION ;; id = 24567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 495 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 495 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	YOKOTA-NS10.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.9.10
	;; Response received from 132.3.9.10 (769 octets) ;; HEADER SECTION ;; id = 20270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2023092061 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 495 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 495 IN RRSIG ( NSEC3 8 3 500 20230928050637 20230924045026 495 af.mil. qmVl5YIvXabbte4vTh9O+MN40GUjJLDitYd9EQ5yMmG+UwSK9j6gPbMZJiZGux1es93iXyICJcIM NCUQ2CSBKQjNsmCBt3ktBgELHCKRKFE/w91+rlqpluEl/SgtlKLqNaGf7O65uyf8zDoLJ7Lgv2vA 9vvdAJQjevwbhZg7pPHmoDVyJgOj9VcDBqaX6DAWGiutpdxu2CDP2j5lU+fLzXqsbslbQpO7so/c jwDln8KwrYXQiueCPaLqcPSL5nG40giVsLjtvWSjIMKhmWzJFn+ixdUx65zADaqqapiN3B6v8ZbV SY2/a1/hVcVvuDtXNCVDcFYsYzEjCYzynnveYg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 499 IN RRSIG ( SOA 8 2 3600 20230928173919 20230924163919 495 af.mil. qKVGDeWedv7FAtoVcLEZBB/hlc26KajnR9jyU10uYc4AXQ3x6Lytoql2597dvyWZh+HIWH4WQcol UZvLzO/DTPSGXrNt37oPzsI8rPgqaZDeQq6XqUIc+47LQkeV91uhe1WUX6kOSOwMq+DZf8zB/sU6 yzMxqLZjMIU1Fs4Y9YBWnFMry3IzjKuWcjFGAnpGVm9BM4B8U6wq7OhVzqdNspc8LH8AehYDGXUt ZLqF0EOjFI3G9LvOrbrgIGTeA9cOVTrz5XfXVe1ibeJMTje96gaY42r4Mv6qqjGGjK3PUTZIcHcT WJVwW83fLXKZT2iNp23BWnpyXJZvlwp3ApQdLQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test af.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: