DNSSEC Analyzer - dcma.mil

Domain Name:

Time: 2023-10-02 22:00:27 UTC, NTP stratum 4

Analyzing DNSSEC problems for dcma.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (1139 octets) ;; HEADER SECTION ;; id = 54802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to f.root-servers.net for dcma.mil/A
	Received 755 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (755 octets) ;; HEADER SECTION ;; id = 16661 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . MBJEh3ilfCrnkf24kP9vjIAdbqUiRsBGRvUiZ9UsadLt9ysi1aQDbQfzNM8sCnjDWvZClAs64l0a 1jRSdvDLHWNurLc45bENB9dNpu74Qvu2BUrwXuarH96ed4mLdZ9ivGfYYJooS5e0+7HqXvvkFgIp oErjlE11ctJlIp3vzVavx1z3B+RlscvS5Qu585tYk1+Usn+VEAFm6QDmsxkOM5Ro8fUd+HFs6SE6 D57/6uaycqjJOz5WGRPJ3ELvN/4hDk/kcylFJ/4f8NG+cOqmRxsVEeWIS/8NDjtYESNU3vu2q0CX 1ODkTvZKXHZeG+M3wyoC2b1KzeqA/UQETAgGVw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.root-servers.net for mil/DNSKEY
	Received 750 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (750 octets) ;; HEADER SECTION ;; id = 42935 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . MBJEh3ilfCrnkf24kP9vjIAdbqUiRsBGRvUiZ9UsadLt9ysi1aQDbQfzNM8sCnjDWvZClAs64l0a 1jRSdvDLHWNurLc45bENB9dNpu74Qvu2BUrwXuarH96ed4mLdZ9ivGfYYJooS5e0+7HqXvvkFgIp oErjlE11ctJlIp3vzVavx1z3B+RlscvS5Qu585tYk1+Usn+VEAFm6QDmsxkOM5Ro8fUd+HFs6SE6 D57/6uaycqjJOz5WGRPJ3ELvN/4hDk/kcylFJ/4f8NG+cOqmRxsVEeWIS/8NDjtYESNU3vu2q0CX 1ODkTvZKXHZeG+M3wyoC2b1KzeqA/UQETAgGVw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to g.root-servers.net for mil/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (367 octets) ;; HEADER SECTION ;; id = 50961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . MBJEh3ilfCrnkf24kP9vjIAdbqUiRsBGRvUiZ9UsadLt9ysi1aQDbQfzNM8sCnjDWvZClAs64l0a 1jRSdvDLHWNurLc45bENB9dNpu74Qvu2BUrwXuarH96ed4mLdZ9ivGfYYJooS5e0+7HqXvvkFgIp oErjlE11ctJlIp3vzVavx1z3B+RlscvS5Qu585tYk1+Usn+VEAFm6QDmsxkOM5Ro8fUd+HFs6SE6 D57/6uaycqjJOz5WGRPJ3ELvN/4hDk/kcylFJ/4f8NG+cOqmRxsVEeWIS/8NDjtYESNU3vu2q0CX 1ODkTvZKXHZeG+M3wyoC2b1KzeqA/UQETAgGVw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . MBJEh3ilfCrnkf24kP9vjIAdbqUiRsBGRvUiZ9UsadLt9ysi1aQDbQfzNM8sCnjDWvZClAs64l0a 1jRSdvDLHWNurLc45bENB9dNpu74Qvu2BUrwXuarH96ed4mLdZ9ivGfYYJooS5e0+7HqXvvkFgIp oErjlE11ctJlIp3vzVavx1z3B+RlscvS5Qu585tYk1+Usn+VEAFm6QDmsxkOM5Ro8fUd+HFs6SE6 D57/6uaycqjJOz5WGRPJ3ELvN/4hDk/kcylFJ/4f8NG+cOqmRxsVEeWIS/8NDjtYESNU3vu2q0CX 1ODkTvZKXHZeG+M3wyoC2b1KzeqA/UQETAgGVw== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (1628 octets) ;; HEADER SECTION ;; id = 55644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20231009170524 20231002170524 14098 mil. WkcvvdqJoFbvQ/hVLDSQKsQa2Kln1y+J/lrMcC8/EVrZAltnbm3dsRDTJcocmsSeHmYDH+Nyq+SQ krIQlwop6I3GOTnphRjmX/g02iTz/l5ahzIqIo5HrztvM+0G/3VNbvHkv2/90pErYjHwRuan3zLT zHvnXRdNTWqMoCfD5tY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20231009170524 20231002170524 16801 mil. rfwVje/ypeeIdO19ZJyR56nQq7e8Q855DIMexA2TXvv3needYbl4uzMhe0T8lT853esZN0Nxa3SL /yF5HZE2T6UXG20bK4J8werpc8HR+l6OpNJ4Rfp90zfBRZito81m/GtsjtLsNGnvjbCAykoVFg// C4DSVQsinGvFaGUEtlw8sUveDRiy425no43DBLC8p46bu2zvs/aWDVHlls4DlLKeIcBMXmMKv6p6 +3xV4ro68eMovvvu6yEZ8QEWLc7RIotK63awOSCASWB8NE1mZyGJjWAcTQd0lBiuM9XRF36DKyzj lfXiDtfBtHYUaBqfkYlZFTlp74N7QWyOtV/ThQ== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20231009170524 20231002170524 62470 mil. OrlDscV9/McSHiqi80NzjiAg7DBqrQmvQFbJakDZQ2+ApXoDSvzxuoe1qaS/euJkwRFxwLsr6Kbd Ha01hv1FiDDEVmdAuBL0n74bhvBXLtY10uNTcc2nvOvFScVDp3q1hRo8qhzLeG155LjW9zAfiIsc mLRx0dSmWAaAF1cG8Herp8XieV1d2fWlwGLligPf8bn0oAi7KpTp1rG19z6wPpQHuC6uTajhAeql 8EVulE6ZQj8llqw4+UwfpIyypztuu2+KgAGVGdD3nDn1Qcopo4fcAKyTnrmKGLoFFECeY1JVDvUf fCecl39eSVDYysGRegKiFGeaefr84kqdYOueZw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20231009170524 20231002170524 14098 mil. WkcvvdqJoFbvQ/hVLDSQKsQa2Kln1y+J/lrMcC8/EVrZAltnbm3dsRDTJcocmsSeHmYDH+Nyq+SQ krIQlwop6I3GOTnphRjmX/g02iTz/l5ahzIqIo5HrztvM+0G/3VNbvHkv2/90pErYjHwRuan3zLT zHvnXRdNTWqMoCfD5tY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20231009170524 20231002170524 16801 mil. rfwVje/ypeeIdO19ZJyR56nQq7e8Q855DIMexA2TXvv3needYbl4uzMhe0T8lT853esZN0Nxa3SL /yF5HZE2T6UXG20bK4J8werpc8HR+l6OpNJ4Rfp90zfBRZito81m/GtsjtLsNGnvjbCAykoVFg// C4DSVQsinGvFaGUEtlw8sUveDRiy425no43DBLC8p46bu2zvs/aWDVHlls4DlLKeIcBMXmMKv6p6 +3xV4ro68eMovvvu6yEZ8QEWLc7RIotK63awOSCASWB8NE1mZyGJjWAcTQd0lBiuM9XRF36DKyzj lfXiDtfBtHYUaBqfkYlZFTlp74N7QWyOtV/ThQ== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20231009170524 20231002170524 62470 mil. OrlDscV9/McSHiqi80NzjiAg7DBqrQmvQFbJakDZQ2+ApXoDSvzxuoe1qaS/euJkwRFxwLsr6Kbd Ha01hv1FiDDEVmdAuBL0n74bhvBXLtY10uNTcc2nvOvFScVDp3q1hRo8qhzLeG155LjW9zAfiIsc mLRx0dSmWAaAF1cG8Herp8XieV1d2fWlwGLligPf8bn0oAi7KpTp1rG19z6wPpQHuC6uTajhAeql 8EVulE6ZQj8llqw4+UwfpIyypztuu2+KgAGVGdD3nDn1Qcopo4fcAKyTnrmKGLoFFECeY1JVDvUf fCecl39eSVDYysGRegKiFGeaefr84kqdYOueZw== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=44065 is now in the chain-of-trust
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=62470/SEP is now in the chain-of-trust
	Query to pac1.nipr.mil for dcma.mil/A
	Received 360 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (360 octets) ;; HEADER SECTION ;; id = 60619 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) DCMA.MIL. 21600 IN NS NS4.DCMA.MIL. DCMA.MIL. 21600 IN NS NS3.DCMA.MIL. DCMA.MIL. 10800 IN DS ( 54637 8 2 77dee7cb19301c514e6880b04819d8f84b222e6ca95166440a33f2db751b7581 ) DCMA.MIL. 10800 IN DS 54637 8 1 d379398988a81f31012606ed29b1a65ef5089e6b DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20231009170524 20231002170524 14098 mil. bUG6mF3PebzAeuuec8ztstW5KRVU3SVtEN1SzaD+KiVWQhSQSiqKj+2KXFMGPlMsLiGu4kracytZ EgTbwcZVnAIpb4VDdLugUIj+PcAtDG+YBYoueOYIzLRPIVRiIxtpYNNroIdX4PEKee8v+RVY1R5W ecJj02ks1Ikpt0mV17g= ) ;; ADDITIONAL SECTION (3 records) NS4.DCMA.MIL. 21600 IN A 144.183.130.117 NS3.DCMA.MIL. 21600 IN A 144.183.129.10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pac1.nipr.mil for dcma.mil/DNSKEY
	Received 360 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (360 octets) ;; HEADER SECTION ;; id = 53619 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) DCMA.MIL. 21600 IN NS NS4.DCMA.MIL. DCMA.MIL. 21600 IN NS NS3.DCMA.MIL. DCMA.MIL. 10800 IN DS ( 54637 8 2 77dee7cb19301c514e6880b04819d8f84b222e6ca95166440a33f2db751b7581 ) DCMA.MIL. 10800 IN DS 54637 8 1 d379398988a81f31012606ed29b1a65ef5089e6b DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20231009170524 20231002170524 14098 mil. bUG6mF3PebzAeuuec8ztstW5KRVU3SVtEN1SzaD+KiVWQhSQSiqKj+2KXFMGPlMsLiGu4kracytZ EgTbwcZVnAIpb4VDdLugUIj+PcAtDG+YBYoueOYIzLRPIVRiIxtpYNNroIdX4PEKee8v+RVY1R5W ecJj02ks1Ikpt0mV17g= ) ;; ADDITIONAL SECTION (3 records) NS4.DCMA.MIL. 21600 IN A 144.183.130.117 NS3.DCMA.MIL. 21600 IN A 144.183.129.10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dcma.mil

dcma.mil

	Checking DS between mil and dcma.mil
	Query to eur2.nipr.mil for dcma.mil/DS
	Received 292 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (292 octets) ;; HEADER SECTION ;; id = 49911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN DS ;; ANSWER SECTION (3 records) DCMA.MIL. 10800 IN DS ( 54637 8 2 77dee7cb19301c514e6880b04819d8f84b222e6ca95166440a33f2db751b7581 ) DCMA.MIL. 10800 IN DS 54637 8 1 d379398988a81f31012606ed29b1a65ef5089e6b DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20231009170524 20231002170524 14098 mil. bUG6mF3PebzAeuuec8ztstW5KRVU3SVtEN1SzaD+KiVWQhSQSiqKj+2KXFMGPlMsLiGu4kracytZ EgTbwcZVnAIpb4VDdLugUIj+PcAtDG+YBYoueOYIzLRPIVRiIxtpYNNroIdX4PEKee8v+RVY1R5W ecJj02ks1Ikpt0mV17g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for dcma.mil in the mil zone
	DS=54637/SHA-256 has algorithm RSASHA256
	DS=54637/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20231009170524 20231002170524 14098 mil. bUG6mF3PebzAeuuec8ztstW5KRVU3SVtEN1SzaD+KiVWQhSQSiqKj+2KXFMGPlMsLiGu4kracytZ EgTbwcZVnAIpb4VDdLugUIj+PcAtDG+YBYoueOYIzLRPIVRiIxtpYNNroIdX4PEKee8v+RVY1R5W ecJj02ks1Ikpt0mV17g= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=54637/SHA-256 is now in the chain-of-trust
	`DCMA.MIL. 10800 IN DS ( 54637 8 2 77dee7cb19301c514e6880b04819d8f84b222e6ca95166440a33f2db751b7581 )`
	`DCMA.MIL. 10800 IN DS 54637 8 1 d379398988a81f31012606ed29b1a65ef5089e6b`
	Query to NS3.DCMA.MIL for dcma.mil/DNSKEY
	Received 1753 bytes from 144.183.129.10
	;; Response received from 144.183.129.10 (1753 octets) ;; HEADER SECTION ;; id = 48587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN DNSKEY ;; ANSWER SECTION (6 records) dcma.mil. 52707 IN DNSKEY ( 257 3 8 AwEAAdwLek6EcFD618Tuz1gFY6bYJuLozNt8z5hOwnEpKcAecYhWJJmLa0CNIo/Pb6E/R622dg3m oypJJ8LEoKA/AFTDSjbcD5eLkO2sc89E6o6lztBMhESidATA0M2x05ko1it6sqIl3s8fiA8yJYDJ e3iJkkHIOWxHbfjoiJDdKeLBqczR5JT5O+OYY9OcBwH/e1KNCWOdQkF+AIueoznCEvkNvVi2W68m 75KDM4OG7/WhovNse/OX7OMITV/DFQyAPuKqKI60tH5sXtk8cIOkr4WaL9ZcD7Z6MLb5wsVQVup2 yCve7Bk9/3gx3OKVMGXpRNgSyxBaoxiMYSJY6TsAiXs= ) ; Key ID = 54637 dcma.mil. 52707 IN DNSKEY ( 256 3 8 AwEAAbbhY2wRfjVPn7KC2aJ14DmSFDb0szIKd0tAT/nx7vt1K76BvPIIrnehuXQYshrdqf3McVLY AzIYvmFoL+FRaNDjYSlvsuLMmF30RBZ88xrWHWxnHIMHMRi9fypUFoopdg8hfADJVfKjOTDXNaWx Ks3XNG1dnXUshOWm1NrvSdwmztS1RWdyowtFzHx7qfXKY0UDojOqrjAvKaZBmRBRG4INrzeXdcVN mKINyNf5JnrNGhmhVakaLOIlWrru7MRyFgo0SVO9ifi1Mug1i62Uc2L6feqkYMYYLTEaFeECjjos WZKvlD71mixbW8iH4PW05zc3GLCrckz1pb/7nMe0J+s= ) ; Key ID = 40464 dcma.mil. 52707 IN DNSKEY ( 256 3 8 AwEAAcO+d/rUSGlLxqCJbnHce+8FjPgGLCs21yhMlrCAFaF1O6rYN7utdAN2bvlOQe5DI7bPPVrd PWP7usHONaEhO0WH3zLoOZyUFPCPKR/f4IPG4CVwjZMU7Ytk9RWkHqzroHp1GqQLAmPEor4q8TeJ V6gfp1PJ5AjoIqOKjYAPQWEY0EcXsreTa9KKQ7vJmWv9S0i1GlwLpjaEDAKaMSIXIpua3g9xZ6Jw NJC7x051HFNGqgnXr4Yxs1oYjDspwcfrubY3i+VFKsw8L9ZABpejtUgNKXbPraUQF0PIbNJs+lP1 X7YOu3FDfk7ZGhE8pEUxY+4oPeNrhnyhP6FrTvsoTnk= ) ; Key ID = 12780 dcma.mil. 52707 IN RRSIG ( DNSKEY 8 2 86400 20231007195900 20230930185900 12780 dcma.mil. hZpXHcxQbwEN3Hho68i8wdbKjpb2aTO41eqFIa/KACYPHSaBlS6ANRbfvhhZ48zzdlaKwwm4pqlh 0btdgyk6TFL7NXEc07dt5ztbe0ollogguZIjk9k4f05LXvmBLW+e3xCD2sYgPHJGPrGv+aUw2i7+ VQKIOwATYFFQ0xanP8MVQzoEGTBm8hVT3hvHSpgKFbGUSs0vdjQVGDo1ay4OfcTuWqZTzJg60AKP 6t1JUiI+5URJN8E/0UqhY6nEl2wuWZaTaFFe1bSgg76wQDPbSY7ng1LEVrTGC2JD9MBiy8uorBe8 YOlY61OFPCoFbUggm8MwBDUjMj4xmRLvhFTHdg== ) dcma.mil. 52707 IN RRSIG ( DNSKEY 8 2 86400 20231007195900 20230930185900 40464 dcma.mil. qfzPUP+2OiD3MSDMEsHuyoIjnBdrS242+TeLsZsgxaIHeAsLLf4u/Fak36FuigpOReXZxYLYz+l3 I2EKhZJTT2uefXv8gdWKii0Rd90f1vesnBUDikzkQqTHISoViVartNnrdYpFmyXNbB0sATkXN1H1 SN5KNOk2U6QMeWpUWzaRQAGs/k6gaU7O+r1UQktHAToXMN/aCx5J4OoKn7BAW73z3nVz5zGRiWaY B6/lLeLvi0SVm6IFMUV0Y5NU+zH3h59tsewn3TNvP9i2LJQltA8IhKImGIwUSMM9P61yzLepCJgZ 5QnrMhSoHlEzvbsryKZgvs0uq2wAo4+dD0SoVA== ) dcma.mil. 52707 IN RRSIG ( DNSKEY 8 2 86400 20231007195900 20230930185900 54637 dcma.mil. kQspzJrxj2dgL97CW4svZm/TvvxskZ0aaoBdiOgHUP/aYZTbDKXBoDa/BfIo4ObY3pkaUgVPQ1IW vEVPN8M0NLZoJkp14aw/IPfKaIWi91JpbZkl5Jb5CZFQVA9vJp8J7Y/7urDfF+hG0X0UyriPOgri 2UGFUE8Uf94lf+afqrKak4qyenDZEw7oZ8olRWeS5b6ESVUcLqhVBO9SHIL0ScdIpfZQXS4unW7w fpFJtffnOxYtLL6r5mcCMBvKjt7TpqSsMA6KRoOb1pH8wEWnB6AbT8n9t79Kw3587/6MshHyjv34 AZzmmUdjIA2pmd1ql96DaVJis+DjFbxDco7wsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for dcma.mil
	`dcma.mil. 52707 IN DNSKEY ( 257 3 8 AwEAAdwLek6EcFD618Tuz1gFY6bYJuLozNt8z5hOwnEpKcAecYhWJJmLa0CNIo/Pb6E/R622dg3m oypJJ8LEoKA/AFTDSjbcD5eLkO2sc89E6o6lztBMhESidATA0M2x05ko1it6sqIl3s8fiA8yJYDJ e3iJkkHIOWxHbfjoiJDdKeLBqczR5JT5O+OYY9OcBwH/e1KNCWOdQkF+AIueoznCEvkNvVi2W68m 75KDM4OG7/WhovNse/OX7OMITV/DFQyAPuKqKI60tH5sXtk8cIOkr4WaL9ZcD7Z6MLb5wsVQVup2 yCve7Bk9/3gx3OKVMGXpRNgSyxBaoxiMYSJY6TsAiXs= ) ; Key ID = 54637`
	`dcma.mil. 52707 IN DNSKEY ( 256 3 8 AwEAAbbhY2wRfjVPn7KC2aJ14DmSFDb0szIKd0tAT/nx7vt1K76BvPIIrnehuXQYshrdqf3McVLY AzIYvmFoL+FRaNDjYSlvsuLMmF30RBZ88xrWHWxnHIMHMRi9fypUFoopdg8hfADJVfKjOTDXNaWx Ks3XNG1dnXUshOWm1NrvSdwmztS1RWdyowtFzHx7qfXKY0UDojOqrjAvKaZBmRBRG4INrzeXdcVN mKINyNf5JnrNGhmhVakaLOIlWrru7MRyFgo0SVO9ifi1Mug1i62Uc2L6feqkYMYYLTEaFeECjjos WZKvlD71mixbW8iH4PW05zc3GLCrckz1pb/7nMe0J+s= ) ; Key ID = 40464`
	`dcma.mil. 52707 IN DNSKEY ( 256 3 8 AwEAAcO+d/rUSGlLxqCJbnHce+8FjPgGLCs21yhMlrCAFaF1O6rYN7utdAN2bvlOQe5DI7bPPVrd PWP7usHONaEhO0WH3zLoOZyUFPCPKR/f4IPG4CVwjZMU7Ytk9RWkHqzroHp1GqQLAmPEor4q8TeJ V6gfp1PJ5AjoIqOKjYAPQWEY0EcXsreTa9KKQ7vJmWv9S0i1GlwLpjaEDAKaMSIXIpua3g9xZ6Jw NJC7x051HFNGqgnXr4Yxs1oYjDspwcfrubY3i+VFKsw8L9ZABpejtUgNKXbPraUQF0PIbNJs+lP1 X7YOu3FDfk7ZGhE8pEUxY+4oPeNrhnyhP6FrTvsoTnk= ) ; Key ID = 12780`
	DNSKEY=54637/SEP is now in the chain-of-trust
	DS=54637/SHA-256 verifies DNSKEY=54637/SEP
	DS=54637/SHA-1 verifies DNSKEY=54637/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`dcma.mil. 52707 IN RRSIG ( DNSKEY 8 2 86400 20231007195900 20230930185900 12780 dcma.mil. hZpXHcxQbwEN3Hho68i8wdbKjpb2aTO41eqFIa/KACYPHSaBlS6ANRbfvhhZ48zzdlaKwwm4pqlh 0btdgyk6TFL7NXEc07dt5ztbe0ollogguZIjk9k4f05LXvmBLW+e3xCD2sYgPHJGPrGv+aUw2i7+ VQKIOwATYFFQ0xanP8MVQzoEGTBm8hVT3hvHSpgKFbGUSs0vdjQVGDo1ay4OfcTuWqZTzJg60AKP 6t1JUiI+5URJN8E/0UqhY6nEl2wuWZaTaFFe1bSgg76wQDPbSY7ng1LEVrTGC2JD9MBiy8uorBe8 YOlY61OFPCoFbUggm8MwBDUjMj4xmRLvhFTHdg== )`
	`dcma.mil. 52707 IN RRSIG ( DNSKEY 8 2 86400 20231007195900 20230930185900 40464 dcma.mil. qfzPUP+2OiD3MSDMEsHuyoIjnBdrS242+TeLsZsgxaIHeAsLLf4u/Fak36FuigpOReXZxYLYz+l3 I2EKhZJTT2uefXv8gdWKii0Rd90f1vesnBUDikzkQqTHISoViVartNnrdYpFmyXNbB0sATkXN1H1 SN5KNOk2U6QMeWpUWzaRQAGs/k6gaU7O+r1UQktHAToXMN/aCx5J4OoKn7BAW73z3nVz5zGRiWaY B6/lLeLvi0SVm6IFMUV0Y5NU+zH3h59tsewn3TNvP9i2LJQltA8IhKImGIwUSMM9P61yzLepCJgZ 5QnrMhSoHlEzvbsryKZgvs0uq2wAo4+dD0SoVA== )`
	`dcma.mil. 52707 IN RRSIG ( DNSKEY 8 2 86400 20231007195900 20230930185900 54637 dcma.mil. kQspzJrxj2dgL97CW4svZm/TvvxskZ0aaoBdiOgHUP/aYZTbDKXBoDa/BfIo4ObY3pkaUgVPQ1IW vEVPN8M0NLZoJkp14aw/IPfKaIWi91JpbZkl5Jb5CZFQVA9vJp8J7Y/7urDfF+hG0X0UyriPOgri 2UGFUE8Uf94lf+afqrKak4qyenDZEw7oZ8olRWeS5b6ESVUcLqhVBO9SHIL0ScdIpfZQXS4unW7w fpFJtffnOxYtLL6r5mcCMBvKjt7TpqSsMA6KRoOb1pH8wEWnB6AbT8n9t79Kw3587/6MshHyjv34 AZzmmUdjIA2pmd1ql96DaVJis+DjFbxDco7wsQ== )`
	RRSIG=12780 and DNSKEY=12780 verifies the DNSKEY RRset
	RRSIG=40464 and DNSKEY=40464 verifies the DNSKEY RRset
	RRSIG=54637 and DNSKEY=54637/SEP verifies the DNSKEY RRset
	DNSKEY=40464 is now in the chain-of-trust
	DNSKEY=12780 is now in the chain-of-trust
	Query to NS3.DCMA.MIL for dcma.mil/A
	Received 1388 bytes from 144.183.129.10
	;; Response received from 144.183.129.10 (1388 octets) ;; HEADER SECTION ;; id = 38106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dcma.mil. 3600 IN SOA ( ns3.dcma.mil. dcma.lee.it-dir.list.dcmait-f5-dl.mail.mil. 2023092702 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 86500 ;minimum ) dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 12780 dcma.mil. TObA1fvpaHu/24yMEFU8vi5MVnoFAG1d8l4qprjoKc/vJcdPx7RSuCh26dUy9YnV90Ql/wvKO1Cy WqtKNsgTjbnaclsFKF42iGjt3Kv7iYvCZAS0e1KESzSLh/UVXbjtlcpAsDC75Ygu2kz2R5kCY0dR 8IV1oGHfUdQaGubrSpvo2P1Lmlf1IrIchXU7nyisCCWZT2ZKPSZYO1h8TtmKOznXuZ6MJB/j8MSa YaS+G+je5HwoHOH9ALQRZBBP9xmlYka+fP4gKsij965rhCkG8q9niwYVC7Mj/g3ELblQXS6n2WpZ iC84QkPOPg0gYAoCewrwxn16Wv4dmaONy+65LA== ) dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 40464 dcma.mil. iF+ssKDDM5hXwt8bZvVQ6sraGHoDHZAx80YbMhulSZHrRFJjQLIEpR6iKIjzwVegVUoJbbgvlgYl vOPz5m14NrOkNu8x4cuHsqQtovBNjr6POmn7jo7AYpfFOAYwmdyh8no3dU/SHMFjQPKU1hgWFIaH 7IohKG32FEPc/kLg6SO2NT8KwjTfRU+H6fPQvULYohtMC8G5chf4ADNoI6zBMRzetl4thfWwyEqL nMjVfasHzywRGdAf1d2t9Di//BI+Jm1jg1+l8VN4JUldvXaPZPQpcbuSnqOXRx9JyFP4bsoxNdkJ 0tr9GNcbgYigQl7ODrC2Z9wNuYiXmq0kn4YGXw== ) 1cdn4osr7dp81q4e7i3cjelhonjp0n4p.dcma.mil. 10074 IN NSEC3 ( 1 0 1 3a6f89ddf2b07504 1cdn4osr7dp81q4e7i3cjelhonjp0n4q NS SOA RRSIG DNSKEY NSEC3PARAM ) 1cdn4osr7dp81q4e7i3cjelhonjp0n4p.dcma.mil. 10074 IN RRSIG ( NSEC3 8 3 86500 20231009211130 20231002201130 12780 dcma.mil. nURbPjFHq0jm7kMTVGSk5G33/cHz1ydkO7lKWRDvVnjJkAw1ynv/UvWEZ4qH8IJsg598zoOuyvpj Hoz4dsylMtWtoZbaiiHEfIphZxYE0K9l79LbZRjsfiETWZuasiQiPI/QTulE7cWFjKLgHuiSXj8K BNp/ykCFQtC/3N+fdNLRT1q3unj/kQ1nJVHdEo4Vh6k8wuCJ6qUBTTQTRqYflu+W8XRHvoANSFru +8e9KKGyI8kzNs6OiUioiiryndZEK0UbaSZ8lFqzEcDR/qIDhnwzNzajx1HjQFvmYvfk4RqXZpn6 ym8iI82H0mQD3Q1gseNXl7mKkOFjKSB7GSHKOA== ) 1cdn4osr7dp81q4e7i3cjelhonjp0n4p.dcma.mil. 10074 IN RRSIG ( NSEC3 8 3 86500 20231009211130 20231002201130 40464 dcma.mil. LI6W3ue4lUgp2M3MUlldFeqloIYFPHOtr7pDTFtlxZWB6ZEvp413Spq6I7+1mVhrInbAqVwnz3gD 5GsDOjhH2uAp8J0L1pqgEel9wE8Zyy6TTche7OfYJzFgYa/4i2oeLesIsEUKNVTWEPsl3Dyg36OQ lnVkjjn6cA6zuETG0gYrdrGcgDHakeI1oreJ9vMwAhm7hCyYW4tXT1H1KropNp7rhS0myjk2UsG/ G/ANiIvZ9LVhkCbk5/RGDKaMZzKZ+mz7V9eOUD+nhW9Pl9k6LpEzyEDWFEmPM37Q0WU/FuzY3kjY JE1VqU0rHs/qVT5oYK5TwG9nuSwZTouKFYLnTg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS3.DCMA.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to NS4.DCMA.MIL for dcma.mil/SOA
	Received 708 bytes from 144.183.130.117
	;; Response received from 144.183.130.117 (708 octets) ;; HEADER SECTION ;; id = 10430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN SOA ;; ANSWER SECTION (3 records) dcma.mil. 86400 IN SOA ( ns3.dcma.mil. dcma.lee.it-dir.list.dcmait-f5-dl.mail.mil. 2023092702 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 86500 ;minimum ) dcma.mil. 86400 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 12780 dcma.mil. TObA1fvpaHu/24yMEFU8vi5MVnoFAG1d8l4qprjoKc/vJcdPx7RSuCh26dUy9YnV90Ql/wvKO1Cy WqtKNsgTjbnaclsFKF42iGjt3Kv7iYvCZAS0e1KESzSLh/UVXbjtlcpAsDC75Ygu2kz2R5kCY0dR 8IV1oGHfUdQaGubrSpvo2P1Lmlf1IrIchXU7nyisCCWZT2ZKPSZYO1h8TtmKOznXuZ6MJB/j8MSa YaS+G+je5HwoHOH9ALQRZBBP9xmlYka+fP4gKsij965rhCkG8q9niwYVC7Mj/g3ELblQXS6n2WpZ iC84QkPOPg0gYAoCewrwxn16Wv4dmaONy+65LA== ) dcma.mil. 86400 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 40464 dcma.mil. iF+ssKDDM5hXwt8bZvVQ6sraGHoDHZAx80YbMhulSZHrRFJjQLIEpR6iKIjzwVegVUoJbbgvlgYl vOPz5m14NrOkNu8x4cuHsqQtovBNjr6POmn7jo7AYpfFOAYwmdyh8no3dU/SHMFjQPKU1hgWFIaH 7IohKG32FEPc/kLg6SO2NT8KwjTfRU+H6fPQvULYohtMC8G5chf4ADNoI6zBMRzetl4thfWwyEqL nMjVfasHzywRGdAf1d2t9Di//BI+Jm1jg1+l8VN4JUldvXaPZPQpcbuSnqOXRx9JyFP4bsoxNdkJ 0tr9GNcbgYigQl7ODrC2Z9wNuYiXmq0kn4YGXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS3.DCMA.MIL for dcma.mil/A
	Received 1388 bytes from 144.183.129.10
	;; Response received from 144.183.129.10 (1388 octets) ;; HEADER SECTION ;; id = 11259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dcma.mil. 3600 IN SOA ( ns3.dcma.mil. dcma.lee.it-dir.list.dcmait-f5-dl.mail.mil. 2023092702 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 86500 ;minimum ) dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 12780 dcma.mil. TObA1fvpaHu/24yMEFU8vi5MVnoFAG1d8l4qprjoKc/vJcdPx7RSuCh26dUy9YnV90Ql/wvKO1Cy WqtKNsgTjbnaclsFKF42iGjt3Kv7iYvCZAS0e1KESzSLh/UVXbjtlcpAsDC75Ygu2kz2R5kCY0dR 8IV1oGHfUdQaGubrSpvo2P1Lmlf1IrIchXU7nyisCCWZT2ZKPSZYO1h8TtmKOznXuZ6MJB/j8MSa YaS+G+je5HwoHOH9ALQRZBBP9xmlYka+fP4gKsij965rhCkG8q9niwYVC7Mj/g3ELblQXS6n2WpZ iC84QkPOPg0gYAoCewrwxn16Wv4dmaONy+65LA== ) dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 40464 dcma.mil. iF+ssKDDM5hXwt8bZvVQ6sraGHoDHZAx80YbMhulSZHrRFJjQLIEpR6iKIjzwVegVUoJbbgvlgYl vOPz5m14NrOkNu8x4cuHsqQtovBNjr6POmn7jo7AYpfFOAYwmdyh8no3dU/SHMFjQPKU1hgWFIaH 7IohKG32FEPc/kLg6SO2NT8KwjTfRU+H6fPQvULYohtMC8G5chf4ADNoI6zBMRzetl4thfWwyEqL nMjVfasHzywRGdAf1d2t9Di//BI+Jm1jg1+l8VN4JUldvXaPZPQpcbuSnqOXRx9JyFP4bsoxNdkJ 0tr9GNcbgYigQl7ODrC2Z9wNuYiXmq0kn4YGXw== ) 1cdn4osr7dp81q4e7i3cjelhonjp0n4p.dcma.mil. 10074 IN NSEC3 ( 1 0 1 3a6f89ddf2b07504 1cdn4osr7dp81q4e7i3cjelhonjp0n4q NS SOA RRSIG DNSKEY NSEC3PARAM ) 1cdn4osr7dp81q4e7i3cjelhonjp0n4p.dcma.mil. 10074 IN RRSIG ( NSEC3 8 3 86500 20231009211130 20231002201130 12780 dcma.mil. nURbPjFHq0jm7kMTVGSk5G33/cHz1ydkO7lKWRDvVnjJkAw1ynv/UvWEZ4qH8IJsg598zoOuyvpj Hoz4dsylMtWtoZbaiiHEfIphZxYE0K9l79LbZRjsfiETWZuasiQiPI/QTulE7cWFjKLgHuiSXj8K BNp/ykCFQtC/3N+fdNLRT1q3unj/kQ1nJVHdEo4Vh6k8wuCJ6qUBTTQTRqYflu+W8XRHvoANSFru +8e9KKGyI8kzNs6OiUioiiryndZEK0UbaSZ8lFqzEcDR/qIDhnwzNzajx1HjQFvmYvfk4RqXZpn6 ym8iI82H0mQD3Q1gseNXl7mKkOFjKSB7GSHKOA== ) 1cdn4osr7dp81q4e7i3cjelhonjp0n4p.dcma.mil. 10074 IN RRSIG ( NSEC3 8 3 86500 20231009211130 20231002201130 40464 dcma.mil. LI6W3ue4lUgp2M3MUlldFeqloIYFPHOtr7pDTFtlxZWB6ZEvp413Spq6I7+1mVhrInbAqVwnz3gD 5GsDOjhH2uAp8J0L1pqgEel9wE8Zyy6TTche7OfYJzFgYa/4i2oeLesIsEUKNVTWEPsl3Dyg36OQ lnVkjjn6cA6zuETG0gYrdrGcgDHakeI1oreJ9vMwAhm7hCyYW4tXT1H1KropNp7rhS0myjk2UsG/ G/ANiIvZ9LVhkCbk5/RGDKaMZzKZ+mz7V9eOUD+nhW9Pl9k6LpEzyEDWFEmPM37Q0WU/FuzY3kjY JE1VqU0rHs/qVT5oYK5TwG9nuSwZTouKFYLnTg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 12780 dcma.mil. TObA1fvpaHu/24yMEFU8vi5MVnoFAG1d8l4qprjoKc/vJcdPx7RSuCh26dUy9YnV90Ql/wvKO1Cy WqtKNsgTjbnaclsFKF42iGjt3Kv7iYvCZAS0e1KESzSLh/UVXbjtlcpAsDC75Ygu2kz2R5kCY0dR 8IV1oGHfUdQaGubrSpvo2P1Lmlf1IrIchXU7nyisCCWZT2ZKPSZYO1h8TtmKOznXuZ6MJB/j8MSa YaS+G+je5HwoHOH9ALQRZBBP9xmlYka+fP4gKsij965rhCkG8q9niwYVC7Mj/g3ELblQXS6n2WpZ iC84QkPOPg0gYAoCewrwxn16Wv4dmaONy+65LA== )`
	`dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 40464 dcma.mil. iF+ssKDDM5hXwt8bZvVQ6sraGHoDHZAx80YbMhulSZHrRFJjQLIEpR6iKIjzwVegVUoJbbgvlgYl vOPz5m14NrOkNu8x4cuHsqQtovBNjr6POmn7jo7AYpfFOAYwmdyh8no3dU/SHMFjQPKU1hgWFIaH 7IohKG32FEPc/kLg6SO2NT8KwjTfRU+H6fPQvULYohtMC8G5chf4ADNoI6zBMRzetl4thfWwyEqL nMjVfasHzywRGdAf1d2t9Di//BI+Jm1jg1+l8VN4JUldvXaPZPQpcbuSnqOXRx9JyFP4bsoxNdkJ 0tr9GNcbgYigQl7ODrC2Z9wNuYiXmq0kn4YGXw== )`
	RRSIG=12780 and DNSKEY=12780 verifies the SOA RRset
	RRSIG=40464 and DNSKEY=40464 verifies the SOA RRset

dcma.mil

	Query to NS4.DCMA.MIL for dcma.mil/A
	Received 1388 bytes from 144.183.130.117
	;; Response received from 144.183.130.117 (1388 octets) ;; HEADER SECTION ;; id = 43618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dcma.mil. 3599 IN SOA ( ns3.dcma.mil. dcma.lee.it-dir.list.dcmait-f5-dl.mail.mil. 2023092702 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 86500 ;minimum ) dcma.mil. 10799 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 12780 dcma.mil. TObA1fvpaHu/24yMEFU8vi5MVnoFAG1d8l4qprjoKc/vJcdPx7RSuCh26dUy9YnV90Ql/wvKO1Cy WqtKNsgTjbnaclsFKF42iGjt3Kv7iYvCZAS0e1KESzSLh/UVXbjtlcpAsDC75Ygu2kz2R5kCY0dR 8IV1oGHfUdQaGubrSpvo2P1Lmlf1IrIchXU7nyisCCWZT2ZKPSZYO1h8TtmKOznXuZ6MJB/j8MSa YaS+G+je5HwoHOH9ALQRZBBP9xmlYka+fP4gKsij965rhCkG8q9niwYVC7Mj/g3ELblQXS6n2WpZ iC84QkPOPg0gYAoCewrwxn16Wv4dmaONy+65LA== ) dcma.mil. 10799 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 40464 dcma.mil. iF+ssKDDM5hXwt8bZvVQ6sraGHoDHZAx80YbMhulSZHrRFJjQLIEpR6iKIjzwVegVUoJbbgvlgYl vOPz5m14NrOkNu8x4cuHsqQtovBNjr6POmn7jo7AYpfFOAYwmdyh8no3dU/SHMFjQPKU1hgWFIaH 7IohKG32FEPc/kLg6SO2NT8KwjTfRU+H6fPQvULYohtMC8G5chf4ADNoI6zBMRzetl4thfWwyEqL nMjVfasHzywRGdAf1d2t9Di//BI+Jm1jg1+l8VN4JUldvXaPZPQpcbuSnqOXRx9JyFP4bsoxNdkJ 0tr9GNcbgYigQl7ODrC2Z9wNuYiXmq0kn4YGXw== ) 3hjhm55nbfps2geldhn9gi25bp0npviq.dcma.mil. 10666 IN NSEC3 ( 1 0 1 4ed1b3b8e3327bea 3hjhm55nbfps2geldhn9gi25bp0npvir NS SOA RRSIG DNSKEY NSEC3PARAM ) 3hjhm55nbfps2geldhn9gi25bp0npviq.dcma.mil. 10666 IN RRSIG ( NSEC3 8 3 86500 20231009190057 20231002180057 12780 dcma.mil. NrD9fVJM2DLcqqmFmN4a+vLFBhfc7U+36ko40lAbspXhutY8XrXH7gK4Nl5HBFJCyT5sW2epXvge V+B7aO9g5g/0+PowfIz+s6bnOrVbe47wIq5quv14aoi9bS7J42TOL0iTAkCvh6JSJa9afmQddzRC 0KHux3TIEZqHtBsYH4X6HVpCiRzAhfiNmwqEI+ZBk8pBROwMLiocT0m8r4Q/H5YUIVDWvZdWwAMX 9MLcg57LUX4Zyt0sreFhQN/UXa1ifXmfe8qKgvo19xbbyC4Cq24A9nCyNgmPfSgbD9jKsbyuqEFt dQnNBnI+z1SySfKyPbKHT6dMClohnC7XhUuSKQ== ) 3hjhm55nbfps2geldhn9gi25bp0npviq.dcma.mil. 10666 IN RRSIG ( NSEC3 8 3 86500 20231009190057 20231002180057 40464 dcma.mil. qCc3Ght1HZb2g9i2o3HkBXKhgyOpR4Dazi3c1D5gOA0bY/mYekpx3bVg5t34Bg4R+PDtinC5jpkv tfAypU+46t7yqr830rWgdnaHh6kwjLzSiGSsAu4HoREdV5Jx/Mwlny6cpz1CKA7N/+5U0wv6aXdm rx1mz+0cmcEN9G7/WznuQEXE5ArjAMjl4ALounRl5OWiUX5GmLYkMGSJrI5YZGkqhCLUqOp3Uyik nG9D+BU5kKb6LlUFz1pOmJ0ZeO+U7TCGUTNaz7tnChXXWOyFNjWyNkUVJLEU4P95CEsH1P51AUYj gRH/jRC/ch3WwhdIyL0MY3YBJcO1y+fIG/8UXQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS4.DCMA.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to NS4.DCMA.MIL for dcma.mil/A
	Received 1388 bytes from 144.183.130.117
	;; Response received from 144.183.130.117 (1388 octets) ;; HEADER SECTION ;; id = 52298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dcma.mil. 3600 IN SOA ( ns3.dcma.mil. dcma.lee.it-dir.list.dcmait-f5-dl.mail.mil. 2023092702 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 86500 ;minimum ) dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072553 20231002062553 12780 dcma.mil. qCY+8wjtY4byOUWujjHP5AWY2attNg4LvqC2RAYYHnB5irTgGF4n6LKCBaWzhue1mF65XHamTITz MPDZBo0EHrW4laTQico/U5r5mPajcAgBHSawSV6eXAggGhvfOu42wBrCX4YGRIsSeWhWkWKDtYAM U0BcfXChWy0x80UXO/0aKEi2WMVjI3f7L4nEqODs1KIAPlS7U0VQ4y4GuzwWETdk0aXOoaFXl96l q9ad8sFuYjFeniVKRruIjrLtDNT0owAPRhHDwJrJGotz6Xva+HpT6rT8vjtCRAXesBpweiLjbPx6 9YqW3it+AHppUQMi4C+Mb47fcc7RtpujrzppVw== ) dcma.mil. 10800 IN RRSIG ( SOA 8 2 86400 20231009072553 20231002062553 40464 dcma.mil. Bfx34Z2MqW8Tk6+grj/VhZAI8jsNukwSJBK1sU6NjYm4GMh1PJPbE83rM/UNLEZj9zSnu9aP3He8 nZM3G91QU9ybA9i0N9WsV4271cMAMzAALuuL5oTQIbT/hWbctqvUS6WcihN5p+nHBPxq053FgRfO jKANEDYtp94ny4w44vj79sCW5qJnkU/MLpGP8sBRwX1GvBVtgEyCIMPnLr1vd+5DolBAOfigCf3Z BgjfdPk46xkXu6HNx5wgXerXpMzQ9CvyjuT1m5n9JpOJguV2ohrNLjL3Nqi/M463FpDaCsvAjtkU G47We8jDxwsb7u1O3uo2vSLPHQXTU8WhGeEKug== ) 3hjhm55nbfps2geldhn9gi25bp0npviq.dcma.mil. 10666 IN NSEC3 ( 1 0 1 4ed1b3b8e3327bea 3hjhm55nbfps2geldhn9gi25bp0npvir NS SOA RRSIG DNSKEY NSEC3PARAM ) 3hjhm55nbfps2geldhn9gi25bp0npviq.dcma.mil. 10666 IN RRSIG ( NSEC3 8 3 86500 20231009190057 20231002180057 12780 dcma.mil. NrD9fVJM2DLcqqmFmN4a+vLFBhfc7U+36ko40lAbspXhutY8XrXH7gK4Nl5HBFJCyT5sW2epXvge V+B7aO9g5g/0+PowfIz+s6bnOrVbe47wIq5quv14aoi9bS7J42TOL0iTAkCvh6JSJa9afmQddzRC 0KHux3TIEZqHtBsYH4X6HVpCiRzAhfiNmwqEI+ZBk8pBROwMLiocT0m8r4Q/H5YUIVDWvZdWwAMX 9MLcg57LUX4Zyt0sreFhQN/UXa1ifXmfe8qKgvo19xbbyC4Cq24A9nCyNgmPfSgbD9jKsbyuqEFt dQnNBnI+z1SySfKyPbKHT6dMClohnC7XhUuSKQ== ) 3hjhm55nbfps2geldhn9gi25bp0npviq.dcma.mil. 10666 IN RRSIG ( NSEC3 8 3 86500 20231009190057 20231002180057 40464 dcma.mil. qCc3Ght1HZb2g9i2o3HkBXKhgyOpR4Dazi3c1D5gOA0bY/mYekpx3bVg5t34Bg4R+PDtinC5jpkv tfAypU+46t7yqr830rWgdnaHh6kwjLzSiGSsAu4HoREdV5Jx/Mwlny6cpz1CKA7N/+5U0wv6aXdm rx1mz+0cmcEN9G7/WznuQEXE5ArjAMjl4ALounRl5OWiUX5GmLYkMGSJrI5YZGkqhCLUqOp3Uyik nG9D+BU5kKb6LlUFz1pOmJ0ZeO+U7TCGUTNaz7tnChXXWOyFNjWyNkUVJLEU4P95CEsH1P51AUYj gRH/jRC/ch3WwhdIyL0MY3YBJcO1y+fIG/8UXQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`dcma.mil. 10799 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 12780 dcma.mil. TObA1fvpaHu/24yMEFU8vi5MVnoFAG1d8l4qprjoKc/vJcdPx7RSuCh26dUy9YnV90Ql/wvKO1Cy WqtKNsgTjbnaclsFKF42iGjt3Kv7iYvCZAS0e1KESzSLh/UVXbjtlcpAsDC75Ygu2kz2R5kCY0dR 8IV1oGHfUdQaGubrSpvo2P1Lmlf1IrIchXU7nyisCCWZT2ZKPSZYO1h8TtmKOznXuZ6MJB/j8MSa YaS+G+je5HwoHOH9ALQRZBBP9xmlYka+fP4gKsij965rhCkG8q9niwYVC7Mj/g3ELblQXS6n2WpZ iC84QkPOPg0gYAoCewrwxn16Wv4dmaONy+65LA== )`
	`dcma.mil. 10799 IN RRSIG ( SOA 8 2 86400 20231009072550 20231002062550 40464 dcma.mil. iF+ssKDDM5hXwt8bZvVQ6sraGHoDHZAx80YbMhulSZHrRFJjQLIEpR6iKIjzwVegVUoJbbgvlgYl vOPz5m14NrOkNu8x4cuHsqQtovBNjr6POmn7jo7AYpfFOAYwmdyh8no3dU/SHMFjQPKU1hgWFIaH 7IohKG32FEPc/kLg6SO2NT8KwjTfRU+H6fPQvULYohtMC8G5chf4ADNoI6zBMRzetl4thfWwyEqL nMjVfasHzywRGdAf1d2t9Di//BI+Jm1jg1+l8VN4JUldvXaPZPQpcbuSnqOXRx9JyFP4bsoxNdkJ 0tr9GNcbgYigQl7ODrC2Z9wNuYiXmq0kn4YGXw== )`
	RRSIG=12780 and DNSKEY=12780 verifies the SOA RRset
	RRSIG=40464 and DNSKEY=40464 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dcma.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: