DNSSEC Debugger

Domain Name:

Time: 2026-01-16 05:38:23 UTC

Analyzing DNSSEC problems for dds.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 5431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to f.root-servers.net for dds.mil/A
	Received 754 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 754 octets ;; HEADER SECTION ;; id = 33895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . YXmbsZJynf2zyVfamBPFI1xhSA4ukkkIPgBtwdy0ahncqWanRoe5BkaudofgnuBIgKtPftmwt2gf RH0bIep+yrxZLUC6LLF08Kw/sVS4YGclzVvt/0gxZ5wWuVHonBDyVkawul6oyu5L+77fY3ccSYbY 469xxE7NYny/gNaL6nlDJNphZ6YVAwg+y7FakT00/nGiwRHlI447PxgYtYwuPRyk1nPY446zDbeA ifd3nUw1WwZaXflN/rCuSC82BQ/dD6fog4CGtKKdVk+mvWINEHGL8zJJF/zY+opFzCLXgFJxrMJA C2FQOyUIHivioRflZcjh9OAiNiETSh7LJmzygA== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for mil/DNSKEY
	Received 750 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 750 octets ;; HEADER SECTION ;; id = 13365 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . YXmbsZJynf2zyVfamBPFI1xhSA4ukkkIPgBtwdy0ahncqWanRoe5BkaudofgnuBIgKtPftmwt2gf RH0bIep+yrxZLUC6LLF08Kw/sVS4YGclzVvt/0gxZ5wWuVHonBDyVkawul6oyu5L+77fY3ccSYbY 469xxE7NYny/gNaL6nlDJNphZ6YVAwg+y7FakT00/nGiwRHlI447PxgYtYwuPRyk1nPY446zDbeA ifd3nUw1WwZaXflN/rCuSC82BQ/dD6fog4CGtKKdVk+mvWINEHGL8zJJF/zY+opFzCLXgFJxrMJA C2FQOyUIHivioRflZcjh9OAiNiETSh7LJmzygA== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to i.root-servers.net for mil/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 59834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . FVbdILt/sOMLkIxnIWGm2jYIejFL/A/6zdoj0XQyZ2D9LA22PhrDMsUBJKwwelSg78hVPBt3Q+Ci 4gH7UjbWIEyIq2jDPnNsRYjSUAMzxtOvm+ZUhJ+F+NpSo1B6d3T+q/JMiak3l/tqcON10xNsda61 Nfkeo43C1LSWrYTAGhX/AkuULLWJITBDIHTMLbGLPUSOFxH7FoZR3+A8kU8f0arpTMR9ccNLmScO w2idpWpDrFJ/XJI/lVxjb/MPZJQd5CyT9us35M9IxK+EQMYtxBxij+5+EhAsziAxzxT6tZJ3P9eU NaqhX1wu1pfUmfKN1fzWNSiAbW2uys7d9KZpiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . FVbdILt/sOMLkIxnIWGm2jYIejFL/A/6zdoj0XQyZ2D9LA22PhrDMsUBJKwwelSg78hVPBt3Q+Ci 4gH7UjbWIEyIq2jDPnNsRYjSUAMzxtOvm+ZUhJ+F+NpSo1B6d3T+q/JMiak3l/tqcON10xNsda61 Nfkeo43C1LSWrYTAGhX/AkuULLWJITBDIHTMLbGLPUSOFxH7FoZR3+A8kU8f0arpTMR9ccNLmScO w2idpWpDrFJ/XJI/lVxjb/MPZJQd5CyT9us35M9IxK+EQMYtxBxij+5+EhAsziAxzxT6tZJ3P9eU NaqhX1wu1pfUmfKN1fzWNSiAbW2uys7d9KZpiA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 1061 octets ;; HEADER SECTION ;; id = 63549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260123000353 20260116000353 45019 mil. Mb7SYSuQfjMzQY9Gdx3+8zx0lxJPy+3//UBYktgXPwhGp1mFXGOht3flDvDkNMFEYtqF2Y0nlNSh UJGIHCFGMoQQwxpmdS91oAxpXPdasFUoNgX49JfyaASIP2B3hM64tfpwjfN7pHjoMcl6eJX+pha2 LrJqW/v0gSZbVAXYoG8JLxGuVIPrPskrhFp4RDntJKoACaFIWkqjfpllg2aT4wWXABGh0cy/ZOvd JO5bg/ejBNcnbic0QcoHLwAapWI2BveduuOcrnQEfHUIPOR7R19d60fc7Pj53ccXzT9pLs75ypcL vVR22FIjiHtDGOtP4PTHlIzhlpqUztKzZhtqAw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260123000353 20260116000353 48003 mil. Y6CLLADJ+Ijp+OY37pLCqE+8OXQyV64TOtJXq1O9/ZMM+K8col1+WAr/FdzE2fskEA2nEygYH6zn kiYVv2RK4s0I1zmVu9ekST+hy5Zhbi4SJWISD7gfjB9G15tFIEjc75tDF33H/bLFMIcamZKfpRZX uNEOIKrAR1tGRBkkbw8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260123000353 20260116000353 45019 mil. Mb7SYSuQfjMzQY9Gdx3+8zx0lxJPy+3//UBYktgXPwhGp1mFXGOht3flDvDkNMFEYtqF2Y0nlNSh UJGIHCFGMoQQwxpmdS91oAxpXPdasFUoNgX49JfyaASIP2B3hM64tfpwjfN7pHjoMcl6eJX+pha2 LrJqW/v0gSZbVAXYoG8JLxGuVIPrPskrhFp4RDntJKoACaFIWkqjfpllg2aT4wWXABGh0cy/ZOvd JO5bg/ejBNcnbic0QcoHLwAapWI2BveduuOcrnQEfHUIPOR7R19d60fc7Pj53ccXzT9pLs75ypcL vVR22FIjiHtDGOtP4PTHlIzhlpqUztKzZhtqAw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260123000353 20260116000353 48003 mil. Y6CLLADJ+Ijp+OY37pLCqE+8OXQyV64TOtJXq1O9/ZMM+K8col1+WAr/FdzE2fskEA2nEygYH6zn kiYVv2RK4s0I1zmVu9ekST+hy5Zhbi4SJWISD7gfjB9G15tFIEjc75tDF33H/bLFMIcamZKfpRZX uNEOIKrAR1tGRBkkbw8= )`
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	RRSIG=48003 and DNSKEY=48003 verifies the DNSKEY RRset
	DNSKEY=48003 is now in the chain-of-trust
	DNSKEY=7870 is now in the chain-of-trust
	Query to pac2.nipr.mil for dds.mil/A
	Received 676 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 676 octets ;; HEADER SECTION ;; id = 59912 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260123000353 20260116000353 48003 mil. KTOOS+Px5lOyx5hKtSzTtbnaTMkwGRgJJ5r+TeVdohnIrJK1x94jzHHqC94M0ZuyvdAz47krOTjE r08OAYjTbKAyho7gf1BPnAo/FM2Q7XpUTroXWBEy/lqg8N7HnLehyGbE5MR4RsNlpCSHMv/tb/C0 Vndr9UfwyBBZzS3Q/CE= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to eur1.nipr.mil for dds.mil/DNSKEY
	Received 676 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 676 octets ;; HEADER SECTION ;; id = 55630 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DDS.MIL. 21600 IN NS DNS5.NIPR.MIL. DDS.MIL. 21600 IN NS DNS6.NIPR.MIL. DDS.MIL. 21600 IN NS DNS1.NIPR.MIL. DDS.MIL. 21600 IN NS DNS3.NIPR.MIL. DDS.MIL. 21600 IN NS DNS4.NIPR.MIL. DDS.MIL. 21600 IN NS DNS2.NIPR.MIL. DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260123000353 20260116000353 48003 mil. KTOOS+Px5lOyx5hKtSzTtbnaTMkwGRgJJ5r+TeVdohnIrJK1x94jzHHqC94M0ZuyvdAz47krOTjE r08OAYjTbKAyho7gf1BPnAo/FM2Q7XpUTroXWBEy/lqg8N7HnLehyGbE5MR4RsNlpCSHMv/tb/C0 Vndr9UfwyBBZzS3Q/CE= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dds.mil

dds.mil

	Checking DS between mil and dds.mil
	Query to con1.nipr.mil for dds.mil/DS
	Received 290 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 290 octets ;; HEADER SECTION ;; id = 45240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DS ;; ANSWER SECTION (3 records) DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 ) DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260123000353 20260116000353 48003 mil. KTOOS+Px5lOyx5hKtSzTtbnaTMkwGRgJJ5r+TeVdohnIrJK1x94jzHHqC94M0ZuyvdAz47krOTjE r08OAYjTbKAyho7gf1BPnAo/FM2Q7XpUTroXWBEy/lqg8N7HnLehyGbE5MR4RsNlpCSHMv/tb/C0 Vndr9UfwyBBZzS3Q/CE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dds.mil in the mil zone
	DS=46107/SHA-1 uses a deprecated digest algorithm
	DS=46107/SHA-256 has algorithm ECDSAP256SHA256
	DS=46107/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DDS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260123000353 20260116000353 48003 mil. KTOOS+Px5lOyx5hKtSzTtbnaTMkwGRgJJ5r+TeVdohnIrJK1x94jzHHqC94M0ZuyvdAz47krOTjE r08OAYjTbKAyho7gf1BPnAo/FM2Q7XpUTroXWBEy/lqg8N7HnLehyGbE5MR4RsNlpCSHMv/tb/C0 Vndr9UfwyBBZzS3Q/CE= )`
	RRSIG=48003 and DNSKEY=48003 verifies the DS RRset
	DS=46107/SHA-256 is now in the chain-of-trust
	`DDS.MIL. 10800 IN DS ( 46107 13 2 5d0deaee2cccf02aea05acd0a7768ab39e4044af083eb9a86ab9fee0e85663a3 )`
	`DDS.MIL. 10800 IN DS 46107 13 1 0d714effb40aab8871f32fb835c040c96285cb9b`
	Query to DNS3.NIPR.MIL for dds.mil/DNSKEY
	Received 299 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 299 octets ;; HEADER SECTION ;; id = 53751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dds.mil. 86167 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107 dds.mil. 86167 IN DNSKEY ( 256 3 13 0NTI+JT2Nq5n6siEVuDRR7SxTIZV1/VJF9IYk05C6BdX675gWu7YDQzmNUp0FhK+niJXyyF0Ijn+ IWfPVxPeqA== ) ; keytag 23749 dds.mil. 86167 IN RRSIG ( DNSKEY 13 2 86400 20260118054930 20260111045959 46107 dds.mil. QsFDbjK+8j6aCj5mHh6Ikq1NfzMfnhwiJ/o4CmlF6aF7yBmqmxR8XR2SHAHQfslk/WMK+jiK/kxW Eqz0EvtxCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dds.mil
	`dds.mil. 86167 IN DNSKEY ( 257 3 13 sgY25WIfszu8M8LkwPTNsrz1UX8tEAw9FQ3EPyPKRgCF9AL90w6ipfPRJ1l/P5LCUky/YOkZGG4R P69oumBfHA== ) ; keytag 46107`
	`dds.mil. 86167 IN DNSKEY ( 256 3 13 0NTI+JT2Nq5n6siEVuDRR7SxTIZV1/VJF9IYk05C6BdX675gWu7YDQzmNUp0FhK+niJXyyF0Ijn+ IWfPVxPeqA== ) ; keytag 23749`
	DNSKEY=46107/SEP is now in the chain-of-trust
	DS=46107/SHA-256 verifies DNSKEY=46107/SEP
	DS=46107/SHA-1 verifies DNSKEY=46107/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dds.mil. 86167 IN RRSIG ( DNSKEY 13 2 86400 20260118054930 20260111045959 46107 dds.mil. QsFDbjK+8j6aCj5mHh6Ikq1NfzMfnhwiJ/o4CmlF6aF7yBmqmxR8XR2SHAHQfslk/WMK+jiK/kxW Eqz0EvtxCQ== )`
	RRSIG=46107 and DNSKEY=46107/SEP verifies the DNSKEY RRset
	DNSKEY=23749 is now in the chain-of-trust
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 26096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 492 IN A 44.216.73.213 dds.mil. 492 IN A 3.222.178.31 dds.mil. 492 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS1.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 200 octets ;; HEADER SECTION ;; id = 26061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8391 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260123042805 20260116032805 23749 dds.mil. LIf7qI0draydWYuys8RXMjk6twdZsmlM5l8NgWLKFr6NVOIqxMguCUpbxVQL15oAEu8JK+Gc7yYi QfK/G0lyLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 200 octets ;; HEADER SECTION ;; id = 16082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8391 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260123042805 20260116032805 23749 dds.mil. LIf7qI0draydWYuys8RXMjk6twdZsmlM5l8NgWLKFr6NVOIqxMguCUpbxVQL15oAEu8JK+Gc7yYi QfK/G0lyLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 200 octets ;; HEADER SECTION ;; id = 14876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8391 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260123042805 20260116032805 23749 dds.mil. LIf7qI0draydWYuys8RXMjk6twdZsmlM5l8NgWLKFr6NVOIqxMguCUpbxVQL15oAEu8JK+Gc7yYi QfK/G0lyLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 200 octets ;; HEADER SECTION ;; id = 25223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8391 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260123042805 20260116032805 23749 dds.mil. LIf7qI0draydWYuys8RXMjk6twdZsmlM5l8NgWLKFr6NVOIqxMguCUpbxVQL15oAEu8JK+Gc7yYi QfK/G0lyLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dds.mil/SOA
	Received 200 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 200 octets ;; HEADER SECTION ;; id = 4668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN SOA ;; ANSWER SECTION (2 records) dds.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 8391 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dds.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260123042805 20260116032805 23749 dds.mil. LIf7qI0draydWYuys8RXMjk6twdZsmlM5l8NgWLKFr6NVOIqxMguCUpbxVQL15oAEu8JK+Gc7yYi QfK/G0lyLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 171 octets ;; HEADER SECTION ;; id = 17035 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 491 IN A 44.216.73.213 dds.mil. 491 IN A 3.222.178.31 dds.mil. 491 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 491 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== )`
	RRSIG=23749 and DNSKEY=23749 verifies the A RRset

dds.mil

	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 54006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 440 IN A 3.222.178.31 dds.mil. 440 IN A 44.216.73.213 dds.mil. 440 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS4.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 171 octets ;; HEADER SECTION ;; id = 33758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 440 IN A 3.222.178.31 dds.mil. 440 IN A 44.216.73.213 dds.mil. 440 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 440 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== )`
	RRSIG=23749 and DNSKEY=23749 verifies the A RRset

dds.mil

	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 4972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 491 IN A 44.216.73.213 dds.mil. 491 IN A 3.222.178.31 dds.mil. 491 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS3.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 171 octets ;; HEADER SECTION ;; id = 39389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 491 IN A 44.216.73.213 dds.mil. 491 IN A 3.222.178.31 dds.mil. 491 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 44.216.73.213
	dds.mil A RR has value 3.222.178.31
	Found 1 RRSIGs over A RRset
	`dds.mil. 491 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== )`
	RRSIG=23749 and DNSKEY=23749 verifies the A RRset

dds.mil

	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 61836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS1.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 171 octets ;; HEADER SECTION ;; id = 1276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 600 IN A 3.222.178.31 dds.mil. 600 IN A 44.216.73.213 dds.mil. 600 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 600 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== )`
	RRSIG=23749 and DNSKEY=23749 verifies the A RRset

dds.mil

	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 46307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 438 IN A 3.222.178.31 dds.mil. 438 IN A 44.216.73.213 dds.mil. 438 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS6.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 171 octets ;; HEADER SECTION ;; id = 26741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 438 IN A 3.222.178.31 dds.mil. 438 IN A 44.216.73.213 dds.mil. 438 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 438 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== )`
	RRSIG=23749 and DNSKEY=23749 verifies the A RRset

dds.mil

	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 59384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 438 IN A 3.222.178.31 dds.mil. 438 IN A 44.216.73.213 dds.mil. 438 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dds.mil
	Found RRSIG signed by dds.mil zone
	Query to DNS2.NIPR.MIL for dds.mil/A
	Received 171 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 171 octets ;; HEADER SECTION ;; id = 20735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dds.mil. IN A ;; ANSWER SECTION (3 records) dds.mil. 438 IN A 3.222.178.31 dds.mil. 438 IN A 44.216.73.213 dds.mil. 438 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dds.mil A RR has value 3.222.178.31
	dds.mil A RR has value 44.216.73.213
	Found 1 RRSIGs over A RRset
	`dds.mil. 438 IN RRSIG ( A 13 2 600 20260118150231 20260111145804 23749 dds.mil. Xgm6e7gGf55U98lXK59BFmrr88RVK7xYaNGElPsIetDOQdfLce1aa2rN8RICiKsaWz5feWudn1sq J8rGQdVc+w== )`
	RRSIG=23749 and DNSKEY=23749 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dds.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: