DNSSEC Debugger - dcma.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-11-15 03:08:09 UTC

Analyzing DNSSEC problems for dcma.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 32385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to c.root-servers.net for dcma.mil/A
	Received 755 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 755 octets ;; HEADER SECTION ;; id = 43787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac ) mil. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . N5pPQ9QvzOTMQj7CrawIoy9bLxcs5Eq/sjjY/L/MPklWfXehlDMJG2OyvOirDkylTHt+oyU+Dco2 2ToHP8pe0BulmSs5cdUwq46v6MVNOTRn+z4PbGpAWqWVbHvX3fg4zXtYdufmFTrLKT91f6GmEUPR PYFR/NCu3qYhAwqIWsQCOhguGPHNgz2HgjuQHDV3cnfH29TNJS9TqROpZh1Xhcgz+Z7ahSWYPtxo +2YymU6uaEsfGsuaccaxQqUwQxk8gtI2PCieFmNxn70wynqWcib936slvXbqZjrg5b5EHp7mI4/M rjp2MJ+FDkbZkz+AoF5lqnCcgVfGemVIsPU0bQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for mil/DNSKEY
	Received 750 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 750 octets ;; HEADER SECTION ;; id = 11447 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac ) mil. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . N5pPQ9QvzOTMQj7CrawIoy9bLxcs5Eq/sjjY/L/MPklWfXehlDMJG2OyvOirDkylTHt+oyU+Dco2 2ToHP8pe0BulmSs5cdUwq46v6MVNOTRn+z4PbGpAWqWVbHvX3fg4zXtYdufmFTrLKT91f6GmEUPR PYFR/NCu3qYhAwqIWsQCOhguGPHNgz2HgjuQHDV3cnfH29TNJS9TqROpZh1Xhcgz+Z7ahSWYPtxo +2YymU6uaEsfGsuaccaxQqUwQxk8gtI2PCieFmNxn70wynqWcib936slvXbqZjrg5b5EHp7mI4/M rjp2MJ+FDkbZkz+AoF5lqnCcgVfGemVIsPU0bQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to h.root-servers.net for mil/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 24536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac ) mil. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . N5pPQ9QvzOTMQj7CrawIoy9bLxcs5Eq/sjjY/L/MPklWfXehlDMJG2OyvOirDkylTHt+oyU+Dco2 2ToHP8pe0BulmSs5cdUwq46v6MVNOTRn+z4PbGpAWqWVbHvX3fg4zXtYdufmFTrLKT91f6GmEUPR PYFR/NCu3qYhAwqIWsQCOhguGPHNgz2HgjuQHDV3cnfH29TNJS9TqROpZh1Xhcgz+Z7ahSWYPtxo +2YymU6uaEsfGsuaccaxQqUwQxk8gtI2PCieFmNxn70wynqWcib936slvXbqZjrg5b5EHp7mI4/M rjp2MJ+FDkbZkz+AoF5lqnCcgVfGemVIsPU0bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=31892/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . N5pPQ9QvzOTMQj7CrawIoy9bLxcs5Eq/sjjY/L/MPklWfXehlDMJG2OyvOirDkylTHt+oyU+Dco2 2ToHP8pe0BulmSs5cdUwq46v6MVNOTRn+z4PbGpAWqWVbHvX3fg4zXtYdufmFTrLKT91f6GmEUPR PYFR/NCu3qYhAwqIWsQCOhguGPHNgz2HgjuQHDV3cnfH29TNJS9TqROpZh1Xhcgz+Z7ahSWYPtxo +2YymU6uaEsfGsuaccaxQqUwQxk8gtI2PCieFmNxn70wynqWcib936slvXbqZjrg5b5EHp7mI4/M rjp2MJ+FDkbZkz+AoF5lqnCcgVfGemVIsPU0bQ== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=31892/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 31892 8 2 6c728f7465c2d5534fdf7d389a9343bdfc7d2bb43e65405c9e1a392b069b1aac )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 1061 octets ;; HEADER SECTION ;; id = 9025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcowsH6qDXjPdhLK1VkwkgABXATAfcloKWX0E8tcepmX+mZZQUBWcjNH2YStid/Y19TO87ZM We2skYJoRHeApthFifEgGIfvdOwf2JhoPeY1CMqXJuSl/XjvBU4LV9gclDpbww7r6IGnRmzayEOV JPfTkE3Puw2ZuhQW70WEQm3f ) ; keytag 25198 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAanJwEUtvO7Q9PP4EJ9IeUMGadAcH0xexyKi5C8B1bFTTxqu/5++oox87Ln+cnk2zG/DL6ow E0dhC3cEbweMOBgqO1VpxcPQtzhAvzM3etNSn9tcQpzYCREN4fIW3hYF9bLw52lusJ62i6qx8a8n CFSi6iDUCZBsx0t79+m2tAWochnVhSXAQVu41IW2Z3AQ+UsCvA4ZykrbUxpBwS7YyybBRMTimEr7 6gS63CblhUUyDxSudJx42yUF2YFPQkknzfOdx9BSvhXBRHRC2ClfB7YjsQ1Ep7ntlDp9dMecKYuc cSIB7Bf7FBj7/uiswFNNGT79JqvfRGXkZcZ211nERf0= ) ; keytag 31892 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb/s3u0E+cdnaYyNY9rJB0mVOkRuro7xyh1lcrt2YKMnNYdPoh832mCo9F2f1SlUg4+T+GOU VoWbNfPyr1KXoGYUGso3Jl1uMfu5WebuElBBbcyPRvuEfYgh8wun/5n32aYXOnDPJto0Pe2g0XmI yEsm+xRV9Ve8JmIUoJpCbPcV ) ; keytag 20731 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20261121002237 20261114002237 20731 mil. VAZWe6mLbhxpjKTL03HbH0Z4eukw+FCG4mXJ6/hIMvDtZUY+eVj+QkZJxWQSEZh7RJKJPumez6B/ gTrCKNv/27z65nnhZcp/NvvgHTx07c8jnoj574xU0LkBaEk1Zm14jKQL1hM9Pb4FtocAt/1sqad0 0v0egvLmQ6fDmmrRpXA= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20261121002237 20261114002237 31892 mil. iCrP0AeB+/qvkpimxB7HzVJePcjIH7Wai/OKeYcJgryv5/11va4rbPMWARsQhItYsqOVT+xjEe4+ gW7Mdo4MmltIcbJBJppBkfdwJ5Gd8xsRjIBYaE+ZLuF68Qj1YNOVhywHPYV3XfSi8DVYruc7Lmu1 nMuZlkzjfBrGDI+zbwtRKoUDYQY8c3lEm6Qar9fC+hfgaIWzm7uYXJ0/AQVyVzk8fON3Qyen0GTl q2bwJR4FCypCJKVMKR0PGe/zkT7Ija8iwVWADE3bT/SF+Od48oDy3LrQaf6IMeYvO+uGaIjuEFCj k/hBodOt6tDm+y7xjTJr0WO7lvmlwvRVT86SHQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcowsH6qDXjPdhLK1VkwkgABXATAfcloKWX0E8tcepmX+mZZQUBWcjNH2YStid/Y19TO87ZM We2skYJoRHeApthFifEgGIfvdOwf2JhoPeY1CMqXJuSl/XjvBU4LV9gclDpbww7r6IGnRmzayEOV JPfTkE3Puw2ZuhQW70WEQm3f ) ; keytag 25198`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAanJwEUtvO7Q9PP4EJ9IeUMGadAcH0xexyKi5C8B1bFTTxqu/5++oox87Ln+cnk2zG/DL6ow E0dhC3cEbweMOBgqO1VpxcPQtzhAvzM3etNSn9tcQpzYCREN4fIW3hYF9bLw52lusJ62i6qx8a8n CFSi6iDUCZBsx0t79+m2tAWochnVhSXAQVu41IW2Z3AQ+UsCvA4ZykrbUxpBwS7YyybBRMTimEr7 6gS63CblhUUyDxSudJx42yUF2YFPQkknzfOdx9BSvhXBRHRC2ClfB7YjsQ1Ep7ntlDp9dMecKYuc cSIB7Bf7FBj7/uiswFNNGT79JqvfRGXkZcZ211nERf0= ) ; keytag 31892`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb/s3u0E+cdnaYyNY9rJB0mVOkRuro7xyh1lcrt2YKMnNYdPoh832mCo9F2f1SlUg4+T+GOU VoWbNfPyr1KXoGYUGso3Jl1uMfu5WebuElBBbcyPRvuEfYgh8wun/5n32aYXOnDPJto0Pe2g0XmI yEsm+xRV9Ve8JmIUoJpCbPcV ) ; keytag 20731`
	DNSKEY=31892/SEP is now in the chain-of-trust
	DS=31892/SHA-256 verifies DNSKEY=31892/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20261121002237 20261114002237 20731 mil. VAZWe6mLbhxpjKTL03HbH0Z4eukw+FCG4mXJ6/hIMvDtZUY+eVj+QkZJxWQSEZh7RJKJPumez6B/ gTrCKNv/27z65nnhZcp/NvvgHTx07c8jnoj574xU0LkBaEk1Zm14jKQL1hM9Pb4FtocAt/1sqad0 0v0egvLmQ6fDmmrRpXA= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20261121002237 20261114002237 31892 mil. iCrP0AeB+/qvkpimxB7HzVJePcjIH7Wai/OKeYcJgryv5/11va4rbPMWARsQhItYsqOVT+xjEe4+ gW7Mdo4MmltIcbJBJppBkfdwJ5Gd8xsRjIBYaE+ZLuF68Qj1YNOVhywHPYV3XfSi8DVYruc7Lmu1 nMuZlkzjfBrGDI+zbwtRKoUDYQY8c3lEm6Qar9fC+hfgaIWzm7uYXJ0/AQVyVzk8fON3Qyen0GTl q2bwJR4FCypCJKVMKR0PGe/zkT7Ija8iwVWADE3bT/SF+Od48oDy3LrQaf6IMeYvO+uGaIjuEFCj k/hBodOt6tDm+y7xjTJr0WO7lvmlwvRVT86SHQ== )`
	RRSIG=20731 and DNSKEY=20731 verifies the DNSKEY RRset
	RRSIG=31892 and DNSKEY=31892/SEP verifies the DNSKEY RRset
	DNSKEY=25198 is now in the chain-of-trust
	DNSKEY=20731 is now in the chain-of-trust
	Query to eur2.nipr.mil for dcma.mil/A
	Received 675 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 675 octets ;; HEADER SECTION ;; id = 64899 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DCMA.MIL. 21600 IN NS DNS2.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS1.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS6.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS5.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS3.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS4.NIPR.MIL. DCMA.MIL. 10800 IN DS ( 28801 13 2 0fe481797a7b0dd24aabfac8d198c2c6af568b485c246f0d0982a68fb736221c ) DCMA.MIL. 10800 IN DS 28801 13 1 caa5078be4e72a6c501b56fc6a1ebd8e35608c81 DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20261121002237 20261114002237 20731 mil. fZ1stfMZBmb3RtdfKWVDzDgBbounz64aSXKyhb8OuobLM+jB0NtU/cPiwBW6NUB+HzeQijfXy/oc a2CpvibXp6ekfHkvPamdFSjlvlLCPpnQ2c5kLapjRgqUiP9QfbJPvZhGdKjE2WPMN+ByFnoYASzS HW4mIESnC3jIlPPBezQ= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to pac2.nipr.mil for dcma.mil/DNSKEY
	Received 675 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 675 octets ;; HEADER SECTION ;; id = 38167 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DCMA.MIL. 21600 IN NS DNS5.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS4.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS3.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS1.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS2.NIPR.MIL. DCMA.MIL. 21600 IN NS DNS6.NIPR.MIL. DCMA.MIL. 10800 IN DS ( 28801 13 2 0fe481797a7b0dd24aabfac8d198c2c6af568b485c246f0d0982a68fb736221c ) DCMA.MIL. 10800 IN DS 28801 13 1 caa5078be4e72a6c501b56fc6a1ebd8e35608c81 DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20261121002237 20261114002237 20731 mil. fZ1stfMZBmb3RtdfKWVDzDgBbounz64aSXKyhb8OuobLM+jB0NtU/cPiwBW6NUB+HzeQijfXy/oc a2CpvibXp6ekfHkvPamdFSjlvlLCPpnQ2c5kLapjRgqUiP9QfbJPvZhGdKjE2WPMN+ByFnoYASzS HW4mIESnC3jIlPPBezQ= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dcma.mil

dcma.mil

	Checking DS between mil and dcma.mil
	Query to con1.nipr.mil for dcma.mil/DS
	Received 292 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 292 octets ;; HEADER SECTION ;; id = 38320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN DS ;; ANSWER SECTION (3 records) DCMA.MIL. 10800 IN DS 28801 13 1 caa5078be4e72a6c501b56fc6a1ebd8e35608c81 DCMA.MIL. 10800 IN DS ( 28801 13 2 0fe481797a7b0dd24aabfac8d198c2c6af568b485c246f0d0982a68fb736221c ) DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20261121002237 20261114002237 20731 mil. fZ1stfMZBmb3RtdfKWVDzDgBbounz64aSXKyhb8OuobLM+jB0NtU/cPiwBW6NUB+HzeQijfXy/oc a2CpvibXp6ekfHkvPamdFSjlvlLCPpnQ2c5kLapjRgqUiP9QfbJPvZhGdKjE2WPMN+ByFnoYASzS HW4mIESnC3jIlPPBezQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dcma.mil in the mil zone
	DS=28801/SHA-1 uses a deprecated digest algorithm
	DS=28801/SHA-1 has algorithm ECDSAP256SHA256
	DS=28801/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DCMA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20261121002237 20261114002237 20731 mil. fZ1stfMZBmb3RtdfKWVDzDgBbounz64aSXKyhb8OuobLM+jB0NtU/cPiwBW6NUB+HzeQijfXy/oc a2CpvibXp6ekfHkvPamdFSjlvlLCPpnQ2c5kLapjRgqUiP9QfbJPvZhGdKjE2WPMN+ByFnoYASzS HW4mIESnC3jIlPPBezQ= )`
	RRSIG=20731 and DNSKEY=20731 verifies the DS RRset
	DS=28801/SHA-1 is now in the chain-of-trust
	`DCMA.MIL. 10800 IN DS 28801 13 1 caa5078be4e72a6c501b56fc6a1ebd8e35608c81`
	`DCMA.MIL. 10800 IN DS ( 28801 13 2 0fe481797a7b0dd24aabfac8d198c2c6af568b485c246f0d0982a68fb736221c )`
	Query to DNS6.NIPR.MIL for dcma.mil/DNSKEY
	Received 301 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 301 octets ;; HEADER SECTION ;; id = 47310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dcma.mil. 71671 IN DNSKEY ( 257 3 13 ZFua/W15I1VG668re/q9bneiKW6Rznv15VLUGqgBgincmJG+FWJ9ixrY/8CEudtgskpjtAYbb3jk lH2oyIzoCA== ) ; keytag 28801 dcma.mil. 71671 IN DNSKEY ( 256 3 13 41sBDOdKlueIe54Fbg92mDVm7hqhA6vMocVb1vmG/n6fZfUXRJ24HGpUzubn/DE66r21zcHz21sy Bmx4b1nQOQ== ) ; keytag 55130 dcma.mil. 71671 IN RRSIG ( DNSKEY 13 2 86400 20261118172758 20261111164303 28801 dcma.mil. 8zw3rXNKsFT6mwVWsaaGyDhCpQNtKo4OpLZDCWQ4XvnBiAG2l0mO9N/8clmUHLIe40klkpcgihr8 Bl+HWtiUEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dcma.mil
	`dcma.mil. 71671 IN DNSKEY ( 257 3 13 ZFua/W15I1VG668re/q9bneiKW6Rznv15VLUGqgBgincmJG+FWJ9ixrY/8CEudtgskpjtAYbb3jk lH2oyIzoCA== ) ; keytag 28801`
	`dcma.mil. 71671 IN DNSKEY ( 256 3 13 41sBDOdKlueIe54Fbg92mDVm7hqhA6vMocVb1vmG/n6fZfUXRJ24HGpUzubn/DE66r21zcHz21sy Bmx4b1nQOQ== ) ; keytag 55130`
	DNSKEY=28801/SEP is now in the chain-of-trust
	DS=28801/SHA-1 verifies DNSKEY=28801/SEP
	DS=28801/SHA-256 verifies DNSKEY=28801/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dcma.mil. 71671 IN RRSIG ( DNSKEY 13 2 86400 20261118172758 20261111164303 28801 dcma.mil. 8zw3rXNKsFT6mwVWsaaGyDhCpQNtKo4OpLZDCWQ4XvnBiAG2l0mO9N/8clmUHLIe40klkpcgihr8 Bl+HWtiUEg== )`
	RRSIG=28801 and DNSKEY=28801/SEP verifies the DNSKEY RRset
	DNSKEY=55130 is now in the chain-of-trust
	Query to DNS5.NIPR.MIL for dcma.mil/A
	Received 341 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 341 octets ;; HEADER SECTION ;; id = 31215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dcma.mil. 3599 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 3599 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) dcma.mil. 3597 IN NSEC 360.dcma.mil. NS SOA MX TXT RRSIG NSEC DNSKEY dcma.mil. 3597 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to DNS2.NIPR.MIL for dcma.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 22572 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN SOA ;; ANSWER SECTION (2 records) dcma.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 86400 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dcma.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 22182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN SOA ;; ANSWER SECTION (2 records) dcma.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 86400 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dcma.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 2839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN SOA ;; ANSWER SECTION (2 records) dcma.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 86400 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dcma.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 24052 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN SOA ;; ANSWER SECTION (2 records) dcma.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 86400 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dcma.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 54712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN SOA ;; ANSWER SECTION (2 records) dcma.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 86400 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dcma.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dcma.mil. 3597 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== )`
	RRSIG=55130 and DNSKEY=55130 verifies the NSEC RRset
	NSEC proves no records of type A exist for dcma.mil
	Found 1 RRSIGs over SOA RRset
	`dcma.mil. 3599 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== )`
	RRSIG=55130 and DNSKEY=55130 verifies the SOA RRset

dcma.mil

	Query to DNS6.NIPR.MIL for dcma.mil/A
	Received 341 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 341 octets ;; HEADER SECTION ;; id = 43594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dcma.mil. 3600 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) dcma.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== ) dcma.mil. 3600 IN NSEC 360.dcma.mil. NS SOA MX TXT RRSIG NSEC DNSKEY ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to DNS6.NIPR.MIL for dcma.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dcma.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== )`
	RRSIG=55130 and DNSKEY=55130 verifies the NSEC RRset
	NSEC proves no records of type A exist for dcma.mil
	Found 1 RRSIGs over SOA RRset
	`dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== )`
	RRSIG=55130 and DNSKEY=55130 verifies the SOA RRset

dcma.mil

	Query to DNS3.NIPR.MIL for dcma.mil/A
	Received 341 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 341 octets ;; HEADER SECTION ;; id = 39175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dcma.mil. 3598 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 3598 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) dcma.mil. 3596 IN NSEC 360.dcma.mil. NS SOA MX TXT RRSIG NSEC DNSKEY dcma.mil. 3596 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to DNS3.NIPR.MIL for dcma.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dcma.mil. 3596 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== )`
	RRSIG=55130 and DNSKEY=55130 verifies the NSEC RRset
	NSEC proves no records of type A exist for dcma.mil
	Found 1 RRSIGs over SOA RRset
	`dcma.mil. 3598 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== )`
	RRSIG=55130 and DNSKEY=55130 verifies the SOA RRset

dcma.mil

	Query to DNS1.NIPR.MIL for dcma.mil/A
	Received 341 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 341 octets ;; HEADER SECTION ;; id = 19621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dcma.mil. 3600 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) dcma.mil. 3596 IN NSEC 360.dcma.mil. NS SOA MX TXT RRSIG NSEC DNSKEY dcma.mil. 3596 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to DNS1.NIPR.MIL for dcma.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dcma.mil. 3596 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== )`
	RRSIG=55130 and DNSKEY=55130 verifies the NSEC RRset
	NSEC proves no records of type A exist for dcma.mil
	Found 1 RRSIGs over SOA RRset
	`dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== )`
	RRSIG=55130 and DNSKEY=55130 verifies the SOA RRset

dcma.mil

	Query to DNS4.NIPR.MIL for dcma.mil/A
	Received 341 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 341 octets ;; HEADER SECTION ;; id = 53252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dcma.mil. 3600 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) dcma.mil. 3597 IN NSEC 360.dcma.mil. NS SOA MX TXT RRSIG NSEC DNSKEY dcma.mil. 3597 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to DNS4.NIPR.MIL for dcma.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dcma.mil. 3597 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== )`
	RRSIG=55130 and DNSKEY=55130 verifies the NSEC RRset
	NSEC proves no records of type A exist for dcma.mil
	Found 1 RRSIGs over SOA RRset
	`dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== )`
	RRSIG=55130 and DNSKEY=55130 verifies the SOA RRset

dcma.mil

	Query to DNS2.NIPR.MIL for dcma.mil/A
	Received 341 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 341 octets ;; HEADER SECTION ;; id = 44747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dcma.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dcma.mil. 3600 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1610 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== ) dcma.mil. 3600 IN NSEC 360.dcma.mil. NS SOA MX TXT RRSIG NSEC DNSKEY dcma.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dcma.mil
	Found RRSIG signed by dcma.mil zone
	Query to DNS2.NIPR.MIL for dcma.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dcma.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20261120233356 20261113225657 55130 dcma.mil. OGoT93/ZmJXhW5OLYx654bl6sADpP8iJEsfIJBBRDGBviBlS59Orp6XuzMZ7WUa8VLRTcmLPr75r 0Jp9yQAdmg== )`
	RRSIG=55130 and DNSKEY=55130 verifies the NSEC RRset
	NSEC proves no records of type A exist for dcma.mil
	Found 1 RRSIGs over SOA RRset
	`dcma.mil. 3600 IN RRSIG ( SOA 13 2 86400 20261122020923 20261115010923 55130 dcma.mil. Y1G613FbGHaM4ckOwwOgq64vdngqhsK3bNEMhzeUL6Y1XdYAzFUx2V6SeXnHYkhHg2Ey8xKtRfEM hhyLn92vxQ== )`
	RRSIG=55130 and DNSKEY=55130 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dcma.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: