DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-17 20:00:41 UTC

Analyzing DNSSEC problems for af.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1139 octets ;; HEADER SECTION ;; id = 60256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to m.root-servers.net for af.mil/A
	Received 804 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 804 octets ;; HEADER SECTION ;; id = 24887 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac ) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260930170000 20260917160000 57780 . Tg6WCnRhgqx9xxrDI+c4t8H4fKifuJW1RaHBuIDyEbREkpeUOgwOIZ8riuw6/k0BxF/kVwaIcOdC dLDC+EeRDAVzbY5RU4LBF8GjjWc8M7YfMOlw9Lru1ui2oy5vRrhn5b7CqVG3W5usEzFbIEMznUp5 4Ny8X68USQTxylnTG5qFbv2RUR/0ar2UgvrMmARQKp9a9O8iuxuQ0d+CZAziDizXcXnUREDARqQq 7sROREvkJ8aPeSMAXpx3DsKYBgiYoLKUbQ38zvt5rkJt9lpO7yDflwQLLao04EVvQfhFS2SK6XPp MDyCkqYQ0Zt2hUxT6MkJu2JsAlkiqjNFhK97bg== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for mil/DNSKEY
	Received 798 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 798 octets ;; HEADER SECTION ;; id = 58671 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260930170000 20260917160000 57780 . Tg6WCnRhgqx9xxrDI+c4t8H4fKifuJW1RaHBuIDyEbREkpeUOgwOIZ8riuw6/k0BxF/kVwaIcOdC dLDC+EeRDAVzbY5RU4LBF8GjjWc8M7YfMOlw9Lru1ui2oy5vRrhn5b7CqVG3W5usEzFbIEMznUp5 4Ny8X68USQTxylnTG5qFbv2RUR/0ar2UgvrMmARQKp9a9O8iuxuQ0d+CZAziDizXcXnUREDARqQq 7sROREvkJ8aPeSMAXpx3DsKYBgiYoLKUbQ38zvt5rkJt9lpO7yDflwQLLao04EVvQfhFS2SK6XPp MDyCkqYQ0Zt2hUxT6MkJu2JsAlkiqjNFhK97bg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to c.root-servers.net for mil/DS
	Received 415 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 415 octets ;; HEADER SECTION ;; id = 20172 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac ) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260930170000 20260917160000 57780 . Tg6WCnRhgqx9xxrDI+c4t8H4fKifuJW1RaHBuIDyEbREkpeUOgwOIZ8riuw6/k0BxF/kVwaIcOdC dLDC+EeRDAVzbY5RU4LBF8GjjWc8M7YfMOlw9Lru1ui2oy5vRrhn5b7CqVG3W5usEzFbIEMznUp5 4Ny8X68USQTxylnTG5qFbv2RUR/0ar2UgvrMmARQKp9a9O8iuxuQ0d+CZAziDizXcXnUREDARqQq 7sROREvkJ8aPeSMAXpx3DsKYBgiYoLKUbQ38zvt5rkJt9lpO7yDflwQLLao04EVvQfhFS2SK6XPp MDyCkqYQ0Zt2hUxT6MkJu2JsAlkiqjNFhK97bg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for mil in the . zone
	DS=31892/SHA-256 has algorithm RSASHA256
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260930170000 20260917160000 57780 . Tg6WCnRhgqx9xxrDI+c4t8H4fKifuJW1RaHBuIDyEbREkpeUOgwOIZ8riuw6/k0BxF/kVwaIcOdC dLDC+EeRDAVzbY5RU4LBF8GjjWc8M7YfMOlw9Lru1ui2oy5vRrhn5b7CqVG3W5usEzFbIEMznUp5 4Ny8X68USQTxylnTG5qFbv2RUR/0ar2UgvrMmARQKp9a9O8iuxuQ0d+CZAziDizXcXnUREDARqQq 7sROREvkJ8aPeSMAXpx3DsKYBgiYoLKUbQ38zvt5rkJt9lpO7yDflwQLLao04EVvQfhFS2SK6XPp MDyCkqYQ0Zt2hUxT6MkJu2JsAlkiqjNFhK97bg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=31892/SHA-256 is now in the chain-of-trust
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac )`
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 1628 octets ;; HEADER SECTION ;; id = 40212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaqf0si0Dr5DF2klf6SJdeMvhGE/n4wZTQbcFrXxWxZksrajx/REjEatOIFbyIH7LvpAMTTB gUOM95Mkmc+gzxt5lohqTCLUMcfFKfnj13Pk4Bu/EZy7I+Bwe7fN3VpVtfeR8QCC2C5llGuKJITB 5ltX7VdoxByFv/5Gyvb7OeUh ) ; keytag 24321 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcEMW8K0eDPtpTHdJZKCYoJBDP6dZ/36UQAys/fhK7917q4Bp9TGHJZ6e2sT9kdG7e/hjp29 v5pGRvkg81xNI4py9q+DJVzZsEU8pQazKGkDg6njo1DOFgdzrhYOlAQBU7vVKToXBees/Qds/Mzm L4IsQXUBIp07aIGnAudEAVtd ) ; keytag 49074 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAanJwEUtvO7Q9PP4EJ9IeUMGadAcH0xexyKi5C8B1bFTTxqu/5++oox87Ln+cnk2zG/DL6ow E0dhC3cEbweMOBgqO1VpxcPQtzhAvzM3etNSn9tcQpzYCREN4fIW3hYF9bLw52lusJ62i6qx8a8n CFSi6iDUCZBsx0t79+m2tAWochnVhSXAQVu41IW2Z3AQ+UsCvA4ZykrbUxpBwS7YyybBRMTimEr7 6gS63CblhUUyDxSudJx42yUF2YFPQkknzfOdx9BSvhXBRHRC2ClfB7YjsQ1Ep7ntlDp9dMecKYuc cSIB7Bf7FBj7/uiswFNNGT79JqvfRGXkZcZ211nERf0= ) ; keytag 31892 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260924170305 20260917170305 31892 mil. VhLsY0d5T1xPDJ6a9lRR4PEXY0aCB4lHNOEuonDG58Pt+mg+TKgPL5qNzz9eHa2xk4lD5/K/4wPK FyW0CY8tdfJxK2r0kYjJS099NYrw73kEN97gf0MOJDCE9bRX6TJ//qFo3kNtQU/LhhOtjViopq+M g1HeqWcXPCRBuhPuFv5E5r5F40grfOZj4orM/JAqIy1U8cfzSQ2XALa/Kgg3gaxd78YVTl1YdUjp l6/x9NGk8rFndnyrDRikqD9UCdM8z9ADizKEKaOlc5ep81p9uKSLr70rQz2mch+Q3wgcE0KVQvP7 es8WowerkvWQtmw6sR94SNQab1Fc5fG0o2RX1A== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260924170305 20260917170305 45019 mil. d9Q8MeEGW+gMjKvIevFw8NHxTjDrcJy+TCASKm9EPyQKaHg0IYbPNjOMm3KGfUAHN1msD64D4KHS cX9wUZVSwpV09MHDvMka/QVAqbadXIRAcoxTlSzou7spl9SQKoD8hEqL5VT772FbO96mHw4Nor/V nh8ZK5PAiw5jykrryccVNFjizk2kAv/jcbO1E0P22AW0EFv8wEwcCiy0ICtrtis4HIwyz8vLea8f GqOLe4ufhvwWKesS7AC4uEQcyvfSwFahSLbIYmuzSDKQpTCxl/N+fHq4D+bAape3ZMNExha6orXS QmtOY42nDXx+8qwFNdF9a/naoSNLMnwS3B9asg== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260924170305 20260917170305 49074 mil. YXu+gkIU43aNRWSWCjAlqpiGDMHpZQ8btJkfPMf5SW3xPkubRtp+URGXEnKsGYw6yBWeMQIkoDCz pkrH8hBBjy12U8qCHlnl5VcqWI6+vvvhgvuNmDgfIW+pyrZYvrcJHO/AruqqgL+IUTxVacETNOiA 8D0HkzLOYJqJgRpFulQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaqf0si0Dr5DF2klf6SJdeMvhGE/n4wZTQbcFrXxWxZksrajx/REjEatOIFbyIH7LvpAMTTB gUOM95Mkmc+gzxt5lohqTCLUMcfFKfnj13Pk4Bu/EZy7I+Bwe7fN3VpVtfeR8QCC2C5llGuKJITB 5ltX7VdoxByFv/5Gyvb7OeUh ) ; keytag 24321`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcEMW8K0eDPtpTHdJZKCYoJBDP6dZ/36UQAys/fhK7917q4Bp9TGHJZ6e2sT9kdG7e/hjp29 v5pGRvkg81xNI4py9q+DJVzZsEU8pQazKGkDg6njo1DOFgdzrhYOlAQBU7vVKToXBees/Qds/Mzm L4IsQXUBIp07aIGnAudEAVtd ) ; keytag 49074`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAanJwEUtvO7Q9PP4EJ9IeUMGadAcH0xexyKi5C8B1bFTTxqu/5++oox87Ln+cnk2zG/DL6ow E0dhC3cEbweMOBgqO1VpxcPQtzhAvzM3etNSn9tcQpzYCREN4fIW3hYF9bLw52lusJ62i6qx8a8n CFSi6iDUCZBsx0t79+m2tAWochnVhSXAQVu41IW2Z3AQ+UsCvA4ZykrbUxpBwS7YyybBRMTimEr7 6gS63CblhUUyDxSudJx42yUF2YFPQkknzfOdx9BSvhXBRHRC2ClfB7YjsQ1Ep7ntlDp9dMecKYuc cSIB7Bf7FBj7/uiswFNNGT79JqvfRGXkZcZ211nERf0= ) ; keytag 31892`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	DNSKEY=31892/SEP is now in the chain-of-trust
	DS=31892/SHA-256 verifies DNSKEY=31892/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260924170305 20260917170305 31892 mil. VhLsY0d5T1xPDJ6a9lRR4PEXY0aCB4lHNOEuonDG58Pt+mg+TKgPL5qNzz9eHa2xk4lD5/K/4wPK FyW0CY8tdfJxK2r0kYjJS099NYrw73kEN97gf0MOJDCE9bRX6TJ//qFo3kNtQU/LhhOtjViopq+M g1HeqWcXPCRBuhPuFv5E5r5F40grfOZj4orM/JAqIy1U8cfzSQ2XALa/Kgg3gaxd78YVTl1YdUjp l6/x9NGk8rFndnyrDRikqD9UCdM8z9ADizKEKaOlc5ep81p9uKSLr70rQz2mch+Q3wgcE0KVQvP7 es8WowerkvWQtmw6sR94SNQab1Fc5fG0o2RX1A== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260924170305 20260917170305 45019 mil. d9Q8MeEGW+gMjKvIevFw8NHxTjDrcJy+TCASKm9EPyQKaHg0IYbPNjOMm3KGfUAHN1msD64D4KHS cX9wUZVSwpV09MHDvMka/QVAqbadXIRAcoxTlSzou7spl9SQKoD8hEqL5VT772FbO96mHw4Nor/V nh8ZK5PAiw5jykrryccVNFjizk2kAv/jcbO1E0P22AW0EFv8wEwcCiy0ICtrtis4HIwyz8vLea8f GqOLe4ufhvwWKesS7AC4uEQcyvfSwFahSLbIYmuzSDKQpTCxl/N+fHq4D+bAape3ZMNExha6orXS QmtOY42nDXx+8qwFNdF9a/naoSNLMnwS3B9asg== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260924170305 20260917170305 49074 mil. YXu+gkIU43aNRWSWCjAlqpiGDMHpZQ8btJkfPMf5SW3xPkubRtp+URGXEnKsGYw6yBWeMQIkoDCz pkrH8hBBjy12U8qCHlnl5VcqWI6+vvvhgvuNmDgfIW+pyrZYvrcJHO/AruqqgL+IUTxVacETNOiA 8D0HkzLOYJqJgRpFulQ= )`
	RRSIG=31892 and DNSKEY=31892/SEP verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	RRSIG=49074 and DNSKEY=49074 verifies the DNSKEY RRset
	DNSKEY=24321 is now in the chain-of-trust
	DNSKEY=49074 is now in the chain-of-trust
	Query to con1.nipr.mil for af.mil/A
	Received 544 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 544 octets ;; HEADER SECTION ;; id = 13143 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 ) AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260924182137 20260917182137 49074 mil. korhsRAGuCGEU4V32Obgqd4Eai70DD6EDjBpANLV/9j2XzHLFOFMA0H/HRRQxwvvA2JDs2fMKbZl vR6L9ansuWo2Kqk7l1PnKRCt+xuU+Hq0fXFsvphbngEnrHbW7MXWHzbgRaYnt4TnA9D9xXLYAKOu 26Wm4oRdRaigZDZKvKs= ) ;; ADDITIONAL SECTION (7 records) OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 ;; { "EDNS-VERSION": 0 }
	Query to con1.nipr.mil for af.mil/DNSKEY
	Received 544 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 544 octets ;; HEADER SECTION ;; id = 50130 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 ) AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260924182137 20260917182137 49074 mil. korhsRAGuCGEU4V32Obgqd4Eai70DD6EDjBpANLV/9j2XzHLFOFMA0H/HRRQxwvvA2JDs2fMKbZl vR6L9ansuWo2Kqk7l1PnKRCt+xuU+Hq0fXFsvphbngEnrHbW7MXWHzbgRaYnt4TnA9D9xXLYAKOu 26Wm4oRdRaigZDZKvKs= ) ;; ADDITIONAL SECTION (7 records) OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 ;; { "EDNS-VERSION": 0 }
	Found child zone af.mil

af.mil

	Checking DS between mil and af.mil
	Query to eur1.nipr.mil for af.mil/DS
	Received 288 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 288 octets ;; HEADER SECTION ;; id = 16751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DS ;; ANSWER SECTION (3 records) AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 ) AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260924182137 20260917182137 49074 mil. korhsRAGuCGEU4V32Obgqd4Eai70DD6EDjBpANLV/9j2XzHLFOFMA0H/HRRQxwvvA2JDs2fMKbZl vR6L9ansuWo2Kqk7l1PnKRCt+xuU+Hq0fXFsvphbngEnrHbW7MXWHzbgRaYnt4TnA9D9xXLYAKOu 26Wm4oRdRaigZDZKvKs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for af.mil in the mil zone
	DS=64894/SHA-1 uses a deprecated digest algorithm
	DS=64894/SHA-256 has algorithm RSASHA256
	DS=64894/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260924182137 20260917182137 49074 mil. korhsRAGuCGEU4V32Obgqd4Eai70DD6EDjBpANLV/9j2XzHLFOFMA0H/HRRQxwvvA2JDs2fMKbZl vR6L9ansuWo2Kqk7l1PnKRCt+xuU+Hq0fXFsvphbngEnrHbW7MXWHzbgRaYnt4TnA9D9xXLYAKOu 26Wm4oRdRaigZDZKvKs= )`
	RRSIG=49074 and DNSKEY=49074 verifies the DS RRset
	DS=64894/SHA-256 is now in the chain-of-trust
	`AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 )`
	`AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c`
	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/DNSKEY
	Received 2021 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 2021 octets ;; HEADER SECTION ;; id = 29486 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (7 records) af.mil. 167247 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258 af.mil. 167247 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495 af.mil. 167247 IN DNSKEY ( 257 3 8 AwEAAcEBm0szeFHwHLwEiQP7K4ZYjyzsq1VdOJSDPgflgJ4qA2MVQ/fLjMJjiBqO0jnKQgL0Q8nr LuvRsBFPVunWl3Cc10oiLVxsefBuB8nu2dJ71o8RbND/9swcCUKs64TcRMM9j6pyFf3pCh9gE/Qr AbzcM5Yw/ex3q7tI2UPwJV+aoR12UYTR2W/j3gzRDEU8NidNKwhts9NNGNyLFFpIhAO2JjDjTf6h b7CYw0/uvwoz1TQr7OMDzZTCx3qAnwaeSQdjfO+GvrwjAUHMCcN3LFPJjBvnZq1gxdTY2x/r3+4G oBt7jyUgVGJnlpqCAQ65/eAYXjy5VYNaqJQsgLSYQ2c= ) ; keytag 64894 af.mil. 167247 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206 af.mil. 167247 IN RRSIG ( DNSKEY 8 2 172800 20260921001914 20260916235815 495 af.mil. TTaoCHT4dSt+lBgRuNGHDnU45DRQ9+d+lgHyE6a/j223NpyqaxXTt3vvkgl4s5gai2U/sWpNk7u2 3HRIRpb2/X+MMVWyF2ki7/bFW6SCJJX5Feked9kTOKvK8qqUdLI2hb4Akr+MqH1DfsifsuLJSTxd 0Z99EbdIbIBjB5U1n3IAn4+mt5fTmLZWqC8A3Yg7/HcnT9RI0la3PzjO8ogQefRQyaTsdVmy6WqP ywjwPKeJZg9xyC54hNv1i5q/6PDD2SgnLPqCvdjaw2tADNFdSAQYBQYOhVXolhoBEq0443eHZ9Ss FmjN3Tn0y7QRf/f25qogFpUf2fFeFRJ/OLp6BQ== ) af.mil. 167247 IN RRSIG ( DNSKEY 8 2 172800 20260921001914 20260916235815 38206 af.mil. tOhLg9fUza3VDZIWo82I5MUT8ckbAFi3iKwniy63Pv8im/OnSN0pCRToGJFUaZpBskSlQljQ84ri 5SGdxovckXsVeU/aJ81A9Yx2YVS5NWL/cCFKfd3CpNVJ7AeOCDk5x0Kx4b/DhmnPKup9zemTCOMz HJLJbiLfezbKN90i1qG2Lsfy6aTvZQvqVPM2VX8TaPA9x/XuGC2xhf6FYWpTkkEXT1bW2dsqRUj9 hNDO1AnZ4Flq1maBj/2fptfRx1ZDEwJSKNsmzADqu7v6RnCaZT4YxP7VpHMAtHDfAYINtGy/r7zP EVZe2qvQmWO4zOV/xGyWDyc9zTJxnsEOxsvTcA== ) af.mil. 167247 IN RRSIG ( DNSKEY 8 2 172800 20260921001914 20260916235815 64894 af.mil. QVBgKUD+Hli09dbESNEqAv1Fuy1lc2wYyxL3+SBEu/OHE6ZCA9eWd65u3h+sT1LyUP476ZXc95bO pHZo9Gx28+S0wctmBF7zHA+tkeucx+kAMw7u+gq0TSv0Ipbj7FMD42ZgT9iGZy79/PdwLFeRlWjL 9b2xVTPpJSo6cTG7jJesJDkx/3v+lFc67Uw5RT7w1ZOx6rT2ZREuSO3J+5GUL/klEsLClbNmLLNu FInCiOyDMHCuj9XOLmS15U3yIcIb84/iVenAmqtlpvv+xIcMhcz3d8lu29GUIrx8WLqvHrOJkLre HC3kpSxvFduaOYqy3E40Ymq4UCCenr7MlTFMUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for af.mil
	`af.mil. 167247 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258`
	`af.mil. 167247 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495`
	`af.mil. 167247 IN DNSKEY ( 257 3 8 AwEAAcEBm0szeFHwHLwEiQP7K4ZYjyzsq1VdOJSDPgflgJ4qA2MVQ/fLjMJjiBqO0jnKQgL0Q8nr LuvRsBFPVunWl3Cc10oiLVxsefBuB8nu2dJ71o8RbND/9swcCUKs64TcRMM9j6pyFf3pCh9gE/Qr AbzcM5Yw/ex3q7tI2UPwJV+aoR12UYTR2W/j3gzRDEU8NidNKwhts9NNGNyLFFpIhAO2JjDjTf6h b7CYw0/uvwoz1TQr7OMDzZTCx3qAnwaeSQdjfO+GvrwjAUHMCcN3LFPJjBvnZq1gxdTY2x/r3+4G oBt7jyUgVGJnlpqCAQ65/eAYXjy5VYNaqJQsgLSYQ2c= ) ; keytag 64894`
	`af.mil. 167247 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206`
	DNSKEY=64894/SEP is now in the chain-of-trust
	DS=64894/SHA-256 verifies DNSKEY=64894/SEP
	DS=64894/SHA-1 verifies DNSKEY=64894/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`af.mil. 167247 IN RRSIG ( DNSKEY 8 2 172800 20260921001914 20260916235815 495 af.mil. TTaoCHT4dSt+lBgRuNGHDnU45DRQ9+d+lgHyE6a/j223NpyqaxXTt3vvkgl4s5gai2U/sWpNk7u2 3HRIRpb2/X+MMVWyF2ki7/bFW6SCJJX5Feked9kTOKvK8qqUdLI2hb4Akr+MqH1DfsifsuLJSTxd 0Z99EbdIbIBjB5U1n3IAn4+mt5fTmLZWqC8A3Yg7/HcnT9RI0la3PzjO8ogQefRQyaTsdVmy6WqP ywjwPKeJZg9xyC54hNv1i5q/6PDD2SgnLPqCvdjaw2tADNFdSAQYBQYOhVXolhoBEq0443eHZ9Ss FmjN3Tn0y7QRf/f25qogFpUf2fFeFRJ/OLp6BQ== )`
	`af.mil. 167247 IN RRSIG ( DNSKEY 8 2 172800 20260921001914 20260916235815 38206 af.mil. tOhLg9fUza3VDZIWo82I5MUT8ckbAFi3iKwniy63Pv8im/OnSN0pCRToGJFUaZpBskSlQljQ84ri 5SGdxovckXsVeU/aJ81A9Yx2YVS5NWL/cCFKfd3CpNVJ7AeOCDk5x0Kx4b/DhmnPKup9zemTCOMz HJLJbiLfezbKN90i1qG2Lsfy6aTvZQvqVPM2VX8TaPA9x/XuGC2xhf6FYWpTkkEXT1bW2dsqRUj9 hNDO1AnZ4Flq1maBj/2fptfRx1ZDEwJSKNsmzADqu7v6RnCaZT4YxP7VpHMAtHDfAYINtGy/r7zP EVZe2qvQmWO4zOV/xGyWDyc9zTJxnsEOxsvTcA== )`
	`af.mil. 167247 IN RRSIG ( DNSKEY 8 2 172800 20260921001914 20260916235815 64894 af.mil. QVBgKUD+Hli09dbESNEqAv1Fuy1lc2wYyxL3+SBEu/OHE6ZCA9eWd65u3h+sT1LyUP476ZXc95bO pHZo9Gx28+S0wctmBF7zHA+tkeucx+kAMw7u+gq0TSv0Ipbj7FMD42ZgT9iGZy79/PdwLFeRlWjL 9b2xVTPpJSo6cTG7jJesJDkx/3v+lFc67Uw5RT7w1ZOx6rT2ZREuSO3J+5GUL/klEsLClbNmLLNu FInCiOyDMHCuj9XOLmS15U3yIcIb84/iVenAmqtlpvv+xIcMhcz3d8lu29GUIrx8WLqvHrOJkLre HC3kpSxvFduaOYqy3E40Ymq4UCCenr7MlTFMUA== )`
	RRSIG=495 and DNSKEY=495 verifies the DNSKEY RRset
	RRSIG=38206 and DNSKEY=38206/SEP verifies the DNSKEY RRset
	RRSIG=64894 and DNSKEY=64894/SEP verifies the DNSKEY RRset
	DNSKEY=15258 is now in the chain-of-trust
	DNSKEY=495 is now in the chain-of-trust
	DNSKEY=38206/SEP is now in the chain-of-trust
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.156
	;; Response received from [132.3.48.156] 769 octets ;; HEADER SECTION ;; id = 17634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20260921161106 20260917160524 495 af.mil. bxWibSeDu8Khm8eaFNfWCaQdqEjHPfDrzrHOrgLYBbdAocn/KAyQh2w8lENgYaHpy/PMugrUAwfL +X3YDYuJ541/0qO9MPbSEwzTpbcgzaWX9BSmGXDMw/pAaiBGebNc+2K+s+mGz7oMFoLfevzOazgI hpQpEKMmM23gDzHRXljGzJDJoF1P//IYMWGHJ6b6MwEBHVFOvf1TL43IyqyxBttmd/pMaABw9WGl RSagwHuqZr+DjvmC5Zu6sA/VWBvueMLYzvlDMk/idIlyWvWRG/pdEqM/km30QzjAP7+p/v66DuNR KbhXbh0odKHbmdr1fxyNbKq1faFdT4LLajO1UA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	HICKAM-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.132
	;; Response received from [132.3.48.132] 392 octets ;; HEADER SECTION ;; id = 51294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 1600 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260691 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 1600 IN RRSIG ( SOA 8 2 3600 20260921191926 20260917181926 495 af.mil. HMZpOg0nxhRAOEdJR7WzYV0P4dEXpOqdK7fYccFUdjKayP3fPD3E3xYasr/rFWJw/SU8m/s49ojV /zPQYSwSPithLPfkqdY1rzEcYjvU2BI7KW5nBWBEpsS7eXv67ydQrQe/iwf3kOhce02m5jsaBRXW AgiwUSR9rUpSFvERbWh67o2iVBSn0ejIugPB5DvdR9mRY7MN8yO72uC+5SYYlcdLJepbbGQVrUXS 29a0wfZk+YWx6Uzq4/PM6R7F+rPthiIyNQRFHSl/0NZ2gJ00vvzVklSuKK2AwaA4GZjHhJzE+F+f qZtQTdYNumCrAoCObd5FhO+gSbWVnntkvVI42g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.148
	;; Response received from [132.3.48.148] 392 octets ;; HEADER SECTION ;; id = 44626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 3522 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 3522 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	RAMSTEIN-NS2.AFNOC.AF.MIL serial (2024260698) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024260691)
	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.9.10
	;; Response received from [132.3.9.10] 392 octets ;; HEADER SECTION ;; id = 37893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 2608 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260693 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 2608 IN RRSIG ( SOA 8 2 3600 20260921194327 20260917184327 495 af.mil. HjujCtphHSm8lBjxrleXM9E7DJtBpWzUmLT7qXzs58e3BtcqnYf4LtW7CDmpmrv3J83wWmT3e9W+ 39WesE82OUuXmkWDseRKwGho+ra7NvRVXK1AwXZowXUf6eYvv8f/WLN7c1MWC0G5plMt5ArMircE qK/SfH21jZ9MB0JB3Fw2IdSZhYgGmlLl64vYHasnueHJ13Gco7gTl2RTvM7MwB1J4j1IsHTYbAU7 zOwXiEx/WbMz4IEPeB+kYf6+hMG3WfC4G8xIXsTJ7YTU8/uJilEHtnyitMGI5dAKKEy0Y9ODlWYe LFlXejbUp0qSxE9/lkp18KtXqAUf8ghW1QQnjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOKOTA-NS10.AFNOC.AF.MIL serial (2024260693) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024260691)
	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.140
	;; Response received from [132.3.48.140] 392 octets ;; HEADER SECTION ;; id = 52091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 3522 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 3522 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	LACKLAND-NS2.AFNOC.AF.MIL serial (2024260698) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024260691)
	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 392 octets ;; HEADER SECTION ;; id = 27898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 2608 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260693 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 2608 IN RRSIG ( SOA 8 2 3600 20260921194327 20260917184327 495 af.mil. HjujCtphHSm8lBjxrleXM9E7DJtBpWzUmLT7qXzs58e3BtcqnYf4LtW7CDmpmrv3J83wWmT3e9W+ 39WesE82OUuXmkWDseRKwGho+ra7NvRVXK1AwXZowXUf6eYvv8f/WLN7c1MWC0G5plMt5ArMircE qK/SfH21jZ9MB0JB3Fw2IdSZhYgGmlLl64vYHasnueHJ13Gco7gTl2RTvM7MwB1J4j1IsHTYbAU7 zOwXiEx/WbMz4IEPeB+kYf6+hMG3WfC4G8xIXsTJ7YTU8/uJilEHtnyitMGI5dAKKEy0Y9ODlWYe LFlXejbUp0qSxE9/lkp18KtXqAUf8ghW1QQnjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	OSAN-NS10.AFNOC.AF.MIL serial (2024260693) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024260691)
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 499 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.132
	;; Response received from [132.3.48.132] 769 octets ;; HEADER SECTION ;; id = 38684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN RRSIG ( NSEC3 8 3 500 20260921161106 20260917160524 495 af.mil. bxWibSeDu8Khm8eaFNfWCaQdqEjHPfDrzrHOrgLYBbdAocn/KAyQh2w8lENgYaHpy/PMugrUAwfL +X3YDYuJ541/0qO9MPbSEwzTpbcgzaWX9BSmGXDMw/pAaiBGebNc+2K+s+mGz7oMFoLfevzOazgI hpQpEKMmM23gDzHRXljGzJDJoF1P//IYMWGHJ6b6MwEBHVFOvf1TL43IyqyxBttmd/pMaABw9WGl RSagwHuqZr+DjvmC5Zu6sA/VWBvueMLYzvlDMk/idIlyWvWRG/pdEqM/km30QzjAP7+p/v66DuNR KbhXbh0odKHbmdr1fxyNbKq1faFdT4LLajO1UA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	GUNTER-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 500 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.140
	;; Response received from [132.3.48.140] 769 octets ;; HEADER SECTION ;; id = 20307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN RRSIG ( NSEC3 8 3 500 20260921161106 20260917160524 495 af.mil. bxWibSeDu8Khm8eaFNfWCaQdqEjHPfDrzrHOrgLYBbdAocn/KAyQh2w8lENgYaHpy/PMugrUAwfL +X3YDYuJ541/0qO9MPbSEwzTpbcgzaWX9BSmGXDMw/pAaiBGebNc+2K+s+mGz7oMFoLfevzOazgI hpQpEKMmM23gDzHRXljGzJDJoF1P//IYMWGHJ6b6MwEBHVFOvf1TL43IyqyxBttmd/pMaABw9WGl RSagwHuqZr+DjvmC5Zu6sA/VWBvueMLYzvlDMk/idIlyWvWRG/pdEqM/km30QzjAP7+p/v66DuNR KbhXbh0odKHbmdr1fxyNbKq1faFdT4LLajO1UA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	LACKLAND-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 500 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.9.10
	;; Response received from [132.3.9.10] 769 octets ;; HEADER SECTION ;; id = 53041 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20260921161106 20260917160524 495 af.mil. bxWibSeDu8Khm8eaFNfWCaQdqEjHPfDrzrHOrgLYBbdAocn/KAyQh2w8lENgYaHpy/PMugrUAwfL +X3YDYuJ541/0qO9MPbSEwzTpbcgzaWX9BSmGXDMw/pAaiBGebNc+2K+s+mGz7oMFoLfevzOazgI hpQpEKMmM23gDzHRXljGzJDJoF1P//IYMWGHJ6b6MwEBHVFOvf1TL43IyqyxBttmd/pMaABw9WGl RSagwHuqZr+DjvmC5Zu6sA/VWBvueMLYzvlDMk/idIlyWvWRG/pdEqM/km30QzjAP7+p/v66DuNR KbhXbh0odKHbmdr1fxyNbKq1faFdT4LLajO1UA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOKOTA-NS10.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 499 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.148
	;; Response received from [132.3.48.148] 769 octets ;; HEADER SECTION ;; id = 53204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 458 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 458 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20260921161106 20260917160524 495 af.mil. bxWibSeDu8Khm8eaFNfWCaQdqEjHPfDrzrHOrgLYBbdAocn/KAyQh2w8lENgYaHpy/PMugrUAwfL +X3YDYuJ541/0qO9MPbSEwzTpbcgzaWX9BSmGXDMw/pAaiBGebNc+2K+s+mGz7oMFoLfevzOazgI hpQpEKMmM23gDzHRXljGzJDJoF1P//IYMWGHJ6b6MwEBHVFOvf1TL43IyqyxBttmd/pMaABw9WGl RSagwHuqZr+DjvmC5Zu6sA/VWBvueMLYzvlDMk/idIlyWvWRG/pdEqM/km30QzjAP7+p/v66DuNR KbhXbh0odKHbmdr1fxyNbKq1faFdT4LLajO1UA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	RAMSTEIN-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 458 IN RRSIG ( SOA 8 2 3600 20260921195706 20260917185706 495 af.mil. me+riCTnZRa1W8x9g7G7ZMcXb7lvVp9wEY4Wfv1xUj2/V1s71RHMH3xTk31Lvoo7kKj3760CgOFE qU3v8XABG+UKTybumvON6NBCJ97jr9tseJ/Jd/Khalmh25k19RQ9sjaV9OsshtvMFy5lo2xbhfnp hSzRanzMhgeOXeRKjyudfHSptbHEY30mUk6t8tHIOL5hRnXcPAFw9qp9cvak/Ys5nUaEEAthaCN7 13x/tIuDZxftqxiDv3BnrcnvvnXbx8yjQfkWBgCcM9F+8PApw5ysXNiVSexq4uxXgv4bh1MMX/eS DVe/FeE/vIZmY1PiEqvnULU+bv19gjlDqzR4KQ== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/A
	Received 475 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 475 octets ;; HEADER SECTION ;; id = 23200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024260698 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20260921161106 20260917160524 495 af.mil. bxWibSeDu8Khm8eaFNfWCaQdqEjHPfDrzrHOrgLYBbdAocn/KAyQh2w8lENgYaHpy/PMugrUAwfL +X3YDYuJ541/0qO9MPbSEwzTpbcgzaWX9BSmGXDMw/pAaiBGebNc+2K+s+mGz7oMFoLfevzOazgI hpQpEKMmM23gDzHRXljGzJDJoF1P//IYMWGHJ6b6MwEBHVFOvf1TL43IyqyxBttmd/pMaABw9WGl RSagwHuqZr+DjvmC5Zu6sA/VWBvueMLYzvlDMk/idIlyWvWRG/pdEqM/km30QzjAP7+p/v66DuNR KbhXbh0odKHbmdr1fxyNbKq1faFdT4LLajO1UA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	OSAN-NS10.AFNOC.AF.MIL is authoritative for af.mil
	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/A
	NSEC3 validation not implemented yet
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test af.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: