DNSSEC Debugger

Domain Name:

Time: 2025-10-16 23:55:18 UTC

Analyzing DNSSEC problems for dds.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 44642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for dds.mil/A
	Received 754 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 754 octets ;; HEADER SECTION ;; id = 49494 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251029170000 20251016160000 61809 . JnNUEa7r+HnmqKScgmpqeu+PvWaWEvNXHuVFdCzC0Ev+MzbT+cjPTzSo446X6l+oNsrp/PN+uu7/ fGvWmstHRnmJSnecwZzJp1monKQgElBDv59KjZo1HlKbw7HyA6ykF++aVOjYa3KgUBPduC8eXfD7 6T1vNQnV9VE2xcuEi4YPsM11tj7GgfEb0p9+KWLCxKaFxW+xw2Jk2cpotkiJ9NuWJppts83r8bIy G2T4JASQj9oIJkKMd9bj+z7SAX2+z4O7QVxcTff/wlNKNRBJhhuXDYMYt9b875c89D1u8TK80ITD lAUMg2gHisWixkUzLfGDznS4KKhZuv7gGIS57g== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for mil/DNSKEY
	Received 753 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 753 octets ;; HEADER SECTION ;; id = 11283 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251029170000 20251016160000 61809 . JnNUEa7r+HnmqKScgmpqeu+PvWaWEvNXHuVFdCzC0Ev+MzbT+cjPTzSo446X6l+oNsrp/PN+uu7/ fGvWmstHRnmJSnecwZzJp1monKQgElBDv59KjZo1HlKbw7HyA6ykF++aVOjYa3KgUBPduC8eXfD7 6T1vNQnV9VE2xcuEi4YPsM11tj7GgfEb0p9+KWLCxKaFxW+xw2Jk2cpotkiJ9NuWJppts83r8bIy G2T4JASQj9oIJkKMd9bj+z7SAX2+z4O7QVxcTff/wlNKNRBJhhuXDYMYt9b875c89D1u8TK80ITD lAUMg2gHisWixkUzLfGDznS4KKhZuv7gGIS57g== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to d.root-servers.net for mil/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 31144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251029170000 20251016160000 61809 . JnNUEa7r+HnmqKScgmpqeu+PvWaWEvNXHuVFdCzC0Ev+MzbT+cjPTzSo446X6l+oNsrp/PN+uu7/ fGvWmstHRnmJSnecwZzJp1monKQgElBDv59KjZo1HlKbw7HyA6ykF++aVOjYa3KgUBPduC8eXfD7 6T1vNQnV9VE2xcuEi4YPsM11tj7GgfEb0p9+KWLCxKaFxW+xw2Jk2cpotkiJ9NuWJppts83r8bIy G2T4JASQj9oIJkKMd9bj+z7SAX2+z4O7QVxcTff/wlNKNRBJhhuXDYMYt9b875c89D1u8TK80ITD lAUMg2gHisWixkUzLfGDznS4KKhZuv7gGIS57g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20251029170000 20251016160000 61809 . JnNUEa7r+HnmqKScgmpqeu+PvWaWEvNXHuVFdCzC0Ev+MzbT+cjPTzSo446X6l+oNsrp/PN+uu7/ fGvWmstHRnmJSnecwZzJp1monKQgElBDv59KjZo1HlKbw7HyA6ykF++aVOjYa3KgUBPduC8eXfD7 6T1vNQnV9VE2xcuEi4YPsM11tj7GgfEb0p9+KWLCxKaFxW+xw2Jk2cpotkiJ9NuWJppts83r8bIy G2T4JASQj9oIJkKMd9bj+z7SAX2+z4O7QVxcTff/wlNKNRBJhhuXDYMYt9b875c89D1u8TK80ITD lAUMg2gHisWixkUzLfGDznS4KKhZuv7gGIS57g== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 1061 octets ;; HEADER SECTION ;; id = 23400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbukLgSUVQpO4zTdB0VL/ZKDZUjuwWBEhHnT/UDkE8KJhYOhwvsgxjL47evcbDN1jZXRZ2E2 sVWq2UXZvU7+qe3BzgEz3c1/FjQgiKQyicTqiVySOMjDEJM6PolZ6uoPLYGrdp8uNS/jnMRq8kgN aMt4Hk58tUNHKSNz8n2m2mRV ) ; keytag 57558 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAc3lmLBHM/mUTKwmoqoUlMQ7s2IJ5vGH1fULEXTx4RTms2vJdE308qwPGOfe+OSELz4mUAWB LyotLzIjrqBF+2w8fDJVuqPGyNcr98tf8xCHrm1aqcOio2jWNUplXTCSeRmWZtISZ/wiGib3GXAh 5hUA7bnmxWkO2DFrqQnqAPyf ) ; keytag 51889 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251023114419 20251016114419 45019 mil. FSqKgP4ZuYuCw67pidUm8tvEOapNT8WDa8lU9N8zAycSLLT3z19crYYQxZNj8FXE0BEIDynxnRyN ls5ByUcXKAVXnviH8+2CxRK+ZnfuEkHWRBM+1xmh9ImcOzeD3nmZQfONfqhrsrhA1wobIM7StUFu 1DxakAMddYDnuhd+VsjzIvR6Jds93K3Lrc2OunIEupOw3MtUDI5/OSwTlZjYMIYiEWtEB5GbiIiU Pf4d9Vl/UteWkvggpmNa1DOGba0EuREe74C7osSg6lNE1PXse5+I3gvbkrBYBPoBNUCe0dAk2An1 PKiAE5IFA+w/9rI7nvkIAw0TS5bZL9o1fED8Xw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251023114419 20251016114419 57558 mil. dXxV4+O1wJjF6UFoFQCgvFAm5n14ZMLOFJhssdiJhrvQyOWv2nk2hArGJ/qzWvaUO2Aj5YgrkPPE xt8cRwYTS8kKCDrhSUun1WynnzgXAbS17IppT4ECPTzZ1OvivqSZXPoT8ktCAPX+msFag5Um2BDk 8EB/NKd32ouDkyCbxQ0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbukLgSUVQpO4zTdB0VL/ZKDZUjuwWBEhHnT/UDkE8KJhYOhwvsgxjL47evcbDN1jZXRZ2E2 sVWq2UXZvU7+qe3BzgEz3c1/FjQgiKQyicTqiVySOMjDEJM6PolZ6uoPLYGrdp8uNS/jnMRq8kgN aMt4Hk58tUNHKSNz8n2m2mRV ) ; keytag 57558`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAc3lmLBHM/mUTKwmoqoUlMQ7s2IJ5vGH1fULEXTx4RTms2vJdE308qwPGOfe+OSELz4mUAWB LyotLzIjrqBF+2w8fDJVuqPGyNcr98tf8xCHrm1aqcOio2jWNUplXTCSeRmWZtISZ/wiGib3GXAh 5hUA7bnmxWkO2DFrqQnqAPyf ) ; keytag 51889`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251023114419 20251016114419 45019 mil. FSqKgP4ZuYuCw67pidUm8tvEOapNT8WDa8lU9N8zAycSLLT3z19crYYQxZNj8FXE0BEIDynxnRyN ls5ByUcXKAVXnviH8+2CxRK+ZnfuEkHWRBM+1xmh9ImcOzeD3nmZQfONfqhrsrhA1wobIM7StUFu 1DxakAMddYDnuhd+VsjzIvR6Jds93K3Lrc2OunIEupOw3MtUDI5/OSwTlZjYMIYiEWtEB5GbiIiU Pf4d9Vl/UteWkvggpmNa1DOGba0EuREe74C7osSg6lNE1PXse5+I3gvbkrBYBPoBNUCe0dAk2An1 PKiAE5IFA+w/9rI7nvkIAw0TS5bZL9o1fED8Xw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251023114419 20251016114419 57558 mil. dXxV4+O1wJjF6UFoFQCgvFAm5n14ZMLOFJhssdiJhrvQyOWv2nk2hArGJ/qzWvaUO2Aj5YgrkPPE xt8cRwYTS8kKCDrhSUun1WynnzgXAbS17IppT4ECPTzZ1OvivqSZXPoT8ktCAPX+msFag5Um2BDk 8EB/NKd32ouDkyCbxQ0= )`
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	RRSIG=57558 and DNSKEY=57558 verifies the DNSKEY RRset
	DNSKEY=57558 is now in the chain-of-trust
	DNSKEY=51889 is now in the chain-of-trust
	Query to con1.nipr.mil for dds.mil/A
	Received 676 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 676 octets ;; HEADER SECTION ;; id = 17297 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251023114419 20251016114419 57558 mil. DIcwnA3Y3dpyIvedLzNN26eii45UG7e+U3EQGlQmwumeqtLT+QLvkXiLbarcYHPdpm6wQ14gbZ9N tcI6pKJPOHbksBZuh2jJ6e/akl2NeXLSl57SWtKWLuVMMl7DYO2ABPEzV0g1GTsMZh6pXZ79uK3t hqkWLsZKW3cIxUQxGvI= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to con2.nipr.mil for dds.mil/DNSKEY
	Received 676 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 676 octets ;; HEADER SECTION ;; id = 459 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251023114419 20251016114419 57558 mil. DIcwnA3Y3dpyIvedLzNN26eii45UG7e+U3EQGlQmwumeqtLT+QLvkXiLbarcYHPdpm6wQ14gbZ9N tcI6pKJPOHbksBZuh2jJ6e/akl2NeXLSl57SWtKWLuVMMl7DYO2ABPEzV0g1GTsMZh6pXZ79uK3t hqkWLsZKW3cIxUQxGvI= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dds.mil

dds.mil

	Checking DS between mil and dds.mil
	Query to pac2.nipr.mil for dds.mil/DS
	Received 290 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 290 octets ;; HEADER SECTION ;; id = 45270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DS ;; ANSWER SECTION (3 records) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251023114419 20251016114419 57558 mil. DIcwnA3Y3dpyIvedLzNN26eii45UG7e+U3EQGlQmwumeqtLT+QLvkXiLbarcYHPdpm6wQ14gbZ9N tcI6pKJPOHbksBZuh2jJ6e/akl2NeXLSl57SWtKWLuVMMl7DYO2ABPEzV0g1GTsMZh6pXZ79uK3t hqkWLsZKW3cIxUQxGvI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dds.mil in the mil zone
	DS=46107/SHA-1 uses a deprecated digest algorithm
	DS=46107/SHA-1 has algorithm ECDSAP256SHA256
	DS=46107/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251023114419 20251016114419 57558 mil. DIcwnA3Y3dpyIvedLzNN26eii45UG7e+U3EQGlQmwumeqtLT+QLvkXiLbarcYHPdpm6wQ14gbZ9N tcI6pKJPOHbksBZuh2jJ6e/akl2NeXLSl57SWtKWLuVMMl7DYO2ABPEzV0g1GTsMZh6pXZ79uK3t hqkWLsZKW3cIxUQxGvI= )`
	RRSIG=57558 and DNSKEY=57558 verifies the DS RRset
	DS=46107/SHA-1 is now in the chain-of-trust
	`DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b`
	`DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 )`
	Query to DNS4.NIPR.MIL for dds.mil/DNSKEY
	Received 299 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 299 octets ;; HEADER SECTION ;; id = 57052 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dds.mil. 54667 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107 dds.mil. 54667 IN DNSKEY ( 256 3 13 I8RvrHFw3RKwdNHfzOVIp6q543mbVYm6jB0yiIrHraz8RkODA7NwENnendCS1j3atV5rCWIRRdBf NEiF+CeCBQ== ) ; keytag 3679 dds.mil. 54667 IN RRSIG ( DNSKEY 13 2 86400 20251019032957 20251012024809 46107 dds.mil. UEEBnMhnxAegn7NITp8rFBz7LXnhbT7RRYrqmVftfyE4NZt82VOpHlC81lKkJ7vCER17CnhEayJw 9vBNEbIk5A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dds.mil
	`dds.mil. 54667 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107`
	`dds.mil. 54667 IN DNSKEY ( 256 3 13 I8RvrHFw3RKwdNHfzOVIp6q543mbVYm6jB0yiIrHraz8RkODA7NwENnendCS1j3atV5rCWIRRdBf NEiF+CeCBQ== ) ; keytag 3679`
	DNSKEY=46107/SEP is now in the chain-of-trust
	DS=46107/SHA-1 verifies DNSKEY=46107/SEP
	DS=46107/SHA-256 verifies DNSKEY=46107/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dds.mil. 54667 IN RRSIG ( DNSKEY 13 2 86400 20251019032957 20251012024809 46107 dds.mil. UEEBnMhnxAegn7NITp8rFBz7LXnhbT7RRYrqmVftfyE4NZt82VOpHlC81lKkJ7vCER17CnhEayJw 9vBNEbIk5A== )`
	RRSIG=46107 and DNSKEY=46107/SEP verifies the DNSKEY RRset
	DNSKEY=3679 is now in the chain-of-trust
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 54002 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 200 octets ;; HEADER SECTION ;; id = 8107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7546 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251023235024 20251016225024 3679 dds.mil. 7lhqcf0y26o+96wjaNo0ibDV8u/mFukA2nb52iAkKoyStjYRzNuz4aoSeU4k2/4i3tYTRawvMkKI e2UtvUaObQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 200 octets ;; HEADER SECTION ;; id = 31860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7546 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251023235024 20251016225024 3679 dds.mil. 7lhqcf0y26o+96wjaNo0ibDV8u/mFukA2nb52iAkKoyStjYRzNuz4aoSeU4k2/4i3tYTRawvMkKI e2UtvUaObQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 200 octets ;; HEADER SECTION ;; id = 5306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7546 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251023235024 20251016225024 3679 dds.mil. 7lhqcf0y26o+96wjaNo0ibDV8u/mFukA2nb52iAkKoyStjYRzNuz4aoSeU4k2/4i3tYTRawvMkKI e2UtvUaObQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 200 octets ;; HEADER SECTION ;; id = 60587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7546 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251023235024 20251016225024 3679 dds.mil. 7lhqcf0y26o+96wjaNo0ibDV8u/mFukA2nb52iAkKoyStjYRzNuz4aoSeU4k2/4i3tYTRawvMkKI e2UtvUaObQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 200 octets ;; HEADER SECTION ;; id = 53548 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 7546 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20251023235024 20251016225024 3679 dds.mil. 7lhqcf0y26o+96wjaNo0ibDV8u/mFukA2nb52iAkKoyStjYRzNuz4aoSeU4k2/4i3tYTRawvMkKI e2UtvUaObQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 5209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 1406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 21446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 42544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 365 IN A 44.216.73.213 dds.mil. 365 IN A 3.222.178.31 dds.mil. 365 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 43034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 365 IN A 44.216.73.213 dds.mil. 365 IN A 3.222.178.31 dds.mil. 365 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 365 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 40668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 365 IN A 44.216.73.213 dds.mil. 365 IN A 3.222.178.31 dds.mil. 365 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 65203 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 364 IN A 44.216.73.213 dds.mil. 364 IN A 3.222.178.31 dds.mil. 364 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 364 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 34018 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 61477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

dds.mil

	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 10248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 565 IN A 3.222.178.31 dds.mil. 565 IN A 44.216.73.213 dds.mil. 565 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 52898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 565 IN A 3.222.178.31 dds.mil. 565 IN A 44.216.73.213 dds.mil. 565 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 565 IN RRSIG ( A 13 2 600 20251021183901 20251014182903 3679 dds.mil. RLFkAIA2I28iCLhBOQoyArzSFgpw6f0cgwaYiw+cE6o06GxptqYhLQmS768mmNu0Q5B6OnnfHlrF THjVw0uApQ== )`
	RRSIG=3679 and DNSKEY=3679 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dds.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: