DNSSEC Debugger

Domain Name:

Time: 2025-10-21 16:00:50 UTC

Analyzing DNSSEC problems for af.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 45561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	Query to l.root-servers.net for af.mil/A
	Received 753 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 753 octets ;; HEADER SECTION ;; id = 13795 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251103050000 20251021040000 61809 . yjUh0rCX96ZF93ojFpPfX4Y1R2TSM9NIha46nA0252Dn11Df7rxkUOK0vZGnkPUYN8s4wtDU5qqI HdX50Z2rjnxCOOHFKzHSB5oZy6ScADc+J0wUfUZr8CpwuZ4DFmxxGhPD8DtabsOlRLzaWvrPIhDh BPdI9DKlR6D/e0dkhCNXUnn5Uqw3xVFDd3GIFsIrwJ6N3T/DydJN0pKEBG4PZPu2egD9S8rdraMe fLsxD4Tdc6Q3H4jg2eK1AxIPqL4+DBKM9T1MszaSHpvAyDyJyOcetdZ952Q5J3SDWmgIsWOX8p7K 0CR+Z494g8bPMdhjsloiNjiXRbJPuqvJRO2nbQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for mil/DNSKEY
	Received 750 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 750 octets ;; HEADER SECTION ;; id = 28430 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251103050000 20251021040000 61809 . yjUh0rCX96ZF93ojFpPfX4Y1R2TSM9NIha46nA0252Dn11Df7rxkUOK0vZGnkPUYN8s4wtDU5qqI HdX50Z2rjnxCOOHFKzHSB5oZy6ScADc+J0wUfUZr8CpwuZ4DFmxxGhPD8DtabsOlRLzaWvrPIhDh BPdI9DKlR6D/e0dkhCNXUnn5Uqw3xVFDd3GIFsIrwJ6N3T/DydJN0pKEBG4PZPu2egD9S8rdraMe fLsxD4Tdc6Q3H4jg2eK1AxIPqL4+DBKM9T1MszaSHpvAyDyJyOcetdZ952Q5J3SDWmgIsWOX8p7K 0CR+Z494g8bPMdhjsloiNjiXRbJPuqvJRO2nbQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to h.root-servers.net for mil/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 60769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251103050000 20251021040000 61809 . yjUh0rCX96ZF93ojFpPfX4Y1R2TSM9NIha46nA0252Dn11Df7rxkUOK0vZGnkPUYN8s4wtDU5qqI HdX50Z2rjnxCOOHFKzHSB5oZy6ScADc+J0wUfUZr8CpwuZ4DFmxxGhPD8DtabsOlRLzaWvrPIhDh BPdI9DKlR6D/e0dkhCNXUnn5Uqw3xVFDd3GIFsIrwJ6N3T/DydJN0pKEBG4PZPu2egD9S8rdraMe fLsxD4Tdc6Q3H4jg2eK1AxIPqL4+DBKM9T1MszaSHpvAyDyJyOcetdZ952Q5J3SDWmgIsWOX8p7K 0CR+Z494g8bPMdhjsloiNjiXRbJPuqvJRO2nbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20251103050000 20251021040000 61809 . yjUh0rCX96ZF93ojFpPfX4Y1R2TSM9NIha46nA0252Dn11Df7rxkUOK0vZGnkPUYN8s4wtDU5qqI HdX50Z2rjnxCOOHFKzHSB5oZy6ScADc+J0wUfUZr8CpwuZ4DFmxxGhPD8DtabsOlRLzaWvrPIhDh BPdI9DKlR6D/e0dkhCNXUnn5Uqw3xVFDd3GIFsIrwJ6N3T/DydJN0pKEBG4PZPu2egD9S8rdraMe fLsxD4Tdc6Q3H4jg2eK1AxIPqL4+DBKM9T1MszaSHpvAyDyJyOcetdZ952Q5J3SDWmgIsWOX8p7K 0CR+Z494g8bPMdhjsloiNjiXRbJPuqvJRO2nbQ== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 1061 octets ;; HEADER SECTION ;; id = 6281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAc3lmLBHM/mUTKwmoqoUlMQ7s2IJ5vGH1fULEXTx4RTms2vJdE308qwPGOfe+OSELz4mUAWB LyotLzIjrqBF+2w8fDJVuqPGyNcr98tf8xCHrm1aqcOio2jWNUplXTCSeRmWZtISZ/wiGib3GXAh 5hUA7bnmxWkO2DFrqQnqAPyf ) ; keytag 51889 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbukLgSUVQpO4zTdB0VL/ZKDZUjuwWBEhHnT/UDkE8KJhYOhwvsgxjL47evcbDN1jZXRZ2E2 sVWq2UXZvU7+qe3BzgEz3c1/FjQgiKQyicTqiVySOMjDEJM6PolZ6uoPLYGrdp8uNS/jnMRq8kgN aMt4Hk58tUNHKSNz8n2m2mRV ) ; keytag 57558 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251028140423 20251021140423 45019 mil. lejKPpSMqZow/mCkZPGDkTtPuXAuDVlFMKO69fdHnwDgLOy8XisopRVr6rBUEiL30lgsCQ4z7f90 13/XlNXYiyDDsQBRvV2xD5kntQCw375M05UPLsB3IzxNzEsRllsVp1w5cGQNGXqAYWguBhA9ibJR OmMEL1Zf0WjqIvT2rUONOpTI9ddDJUexrlbGqgdxBl0kBY/CRI6h+am5jDvqCbBAvnE2Nqa5FzvG wQV1gp1BSeRxycoARdmnNVa6wtqCTSWuoSwhrsjBWq+tA4V5spoRrAzbZObCk1/TNl9RXA61yoYp XS1TECCQDBy1MSFav1tc+zsLyfAonp3elnkskg== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251028140423 20251021140423 57558 mil. nrehmBON9iFW0UMvTHWn5CfiSgV3Kmp6GvCCN957WMeOKzYTA9UXn77LD6Ujv8Imz9DKzRQLpYlh M6nBQzx9q82+0LFdS0W+V/0/+wsJtL1BrR5oXRjKhVNiFY3drKekygrT/vy3lw0YwK4FFsR46g/m wVGyazbEg7HffvkHwRs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAc3lmLBHM/mUTKwmoqoUlMQ7s2IJ5vGH1fULEXTx4RTms2vJdE308qwPGOfe+OSELz4mUAWB LyotLzIjrqBF+2w8fDJVuqPGyNcr98tf8xCHrm1aqcOio2jWNUplXTCSeRmWZtISZ/wiGib3GXAh 5hUA7bnmxWkO2DFrqQnqAPyf ) ; keytag 51889`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbukLgSUVQpO4zTdB0VL/ZKDZUjuwWBEhHnT/UDkE8KJhYOhwvsgxjL47evcbDN1jZXRZ2E2 sVWq2UXZvU7+qe3BzgEz3c1/FjQgiKQyicTqiVySOMjDEJM6PolZ6uoPLYGrdp8uNS/jnMRq8kgN aMt4Hk58tUNHKSNz8n2m2mRV ) ; keytag 57558`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251028140423 20251021140423 45019 mil. lejKPpSMqZow/mCkZPGDkTtPuXAuDVlFMKO69fdHnwDgLOy8XisopRVr6rBUEiL30lgsCQ4z7f90 13/XlNXYiyDDsQBRvV2xD5kntQCw375M05UPLsB3IzxNzEsRllsVp1w5cGQNGXqAYWguBhA9ibJR OmMEL1Zf0WjqIvT2rUONOpTI9ddDJUexrlbGqgdxBl0kBY/CRI6h+am5jDvqCbBAvnE2Nqa5FzvG wQV1gp1BSeRxycoARdmnNVa6wtqCTSWuoSwhrsjBWq+tA4V5spoRrAzbZObCk1/TNl9RXA61yoYp XS1TECCQDBy1MSFav1tc+zsLyfAonp3elnkskg== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251028140423 20251021140423 57558 mil. nrehmBON9iFW0UMvTHWn5CfiSgV3Kmp6GvCCN957WMeOKzYTA9UXn77LD6Ujv8Imz9DKzRQLpYlh M6nBQzx9q82+0LFdS0W+V/0/+wsJtL1BrR5oXRjKhVNiFY3drKekygrT/vy3lw0YwK4FFsR46g/m wVGyazbEg7HffvkHwRs= )`
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	RRSIG=57558 and DNSKEY=57558 verifies the DNSKEY RRset
	DNSKEY=51889 is now in the chain-of-trust
	DNSKEY=57558 is now in the chain-of-trust
	Query to eur1.nipr.mil for af.mil/A
	Received 550 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 550 octets ;; HEADER SECTION ;; id = 64805 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251028140423 20251021140423 57558 mil. D91DITyytuw8AP84FcNkL7icliIXR8bHhyfD7L953RzrtnTsx7QAhK91aYwfvAg75xqIU7kijuv/ B0SOmhhYAbf/hq13HokP412t8yLBahVotzKwfWaCn7Fs8diLbRoxS2sqKavp1Q0OqCE+5capwWnO q3hEDN004PrAa7tBIZM= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Query to con1.nipr.mil for af.mil/DNSKEY
	Received 550 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 550 octets ;; HEADER SECTION ;; id = 56591 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251028140423 20251021140423 57558 mil. D91DITyytuw8AP84FcNkL7icliIXR8bHhyfD7L953RzrtnTsx7QAhK91aYwfvAg75xqIU7kijuv/ B0SOmhhYAbf/hq13HokP412t8yLBahVotzKwfWaCn7Fs8diLbRoxS2sqKavp1Q0OqCE+5capwWnO q3hEDN004PrAa7tBIZM= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Found child zone af.mil

af.mil

	Checking DS between mil and af.mil
	Query to eur2.nipr.mil for af.mil/DS
	Received 288 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 288 octets ;; HEADER SECTION ;; id = 60950 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DS ;; ANSWER SECTION (3 records) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251028140423 20251021140423 57558 mil. D91DITyytuw8AP84FcNkL7icliIXR8bHhyfD7L953RzrtnTsx7QAhK91aYwfvAg75xqIU7kijuv/ B0SOmhhYAbf/hq13HokP412t8yLBahVotzKwfWaCn7Fs8diLbRoxS2sqKavp1Q0OqCE+5capwWnO q3hEDN004PrAa7tBIZM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for af.mil in the mil zone
	DS=38206/SHA-1 uses a deprecated digest algorithm
	DS=38206/SHA-1 has algorithm RSASHA256
	DS=38206/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251028140423 20251021140423 57558 mil. D91DITyytuw8AP84FcNkL7icliIXR8bHhyfD7L953RzrtnTsx7QAhK91aYwfvAg75xqIU7kijuv/ B0SOmhhYAbf/hq13HokP412t8yLBahVotzKwfWaCn7Fs8diLbRoxS2sqKavp1Q0OqCE+5capwWnO q3hEDN004PrAa7tBIZM= )`
	RRSIG=57558 and DNSKEY=57558 verifies the DS RRset
	DS=38206/SHA-1 is now in the chain-of-trust
	`AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d`
	`AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 )`
	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/DNSKEY
	Received 1451 bytes from 132.3.48.140
	;; Response received from [132.3.48.140] 1451 octets ;; HEADER SECTION ;; id = 59401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (5 records) af.mil. 112348 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258 af.mil. 112348 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495 af.mil. 112348 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206 af.mil. 112348 IN RRSIG ( DNSKEY 8 2 172800 20251024201811 20251020192422 495 af.mil. BUUlB9lMgQThZO3htcuLYHLuKjUjlAuuBN2veqa696AyQLaSwD/cS53YxODSPEz044jKmlYeItz5 O2bCAk70r8QOOB86DIU0QH/CyvkfRIAsleY0AjxyW232wwlsiVIGOd15a8+aYyS2+nxAq3Al3xti Zdgs8d47lFRdOswWEv55x0qPWDr23FLWESFx4w6/z50EUMM73qhqmApQyLHIFClu/0t0kgRrCzu4 ptL0wdjDNvNDwQHIHH2jd6r4J4mSVP7Ke77+BcXbbJhKFknxeWryzaVxkjji2331NSxXKmIYp6LB qmMqj5hz3MeDH/zJrYP1T01CsnALAfpg52l0aA== ) af.mil. 112348 IN RRSIG ( DNSKEY 8 2 172800 20251024201811 20251020192422 38206 af.mil. jnWpAJLSDT6GSCt45AG3bSOwiwY+6MsZA8Go3D561qCO92Zp+iqJzZ3T2yWnCxw8kukg9qHYoIhV M3Beqde7U2CqWT23jV21TA5FFtuvQesQ5i3vjsG3hKB53mE4aPYQ7pdEeQJOOSpcnFJLGcKN6aQ4 5cd9qUWvuouS/kdW0REIlPjm+dYegpv3Eu7nqB9va6ici6dIbhlPfdAQT+zJpOpiO4e9RJdEOWNu ZqVQGKYdFus7iLZ2ejb8VDMpWBOnhnGJFIG84rKnM32ETugV5CMnaxhRZ4jwEULcc8IBPrcmY63s mNQXEEhIJ7FGbIoXl9b4ntnXyv5H8E7SVtsq9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for af.mil
	`af.mil. 112348 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258`
	`af.mil. 112348 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495`
	`af.mil. 112348 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206`
	DNSKEY=38206/SEP is now in the chain-of-trust
	DS=38206/SHA-1 verifies DNSKEY=38206/SEP
	DS=38206/SHA-256 verifies DNSKEY=38206/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`af.mil. 112348 IN RRSIG ( DNSKEY 8 2 172800 20251024201811 20251020192422 495 af.mil. BUUlB9lMgQThZO3htcuLYHLuKjUjlAuuBN2veqa696AyQLaSwD/cS53YxODSPEz044jKmlYeItz5 O2bCAk70r8QOOB86DIU0QH/CyvkfRIAsleY0AjxyW232wwlsiVIGOd15a8+aYyS2+nxAq3Al3xti Zdgs8d47lFRdOswWEv55x0qPWDr23FLWESFx4w6/z50EUMM73qhqmApQyLHIFClu/0t0kgRrCzu4 ptL0wdjDNvNDwQHIHH2jd6r4J4mSVP7Ke77+BcXbbJhKFknxeWryzaVxkjji2331NSxXKmIYp6LB qmMqj5hz3MeDH/zJrYP1T01CsnALAfpg52l0aA== )`
	`af.mil. 112348 IN RRSIG ( DNSKEY 8 2 172800 20251024201811 20251020192422 38206 af.mil. jnWpAJLSDT6GSCt45AG3bSOwiwY+6MsZA8Go3D561qCO92Zp+iqJzZ3T2yWnCxw8kukg9qHYoIhV M3Beqde7U2CqWT23jV21TA5FFtuvQesQ5i3vjsG3hKB53mE4aPYQ7pdEeQJOOSpcnFJLGcKN6aQ4 5cd9qUWvuouS/kdW0REIlPjm+dYegpv3Eu7nqB9va6ici6dIbhlPfdAQT+zJpOpiO4e9RJdEOWNu ZqVQGKYdFus7iLZ2ejb8VDMpWBOnhnGJFIG84rKnM32ETugV5CMnaxhRZ4jwEULcc8IBPrcmY63s mNQXEEhIJ7FGbIoXl9b4ntnXyv5H8E7SVtsq9Q== )`
	RRSIG=495 and DNSKEY=495 verifies the DNSKEY RRset
	RRSIG=38206 and DNSKEY=38206/SEP verifies the DNSKEY RRset
	DNSKEY=15258 is now in the chain-of-trust
	DNSKEY=495 is now in the chain-of-trust
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.156
	;; Response received from [132.3.48.156] 769 octets ;; HEADER SECTION ;; id = 54688 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	HICKAM-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.132
	;; Response received from [132.3.48.132] 392 octets ;; HEADER SECTION ;; id = 41570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 3581 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 3581 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 392 octets ;; HEADER SECTION ;; id = 63300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 533 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173686 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 533 IN RRSIG ( SOA 8 2 3600 20251025150521 20251021140521 495 af.mil. WT/X1KHSIznQGQ/xLR3SzbF4lufZ2c/DZz1qFArK0TeoemwgmixKW9QRvcSlRK27J2Z+80TaiZlv BRiRNK3ZgonNkQD4fNew9aLl0bUVTKuWNOLVHD6RqgCZ7LzovTuTwaednXAGL879tBxwCqjq4IlD KkrgeH/Uzlx9CLQAJ8bwK8cbUdSaKvEblCyx1GgLTgAjGz9i+VCl0RtnhUrsplTQyWGrguSzg/Fo 3Qfihu5Agtg1+9QVNdfIo0relwYqrstja1e8pqcCmr9IIfLk5/bhSJvf5uKyrpBEmAQPna/41De6 Tnmr7J+seuSRWLXc5FLGqo2VvaVDJ9HeJgMicg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	OSAN-NS10.AFNOC.AF.MIL serial (2024173686) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024173696)
	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.140
	;; Response received from [132.3.48.140] 392 octets ;; HEADER SECTION ;; id = 25653 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 163 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173684 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 163 IN RRSIG ( SOA 8 2 3600 20251025145928 20251021135928 495 af.mil. sRqz9ljQLRwTwyssGAnwnRNzz+Z/BSnDhxnsEsr51DrUYeW+GX0+gbUwENgGjOzyAELgTRVRBnNy 8UC/4C3VxD6pBZPG4IIBVPQsDSbxVl9eoHkD72OjrfRQkUXbJyt7bMUXEhU2zXPjObIWvXzMGy3K wg9PX0ca4rrfkkwRtF59fUCxQZVikpQ3w5YkoCn0ty8gVipO1uedJWmSVM0IU5RnboQX6naMpU9r jHDvXT8mp0sJKxloLNstd5ueCCUEnDlgGXlw3KxEbh85lCpEC2P55NChZWOZ619rkmvZp3EUAY2Z 2OjCxlfh1Po5Y/DXFx2rvXESFa/ZYOyVSFPFpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	LACKLAND-NS2.AFNOC.AF.MIL serial (2024173684) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024173696)
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.48.148
	;; Response received from [132.3.48.148] 392 octets ;; HEADER SECTION ;; id = 51085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 163 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173684 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 163 IN RRSIG ( SOA 8 2 3600 20251025145928 20251021135928 495 af.mil. sRqz9ljQLRwTwyssGAnwnRNzz+Z/BSnDhxnsEsr51DrUYeW+GX0+gbUwENgGjOzyAELgTRVRBnNy 8UC/4C3VxD6pBZPG4IIBVPQsDSbxVl9eoHkD72OjrfRQkUXbJyt7bMUXEhU2zXPjObIWvXzMGy3K wg9PX0ca4rrfkkwRtF59fUCxQZVikpQ3w5YkoCn0ty8gVipO1uedJWmSVM0IU5RnboQX6naMpU9r jHDvXT8mp0sJKxloLNstd5ueCCUEnDlgGXlw3KxEbh85lCpEC2P55NChZWOZ619rkmvZp3EUAY2Z 2OjCxlfh1Po5Y/DXFx2rvXESFa/ZYOyVSFPFpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	RAMSTEIN-NS2.AFNOC.AF.MIL serial (2024173684) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024173696)
	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/SOA
	Received 392 bytes from 132.3.9.10
	;; Response received from [132.3.9.10] 392 octets ;; HEADER SECTION ;; id = 40494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN SOA ;; ANSWER SECTION (2 records) af.mil. 533 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173686 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 533 IN RRSIG ( SOA 8 2 3600 20251025150521 20251021140521 495 af.mil. WT/X1KHSIznQGQ/xLR3SzbF4lufZ2c/DZz1qFArK0TeoemwgmixKW9QRvcSlRK27J2Z+80TaiZlv BRiRNK3ZgonNkQD4fNew9aLl0bUVTKuWNOLVHD6RqgCZ7LzovTuTwaednXAGL879tBxwCqjq4IlD KkrgeH/Uzlx9CLQAJ8bwK8cbUdSaKvEblCyx1GgLTgAjGz9i+VCl0RtnhUrsplTQyWGrguSzg/Fo 3Qfihu5Agtg1+9QVNdfIo0relwYqrstja1e8pqcCmr9IIfLk5/bhSJvf5uKyrpBEmAQPna/41De6 Tnmr7J+seuSRWLXc5FLGqo2VvaVDJ9HeJgMicg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOKOTA-NS10.AFNOC.AF.MIL serial (2024173686) differs from GUNTER-NS2.AFNOC.AF.MIL serial (2024173696)
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.156
	;; Response received from [132.3.48.156] 769 octets ;; HEADER SECTION ;; id = 46588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 500 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 500 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 500 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 500 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.140
	;; Response received from [132.3.48.140] 769 octets ;; HEADER SECTION ;; id = 35212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 498 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 498 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 498 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 498 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	LACKLAND-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to LACKLAND-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.140
	;; Response received from [132.3.48.140] 769 octets ;; HEADER SECTION ;; id = 21654 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 497 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 497 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 498 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.148
	;; Response received from [132.3.48.148] 769 octets ;; HEADER SECTION ;; id = 52186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 497 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 497 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 497 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	RAMSTEIN-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.148
	;; Response received from [132.3.48.148] 769 octets ;; HEADER SECTION ;; id = 49884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 496 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 496 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 496 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 496 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 497 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 769 octets ;; HEADER SECTION ;; id = 31099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	OSAN-NS10.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to OSAN-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 769 octets ;; HEADER SECTION ;; id = 53261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.132
	;; Response received from [132.3.48.132] 769 octets ;; HEADER SECTION ;; id = 10344 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	GUNTER-NS2.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to GUNTER-NS2.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.48.132
	;; Response received from [132.3.48.132] 769 octets ;; HEADER SECTION ;; id = 9796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

af.mil

	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.9.10
	;; Response received from [132.3.9.10] 769 octets ;; HEADER SECTION ;; id = 7128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 499 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 499 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOKOTA-NS10.AFNOC.AF.MIL is authoritative for af.mil
	Found RRSIG signed by af.mil zone
	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/A
	Received 769 bytes from 132.3.9.10
	;; Response received from [132.3.9.10] 769 octets ;; HEADER SECTION ;; id = 16488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) af.mil. 498 IN SOA ( gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024173696 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 500 ;minimum ) af.mil. 498 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 498 IN NSEC3 ( 1 0 10 3a5aa8 7mh6boor0p2l1sc3fjctlohr2cgb63v3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 7M9FFP3UM250IRQR85FGJAQGO88Q0ECT.af.mil. 498 IN RRSIG ( NSEC3 8 3 500 20251024175014 20251020174343 495 af.mil. GR+f0yaTpNL6McZ5pVsU3+xV8n4Cmz3iXlgBEEVADF3Pb/EP+CE/3ansyTKy+eCDW392J1LuLp87 gbC7WHSgMNYtEdrpZKgk6i1+CKwW0CgtWigU92leRI47hUg030qQjOlN1wwP6WsYKc6DCsmjkdZ5 w88kt9G8TtldnRTtq9m+rLFui3q6XM4jCDPo2AMvB5z+ga2/2LfPJ1SLkgdMXfOEJ4m17ksdqu+/ WKrG8rqA5UMgVenf5qfpKCKS3fHHBOml+Pl+R9rHwkt3Qb4R1VnqMgod75cqRN4j+GlUmGPtF2sw rICEJZ1wLxxvwhbtQlSToLo2rMX30fF5y9EcnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`af.mil. 499 IN RRSIG ( SOA 8 2 3600 20251025155609 20251021145609 495 af.mil. MmOiXsvbrcXf83LsNl8ymrXkq7GxH9zdYr9VFMhomOFcgDAEon5KnrKg5JUUpbURH+IQZSVu3/gt QColYHxXG0a7deB5dJTPRuic1tosuCUMX6lcmbOo8a34Kp1jwbZm8RFaOBd3gkWxcZfI7SAwdo1B mpbYoMxFEhUvuQL5Scia3Y+UpaAzqKlupigGnrBRWPSiQEYcFrioN5aQXKVxGz10UPFqXP55SGFb DdvMCD4TzOjpBkXB2tQL526HHA/HPiXsmjRrnPT6giTGT99lkQXaWiW+TDZKrAfZNK+UkSXgAslc jSn9bVgUMieZU8hqvxzRqOxlH3TgN4AZqHo66Q== )`
	RRSIG=495 and DNSKEY=495 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test af.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: