DNSSEC Debugger - apps.mil

Domain Name:

Time: 2026-01-23 10:58:24 UTC

Analyzing DNSSEC problems for apps.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 1838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for apps.mil/A
	Received 758 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 758 octets ;; HEADER SECTION ;; id = 52831 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . HV0ZKwyqtvJ9n8j9n5Qcw6kW4JNZlXZIf8Y50XrVEuNZ967E8Wl5EMrH5HXHUm8vRNpdOTCNZD0K jxdEHbVoDQk8NJzxWZP6s1c9pmcXly9/Y9iYcHPR7NDcmmK+zQIF+ewUiAeyZhrMv5kL/+ZuHA9V EcOgIpWE+63Flwo9zhFSq3fVU/F9ghniqIwhVY2FqbFq9Aa+87CH432Ir28e7nHdfRMB04Gi1Cbi vs+LDNcW4KfXxdbDxDQuNu49+mylJopuHAyr+I5mzIeda9+zTcfeI82sM5lZSWFCBqiZX8BHMmz+ mW5ioi2GwIYztTcywbFir1phH+hCFxdZJBuabw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for mil/DNSKEY
	Received 750 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 750 octets ;; HEADER SECTION ;; id = 38315 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . HV0ZKwyqtvJ9n8j9n5Qcw6kW4JNZlXZIf8Y50XrVEuNZ967E8Wl5EMrH5HXHUm8vRNpdOTCNZD0K jxdEHbVoDQk8NJzxWZP6s1c9pmcXly9/Y9iYcHPR7NDcmmK+zQIF+ewUiAeyZhrMv5kL/+ZuHA9V EcOgIpWE+63Flwo9zhFSq3fVU/F9ghniqIwhVY2FqbFq9Aa+87CH432Ir28e7nHdfRMB04Gi1Cbi vs+LDNcW4KfXxdbDxDQuNu49+mylJopuHAyr+I5mzIeda9+zTcfeI82sM5lZSWFCBqiZX8BHMmz+ mW5ioi2GwIYztTcywbFir1phH+hCFxdZJBuabw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to f.root-servers.net for mil/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 26333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . HV0ZKwyqtvJ9n8j9n5Qcw6kW4JNZlXZIf8Y50XrVEuNZ967E8Wl5EMrH5HXHUm8vRNpdOTCNZD0K jxdEHbVoDQk8NJzxWZP6s1c9pmcXly9/Y9iYcHPR7NDcmmK+zQIF+ewUiAeyZhrMv5kL/+ZuHA9V EcOgIpWE+63Flwo9zhFSq3fVU/F9ghniqIwhVY2FqbFq9Aa+87CH432Ir28e7nHdfRMB04Gi1Cbi vs+LDNcW4KfXxdbDxDQuNu49+mylJopuHAyr+I5mzIeda9+zTcfeI82sM5lZSWFCBqiZX8BHMmz+ mW5ioi2GwIYztTcywbFir1phH+hCFxdZJBuabw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . HV0ZKwyqtvJ9n8j9n5Qcw6kW4JNZlXZIf8Y50XrVEuNZ967E8Wl5EMrH5HXHUm8vRNpdOTCNZD0K jxdEHbVoDQk8NJzxWZP6s1c9pmcXly9/Y9iYcHPR7NDcmmK+zQIF+ewUiAeyZhrMv5kL/+ZuHA9V EcOgIpWE+63Flwo9zhFSq3fVU/F9ghniqIwhVY2FqbFq9Aa+87CH432Ir28e7nHdfRMB04Gi1Cbi vs+LDNcW4KfXxdbDxDQuNu49+mylJopuHAyr+I5mzIeda9+zTcfeI82sM5lZSWFCBqiZX8BHMmz+ mW5ioi2GwIYztTcywbFir1phH+hCFxdZJBuabw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 1061 octets ;; HEADER SECTION ;; id = 23227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260130000428 20260123000428 45019 mil. V9z/4SunOV4qmGQujPKnphJF26Al933IVYEvzfvuqHNU1EoPeN/uE2yqxEN7SfoCvqa3ny+E5dlf Gwv1Bc0AVXGLHhidKUk8aVsR8WGm2v6/VhqkuiJ2sa2DTI/xV7unY3U4fVt2Jvzo7JFc76lWNJFy 9KZegMs5t54ubtHy9susXDtiDFwgs7tKHPzZq8PgWHqCSx8+oDUtle1vLLkNycwVOVm4WKlB2e/V nB0HvzEU7tLzDgBaH3Tr8CpNQZ1i41JATik4NgcWUlaFUnN0lVMpt0/uOPjUH73ZwUh5sUzJnb76 TUa51qeeM0sD07xRvJZSxWGiZNfs+G6+Mxnonw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260130000428 20260123000428 48003 mil. Ii86r522aCmxeiYHsB7i15ukqmSEDeZvQh1xYw3s1SVUZYcEO0VlqClG6doVgIQDLA9HTDt2EhJB 8+OD16IQNVeWIZEcjAGYF2hnhh6H02KeJu6DkDPdy8vhR+G76NGidqmVfVmcJfOqfuJgl0Ao4Mhg FvLvnF5w8Jwj8/VRToM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260130000428 20260123000428 45019 mil. V9z/4SunOV4qmGQujPKnphJF26Al933IVYEvzfvuqHNU1EoPeN/uE2yqxEN7SfoCvqa3ny+E5dlf Gwv1Bc0AVXGLHhidKUk8aVsR8WGm2v6/VhqkuiJ2sa2DTI/xV7unY3U4fVt2Jvzo7JFc76lWNJFy 9KZegMs5t54ubtHy9susXDtiDFwgs7tKHPzZq8PgWHqCSx8+oDUtle1vLLkNycwVOVm4WKlB2e/V nB0HvzEU7tLzDgBaH3Tr8CpNQZ1i41JATik4NgcWUlaFUnN0lVMpt0/uOPjUH73ZwUh5sUzJnb76 TUa51qeeM0sD07xRvJZSxWGiZNfs+G6+Mxnonw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260130000428 20260123000428 48003 mil. Ii86r522aCmxeiYHsB7i15ukqmSEDeZvQh1xYw3s1SVUZYcEO0VlqClG6doVgIQDLA9HTDt2EhJB 8+OD16IQNVeWIZEcjAGYF2hnhh6H02KeJu6DkDPdy8vhR+G76NGidqmVfVmcJfOqfuJgl0Ao4Mhg FvLvnF5w8Jwj8/VRToM= )`
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	RRSIG=48003 and DNSKEY=48003 verifies the DNSKEY RRset
	DNSKEY=7870 is now in the chain-of-trust
	DNSKEY=48003 is now in the chain-of-trust
	Query to pac1.nipr.mil for apps.mil/A
	Received 475 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 475 octets ;; HEADER SECTION ;; id = 26607 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) APPS.MIL. 21600 IN NS DNS3.DISA.MIL. APPS.MIL. 21600 IN NS DNS4.DISA.MIL. APPS.MIL. 21600 IN NS DNS1.DISA.MIL. APPS.MIL. 21600 IN NS DNS2.DISA.MIL. APPS.MIL. 21600 IN NS DNS5.DISA.MIL. APPS.MIL. 10800 IN DS ( 23822 8 2 714cda4504020f5c84c15ed3cfa03ade70eddcc7664fbb8401123431e55b32e6 ) APPS.MIL. 10800 IN DS 23822 8 1 b12864e4c31388b50c5ee9810bcab6660f79dde9 APPS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260130000428 20260123000428 48003 mil. UKFKeYdTvwgPWTT81+F0wn7n9kKL1BSDvS8tsLhWqZR4uBZJ33cObZhfnVmT1mmN2rglN69IJmNh BNzx/c9K6/oDLje8Qk5+Be68KBnuER8i5iFyfu9A5RPeqd7AUyimCvVHabXdKw66RUv8eybEZlfm 3HEte+P7tGAYrD2ra/U= ) ;; ADDITIONAL SECTION (6 records) DNS5.DISA.MIL. 21600 IN A 215.65.126.185 DNS4.DISA.MIL. 21600 IN A 214.23.245.6 DNS3.DISA.MIL. 21600 IN A 214.3.125.232 DNS2.DISA.MIL. 21600 IN A 131.77.60.232 DNS1.DISA.MIL. 21600 IN A 152.229.110.232 ;; { "EDNS-VERSION": 0 }
	Query to con2.nipr.mil for apps.mil/DNSKEY
	Received 475 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 475 octets ;; HEADER SECTION ;; id = 3827 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) APPS.MIL. 21600 IN NS DNS1.DISA.MIL. APPS.MIL. 21600 IN NS DNS4.DISA.MIL. APPS.MIL. 21600 IN NS DNS5.DISA.MIL. APPS.MIL. 21600 IN NS DNS2.DISA.MIL. APPS.MIL. 21600 IN NS DNS3.DISA.MIL. APPS.MIL. 10800 IN DS ( 23822 8 2 714cda4504020f5c84c15ed3cfa03ade70eddcc7664fbb8401123431e55b32e6 ) APPS.MIL. 10800 IN DS 23822 8 1 b12864e4c31388b50c5ee9810bcab6660f79dde9 APPS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260130000428 20260123000428 48003 mil. UKFKeYdTvwgPWTT81+F0wn7n9kKL1BSDvS8tsLhWqZR4uBZJ33cObZhfnVmT1mmN2rglN69IJmNh BNzx/c9K6/oDLje8Qk5+Be68KBnuER8i5iFyfu9A5RPeqd7AUyimCvVHabXdKw66RUv8eybEZlfm 3HEte+P7tGAYrD2ra/U= ) ;; ADDITIONAL SECTION (6 records) DNS5.DISA.MIL. 21600 IN A 215.65.126.185 DNS4.DISA.MIL. 21600 IN A 214.23.245.6 DNS3.DISA.MIL. 21600 IN A 214.3.125.232 DNS2.DISA.MIL. 21600 IN A 131.77.60.232 DNS1.DISA.MIL. 21600 IN A 152.229.110.232 ;; { "EDNS-VERSION": 0 }
	Found child zone apps.mil

apps.mil

	Checking DS between mil and apps.mil
	Query to pac2.nipr.mil for apps.mil/DS
	Received 292 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 292 octets ;; HEADER SECTION ;; id = 63543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN DS ;; ANSWER SECTION (3 records) APPS.MIL. 10800 IN DS 23822 8 1 b12864e4c31388b50c5ee9810bcab6660f79dde9 APPS.MIL. 10800 IN DS ( 23822 8 2 714cda4504020f5c84c15ed3cfa03ade70eddcc7664fbb8401123431e55b32e6 ) APPS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260130000428 20260123000428 48003 mil. UKFKeYdTvwgPWTT81+F0wn7n9kKL1BSDvS8tsLhWqZR4uBZJ33cObZhfnVmT1mmN2rglN69IJmNh BNzx/c9K6/oDLje8Qk5+Be68KBnuER8i5iFyfu9A5RPeqd7AUyimCvVHabXdKw66RUv8eybEZlfm 3HEte+P7tGAYrD2ra/U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for apps.mil in the mil zone
	DS=23822/SHA-1 uses a deprecated digest algorithm
	DS=23822/SHA-1 has algorithm RSASHA256
	DS=23822/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`APPS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260130000428 20260123000428 48003 mil. UKFKeYdTvwgPWTT81+F0wn7n9kKL1BSDvS8tsLhWqZR4uBZJ33cObZhfnVmT1mmN2rglN69IJmNh BNzx/c9K6/oDLje8Qk5+Be68KBnuER8i5iFyfu9A5RPeqd7AUyimCvVHabXdKw66RUv8eybEZlfm 3HEte+P7tGAYrD2ra/U= )`
	RRSIG=48003 and DNSKEY=48003 verifies the DS RRset
	DS=23822/SHA-1 is now in the chain-of-trust
	`APPS.MIL. 10800 IN DS 23822 8 1 b12864e4c31388b50c5ee9810bcab6660f79dde9`
	`APPS.MIL. 10800 IN DS ( 23822 8 2 714cda4504020f5c84c15ed3cfa03ade70eddcc7664fbb8401123431e55b32e6 )`
	Query to DNS1.DISA.MIL for apps.mil/DNSKEY
	Received 1645 bytes from 152.229.110.232
	;; Response received from [152.229.110.232] 1645 octets ;; HEADER SECTION ;; id = 2147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN DNSKEY ;; ANSWER SECTION (7 records) apps.mil. 131918 IN DNSKEY ( 257 3 8 AwEAAZzZq8ciDTBdGwKaIfgcSLXFSO+Wm6Q4+cTnAohQqZRUt/XO7QZXI6eeY0x7qPiZlTdBfg3i jeVyYgGPzMZ+7ngAjO+T8z9vM/1X9I3fi/KWF43TZ8JEYfNJzYksbUG9ZC/vod9HHCpPp7SHuRiR B1t7ukAhykFe/6ftAnblkXgeqqSaSZ3D0afvD4HORTl/gGiBqqjKxm4cMeLtp8cxZerr9wNKDHX2 Z03jaQdsyHOcn/9enF+cZtKgonu2unQc5jwIi4TlLbOO9ol1zjWsKvQZs8GkXa1NJbwTpN0OjXsj aap134YWkzmhLaF+wns/PFYYrcKJFRusJp2Di2ckQ8U= ) ; keytag 4441 apps.mil. 131918 IN DNSKEY ( 257 3 8 AwEAAaEPxI9lr0Pk0HzH3mSywGFLAf79AjeYXXSz4gSRTUSygWQ94TPpR32qDmqNBBwn5zadakNY B1xGMtySNO9aZY19dZ46+C0LGloD2Uofu3HgEiI7ORfKXnBXRJ658p7RxD9gH7r2vDIkFICZ/dp9 BGGuCcRgn9BamL+m27S5xb7LCfCgv7LaKKznmVQIj3u4ha6Vq0qIEHqTL6kM+RkoHh0fLL6qCzg+ nhm7MhJLWV+49Lly/hlUjbbvzFUMQi0Vrd/WUWLUC41cFaM/b1A0ncQaOjwxi5GSNW4LB/sR56td nCVui/vshGl2nSEetXroLV8BVFR2V1T7j+7LkVR6hS0= ) ; keytag 23822 apps.mil. 131918 IN DNSKEY ( 256 3 8 AwEAAbVBcSbNo1VCSXBLTqoOnr6jNJqoi5a8lLgSjfY3KHt8LP0B1etBcyzOXm7SEqYQaSABaNk+ FfSVhsLTXU8zuFNdcByoYxrkd3QNP6ZjLF6HcUDCAS6rysb3FAiPVJWGHWAy8+Zu5m8lxM3qO/jj fQx/2CS0OLeg7wozcN+M2WJl ) ; keytag 13578 apps.mil. 131918 IN DNSKEY ( 256 3 8 AwEAAbXz4hJe4e/65FkVknExCblXzMbH4hmnqSr6Y1yJWQcmdB3K4BV9RxDaNZvNj8BpEmzcUrNB A2Q7ontfxwI4ibN7athblpFed/m8NXBvVIWRmNVSz/ES3wkDzQi7AydZInH9dPwr1v5Id0hlmOCb +sqdwCtRecNH6Dh6VK368tAh ) ; keytag 25888 apps.mil. 131918 IN RRSIG ( DNSKEY 8 2 172800 20260126055504 20260122052903 4441 apps.mil. TQ5V1m/kfvJBObVHKwTCDVESfbnjPMCx7lRPChK8whnqWoOkQ3gbugQDgpctG14UkQ7NAs57mq1p 6przHfHI1ddhOX2JfyJvyrxeJ8sXAbE/bh5s0M9SOIbAl/vckHbuPgUMmokVbeSkaPowjOBNM829 jWqCL2OdXJMjHagCBGIo4zOCKLPljx/R8r0Bd2a7E4RBbVEPy7Odn1FMVRZ5TDYJApx91CSRPIrO Rwd3uUof1kJxRD4gKkn01EmVhPoXzgNylCTnQQ3NC7zJf6IVNdWU6RzC2xKNbHmPv0jJWTIiGY9k Dk1Ysc6C8rgBEW8/5eCScyvzkVGDdtMIN4etPw== ) apps.mil. 131918 IN RRSIG ( DNSKEY 8 2 172800 20260126055504 20260122052903 23822 apps.mil. dE6g5a+84Vh4UWP8C9qYFyu+1bWSjdRbYDBY8pkgObbWP0r1cj2VWH0D9zSMVQXMDI1uWqdS3+bv Bcy7GbCG4CfjEbGK5cnWJZz4pMlt90Iqobgy0uzKaMNvA4zaNs6rqlAFLUoD1eLpsNqxbNFdgh6D DQlJGJajQSRW9m4Ch7XfAZc9mgPJVAqXRBnzv2WyHf3YTMe7/QqX4IUcVJbsVONBrHr6wbMzymhy BHdMD0GNMv0f9ToazQQNnHsE6ZXag4o3n+Nzn60j+yZIxtGAeiVevzCM5Z8dOBQjU8zJfAYjSBp6 mETNUXjb184j03g9mzUYDFO9PGKnAlQTcVsi+w== ) apps.mil. 131918 IN RRSIG ( DNSKEY 8 2 172800 20260126055504 20260122052903 25888 apps.mil. kCc58IuUuGkx+8t6Rm8IY3l9NhIG1xjKnvmk5n51kQaYblUUz9y3VWt6aJlTFLkBRwzjqyYug2wi FDwVk1WEfk9iSiRyXTpBxNZLkSyeakgXTVNt2L369LTEJEVdEg3P4IREjByPquBtgtVFBB5yiYjr QxphWGU8TjR9irfrfvE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for apps.mil
	`apps.mil. 131918 IN DNSKEY ( 257 3 8 AwEAAZzZq8ciDTBdGwKaIfgcSLXFSO+Wm6Q4+cTnAohQqZRUt/XO7QZXI6eeY0x7qPiZlTdBfg3i jeVyYgGPzMZ+7ngAjO+T8z9vM/1X9I3fi/KWF43TZ8JEYfNJzYksbUG9ZC/vod9HHCpPp7SHuRiR B1t7ukAhykFe/6ftAnblkXgeqqSaSZ3D0afvD4HORTl/gGiBqqjKxm4cMeLtp8cxZerr9wNKDHX2 Z03jaQdsyHOcn/9enF+cZtKgonu2unQc5jwIi4TlLbOO9ol1zjWsKvQZs8GkXa1NJbwTpN0OjXsj aap134YWkzmhLaF+wns/PFYYrcKJFRusJp2Di2ckQ8U= ) ; keytag 4441`
	`apps.mil. 131918 IN DNSKEY ( 257 3 8 AwEAAaEPxI9lr0Pk0HzH3mSywGFLAf79AjeYXXSz4gSRTUSygWQ94TPpR32qDmqNBBwn5zadakNY B1xGMtySNO9aZY19dZ46+C0LGloD2Uofu3HgEiI7ORfKXnBXRJ658p7RxD9gH7r2vDIkFICZ/dp9 BGGuCcRgn9BamL+m27S5xb7LCfCgv7LaKKznmVQIj3u4ha6Vq0qIEHqTL6kM+RkoHh0fLL6qCzg+ nhm7MhJLWV+49Lly/hlUjbbvzFUMQi0Vrd/WUWLUC41cFaM/b1A0ncQaOjwxi5GSNW4LB/sR56td nCVui/vshGl2nSEetXroLV8BVFR2V1T7j+7LkVR6hS0= ) ; keytag 23822`
	`apps.mil. 131918 IN DNSKEY ( 256 3 8 AwEAAbVBcSbNo1VCSXBLTqoOnr6jNJqoi5a8lLgSjfY3KHt8LP0B1etBcyzOXm7SEqYQaSABaNk+ FfSVhsLTXU8zuFNdcByoYxrkd3QNP6ZjLF6HcUDCAS6rysb3FAiPVJWGHWAy8+Zu5m8lxM3qO/jj fQx/2CS0OLeg7wozcN+M2WJl ) ; keytag 13578`
	`apps.mil. 131918 IN DNSKEY ( 256 3 8 AwEAAbXz4hJe4e/65FkVknExCblXzMbH4hmnqSr6Y1yJWQcmdB3K4BV9RxDaNZvNj8BpEmzcUrNB A2Q7ontfxwI4ibN7athblpFed/m8NXBvVIWRmNVSz/ES3wkDzQi7AydZInH9dPwr1v5Id0hlmOCb +sqdwCtRecNH6Dh6VK368tAh ) ; keytag 25888`
	DNSKEY=23822/SEP is now in the chain-of-trust
	DS=23822/SHA-1 verifies DNSKEY=23822/SEP
	DS=23822/SHA-256 verifies DNSKEY=23822/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`apps.mil. 131918 IN RRSIG ( DNSKEY 8 2 172800 20260126055504 20260122052903 4441 apps.mil. TQ5V1m/kfvJBObVHKwTCDVESfbnjPMCx7lRPChK8whnqWoOkQ3gbugQDgpctG14UkQ7NAs57mq1p 6przHfHI1ddhOX2JfyJvyrxeJ8sXAbE/bh5s0M9SOIbAl/vckHbuPgUMmokVbeSkaPowjOBNM829 jWqCL2OdXJMjHagCBGIo4zOCKLPljx/R8r0Bd2a7E4RBbVEPy7Odn1FMVRZ5TDYJApx91CSRPIrO Rwd3uUof1kJxRD4gKkn01EmVhPoXzgNylCTnQQ3NC7zJf6IVNdWU6RzC2xKNbHmPv0jJWTIiGY9k Dk1Ysc6C8rgBEW8/5eCScyvzkVGDdtMIN4etPw== )`
	`apps.mil. 131918 IN RRSIG ( DNSKEY 8 2 172800 20260126055504 20260122052903 23822 apps.mil. dE6g5a+84Vh4UWP8C9qYFyu+1bWSjdRbYDBY8pkgObbWP0r1cj2VWH0D9zSMVQXMDI1uWqdS3+bv Bcy7GbCG4CfjEbGK5cnWJZz4pMlt90Iqobgy0uzKaMNvA4zaNs6rqlAFLUoD1eLpsNqxbNFdgh6D DQlJGJajQSRW9m4Ch7XfAZc9mgPJVAqXRBnzv2WyHf3YTMe7/QqX4IUcVJbsVONBrHr6wbMzymhy BHdMD0GNMv0f9ToazQQNnHsE6ZXag4o3n+Nzn60j+yZIxtGAeiVevzCM5Z8dOBQjU8zJfAYjSBp6 mETNUXjb184j03g9mzUYDFO9PGKnAlQTcVsi+w== )`
	`apps.mil. 131918 IN RRSIG ( DNSKEY 8 2 172800 20260126055504 20260122052903 25888 apps.mil. kCc58IuUuGkx+8t6Rm8IY3l9NhIG1xjKnvmk5n51kQaYblUUz9y3VWt6aJlTFLkBRwzjqyYug2wi FDwVk1WEfk9iSiRyXTpBxNZLkSyeakgXTVNt2L369LTEJEVdEg3P4IREjByPquBtgtVFBB5yiYjr QxphWGU8TjR9irfrfvE= )`
	RRSIG=4441 and DNSKEY=4441/SEP verifies the DNSKEY RRset
	RRSIG=23822 and DNSKEY=23822/SEP verifies the DNSKEY RRset
	RRSIG=25888 and DNSKEY=25888 verifies the DNSKEY RRset
	DNSKEY=4441/SEP is now in the chain-of-trust
	DNSKEY=13578 is now in the chain-of-trust
	DNSKEY=25888 is now in the chain-of-trust
	Query to DNS4.DISA.MIL for apps.mil/A
	Received 549 bytes from 214.23.245.6
	;; Response received from [214.23.245.6] 549 octets ;; HEADER SECTION ;; id = 48386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 60 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 60 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 896 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 896 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.DISA.MIL is authoritative for apps.mil
	Found RRSIG signed by apps.mil zone
	Query to DNS1.DISA.MIL for apps.mil/SOA
	Received 287 bytes from 152.229.110.232
	;; Response received from [152.229.110.232] 287 octets ;; HEADER SECTION ;; id = 54877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN SOA ;; ANSWER SECTION (2 records) apps.mil. 3436 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133951 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 3436 IN RRSIG ( SOA 8 2 7200 20260127095124 20260123085124 25888 apps.mil. WZTlf2c7hnKJKlKcGmRJxUzonJ5hsS0UMLzsiDFkj/9PplgIH2IkCYXnjjBkQs1hHHSIHL61z6tp JeytLOcKXLCY/ekgWpwvZ+KEFrOgVfkdcCaez36hCAOl0e0j9WTvTap1nIbiDJfQwqPl2yaG66go oh2mWgFRwB30AHO6JIQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.DISA.MIL for apps.mil/SOA
	Received 287 bytes from 214.3.125.232
	;; Response received from [214.3.125.232] 287 octets ;; HEADER SECTION ;; id = 10592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN SOA ;; ANSWER SECTION (2 records) apps.mil. 3717 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133952 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 3717 IN RRSIG ( SOA 8 2 7200 20260127095805 20260123085805 25888 apps.mil. ZbtYiPX8ZE9FHAZW/mbzrIsRvz6NqhUQSak77ZvxVUf4aX5WxwOX0GTFL9htMx8x5eJyoxwnV/as uClHgWt3nSq+cNNfuQenuwmY62gd1yo2WXbHbgy7IpH1ILWGnmuJ2JxanjL7YP7Zud7T3fb65/2/ +e4t0JrXUSxZrQq8fuI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.DISA.MIL serial (2024133952) differs from DNS1.DISA.MIL serial (2024133951)
	Query to DNS2.DISA.MIL for apps.mil/SOA
	Received 287 bytes from 131.77.60.232
	;; Response received from [131.77.60.232] 287 octets ;; HEADER SECTION ;; id = 25602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN SOA ;; ANSWER SECTION (2 records) apps.mil. 3436 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133951 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 3436 IN RRSIG ( SOA 8 2 7200 20260127095124 20260123085124 25888 apps.mil. WZTlf2c7hnKJKlKcGmRJxUzonJ5hsS0UMLzsiDFkj/9PplgIH2IkCYXnjjBkQs1hHHSIHL61z6tp JeytLOcKXLCY/ekgWpwvZ+KEFrOgVfkdcCaez36hCAOl0e0j9WTvTap1nIbiDJfQwqPl2yaG66go oh2mWgFRwB30AHO6JIQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.DISA.MIL for apps.mil/SOA
	Received 287 bytes from 215.65.126.185
	;; Response received from [215.65.126.185] 287 octets ;; HEADER SECTION ;; id = 65379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN SOA ;; ANSWER SECTION (2 records) apps.mil. 3717 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133952 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 3717 IN RRSIG ( SOA 8 2 7200 20260127095805 20260123085805 25888 apps.mil. ZbtYiPX8ZE9FHAZW/mbzrIsRvz6NqhUQSak77ZvxVUf4aX5WxwOX0GTFL9htMx8x5eJyoxwnV/as uClHgWt3nSq+cNNfuQenuwmY62gd1yo2WXbHbgy7IpH1ILWGnmuJ2JxanjL7YP7Zud7T3fb65/2/ +e4t0JrXUSxZrQq8fuI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.DISA.MIL serial (2024133952) differs from DNS1.DISA.MIL serial (2024133951)
	Query to DNS4.DISA.MIL for apps.mil/A
	Received 549 bytes from 214.23.245.6
	;; Response received from [214.23.245.6] 549 octets ;; HEADER SECTION ;; id = 29455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 59 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 59 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 895 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 895 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`apps.mil. 60 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= )`
	RRSIG=25888 and DNSKEY=25888 verifies the SOA RRset

apps.mil

	Query to DNS3.DISA.MIL for apps.mil/A
	Received 549 bytes from 214.3.125.232
	;; Response received from [214.3.125.232] 549 octets ;; HEADER SECTION ;; id = 38927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 703 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 703 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 878 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 878 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.DISA.MIL is authoritative for apps.mil
	Found RRSIG signed by apps.mil zone
	Query to DNS3.DISA.MIL for apps.mil/A
	Received 549 bytes from 214.3.125.232
	;; Response received from [214.3.125.232] 549 octets ;; HEADER SECTION ;; id = 64641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 900 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 900 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 878 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 878 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`apps.mil. 703 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= )`
	RRSIG=25888 and DNSKEY=25888 verifies the SOA RRset

apps.mil

	Query to DNS5.DISA.MIL for apps.mil/A
	Received 549 bytes from 215.65.126.185
	;; Response received from [215.65.126.185] 549 octets ;; HEADER SECTION ;; id = 46095 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 899 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 899 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 877 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 877 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.DISA.MIL is authoritative for apps.mil
	Found RRSIG signed by apps.mil zone
	Query to DNS5.DISA.MIL for apps.mil/A
	Received 549 bytes from 215.65.126.185
	;; Response received from [215.65.126.185] 549 octets ;; HEADER SECTION ;; id = 48777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 899 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 899 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 877 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 877 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`apps.mil. 899 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= )`
	RRSIG=25888 and DNSKEY=25888 verifies the SOA RRset

apps.mil

	Query to DNS2.DISA.MIL for apps.mil/A
	Received 549 bytes from 131.77.60.232
	;; Response received from [131.77.60.232] 549 octets ;; HEADER SECTION ;; id = 28344 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 900 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 900 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 890 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 890 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.DISA.MIL is authoritative for apps.mil
	Found RRSIG signed by apps.mil zone
	Query to DNS2.DISA.MIL for apps.mil/A
	Received 549 bytes from 131.77.60.232
	;; Response received from [131.77.60.232] 549 octets ;; HEADER SECTION ;; id = 36545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 900 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 900 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 890 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 890 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`apps.mil. 900 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= )`
	RRSIG=25888 and DNSKEY=25888 verifies the SOA RRset

apps.mil

	Query to DNS1.DISA.MIL for apps.mil/A
	Received 549 bytes from 152.229.110.232
	;; Response received from [152.229.110.232] 549 octets ;; HEADER SECTION ;; id = 48900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 900 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 900 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 890 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 890 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.DISA.MIL is authoritative for apps.mil
	Found RRSIG signed by apps.mil zone
	Query to DNS1.DISA.MIL for apps.mil/A
	Received 549 bytes from 152.229.110.232
	;; Response received from [152.229.110.232] 549 octets ;; HEADER SECTION ;; id = 10136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; apps.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) apps.mil. 899 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2024133964 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) apps.mil. 899 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 889 IN NSEC3 ( 1 0 10 c3d69ff8276a7d4d3170d9a49bb2 u1mk1n2mfr3ajcikq27fcfufeo48bb7a NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) U19DO5HSMSHP1LKA4AHEIE85VQ45D84C.apps.mil. 889 IN RRSIG ( NSEC3 8 3 900 20260126120702 20260122111459 25888 apps.mil. rFY1sjXecMWjQkHAK+gwygtQfPVMxLUsa+mVi86ACXIlO+nDcNi+CGpEhctoKRqcsSRSOkhWH6tZ ejhyuFjTI9IaBbuy0or/Aioajc4H7wtWMAp7NsKh4z1H8VfR+1WtaDtrena5DDKWIJgBbdPKa237 Rm9Kbs8Vrl3LUAhso/U= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`apps.mil. 900 IN RRSIG ( SOA 8 2 7200 20260127104741 20260123094741 25888 apps.mil. pHSAVuGYy6+kqk3jP6MdS6Kpv/VUEPUnRh9gw93+RV1LdizfYGj6d1Go1anWJhZZtBmrOCJ5rCSb 1vEvwJ0e4fOe9x6ovPUZs3ficKaN6J0PaS6yTX5roaY0ktHT+I7mEjq+6UyIBw6BX2qCgOM8Ozxs rVzD5EAasCuxHbx68PM= )`
	RRSIG=25888 and DNSKEY=25888 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test apps.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: