DNSSEC Debugger

Domain Name:

Time: 2025-09-16 06:25:52 UTC

Analyzing DNSSEC problems for dds.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1414 octets ;; HEADER SECTION ;; id = 64371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for dds.mil/A
	Received 754 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 754 octets ;; HEADER SECTION ;; id = 63324 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250929050000 20250916040000 46441 . PdH0T73CMYsOkhBBh08MIyBihdrXE1cKPY3TEH4Bv2VHNe1X5m0iG8Xg6FTudFzGBRY2Touw35P7 c/bJCOWShrYpjzFP8oz4mV8RCJZcQ5lTXcEav0x+lwFKCMccmJBajTyzGzgoHcNVV9dguoUORh5G 6U/tHvhZ5AxkxNvhDa1Yj/8MTyLX/SFxl16rsmXo5EyVJ4qN7vR0rk5cAmuo2jZ42Z7sUkENE1bQ 0Xr3CUnaC4aDETzzjMMUo9ppiLcDCYDVaRc6czZOsj2+CuWlXIJaH80kQDYgTPPIr9UX4FVxCVGN LofUOdlle5dLPGZsRvfONw9ajKrX9HzMyEXziw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for mil/DNSKEY
	Received 753 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 753 octets ;; HEADER SECTION ;; id = 23571 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250929050000 20250916040000 46441 . PdH0T73CMYsOkhBBh08MIyBihdrXE1cKPY3TEH4Bv2VHNe1X5m0iG8Xg6FTudFzGBRY2Touw35P7 c/bJCOWShrYpjzFP8oz4mV8RCJZcQ5lTXcEav0x+lwFKCMccmJBajTyzGzgoHcNVV9dguoUORh5G 6U/tHvhZ5AxkxNvhDa1Yj/8MTyLX/SFxl16rsmXo5EyVJ4qN7vR0rk5cAmuo2jZ42Z7sUkENE1bQ 0Xr3CUnaC4aDETzzjMMUo9ppiLcDCYDVaRc6czZOsj2+CuWlXIJaH80kQDYgTPPIr9UX4FVxCVGN LofUOdlle5dLPGZsRvfONw9ajKrX9HzMyEXziw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to m.root-servers.net for mil/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 367 octets ;; HEADER SECTION ;; id = 65183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250929050000 20250916040000 46441 . PdH0T73CMYsOkhBBh08MIyBihdrXE1cKPY3TEH4Bv2VHNe1X5m0iG8Xg6FTudFzGBRY2Touw35P7 c/bJCOWShrYpjzFP8oz4mV8RCJZcQ5lTXcEav0x+lwFKCMccmJBajTyzGzgoHcNVV9dguoUORh5G 6U/tHvhZ5AxkxNvhDa1Yj/8MTyLX/SFxl16rsmXo5EyVJ4qN7vR0rk5cAmuo2jZ42Z7sUkENE1bQ 0Xr3CUnaC4aDETzzjMMUo9ppiLcDCYDVaRc6czZOsj2+CuWlXIJaH80kQDYgTPPIr9UX4FVxCVGN LofUOdlle5dLPGZsRvfONw9ajKrX9HzMyEXziw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=63500/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20250929050000 20250916040000 46441 . PdH0T73CMYsOkhBBh08MIyBihdrXE1cKPY3TEH4Bv2VHNe1X5m0iG8Xg6FTudFzGBRY2Touw35P7 c/bJCOWShrYpjzFP8oz4mV8RCJZcQ5lTXcEav0x+lwFKCMccmJBajTyzGzgoHcNVV9dguoUORh5G 6U/tHvhZ5AxkxNvhDa1Yj/8MTyLX/SFxl16rsmXo5EyVJ4qN7vR0rk5cAmuo2jZ42Z7sUkENE1bQ 0Xr3CUnaC4aDETzzjMMUo9ppiLcDCYDVaRc6czZOsj2+CuWlXIJaH80kQDYgTPPIr9UX4FVxCVGN LofUOdlle5dLPGZsRvfONw9ajKrX9HzMyEXziw== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=63500/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 )`
	Query to pac2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 1628 octets ;; HEADER SECTION ;; id = 19657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbukLgSUVQpO4zTdB0VL/ZKDZUjuwWBEhHnT/UDkE8KJhYOhwvsgxjL47evcbDN1jZXRZ2E2 sVWq2UXZvU7+qe3BzgEz3c1/FjQgiKQyicTqiVySOMjDEJM6PolZ6uoPLYGrdp8uNS/jnMRq8kgN aMt4Hk58tUNHKSNz8n2m2mRV ) ; keytag 57558 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdLJQLnUDq++INoemSYCxX2aOMBAXs5x7DQnNR0kTm3BhZh5K8cETiLLbOZuZ8ol0VNNDdBg 3NwIpgnesRihozz6hCfq0zE2muDVEplhxEQd0Fne9i64QTWCBygfBjpCVA8rg56pKjlLnmVmBWp4 2CYV69bPuUaM6uoqvtBYFhU9 ) ; keytag 65239 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250922230545 20250915230545 45019 mil. EO0mtAAWmCJwOzjuKkp9N+qtYvLGZ2opHzqa/FTGLYCsi11k+Z+Hi210ex6ddOZ3ch9/ZFRqQ+4u dsPfZI7lDe9ptSL8W+9+u4jwGQJ3WGvKR/vUhXe6CCT1+ACt0/Dqll15G/FFgmWKyW1Ly62IqIm4 aRp151kl/I00PpnLvFpCj1dBxx4YnGym7e4cs6p8A0OSua9pJxT3HC7NOJPmLyuSQ+710Vua33/L 7osCnV2xsWyf7ZvnF9baVF3N86y74wc8lWuMNYjEh9mPXPJuwUmPVBdPfbWqaGADQxpHvkKVNHj7 WOYdV9Q86//n6bwTMzXzku0XKydPT/FJCPrAVQ== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250922230545 20250915230545 63500 mil. G28srXysCvO3rzeetj83HcjFKxwhDJDYy4LoibjBZnujR5T21uMfe20vSPfyGg1xh5C3zWesB1rT TDUnSYkwbIq+HMuXmuBzoWpNTOBTtYNRTAynK+ZxTHGxQH/9NGwarM9UQel6MYGG/HQ1kLYVndEN AVmIG05K3/+9Lpa1MZXCiIFuhogfoUGHUCMsdOzdKUQ/yq+52Fs0xE098lnTtAq1HnnaHZktZztW uGmHx7k9IbgBJdl1M487plY0lwxYlTGsXojl6xBSKMm3ihQC/zdYkGn/PPoQyaDD5SpawTxDhtzB cG6rq0m3NfMnWutgVESagYGCwL27mP0Uk19q/g== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250922230545 20250915230545 65239 mil. iOxwssjKL96spfWhUXlzivfodxKl4HIeToxacgMi5wg7ds/8AXJwKYT1MtZPZi1OGZWU3nukHI5F E/KF09DyjiL6hBbmrRpMHRKnY4OCXc3kgxZG/kI1QHeVConoJuPImdSlQ8N4n089Zv+BLy5sb7pE 86w0xoVufSQuTd7xoTE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbukLgSUVQpO4zTdB0VL/ZKDZUjuwWBEhHnT/UDkE8KJhYOhwvsgxjL47evcbDN1jZXRZ2E2 sVWq2UXZvU7+qe3BzgEz3c1/FjQgiKQyicTqiVySOMjDEJM6PolZ6uoPLYGrdp8uNS/jnMRq8kgN aMt4Hk58tUNHKSNz8n2m2mRV ) ; keytag 57558`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdLJQLnUDq++INoemSYCxX2aOMBAXs5x7DQnNR0kTm3BhZh5K8cETiLLbOZuZ8ol0VNNDdBg 3NwIpgnesRihozz6hCfq0zE2muDVEplhxEQd0Fne9i64QTWCBygfBjpCVA8rg56pKjlLnmVmBWp4 2CYV69bPuUaM6uoqvtBYFhU9 ) ; keytag 65239`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	DNSKEY=63500/SEP is now in the chain-of-trust
	DS=63500/SHA-256 verifies DNSKEY=63500/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250922230545 20250915230545 45019 mil. EO0mtAAWmCJwOzjuKkp9N+qtYvLGZ2opHzqa/FTGLYCsi11k+Z+Hi210ex6ddOZ3ch9/ZFRqQ+4u dsPfZI7lDe9ptSL8W+9+u4jwGQJ3WGvKR/vUhXe6CCT1+ACt0/Dqll15G/FFgmWKyW1Ly62IqIm4 aRp151kl/I00PpnLvFpCj1dBxx4YnGym7e4cs6p8A0OSua9pJxT3HC7NOJPmLyuSQ+710Vua33/L 7osCnV2xsWyf7ZvnF9baVF3N86y74wc8lWuMNYjEh9mPXPJuwUmPVBdPfbWqaGADQxpHvkKVNHj7 WOYdV9Q86//n6bwTMzXzku0XKydPT/FJCPrAVQ== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250922230545 20250915230545 63500 mil. G28srXysCvO3rzeetj83HcjFKxwhDJDYy4LoibjBZnujR5T21uMfe20vSPfyGg1xh5C3zWesB1rT TDUnSYkwbIq+HMuXmuBzoWpNTOBTtYNRTAynK+ZxTHGxQH/9NGwarM9UQel6MYGG/HQ1kLYVndEN AVmIG05K3/+9Lpa1MZXCiIFuhogfoUGHUCMsdOzdKUQ/yq+52Fs0xE098lnTtAq1HnnaHZktZztW uGmHx7k9IbgBJdl1M487plY0lwxYlTGsXojl6xBSKMm3ihQC/zdYkGn/PPoQyaDD5SpawTxDhtzB cG6rq0m3NfMnWutgVESagYGCwL27mP0Uk19q/g== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250922230545 20250915230545 65239 mil. iOxwssjKL96spfWhUXlzivfodxKl4HIeToxacgMi5wg7ds/8AXJwKYT1MtZPZi1OGZWU3nukHI5F E/KF09DyjiL6hBbmrRpMHRKnY4OCXc3kgxZG/kI1QHeVConoJuPImdSlQ8N4n089Zv+BLy5sb7pE 86w0xoVufSQuTd7xoTE= )`
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	RRSIG=63500 and DNSKEY=63500/SEP verifies the DNSKEY RRset
	RRSIG=65239 and DNSKEY=65239 verifies the DNSKEY RRset
	DNSKEY=57558 is now in the chain-of-trust
	DNSKEY=65239 is now in the chain-of-trust
	DNSKEY=45019/SEP is now in the chain-of-trust
	Query to eur1.nipr.mil for dds.mil/A
	Received 676 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 676 octets ;; HEADER SECTION ;; id = 4167 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250922230545 20250915230545 65239 mil. jv8u9oojqmBa/fWJMVRm6ooOinN4usiTT7cTxmB0UJ3fvAPvkNNfxQn3v0RSb07DPpQRfJ/G7Nsm WMKbwvSLSJCenFxWfvHvf8PAWJjWV3xYOjGuWjDolus4qHy41+2Qlyi+eMEdP/M2Y0BlfYDBqm65 l7N6d8bm1RwON4135Rc= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to con2.nipr.mil for dds.mil/DNSKEY
	Received 676 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 676 octets ;; HEADER SECTION ;; id = 63545 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250922230545 20250915230545 65239 mil. jv8u9oojqmBa/fWJMVRm6ooOinN4usiTT7cTxmB0UJ3fvAPvkNNfxQn3v0RSb07DPpQRfJ/G7Nsm WMKbwvSLSJCenFxWfvHvf8PAWJjWV3xYOjGuWjDolus4qHy41+2Qlyi+eMEdP/M2Y0BlfYDBqm65 l7N6d8bm1RwON4135Rc= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dds.mil

dds.mil

	Checking DS between mil and dds.mil
	Query to pac1.nipr.mil for dds.mil/DS
	Received 290 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 290 octets ;; HEADER SECTION ;; id = 52751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DS ;; ANSWER SECTION (3 records) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250922230545 20250915230545 65239 mil. jv8u9oojqmBa/fWJMVRm6ooOinN4usiTT7cTxmB0UJ3fvAPvkNNfxQn3v0RSb07DPpQRfJ/G7Nsm WMKbwvSLSJCenFxWfvHvf8PAWJjWV3xYOjGuWjDolus4qHy41+2Qlyi+eMEdP/M2Y0BlfYDBqm65 l7N6d8bm1RwON4135Rc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dds.mil in the mil zone
	DS=46107/SHA-1 uses a deprecated digest algorithm
	DS=46107/SHA-1 has algorithm ECDSAP256SHA256
	DS=46107/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250922230545 20250915230545 65239 mil. jv8u9oojqmBa/fWJMVRm6ooOinN4usiTT7cTxmB0UJ3fvAPvkNNfxQn3v0RSb07DPpQRfJ/G7Nsm WMKbwvSLSJCenFxWfvHvf8PAWJjWV3xYOjGuWjDolus4qHy41+2Qlyi+eMEdP/M2Y0BlfYDBqm65 l7N6d8bm1RwON4135Rc= )`
	RRSIG=65239 and DNSKEY=65239 verifies the DS RRset
	DS=46107/SHA-1 is now in the chain-of-trust
	`DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b`
	`DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 )`
	Query to DNS5.NIPR.MIL for dds.mil/DNSKEY
	Received 299 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 299 octets ;; HEADER SECTION ;; id = 18901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dds.mil. 77161 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107 dds.mil. 77161 IN DNSKEY ( 256 3 13 I8RvrHFw3RKwdNHfzOVIp6q543mbVYm6jB0yiIrHraz8RkODA7NwENnendCS1j3atV5rCWIRRdBf NEiF+CeCBQ== ) ; keytag 3679 dds.mil. 77161 IN RRSIG ( DNSKEY 13 2 86400 20250922235959 20250915230000 46107 dds.mil. lM2jNz/FxrNTWPxi5BvTF2wsfe9hwJmbdKB59tk7+5XEGQfI+oVNre02U6oTX2iWtUv+J6yQXafX Op/5r9XMXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dds.mil
	`dds.mil. 77161 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107`
	`dds.mil. 77161 IN DNSKEY ( 256 3 13 I8RvrHFw3RKwdNHfzOVIp6q543mbVYm6jB0yiIrHraz8RkODA7NwENnendCS1j3atV5rCWIRRdBf NEiF+CeCBQ== ) ; keytag 3679`
	DNSKEY=46107/SEP is now in the chain-of-trust
	DS=46107/SHA-1 verifies DNSKEY=46107/SEP
	DS=46107/SHA-256 verifies DNSKEY=46107/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dds.mil. 77161 IN RRSIG ( DNSKEY 13 2 86400 20250922235959 20250915230000 46107 dds.mil. lM2jNz/FxrNTWPxi5BvTF2wsfe9hwJmbdKB59tk7+5XEGQfI+oVNre02U6oTX2iWtUv+J6yQXafX Op/5r9XMXg== )`
	RRSIG=46107 and DNSKEY=46107/SEP verifies the DNSKEY RRset
	DNSKEY=3679 is now in the chain-of-trust
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 38373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 200 octets ;; HEADER SECTION ;; id = 54040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7265 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250923060353 20250916050353 3679 dds.mil. V5JUmjwnEWwpN9z4jvOBWN3oBEMcdvtQfiT15r6deab/UhTs+4CKnbW2yvHpAyB7++zsRqkosjZg BqirvBO8AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 200 octets ;; HEADER SECTION ;; id = 2274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7265 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250923060353 20250916050353 3679 dds.mil. V5JUmjwnEWwpN9z4jvOBWN3oBEMcdvtQfiT15r6deab/UhTs+4CKnbW2yvHpAyB7++zsRqkosjZg BqirvBO8AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 200 octets ;; HEADER SECTION ;; id = 9311 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7265 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250923060353 20250916050353 3679 dds.mil. V5JUmjwnEWwpN9z4jvOBWN3oBEMcdvtQfiT15r6deab/UhTs+4CKnbW2yvHpAyB7++zsRqkosjZg BqirvBO8AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 200 octets ;; HEADER SECTION ;; id = 62861 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7265 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250923060353 20250916050353 3679 dds.mil. V5JUmjwnEWwpN9z4jvOBWN3oBEMcdvtQfiT15r6deab/UhTs+4CKnbW2yvHpAyB7++zsRqkosjZg BqirvBO8AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 200 octets ;; HEADER SECTION ;; id = 38143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7265 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250923060353 20250916050353 3679 dds.mil. V5JUmjwnEWwpN9z4jvOBWN3oBEMcdvtQfiT15r6deab/UhTs+4CKnbW2yvHpAyB7++zsRqkosjZg BqirvBO8AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 36449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 54281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 433 IN A 3.222.178.31 dds.mil. 433 IN A 44.216.73.213 dds.mil. 433 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 48600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 433 IN A 3.222.178.31 dds.mil. 433 IN A 44.216.73.213 dds.mil. 433 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 433 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 17193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 599 IN A 44.216.73.213 dds.mil. 599 IN A 3.222.178.31 dds.mil. 599 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 45909 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 599 IN A 44.216.73.213 dds.mil. 599 IN A 3.222.178.31 dds.mil. 599 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 599 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 22896 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 243 IN A 44.216.73.213 dds.mil. 243 IN A 3.222.178.31 dds.mil. 243 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 50596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 243 IN A 44.216.73.213 dds.mil. 243 IN A 3.222.178.31 dds.mil. 243 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 243 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 15594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 58 IN A 3.222.178.31 dds.mil. 58 IN A 44.216.73.213 dds.mil. 58 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 58 IN A 3.222.178.31 dds.mil. 58 IN A 44.216.73.213 dds.mil. 58 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 58 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 62640 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 58 IN A 3.222.178.31 dds.mil. 58 IN A 44.216.73.213 dds.mil. 58 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 51066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 58 IN A 3.222.178.31 dds.mil. 58 IN A 44.216.73.213 dds.mil. 58 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 58 IN RRSIG ( A 13 2 600 20250920101616 20250913094500 3679 dds.mil. jugZEZrPMEaz90OXcYBDyH0kDu6COqUx8MNiVjRrjcwDTtzZRfFajIg3Bml983Kp3QIq+tq3Q43W ryPDv+HHTw== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dds.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: