DNSSEC Debugger

Domain Name:

Time: 2024-07-27 06:55:43 UTC

Analyzing DNSSEC problems for dds.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 14877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to f.root-servers.net for dds.mil/A
	Received 754 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 754 octets ;; HEADER SECTION ;; id = 30974 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for mil/DNSKEY
	Received 753 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 753 octets ;; HEADER SECTION ;; id = 49955 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to g.root-servers.net for mil/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 7403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 1061 octets ;; HEADER SECTION ;; id = 17786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= )`
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=54036 and DNSKEY=54036 verifies the DNSKEY RRset
	DNSKEY=21018 is now in the chain-of-trust
	DNSKEY=54036 is now in the chain-of-trust
	Query to pac1.nipr.mil for dds.mil/A
	Received 676 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 676 octets ;; HEADER SECTION ;; id = 63908 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 ) DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426 DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. ZVKOUDjHv7YUtz7Z4WUvPwXi3ZENd0hxPI0q/zF0x2iqc40MKUosWk04XNXlrbC3cxgeaCvrP9+2 9MIfcWdxQsMgwE9juBRHx0LEA5CmAz3UnyOffY2OZRcq2e2M1yCaHFNXLB8nq/9Z4SIvcn5mkYHl 9aRqvjOVuUYn29sqlhs= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to con1.nipr.mil for dds.mil/DNSKEY
	Received 676 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 676 octets ;; HEADER SECTION ;; id = 54099 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 ) DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426 DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. ZVKOUDjHv7YUtz7Z4WUvPwXi3ZENd0hxPI0q/zF0x2iqc40MKUosWk04XNXlrbC3cxgeaCvrP9+2 9MIfcWdxQsMgwE9juBRHx0LEA5CmAz3UnyOffY2OZRcq2e2M1yCaHFNXLB8nq/9Z4SIvcn5mkYHl 9aRqvjOVuUYn29sqlhs= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dds.mil

dds.mil

	Checking DS between mil and dds.mil
	Query to con1.nipr.mil for dds.mil/DS
	Received 290 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 290 octets ;; HEADER SECTION ;; id = 62657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DS ;; ANSWER SECTION (3 records) DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426 DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. ZVKOUDjHv7YUtz7Z4WUvPwXi3ZENd0hxPI0q/zF0x2iqc40MKUosWk04XNXlrbC3cxgeaCvrP9+2 9MIfcWdxQsMgwE9juBRHx0LEA5CmAz3UnyOffY2OZRcq2e2M1yCaHFNXLB8nq/9Z4SIvcn5mkYHl 9aRqvjOVuUYn29sqlhs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dds.mil in the mil zone
	DS=10587/SHA-1 uses a deprecated digest algorithm
	DS=10587/SHA-1 has algorithm ECDSAP256SHA256
	DS=10587/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. ZVKOUDjHv7YUtz7Z4WUvPwXi3ZENd0hxPI0q/zF0x2iqc40MKUosWk04XNXlrbC3cxgeaCvrP9+2 9MIfcWdxQsMgwE9juBRHx0LEA5CmAz3UnyOffY2OZRcq2e2M1yCaHFNXLB8nq/9Z4SIvcn5mkYHl 9aRqvjOVuUYn29sqlhs= )`
	RRSIG=54036 and DNSKEY=54036 verifies the DS RRset
	DS=10587/SHA-1 is now in the chain-of-trust
	`DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426`
	`DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 )`
	Query to DNS5.NIPR.MIL for dds.mil/DNSKEY
	Received 402 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 402 octets ;; HEADER SECTION ;; id = 36855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (4 records) dds.mil. 76663 IN DNSKEY ( 257 3 13 YPTtd2d/ymMI4AXMIbkDvBfHLHFZSHQLChBj9FBv6r11kN/i328itHHpTdneJH+QEInKK1dSQq6y XP5nNwnkiw== ) ; Key ID = 10587 dds.mil. 76663 IN DNSKEY ( 256 3 13 t4bujgCnri5GGtNkL7jeUdpPUaDySs8MvLW5eIXS/A+9LbXgB8iEHJV/AyrOp10Qc+G7XcgnNoB7 CmN0K2Vpjg== ) ; Key ID = 51848 dds.mil. 76663 IN RRSIG ( DNSKEY 13 2 86400 20240729041218 20240722035859 10587 dds.mil. 72c4IPFissOv/ugRgXnkelijrIKFeNQdOrGidxv6Bo3sNDnT0a811qFV09u+ESME/Qbt+UhWNUIl xHS1G+bD5w== ) dds.mil. 76663 IN RRSIG ( DNSKEY 13 2 86400 20240729041218 20240722035859 51848 dds.mil. YGhgm6dP/9IYQs7Wgga0Y94iCh8Y7iYNmzdBeu59CnYblvHJb742hTgp5JZUbVDAGK8/cN1fhq94 2ehzxZ+wnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dds.mil
	`dds.mil. 76663 IN DNSKEY ( 257 3 13 YPTtd2d/ymMI4AXMIbkDvBfHLHFZSHQLChBj9FBv6r11kN/i328itHHpTdneJH+QEInKK1dSQq6y XP5nNwnkiw== ) ; Key ID = 10587`
	`dds.mil. 76663 IN DNSKEY ( 256 3 13 t4bujgCnri5GGtNkL7jeUdpPUaDySs8MvLW5eIXS/A+9LbXgB8iEHJV/AyrOp10Qc+G7XcgnNoB7 CmN0K2Vpjg== ) ; Key ID = 51848`
	DNSKEY=10587/SEP is now in the chain-of-trust
	DS=10587/SHA-1 verifies DNSKEY=10587/SEP
	DS=10587/SHA-256 verifies DNSKEY=10587/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dds.mil. 76663 IN RRSIG ( DNSKEY 13 2 86400 20240729041218 20240722035859 10587 dds.mil. 72c4IPFissOv/ugRgXnkelijrIKFeNQdOrGidxv6Bo3sNDnT0a811qFV09u+ESME/Qbt+UhWNUIl xHS1G+bD5w== )`
	`dds.mil. 76663 IN RRSIG ( DNSKEY 13 2 86400 20240729041218 20240722035859 51848 dds.mil. YGhgm6dP/9IYQs7Wgga0Y94iCh8Y7iYNmzdBeu59CnYblvHJb742hTgp5JZUbVDAGK8/cN1fhq94 2ehzxZ+wnQ== )`
	RRSIG=10587 and DNSKEY=10587/SEP verifies the DNSKEY RRset
	RRSIG=51848 and DNSKEY=51848 verifies the DNSKEY RRset
	DNSKEY=51848 is now in the chain-of-trust
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 38806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 200 octets ;; HEADER SECTION ;; id = 54750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3360 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240803054122 20240727044122 51848 dds.mil. NlPCYo8VWr7WkG1WKD0/utcDbk+Z5JxzsQaPQMEBQxUO3eYELCvEJhae5uLvBSxQg9+ULE8Fg/EA MhieTNqKLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 200 octets ;; HEADER SECTION ;; id = 37406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3360 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240803054122 20240727044122 51848 dds.mil. NlPCYo8VWr7WkG1WKD0/utcDbk+Z5JxzsQaPQMEBQxUO3eYELCvEJhae5uLvBSxQg9+ULE8Fg/EA MhieTNqKLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 200 octets ;; HEADER SECTION ;; id = 44286 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3360 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240803054122 20240727044122 51848 dds.mil. NlPCYo8VWr7WkG1WKD0/utcDbk+Z5JxzsQaPQMEBQxUO3eYELCvEJhae5uLvBSxQg9+ULE8Fg/EA MhieTNqKLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 200 octets ;; HEADER SECTION ;; id = 25224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86399 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3360 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86399 IN RRSIG ( SOA 13 2 86400 20240803054122 20240727044122 51848 dds.mil. NlPCYo8VWr7WkG1WKD0/utcDbk+Z5JxzsQaPQMEBQxUO3eYELCvEJhae5uLvBSxQg9+ULE8Fg/EA MhieTNqKLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 200 octets ;; HEADER SECTION ;; id = 31281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3360 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240803054122 20240727044122 51848 dds.mil. NlPCYo8VWr7WkG1WKD0/utcDbk+Z5JxzsQaPQMEBQxUO3eYELCvEJhae5uLvBSxQg9+ULE8Fg/EA MhieTNqKLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 13003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 599 IN A 3.222.178.31 dds.mil. 599 IN A 44.216.73.213 dds.mil. 599 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 599 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== )`
	RRSIG=51848 and DNSKEY=51848 verifies the A RRset

dds.mil

	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 40895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 65 IN A 44.216.73.213 dds.mil. 65 IN A 3.222.178.31 dds.mil. 65 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 4318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 65 IN A 44.216.73.213 dds.mil. 65 IN A 3.222.178.31 dds.mil. 65 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 65 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== )`
	RRSIG=51848 and DNSKEY=51848 verifies the A RRset

dds.mil

	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 26367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 599 IN A 3.222.178.31 dds.mil. 599 IN A 44.216.73.213 dds.mil. 599 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 2345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 599 IN A 3.222.178.31 dds.mil. 599 IN A 44.216.73.213 dds.mil. 599 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 599 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== )`
	RRSIG=51848 and DNSKEY=51848 verifies the A RRset

dds.mil

	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 24084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 9094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== )`
	RRSIG=51848 and DNSKEY=51848 verifies the A RRset

dds.mil

	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 7925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 2924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== )`
	RRSIG=51848 and DNSKEY=51848 verifies the A RRset

dds.mil

	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 35976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 57860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20240729075119 20240722073923 51848 dds.mil. wP18ZdQEuJhHlDlx1HwOBwEJ2GTpLjoGB72bGhLMMxAsf4j92AeZtE+BERmua/jeOL4eQMPV6ci8 DaKXsH+PLw== )`
	RRSIG=51848 and DNSKEY=51848 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dds.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: