DNSSEC Debugger

Domain Name:

Time: 2025-12-18 04:10:23 UTC

Analyzing DNSSEC problems for dds.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 45337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for dds.mil/A
	Received 754 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 754 octets ;; HEADER SECTION ;; id = 3999 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251230220000 20251217210000 61809 . gizDou8W+eQM13p3T6ev55iSGSAMlBBXn2Cd9xYI1qAg9qruWKRlbZyUaVdofOzOuPVlPu1SUAJn ZNlsva+wRfkfAUFmIwS8MG5/J52wS2UdMlwcc1UQdrVuUP/OIcl/e9E6pnMf03PQZ4mwHH/wqGbo jUO/NiMT6dfDXCUqhN4WpophVemXnZED9hKhHzvQwIJu0I4K3zVQ7SzMvvPpy+Xz3hHqi1PK1f57 W0V3WXhr46h7ciVHd3Rflyzb6Tuutg8iHI4HLG/qcUdejFNU/6qr0Vnm5pSjPZvOlIm1o66ldkKe RS9U7BZKcuaMSBME+roiLjqfPuEZPy8ThZqkuQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for mil/DNSKEY
	Received 753 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 753 octets ;; HEADER SECTION ;; id = 54423 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251230220000 20251217210000 61809 . gizDou8W+eQM13p3T6ev55iSGSAMlBBXn2Cd9xYI1qAg9qruWKRlbZyUaVdofOzOuPVlPu1SUAJn ZNlsva+wRfkfAUFmIwS8MG5/J52wS2UdMlwcc1UQdrVuUP/OIcl/e9E6pnMf03PQZ4mwHH/wqGbo jUO/NiMT6dfDXCUqhN4WpophVemXnZED9hKhHzvQwIJu0I4K3zVQ7SzMvvPpy+Xz3hHqi1PK1f57 W0V3WXhr46h7ciVHd3Rflyzb6Tuutg8iHI4HLG/qcUdejFNU/6qr0Vnm5pSjPZvOlIm1o66ldkKe RS9U7BZKcuaMSBME+roiLjqfPuEZPy8ThZqkuQ== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to a.root-servers.net for mil/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251230220000 20251217210000 61809 . gizDou8W+eQM13p3T6ev55iSGSAMlBBXn2Cd9xYI1qAg9qruWKRlbZyUaVdofOzOuPVlPu1SUAJn ZNlsva+wRfkfAUFmIwS8MG5/J52wS2UdMlwcc1UQdrVuUP/OIcl/e9E6pnMf03PQZ4mwHH/wqGbo jUO/NiMT6dfDXCUqhN4WpophVemXnZED9hKhHzvQwIJu0I4K3zVQ7SzMvvPpy+Xz3hHqi1PK1f57 W0V3WXhr46h7ciVHd3Rflyzb6Tuutg8iHI4HLG/qcUdejFNU/6qr0Vnm5pSjPZvOlIm1o66ldkKe RS9U7BZKcuaMSBME+roiLjqfPuEZPy8ThZqkuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20251230220000 20251217210000 61809 . gizDou8W+eQM13p3T6ev55iSGSAMlBBXn2Cd9xYI1qAg9qruWKRlbZyUaVdofOzOuPVlPu1SUAJn ZNlsva+wRfkfAUFmIwS8MG5/J52wS2UdMlwcc1UQdrVuUP/OIcl/e9E6pnMf03PQZ4mwHH/wqGbo jUO/NiMT6dfDXCUqhN4WpophVemXnZED9hKhHzvQwIJu0I4K3zVQ7SzMvvPpy+Xz3hHqi1PK1f57 W0V3WXhr46h7ciVHd3Rflyzb6Tuutg8iHI4HLG/qcUdejFNU/6qr0Vnm5pSjPZvOlIm1o66ldkKe RS9U7BZKcuaMSBME+roiLjqfPuEZPy8ThZqkuQ== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 1061 octets ;; HEADER SECTION ;; id = 31708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAeH4qbIC0vYVg16oYi6tipjNeVw4a7fpmyPV89A/wQ8jaNl09mAdDw4UK4GB6apYMtDrPENP ZdlFCFKs1oXwgZBi8hwh94othqdi3wMRVFKmPgy2gLkvGuB1m5RhwFFY7+gn1grcVnCm8ZpU6ajg WY6jWpSGsoDlrsKAx2y/IRSp ) ; keytag 27018 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251225000318 20251218000318 27018 mil. H6v+q39sB6dDbw1LBCiIPOJ3TNi5rvqMJwdvJr0/dQQ3pYAGDPVf6Ekojs3pkdUxpNQjymqpqGXq IiY58RGtzQtefcuIKPSiwiV9XQ/oVFvOFr60kfhJ7Dkgp66RZVb/eZshDIbs7gfUViZiNuNDY4pK eZq7wM6JiEc0KjD8Ayk= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251225000318 20251218000318 45019 mil. Q+KaUHJGYZSc69r4bZSnAPr6mNlW/h0Ms76XAS8Nu8XfJ0xN0FIhGJNmqkvi0MiItErzzzyp4o9Y BeGz3X58+YwrSRcm2axYGd5z2tMWZGxOSFe/o8zMdYa6JQFOlFAuITE+IcFBUfjjbaDY27C2Faw1 +fiDwS7pJWV+FK/qIeuN0Hou8lLXEZOLdjAs5p3c1PISSlvo7xi51Oyk7aPH58FN16YuIxgVjRlh 8rGPoertz1VVSG/kxePCx6aonzUz00k4IkH8olrLM3uxZNo7k8G2tlV7nvwCBGbILzGXRzLIoY/V dBjC+K22l7SXLHApmCTxNP37PxRFg7L4gX/w/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAeH4qbIC0vYVg16oYi6tipjNeVw4a7fpmyPV89A/wQ8jaNl09mAdDw4UK4GB6apYMtDrPENP ZdlFCFKs1oXwgZBi8hwh94othqdi3wMRVFKmPgy2gLkvGuB1m5RhwFFY7+gn1grcVnCm8ZpU6ajg WY6jWpSGsoDlrsKAx2y/IRSp ) ; keytag 27018`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251225000318 20251218000318 27018 mil. H6v+q39sB6dDbw1LBCiIPOJ3TNi5rvqMJwdvJr0/dQQ3pYAGDPVf6Ekojs3pkdUxpNQjymqpqGXq IiY58RGtzQtefcuIKPSiwiV9XQ/oVFvOFr60kfhJ7Dkgp66RZVb/eZshDIbs7gfUViZiNuNDY4pK eZq7wM6JiEc0KjD8Ayk= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251225000318 20251218000318 45019 mil. Q+KaUHJGYZSc69r4bZSnAPr6mNlW/h0Ms76XAS8Nu8XfJ0xN0FIhGJNmqkvi0MiItErzzzyp4o9Y BeGz3X58+YwrSRcm2axYGd5z2tMWZGxOSFe/o8zMdYa6JQFOlFAuITE+IcFBUfjjbaDY27C2Faw1 +fiDwS7pJWV+FK/qIeuN0Hou8lLXEZOLdjAs5p3c1PISSlvo7xi51Oyk7aPH58FN16YuIxgVjRlh 8rGPoertz1VVSG/kxePCx6aonzUz00k4IkH8olrLM3uxZNo7k8G2tlV7nvwCBGbILzGXRzLIoY/V dBjC+K22l7SXLHApmCTxNP37PxRFg7L4gX/w/g== )`
	RRSIG=27018 and DNSKEY=27018 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=48003 is now in the chain-of-trust
	DNSKEY=27018 is now in the chain-of-trust
	Query to con1.nipr.mil for dds.mil/A
	Received 676 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 676 octets ;; HEADER SECTION ;; id = 32417 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251225000318 20251218000318 27018 mil. LU9w2AJ6wlF66WxywOO05Eb1t24sgqjPa7klDHDtuoz5GJAcmFQxMt9v4jA08ACiWmghF4gS09XO LtLrF0rvvypfK286muLgXyoTRAo3BrnnJNpAzHCDb3BtPBK7brY3oIo+lE9fRxrCQ7PdsrBKk39x IeD2jioB/ZjFAbjMg8c= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to con1.nipr.mil for dds.mil/DNSKEY
	Received 676 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 676 octets ;; HEADER SECTION ;; id = 2572 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251225000318 20251218000318 27018 mil. LU9w2AJ6wlF66WxywOO05Eb1t24sgqjPa7klDHDtuoz5GJAcmFQxMt9v4jA08ACiWmghF4gS09XO LtLrF0rvvypfK286muLgXyoTRAo3BrnnJNpAzHCDb3BtPBK7brY3oIo+lE9fRxrCQ7PdsrBKk39x IeD2jioB/ZjFAbjMg8c= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dds.mil

dds.mil

	Checking DS between mil and dds.mil
	Query to con1.nipr.mil for dds.mil/DS
	Received 290 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 290 octets ;; HEADER SECTION ;; id = 62339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DS ;; ANSWER SECTION (3 records) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251225000318 20251218000318 27018 mil. LU9w2AJ6wlF66WxywOO05Eb1t24sgqjPa7klDHDtuoz5GJAcmFQxMt9v4jA08ACiWmghF4gS09XO LtLrF0rvvypfK286muLgXyoTRAo3BrnnJNpAzHCDb3BtPBK7brY3oIo+lE9fRxrCQ7PdsrBKk39x IeD2jioB/ZjFAbjMg8c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dds.mil in the mil zone
	DS=46107/SHA-1 uses a deprecated digest algorithm
	DS=46107/SHA-1 has algorithm ECDSAP256SHA256
	DS=46107/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251225000318 20251218000318 27018 mil. LU9w2AJ6wlF66WxywOO05Eb1t24sgqjPa7klDHDtuoz5GJAcmFQxMt9v4jA08ACiWmghF4gS09XO LtLrF0rvvypfK286muLgXyoTRAo3BrnnJNpAzHCDb3BtPBK7brY3oIo+lE9fRxrCQ7PdsrBKk39x IeD2jioB/ZjFAbjMg8c= )`
	RRSIG=27018 and DNSKEY=27018 verifies the DS RRset
	DS=46107/SHA-1 is now in the chain-of-trust
	`DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b`
	`DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 )`
	Query to DNS5.NIPR.MIL for dds.mil/DNSKEY
	Received 299 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 299 octets ;; HEADER SECTION ;; id = 24355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dds.mil. 79133 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107 dds.mil. 79133 IN DNSKEY ( 256 3 13 P/JdT1albovOGS6Q2B1yXFHh3MHdBNVmD3CukgKCC92H0DpC7XaLpGlZpFIJLNIr4kx9dv5zOIIe ihhevuxHXw== ) ; keytag 21300 dds.mil. 79133 IN RRSIG ( DNSKEY 13 2 86400 20251224143113 20251217134413 46107 dds.mil. 8RKSDTF3zNZGk3+jFdHZ0MaZlgo/v1Yzmimp4MVDwxP3A3KzhdMY3tPZCeCar4JBmbCnuWeEJ3pz qbNSlfP0mA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dds.mil
	`dds.mil. 79133 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107`
	`dds.mil. 79133 IN DNSKEY ( 256 3 13 P/JdT1albovOGS6Q2B1yXFHh3MHdBNVmD3CukgKCC92H0DpC7XaLpGlZpFIJLNIr4kx9dv5zOIIe ihhevuxHXw== ) ; keytag 21300`
	DNSKEY=46107/SEP is now in the chain-of-trust
	DS=46107/SHA-1 verifies DNSKEY=46107/SEP
	DS=46107/SHA-256 verifies DNSKEY=46107/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dds.mil. 79133 IN RRSIG ( DNSKEY 13 2 86400 20251224143113 20251217134413 46107 dds.mil. 8RKSDTF3zNZGk3+jFdHZ0MaZlgo/v1Yzmimp4MVDwxP3A3KzhdMY3tPZCeCar4JBmbCnuWeEJ3pz qbNSlfP0mA== )`
	RRSIG=46107 and DNSKEY=46107/SEP verifies the DNSKEY RRset
	DNSKEY=21300 is now in the chain-of-trust
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 45564 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 29 IN A 44.216.73.213 dds.mil. 29 IN A 3.222.178.31 dds.mil. 29 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS3.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 200 octets ;; HEADER SECTION ;; id = 47042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8124 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251225025822 20251218015822 21300 dds.mil. 1CWncGMGoGZ1gCcGXtA1EvVyaMYhccY5A9rNlv5FK9wlAn4DtFH1dvF3fIzrk1HPTnzvMYSAKgUA Zxs/JI/nIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 200 octets ;; HEADER SECTION ;; id = 34594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8124 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251225025822 20251218015822 21300 dds.mil. 1CWncGMGoGZ1gCcGXtA1EvVyaMYhccY5A9rNlv5FK9wlAn4DtFH1dvF3fIzrk1HPTnzvMYSAKgUA Zxs/JI/nIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 200 octets ;; HEADER SECTION ;; id = 25083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8124 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251225025822 20251218015822 21300 dds.mil. 1CWncGMGoGZ1gCcGXtA1EvVyaMYhccY5A9rNlv5FK9wlAn4DtFH1dvF3fIzrk1HPTnzvMYSAKgUA Zxs/JI/nIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 200 octets ;; HEADER SECTION ;; id = 62528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8124 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251225025822 20251218015822 21300 dds.mil. 1CWncGMGoGZ1gCcGXtA1EvVyaMYhccY5A9rNlv5FK9wlAn4DtFH1dvF3fIzrk1HPTnzvMYSAKgUA Zxs/JI/nIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 200 octets ;; HEADER SECTION ;; id = 44417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8124 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251225025822 20251218015822 21300 dds.mil. 1CWncGMGoGZ1gCcGXtA1EvVyaMYhccY5A9rNlv5FK9wlAn4DtFH1dvF3fIzrk1HPTnzvMYSAKgUA Zxs/JI/nIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 11003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 29 IN A 44.216.73.213 dds.mil. 29 IN A 3.222.178.31 dds.mil. 29 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 29 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== )`
	RRSIG=21300 and DNSKEY=21300 verifies the A RRset

dds.mil

	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 63552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 246 IN A 3.222.178.31 dds.mil. 246 IN A 44.216.73.213 dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 41347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 246 IN A 3.222.178.31 dds.mil. 246 IN A 44.216.73.213 dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== )`
	RRSIG=21300 and DNSKEY=21300 verifies the A RRset

dds.mil

	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 54766 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 246 IN A 44.216.73.213 dds.mil. 246 IN A 3.222.178.31 dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 43725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 246 IN A 44.216.73.213 dds.mil. 246 IN A 3.222.178.31 dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== )`
	RRSIG=21300 and DNSKEY=21300 verifies the A RRset

dds.mil

	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 40128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 473 IN A 3.222.178.31 dds.mil. 473 IN A 44.216.73.213 dds.mil. 473 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 2186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 473 IN A 3.222.178.31 dds.mil. 473 IN A 44.216.73.213 dds.mil. 473 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 473 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== )`
	RRSIG=21300 and DNSKEY=21300 verifies the A RRset

dds.mil

	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 60056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 29 IN A 44.216.73.213 dds.mil. 29 IN A 3.222.178.31 dds.mil. 29 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 40590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 29 IN A 44.216.73.213 dds.mil. 29 IN A 3.222.178.31 dds.mil. 29 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 29 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== )`
	RRSIG=21300 and DNSKEY=21300 verifies the A RRset

dds.mil

	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 23642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 246 IN A 3.222.178.31 dds.mil. 246 IN A 44.216.73.213 dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 11539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 246 IN A 3.222.178.31 dds.mil. 246 IN A 44.216.73.213 dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 246 IN RRSIG ( A 13 2 600 20251223115757 20251216115617 21300 dds.mil. Gn7Rc7lg+wvCnQRRjNpD3w8F7R3eHTpyasg6tfKMkqqXAC+5ld//1etNdP0iNXwYDu56DwdOH7kg E5iMgtpb4w== )`
	RRSIG=21300 and DNSKEY=21300 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dds.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: