DNSSEC Debugger

Domain Name:

Time: 2025-07-06 02:19:42 UTC

Analyzing DNSSEC problems for dds.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1414 octets ;; HEADER SECTION ;; id = 30600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for dds.mil/A
	Received 754 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 754 octets ;; HEADER SECTION ;; id = 17533 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . qiCXYpC89NZoUS+9UzY1d+ultCntu9eBDaCns9BP7NCeQbZtvRI3Hk5jr14GQWNvtWEVKos2S3hn nNqjYG2CqZ6mJIqXkLR5B15UEleIQlMOxch1DzrCn5WOXjF5zPLgYR23Xo8rMZQQAQuqmJPJOmdn xYgYa7pOdKxCYIuen6tKgQL3bYDZh6DGMR4PgLCJnyrC614H6pzt+qcMMCsFh9/wnXcs18FuKsqQ SUHcN6OtPJ3AXi43LfzkNoh3lUWYVnBaMsKY34g3/cvOt5IAUNi8R0ktkOv+fVJovQHOBKK2JE3N THhMdmnLy3WvvR8Jf/uMIrHSWabb9LWv2kfCAg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for mil/DNSKEY
	Received 753 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 753 octets ;; HEADER SECTION ;; id = 62919 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . qiCXYpC89NZoUS+9UzY1d+ultCntu9eBDaCns9BP7NCeQbZtvRI3Hk5jr14GQWNvtWEVKos2S3hn nNqjYG2CqZ6mJIqXkLR5B15UEleIQlMOxch1DzrCn5WOXjF5zPLgYR23Xo8rMZQQAQuqmJPJOmdn xYgYa7pOdKxCYIuen6tKgQL3bYDZh6DGMR4PgLCJnyrC614H6pzt+qcMMCsFh9/wnXcs18FuKsqQ SUHcN6OtPJ3AXi43LfzkNoh3lUWYVnBaMsKY34g3/cvOt5IAUNi8R0ktkOv+fVJovQHOBKK2JE3N THhMdmnLy3WvvR8Jf/uMIrHSWabb9LWv2kfCAg== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to d.root-servers.net for mil/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 51877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . qiCXYpC89NZoUS+9UzY1d+ultCntu9eBDaCns9BP7NCeQbZtvRI3Hk5jr14GQWNvtWEVKos2S3hn nNqjYG2CqZ6mJIqXkLR5B15UEleIQlMOxch1DzrCn5WOXjF5zPLgYR23Xo8rMZQQAQuqmJPJOmdn xYgYa7pOdKxCYIuen6tKgQL3bYDZh6DGMR4PgLCJnyrC614H6pzt+qcMMCsFh9/wnXcs18FuKsqQ SUHcN6OtPJ3AXi43LfzkNoh3lUWYVnBaMsKY34g3/cvOt5IAUNi8R0ktkOv+fVJovQHOBKK2JE3N THhMdmnLy3WvvR8Jf/uMIrHSWabb9LWv2kfCAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=63500/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . qiCXYpC89NZoUS+9UzY1d+ultCntu9eBDaCns9BP7NCeQbZtvRI3Hk5jr14GQWNvtWEVKos2S3hn nNqjYG2CqZ6mJIqXkLR5B15UEleIQlMOxch1DzrCn5WOXjF5zPLgYR23Xo8rMZQQAQuqmJPJOmdn xYgYa7pOdKxCYIuen6tKgQL3bYDZh6DGMR4PgLCJnyrC614H6pzt+qcMMCsFh9/wnXcs18FuKsqQ SUHcN6OtPJ3AXi43LfzkNoh3lUWYVnBaMsKY34g3/cvOt5IAUNi8R0ktkOv+fVJovQHOBKK2JE3N THhMdmnLy3WvvR8Jf/uMIrHSWabb9LWv2kfCAg== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=63500/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 )`
	Query to eur1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 1061 octets ;; HEADER SECTION ;; id = 13387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbl8VBE+eDLi74OjZBJl1Qt7DWvL6hNOhWY7/5nJqGxwINsseAYFoCAwoSOnG3dYzP7MhjJC QUmxl7y9EjjcfwlhLDRepRljBVZbNrXonk4j9ajo1DS5OnZCCsE4QRiuu2uwVh2iQcDcHs+PhRoe 9pVPNpjAcwSJfa8dRHDzi/h9 ) ; keytag 57246 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250711113758 20250704113758 14128 mil. U+8IXlodusICk4TZE7y0bIgDRpbeSDr5jXeT8G69H/NdDzmFCvq9W744ExIpn0fYkQLY244IOy4r lL7bXp2TAvwbWE53eKUbHChd0Z4AWgPidWlV7L/O0uM2aolvu0QCVtgcO/kTaFDt51QlV81ahlEt 0tgkJ48O4U4ZMMoR0ZY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250711113758 20250704113758 63500 mil. Wod5iTfNR/lzVigGogw94as65QtbQKK7qfA5eqbMLV0+85RImTyetW5NBCMVHS5MEElUmkBJv2TR D3Qa1MrqNlyGW99+7BGk3/37M2FRJsedx9xvjzaGK7PKXrZQnWJ1ZsrC8clLhlmfA4obBvv+ku0v Rf0eJqjaF9dkKw1GomAC50dF8/NS2T90RxsLZcFt8qtSqX2mBtvolw6hU+iSdrbKrYSs3z5sJQTZ YdtycJy52LFGJsDAeEkltbNLXYcNtMoJbXZD4ZFiKsgDH3bCA5KUWjnEzZYCF5M+QotHM4sFJv7e NkvfHoNO8vTY2RKaf+rqqoB//Y3UkDO2eBdAKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbl8VBE+eDLi74OjZBJl1Qt7DWvL6hNOhWY7/5nJqGxwINsseAYFoCAwoSOnG3dYzP7MhjJC QUmxl7y9EjjcfwlhLDRepRljBVZbNrXonk4j9ajo1DS5OnZCCsE4QRiuu2uwVh2iQcDcHs+PhRoe 9pVPNpjAcwSJfa8dRHDzi/h9 ) ; keytag 57246`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500`
	DNSKEY=63500/SEP is now in the chain-of-trust
	DS=63500/SHA-256 verifies DNSKEY=63500/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250711113758 20250704113758 14128 mil. U+8IXlodusICk4TZE7y0bIgDRpbeSDr5jXeT8G69H/NdDzmFCvq9W744ExIpn0fYkQLY244IOy4r lL7bXp2TAvwbWE53eKUbHChd0Z4AWgPidWlV7L/O0uM2aolvu0QCVtgcO/kTaFDt51QlV81ahlEt 0tgkJ48O4U4ZMMoR0ZY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250711113758 20250704113758 63500 mil. Wod5iTfNR/lzVigGogw94as65QtbQKK7qfA5eqbMLV0+85RImTyetW5NBCMVHS5MEElUmkBJv2TR D3Qa1MrqNlyGW99+7BGk3/37M2FRJsedx9xvjzaGK7PKXrZQnWJ1ZsrC8clLhlmfA4obBvv+ku0v Rf0eJqjaF9dkKw1GomAC50dF8/NS2T90RxsLZcFt8qtSqX2mBtvolw6hU+iSdrbKrYSs3z5sJQTZ YdtycJy52LFGJsDAeEkltbNLXYcNtMoJbXZD4ZFiKsgDH3bCA5KUWjnEzZYCF5M+QotHM4sFJv7e NkvfHoNO8vTY2RKaf+rqqoB//Y3UkDO2eBdAKg== )`
	RRSIG=14128 and DNSKEY=14128 verifies the DNSKEY RRset
	RRSIG=63500 and DNSKEY=63500/SEP verifies the DNSKEY RRset
	DNSKEY=14128 is now in the chain-of-trust
	DNSKEY=57246 is now in the chain-of-trust
	Query to con2.nipr.mil for dds.mil/A
	Received 676 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 676 octets ;; HEADER SECTION ;; id = 37458 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250711113758 20250704113758 14128 mil. eQ7YLqbfOxSD05FZ1LaiAapmaqqemzaBsP4gheHIRKHwb1Pplh1WXKg+PkT6bDZ1ztHCRloAUhGl +C+z33gGkKdM5YOQUUmWdEjBEwULiukyvdixxHjwsxPh4lyx9gaMHM80f1G/GikITFtLLwgo4Vc9 ILsdCdEWHY4OqP52blw= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to pac2.nipr.mil for dds.mil/DNSKEY
	Received 676 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 676 octets ;; HEADER SECTION ;; id = 12273 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250711113758 20250704113758 14128 mil. eQ7YLqbfOxSD05FZ1LaiAapmaqqemzaBsP4gheHIRKHwb1Pplh1WXKg+PkT6bDZ1ztHCRloAUhGl +C+z33gGkKdM5YOQUUmWdEjBEwULiukyvdixxHjwsxPh4lyx9gaMHM80f1G/GikITFtLLwgo4Vc9 ILsdCdEWHY4OqP52blw= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dds.mil

dds.mil

	Checking DS between mil and dds.mil
	Query to pac1.nipr.mil for dds.mil/DS
	Received 290 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 290 octets ;; HEADER SECTION ;; id = 997 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DS ;; ANSWER SECTION (3 records) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250711113758 20250704113758 14128 mil. eQ7YLqbfOxSD05FZ1LaiAapmaqqemzaBsP4gheHIRKHwb1Pplh1WXKg+PkT6bDZ1ztHCRloAUhGl +C+z33gGkKdM5YOQUUmWdEjBEwULiukyvdixxHjwsxPh4lyx9gaMHM80f1G/GikITFtLLwgo4Vc9 ILsdCdEWHY4OqP52blw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dds.mil in the mil zone
	DS=46107/SHA-1 uses a deprecated digest algorithm
	DS=46107/SHA-1 has algorithm ECDSAP256SHA256
	DS=46107/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250711113758 20250704113758 14128 mil. eQ7YLqbfOxSD05FZ1LaiAapmaqqemzaBsP4gheHIRKHwb1Pplh1WXKg+PkT6bDZ1ztHCRloAUhGl +C+z33gGkKdM5YOQUUmWdEjBEwULiukyvdixxHjwsxPh4lyx9gaMHM80f1G/GikITFtLLwgo4Vc9 ILsdCdEWHY4OqP52blw= )`
	RRSIG=14128 and DNSKEY=14128 verifies the DS RRset
	DS=46107/SHA-1 is now in the chain-of-trust
	`DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b`
	`DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 )`
	Query to DNS3.NIPR.MIL for dds.mil/DNSKEY
	Received 299 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 299 octets ;; HEADER SECTION ;; id = 41727 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dds.mil. 85897 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107 dds.mil. 85897 IN DNSKEY ( 256 3 13 6jDy+2L8KKgucoj4zxnt7Ky6pYmmUFEmOl4xfLTzderibFoisNLGmUYOgOQkanOKXdv8v4Keyzl0 j2geKZ/OVQ== ) ; keytag 20925 dds.mil. 85897 IN RRSIG ( DNSKEY 13 2 86400 20250712213606 20250705213504 46107 dds.mil. DPwYuAe5/CSzbde6MwF3ZqCd7T9UiX25XcWdyET1qPU9w/iyA9S2aKB9j8TqkNf8+WUvyFxW9Q5c tcOMVKnNUg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dds.mil
	`dds.mil. 85897 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107`
	`dds.mil. 85897 IN DNSKEY ( 256 3 13 6jDy+2L8KKgucoj4zxnt7Ky6pYmmUFEmOl4xfLTzderibFoisNLGmUYOgOQkanOKXdv8v4Keyzl0 j2geKZ/OVQ== ) ; keytag 20925`
	DNSKEY=46107/SEP is now in the chain-of-trust
	DS=46107/SHA-1 verifies DNSKEY=46107/SEP
	DS=46107/SHA-256 verifies DNSKEY=46107/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dds.mil. 85897 IN RRSIG ( DNSKEY 13 2 86400 20250712213606 20250705213504 46107 dds.mil. DPwYuAe5/CSzbde6MwF3ZqCd7T9UiX25XcWdyET1qPU9w/iyA9S2aKB9j8TqkNf8+WUvyFxW9Q5c tcOMVKnNUg== )`
	RRSIG=46107 and DNSKEY=46107/SEP verifies the DNSKEY RRset
	DNSKEY=20925 is now in the chain-of-trust
	Query to DNS4.NIPR.MIL for dds.mil/A
	Error querying DNS4.NIPR.MIL/199.252.143.243 for dds.mil/A: 'query timed out'
	All Queries to DNS4.NIPR.MIL for dds.mil/A timed out or failed
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 109 IN A 3.222.178.31 dds.mil. 109 IN A 44.216.73.213 dds.mil. 109 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS5.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 200 octets ;; HEADER SECTION ;; id = 9034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6584 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250712225622 20250705215622 20925 dds.mil. PLFeAsPs/ubn65F3a+WzwKyuGzHq/20duxwd4TukndMSvAvZ22AhVJsIJaGpdX7/Fu+rk46j5Nk9 jNd6pWGjQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 200 octets ;; HEADER SECTION ;; id = 42774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6584 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250712225622 20250705215622 20925 dds.mil. PLFeAsPs/ubn65F3a+WzwKyuGzHq/20duxwd4TukndMSvAvZ22AhVJsIJaGpdX7/Fu+rk46j5Nk9 jNd6pWGjQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 200 octets ;; HEADER SECTION ;; id = 34169 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6584 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250712225622 20250705215622 20925 dds.mil. PLFeAsPs/ubn65F3a+WzwKyuGzHq/20duxwd4TukndMSvAvZ22AhVJsIJaGpdX7/Fu+rk46j5Nk9 jNd6pWGjQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 200 octets ;; HEADER SECTION ;; id = 7246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6584 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250712225622 20250705215622 20925 dds.mil. PLFeAsPs/ubn65F3a+WzwKyuGzHq/20duxwd4TukndMSvAvZ22AhVJsIJaGpdX7/Fu+rk46j5Nk9 jNd6pWGjQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 40519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 109 IN A 3.222.178.31 dds.mil. 109 IN A 44.216.73.213 dds.mil. 109 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 109 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 19980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 262 IN A 44.216.73.213 dds.mil. 262 IN A 3.222.178.31 dds.mil. 262 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 48449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 262 IN A 44.216.73.213 dds.mil. 262 IN A 3.222.178.31 dds.mil. 262 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 262 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 57181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 552 IN A 44.216.73.213 dds.mil. 552 IN A 3.222.178.31 dds.mil. 552 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 53590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 552 IN A 44.216.73.213 dds.mil. 552 IN A 3.222.178.31 dds.mil. 552 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 552 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 28032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 552 IN A 44.216.73.213 dds.mil. 552 IN A 3.222.178.31 dds.mil. 552 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 37213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 552 IN A 44.216.73.213 dds.mil. 552 IN A 3.222.178.31 dds.mil. 552 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 552 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 22064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 261 IN A 44.216.73.213 dds.mil. 261 IN A 3.222.178.31 dds.mil. 261 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 35308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 261 IN A 44.216.73.213 dds.mil. 261 IN A 3.222.178.31 dds.mil. 261 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 261 IN RRSIG ( A 13 2 600 20250709060320 20250702055550 20925 dds.mil. HuBGhu4SK4skMvSe8/v1NonOZZNebIMviEdLcdHYGlgwm0xF+h8NvXB/X739BSd9KCQfSuKL/IhM EPzEP6q2Rw== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

No response from dds.mil nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dds.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: