DNSSEC Debugger

Domain Name:

Time: 2025-05-21 13:58:44 UTC

Analyzing DNSSEC problems for dds.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 7704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250611000000 20250521000000 20326 . ki8fK9M8rb/I+LSCC+6ZKil/CLh4jxV//8F/PDAFtzupjzeyCotFHL+Tm6kwL2wEOrZaz0a6rEba ZFhLGP+Z1XV0WJb45V0ajLFhU+IV4VCDVbzlXKQ3isrKymu8U7zrj3d/NoPbZAbxGkMfI56xv6Ev FvRYa9bjnIm0Id94ONqFclrlQTNEL25Nq+tDOH/Ro709M4j0NOcW5Ui6gIlILfsvEma+g+rHVMeJ N7Yu5FpOzaCvajJKdDGf4O3e1BI4UGrvxsLaZZGSUkeUifobG6FrTpewm9vDkU0kHfGKPqZurEuk mXcfCb/jevjBQhGG8HwoAQy4nS6IjWGfCjK3CQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250611000000 20250521000000 20326 . ki8fK9M8rb/I+LSCC+6ZKil/CLh4jxV//8F/PDAFtzupjzeyCotFHL+Tm6kwL2wEOrZaz0a6rEba ZFhLGP+Z1XV0WJb45V0ajLFhU+IV4VCDVbzlXKQ3isrKymu8U7zrj3d/NoPbZAbxGkMfI56xv6Ev FvRYa9bjnIm0Id94ONqFclrlQTNEL25Nq+tDOH/Ro709M4j0NOcW5Ui6gIlILfsvEma+g+rHVMeJ N7Yu5FpOzaCvajJKdDGf4O3e1BI4UGrvxsLaZZGSUkeUifobG6FrTpewm9vDkU0kHfGKPqZurEuk mXcfCb/jevjBQhGG8HwoAQy4nS6IjWGfCjK3CQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for dds.mil/A
	Received 757 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 757 octets ;; HEADER SECTION ;; id = 2072 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for mil/DNSKEY
	Received 750 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 750 octets ;; HEADER SECTION ;; id = 46541 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 51099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=63500/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=63500/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 1061 octets ;; HEADER SECTION ;; id = 28655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdMKFuRf2WnTOPuYPW66iQIsPnxjugRBz3F3kK8o9cUPc3IRy6wwxg/XTzJUBJF8irM+QsUj 7iQvPZrWVEcxzLpH/nqE2Buj5ov7Psjdr/TJcHdH8GczQIzMyweUczqpDbyYv2A5dqEscnQU3bBA YnY5UUDg52j9FqXfE+s5KWq9 ) ; keytag 55824 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 55824 mil. fJWWsjnme1ArI3Pr+7h5AYUwZOdqxEtoHrRH3Nn85XKFZdKhzwWoJH5usHnBvRVSz9UJy+EEPmOX 409NrGmyRAPfI6tBblyAydrjbI5gcwslA3QFsk8FH3ozUiOX/RtVs8mpn1tLJtdmliOr2LIWJYcV SzzUl7q8ZcvA/gZqpJc= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 63500 mil. kkKzVIdVBo42zpGO+ud50SGhiCbOtV4zpvfqu1LgZNoBRTxX1cxcSWkPc2Xm5UVogZulZh9XvZmV PBxn1UD4/dLmZdigMoztMGBn0xdJWU4KzCkSTUJOYBtjdeEDYkYZJf8YAwAJIq78Zp4LTAc7W76o hM5TADTVPicAJysBlMwc41yqNPcb0RLXNS0HT6Nt9mknsbfMUXwBQkzQytDD8z100qFODNJiKvaP WuAHbgKU6ibEJ7nMvF6Z8J7aHf6XiaiFmsvRpWlwPVCMXWcd+1ILshnUWrwb3gQMLk7VjZ4IPmF3 teAS65kpfBKluPeSBWCPKeYqBDjaadY1CnoJdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdMKFuRf2WnTOPuYPW66iQIsPnxjugRBz3F3kK8o9cUPc3IRy6wwxg/XTzJUBJF8irM+QsUj 7iQvPZrWVEcxzLpH/nqE2Buj5ov7Psjdr/TJcHdH8GczQIzMyweUczqpDbyYv2A5dqEscnQU3bBA YnY5UUDg52j9FqXfE+s5KWq9 ) ; keytag 55824`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500`
	DNSKEY=63500/SEP is now in the chain-of-trust
	DS=63500/SHA-256 verifies DNSKEY=63500/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 55824 mil. fJWWsjnme1ArI3Pr+7h5AYUwZOdqxEtoHrRH3Nn85XKFZdKhzwWoJH5usHnBvRVSz9UJy+EEPmOX 409NrGmyRAPfI6tBblyAydrjbI5gcwslA3QFsk8FH3ozUiOX/RtVs8mpn1tLJtdmliOr2LIWJYcV SzzUl7q8ZcvA/gZqpJc= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 63500 mil. kkKzVIdVBo42zpGO+ud50SGhiCbOtV4zpvfqu1LgZNoBRTxX1cxcSWkPc2Xm5UVogZulZh9XvZmV PBxn1UD4/dLmZdigMoztMGBn0xdJWU4KzCkSTUJOYBtjdeEDYkYZJf8YAwAJIq78Zp4LTAc7W76o hM5TADTVPicAJysBlMwc41yqNPcb0RLXNS0HT6Nt9mknsbfMUXwBQkzQytDD8z100qFODNJiKvaP WuAHbgKU6ibEJ7nMvF6Z8J7aHf6XiaiFmsvRpWlwPVCMXWcd+1ILshnUWrwb3gQMLk7VjZ4IPmF3 teAS65kpfBKluPeSBWCPKeYqBDjaadY1CnoJdA== )`
	RRSIG=55824 and DNSKEY=55824 verifies the DNSKEY RRset
	RRSIG=63500 and DNSKEY=63500/SEP verifies the DNSKEY RRset
	DNSKEY=55824 is now in the chain-of-trust
	DNSKEY=14128 is now in the chain-of-trust
	Query to con1.nipr.mil for dds.mil/A
	Received 760 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 760 octets ;; HEADER SECTION ;; id = 13951 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 ) DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426 DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. bJBQGJGRsgS5K9Oen3Z06ZkG54xFkqAYRx++dDlQgqVGlt1mWb0Q4QwXO9a8LJbRAhfK/aI8BXaR JOEkEVVh4ZNLDi5Q4/5QByBvA8pCTDV9Np+ds4dTVGd2bDRR+QOjBr3RrXmf8U06Em26qjjUAmgL LL+Jl2e6YXvZqb+/NIM= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to eur2.nipr.mil for dds.mil/DNSKEY
	Received 760 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 760 octets ;; HEADER SECTION ;; id = 56935 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 ) DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426 DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. bJBQGJGRsgS5K9Oen3Z06ZkG54xFkqAYRx++dDlQgqVGlt1mWb0Q4QwXO9a8LJbRAhfK/aI8BXaR JOEkEVVh4ZNLDi5Q4/5QByBvA8pCTDV9Np+ds4dTVGd2bDRR+QOjBr3RrXmf8U06Em26qjjUAmgL LL+Jl2e6YXvZqb+/NIM= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dds.mil

dds.mil

	Checking DS between mil and dds.mil
	Query to pac2.nipr.mil for dds.mil/DS
	Received 374 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 374 octets ;; HEADER SECTION ;; id = 23496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DS ;; ANSWER SECTION (5 records) DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 ) DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426 DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. bJBQGJGRsgS5K9Oen3Z06ZkG54xFkqAYRx++dDlQgqVGlt1mWb0Q4QwXO9a8LJbRAhfK/aI8BXaR JOEkEVVh4ZNLDi5Q4/5QByBvA8pCTDV9Np+ds4dTVGd2bDRR+QOjBr3RrXmf8U06Em26qjjUAmgL LL+Jl2e6YXvZqb+/NIM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for dds.mil in the mil zone
	DS=10587/SHA-1 uses a deprecated digest algorithm
	DS=46107/SHA-1 uses a deprecated digest algorithm
	DS=10587/SHA-256 has algorithm ECDSAP256SHA256
	DS=10587/SHA-1 has algorithm ECDSAP256SHA256
	DS=46107/SHA-256 has algorithm ECDSAP256SHA256
	DS=46107/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. bJBQGJGRsgS5K9Oen3Z06ZkG54xFkqAYRx++dDlQgqVGlt1mWb0Q4QwXO9a8LJbRAhfK/aI8BXaR JOEkEVVh4ZNLDi5Q4/5QByBvA8pCTDV9Np+ds4dTVGd2bDRR+QOjBr3RrXmf8U06Em26qjjUAmgL LL+Jl2e6YXvZqb+/NIM= )`
	RRSIG=55824 and DNSKEY=55824 verifies the DS RRset
	DS=10587/SHA-256 is now in the chain-of-trust
	DS=46107/SHA-256 is now in the chain-of-trust
	`DDS.MIL. 10800 IN DS ( 10587 13 2 d546dca7fc29e993644614005cb1634db5245e5fd46d71d038220f6167fe5ae0 )`
	`DDS.MIL. 10800 IN DS 10587 13 1 1aabbc70f891ebb96637835770d1e12515ac0426`
	`DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 )`
	`DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b`
	Query to DNS2.NIPR.MIL for dds.mil/DNSKEY
	Received 459 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 459 octets ;; HEADER SECTION ;; id = 21389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (5 records) dds.mil. 79990 IN DNSKEY ( 257 3 13 YPTtd2d/ymMI4AXMIbkDvBfHLHFZSHQLChBj9FBv6r11kN/i328itHHpTdneJH+QEInKK1dSQq6y XP5nNwnkiw== ) ; keytag 10587 dds.mil. 79990 IN DNSKEY ( 256 3 13 1TNp9sl771F7/Dk+p0IDR+/1tjdk6jEGvZUAeHiwPYNEFDOUEzmTuuCF1LOyEqABwLpfbPyGIyQ9 wYRgw+oHzA== ) ; keytag 65469 dds.mil. 79990 IN DNSKEY ( 256 3 13 6jDy+2L8KKgucoj4zxnt7Ky6pYmmUFEmOl4xfLTzderibFoisNLGmUYOgOQkanOKXdv8v4Keyzl0 j2geKZ/OVQ== ) ; keytag 20925 dds.mil. 79990 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107 dds.mil. 79990 IN RRSIG ( DNSKEY 13 2 86400 20250527235959 20250520230000 10587 dds.mil. RNEW8YtoAkgQr8IoXxXScsahfhFkMQbnqxIVS4xiJacjG1w+5sE06No9DgGaWElpksW2iphhutpQ MPaawMeXiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for dds.mil
	`dds.mil. 79990 IN DNSKEY ( 257 3 13 YPTtd2d/ymMI4AXMIbkDvBfHLHFZSHQLChBj9FBv6r11kN/i328itHHpTdneJH+QEInKK1dSQq6y XP5nNwnkiw== ) ; keytag 10587`
	`dds.mil. 79990 IN DNSKEY ( 256 3 13 1TNp9sl771F7/Dk+p0IDR+/1tjdk6jEGvZUAeHiwPYNEFDOUEzmTuuCF1LOyEqABwLpfbPyGIyQ9 wYRgw+oHzA== ) ; keytag 65469`
	`dds.mil. 79990 IN DNSKEY ( 256 3 13 6jDy+2L8KKgucoj4zxnt7Ky6pYmmUFEmOl4xfLTzderibFoisNLGmUYOgOQkanOKXdv8v4Keyzl0 j2geKZ/OVQ== ) ; keytag 20925`
	`dds.mil. 79990 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107`
	DNSKEY=10587/SEP is now in the chain-of-trust
	DS=10587/SHA-256 verifies DNSKEY=10587/SEP
	DS=10587/SHA-1 verifies DNSKEY=10587/SEP
	DNSKEY=46107/SEP is now in the chain-of-trust
	DS=46107/SHA-256 verifies DNSKEY=46107/SEP
	DS=46107/SHA-1 verifies DNSKEY=46107/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dds.mil. 79990 IN RRSIG ( DNSKEY 13 2 86400 20250527235959 20250520230000 10587 dds.mil. RNEW8YtoAkgQr8IoXxXScsahfhFkMQbnqxIVS4xiJacjG1w+5sE06No9DgGaWElpksW2iphhutpQ MPaawMeXiA== )`
	RRSIG=10587 and DNSKEY=10587/SEP verifies the DNSKEY RRset
	DNSKEY=65469 is now in the chain-of-trust
	DNSKEY=20925 is now in the chain-of-trust
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 37125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 280 IN A 44.216.73.213 dds.mil. 280 IN A 3.222.178.31 dds.mil. 280 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 200 octets ;; HEADER SECTION ;; id = 34305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6156 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528134320 20250521124320 20925 dds.mil. TiwN89U5ZX728RqBkRiKKnJIDpnm4hvXhVLBkukwt/HMa2v+ZXcKHBcVRANzAJ1/+sM/0REGoKGS Stld4Y0Zqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 200 octets ;; HEADER SECTION ;; id = 45288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6156 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528134320 20250521124320 20925 dds.mil. TiwN89U5ZX728RqBkRiKKnJIDpnm4hvXhVLBkukwt/HMa2v+ZXcKHBcVRANzAJ1/+sM/0REGoKGS Stld4Y0Zqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 200 octets ;; HEADER SECTION ;; id = 49663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6156 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528134320 20250521124320 20925 dds.mil. TiwN89U5ZX728RqBkRiKKnJIDpnm4hvXhVLBkukwt/HMa2v+ZXcKHBcVRANzAJ1/+sM/0REGoKGS Stld4Y0Zqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 200 octets ;; HEADER SECTION ;; id = 45780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6156 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528134320 20250521124320 20925 dds.mil. TiwN89U5ZX728RqBkRiKKnJIDpnm4hvXhVLBkukwt/HMa2v+ZXcKHBcVRANzAJ1/+sM/0REGoKGS Stld4Y0Zqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 200 octets ;; HEADER SECTION ;; id = 47836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6156 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528134320 20250521124320 20925 dds.mil. TiwN89U5ZX728RqBkRiKKnJIDpnm4hvXhVLBkukwt/HMa2v+ZXcKHBcVRANzAJ1/+sM/0REGoKGS Stld4Y0Zqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 28674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 280 IN A 44.216.73.213 dds.mil. 280 IN A 3.222.178.31 dds.mil. 280 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 280 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 22279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 183 IN A 3.222.178.31 dds.mil. 183 IN A 44.216.73.213 dds.mil. 183 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 40474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 183 IN A 3.222.178.31 dds.mil. 183 IN A 44.216.73.213 dds.mil. 183 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 183 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 20004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 224 IN A 3.222.178.31 dds.mil. 224 IN A 44.216.73.213 dds.mil. 224 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 62557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 224 IN A 3.222.178.31 dds.mil. 224 IN A 44.216.73.213 dds.mil. 224 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 224 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 52138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 224 IN A 3.222.178.31 dds.mil. 224 IN A 44.216.73.213 dds.mil. 224 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 11459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 224 IN A 3.222.178.31 dds.mil. 224 IN A 44.216.73.213 dds.mil. 224 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 224 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 35435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 514 IN A 44.216.73.213 dds.mil. 514 IN A 3.222.178.31 dds.mil. 514 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS4.NIPR.MIL for dds.mil/A
	Error querying DNS4.NIPR.MIL/199.252.143.243 for dds.mil/A: 'query timed out'
	All Queries to DNS4.NIPR.MIL for dds.mil/A timed out or failed
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 514 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

dds.mil

	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 31974 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 179 IN A 3.222.178.31 dds.mil. 179 IN A 44.216.73.213 dds.mil. 179 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 39663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 179 IN A 3.222.178.31 dds.mil. 179 IN A 44.216.73.213 dds.mil. 179 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 179 IN RRSIG ( A 13 2 600 20250528111354 20250521103940 20925 dds.mil. eTf30yAQBhCrflXTPYUoajRvK1f1BhKEHi/1QAYmjUPYgsNS5NTb6Y9cwHmTFEj7hdT3iQ1QwBlp n25rJUiwZQ== )`
	RRSIG=20925 and DNSKEY=20925 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dds.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: