DNSSEC Debugger - defense.gov

Domain Name:

Time: 2024-07-27 02:39:39 UTC

Analyzing DNSSEC problems for defense.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 4022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to c.root-servers.net for defense.gov/A
	Received 621 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 621 octets ;; HEADER SECTION ;; id = 55413 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for gov/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 610 octets ;; HEADER SECTION ;; id = 14752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to i.root-servers.net for gov/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 27584 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 20382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for defense.gov/A
	Received 354 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 354 octets ;; HEADER SECTION ;; id = 36451 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728033939 20240726013939 35496 gov. Ufi9shzpMrGq/rWXHPPRgE0Lfe67hsLe6QKp4CCU2LXtUzc0uNh7pf4dk7k+EOkqOzrajoYmkyRv /QAqiqrePw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for defense.gov/DNSKEY
	Received 354 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 354 octets ;; HEADER SECTION ;; id = 51021 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728033939 20240726013939 35496 gov. U41gQlGSAJ679XDWCbZD+BM7pPP2zWreoR291A2xygxbka2nPMssp6YakffDqYt6fhsEc/SXnW5G FDrU0yEawg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone defense.gov

defense.gov

	Checking DS between gov and defense.gov
	Query to b.ns.gov for defense.gov/DS
	Received 187 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 187 octets ;; HEADER SECTION ;; id = 42864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DS ;; ANSWER SECTION (2 records) defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728033939 20240726013939 35496 gov. Mv1KZG5BFMyq/wNEbswq2042qWcLUsBVXsZ2rH/1swP1J4ofFjwxKXJA9RuGfsCexOZdiRGc4fOJ mKzoDFYCdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for defense.gov in the gov zone
	DS=33055/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728033939 20240726013939 35496 gov. Mv1KZG5BFMyq/wNEbswq2042qWcLUsBVXsZ2rH/1swP1J4ofFjwxKXJA9RuGfsCexOZdiRGc4fOJ mKzoDFYCdQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=33055/SHA-256 is now in the chain-of-trust
	`defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec )`
	Query to asia3.akam.net for defense.gov/DNSKEY
	Received 1486 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 1486 octets ;; HEADER SECTION ;; id = 1104 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (6 records) defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; Key ID = 33055 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAaxhx2/HcUF4uNmp/aF4e8zh3rwKf5sMGtJyDG2Gt9aNtoViDCtQaPO4FIDBD7OsFBFz5Ivy FsrTMPlIctJJL0LN8HrtDf8x45C34k2/g+Pn9Eas/nmZ9EBr/Zr193/mnCiBccIH/+ejgTLq2H0h kDeEfgxXd4ntqhtsy48cETpT ) ; Key ID = 785 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAac+AwSQecoCUuU1NLuR8Gd1sa/F8bpsNphr7NOJIIHcWGEBKT6F0AjnMLHVyr735L5QreqY oG6tvEiygyIMD3yQm3zh+vKufH4+3sU+1dhlMgKKEusoKuaO08rYIwOCshKeuFnUjTFiG9NeK5o/ q7yFHWuKKppnrb01kaHaJZYN ) ; Key ID = 64175 defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; Key ID = 1749 defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240729183048 20240726173048 1749 defense.gov. QyMvScZ9mll66yGNi1KTuABLdWklFHI0qQPAOjC2vUXroEOAFpoaaVdHKYmlrKYcuyxs/Lw+c938 RwIzVDm5eCFBJqZ6AO6t+lYjLotnXLkAURdLHVTDRWTERsaUSNLvf6UW0lXLcYUr8+sWtfRDTeQ/ NLO4krbK7rAdqIs2EAVbT3HKo2Wi1Uahf8OEKAdWRDZ3es1A5RlB8925ejLcJg6tvOk0R+t/H1Ix B5f2hTHn/RHzlKwmk7tsiTnMCP39yaSfaB/Y29gjmdxkwwjF6ADPr2eX8FVBBEt7pxzVVSerw6XU kC0yeRh3IS9AP1Zh2jaR1R3PCqUdzPJ9vk9JGw== ) defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240729183048 20240726173048 33055 defense.gov. aPOynkWgaH0/mvGqzqzwWwV2XUpolG/65TZJgARVpsoqE9tfuNnuoOJ4/pVNqG+INTrj2srCo78A eH52XXoROZWGC8sdOxexynrY9sTGZ06mBHas3TXuLCEU7w5Ni/T7PGxXn9M3sDkexsWNQzqXfCXs XpMhk2ZQ8wEfNPn6xiCYkLFzWuX6B+A55Fu8xYeKKk8KmmRaku5wWlfQmpJtzdjJ4XssVpX4aOT+ R+OyZ48Mu8JLS1GNMZKp4ewFI7jI6g3wxKlLSa2JMAome+9wexzilbSg4JwljrNlZJPa3Q4/Pn9x wbU4cj9E4zqVT5Il/ed5y56V3GPIASsFJNzqhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for defense.gov
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; Key ID = 33055`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAaxhx2/HcUF4uNmp/aF4e8zh3rwKf5sMGtJyDG2Gt9aNtoViDCtQaPO4FIDBD7OsFBFz5Ivy FsrTMPlIctJJL0LN8HrtDf8x45C34k2/g+Pn9Eas/nmZ9EBr/Zr193/mnCiBccIH/+ejgTLq2H0h kDeEfgxXd4ntqhtsy48cETpT ) ; Key ID = 785`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAac+AwSQecoCUuU1NLuR8Gd1sa/F8bpsNphr7NOJIIHcWGEBKT6F0AjnMLHVyr735L5QreqY oG6tvEiygyIMD3yQm3zh+vKufH4+3sU+1dhlMgKKEusoKuaO08rYIwOCshKeuFnUjTFiG9NeK5o/ q7yFHWuKKppnrb01kaHaJZYN ) ; Key ID = 64175`
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; Key ID = 1749`
	DNSKEY=33055/SEP is now in the chain-of-trust
	DS=33055/SHA-256 verifies DNSKEY=33055/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240729183048 20240726173048 1749 defense.gov. QyMvScZ9mll66yGNi1KTuABLdWklFHI0qQPAOjC2vUXroEOAFpoaaVdHKYmlrKYcuyxs/Lw+c938 RwIzVDm5eCFBJqZ6AO6t+lYjLotnXLkAURdLHVTDRWTERsaUSNLvf6UW0lXLcYUr8+sWtfRDTeQ/ NLO4krbK7rAdqIs2EAVbT3HKo2Wi1Uahf8OEKAdWRDZ3es1A5RlB8925ejLcJg6tvOk0R+t/H1Ix B5f2hTHn/RHzlKwmk7tsiTnMCP39yaSfaB/Y29gjmdxkwwjF6ADPr2eX8FVBBEt7pxzVVSerw6XU kC0yeRh3IS9AP1Zh2jaR1R3PCqUdzPJ9vk9JGw== )`
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240729183048 20240726173048 33055 defense.gov. aPOynkWgaH0/mvGqzqzwWwV2XUpolG/65TZJgARVpsoqE9tfuNnuoOJ4/pVNqG+INTrj2srCo78A eH52XXoROZWGC8sdOxexynrY9sTGZ06mBHas3TXuLCEU7w5Ni/T7PGxXn9M3sDkexsWNQzqXfCXs XpMhk2ZQ8wEfNPn6xiCYkLFzWuX6B+A55Fu8xYeKKk8KmmRaku5wWlfQmpJtzdjJ4XssVpX4aOT+ R+OyZ48Mu8JLS1GNMZKp4ewFI7jI6g3wxKlLSa2JMAome+9wexzilbSg4JwljrNlZJPa3Q4/Pn9x wbU4cj9E4zqVT5Il/ed5y56V3GPIASsFJNzqhg== )`
	RRSIG=1749 and DNSKEY=1749/SEP verifies the DNSKEY RRset
	RRSIG=33055 and DNSKEY=33055/SEP verifies the DNSKEY RRset
	DNSKEY=785 is now in the chain-of-trust
	DNSKEY=64175 is now in the chain-of-trust
	DNSKEY=1749/SEP is now in the chain-of-trust
	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 57984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.76.44.152 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. A/wSEYJgA6atC6p39/YVnTgbBQIVyDUnG7aSfVV0cmZhOtQ+SERuBZOmVbLjrBDQI517qt8z/Cpx rOhIcAe46ciwsaumPwqS63x3SpSdW//un75OKRESu+kwSJ1aPFpAWNOWVij1WWxAq+oRZY2zkHFf IJjIQA1zs1RFtyJrxAc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usc5.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/SOA
	Received 602 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 602 octets ;; HEADER SECTION ;; id = 15184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726344 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240729183048 20240726173048 64175 defense.gov. OIDYlbLm+9qHut7jS2XnBYHo2AjlNcUspM6BZP2K2YVa9qNtg9o6wCb5ozhf/vfgeToQGIGLcAZ/ ipPyffyUDLN3Ntcc2JFMfh95AOLal0kLwDH5U7nKAfALlCNVVCH3flH0rDOE/nLjUz2mM6B1xlH5 l0XlUkTzQFxphQs4XvQ= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240729183048 20240726173048 64175 defense.gov. dEEke74uKq1G9yCKxBRSRGRg/Lq15id+yI1hsgCQV7gHz9rDi8E9qyCZ4IiPlCcDMLBnZdkxeDpf zt2cTiUYVFhnb4+NuEf+MPn7S6RkYPpJoVDtlU+TngVY7XcnTkc+gaR5KT1RDvtPO/3nUowr4oQ/ 69Cu4AO7ohawaqfR2QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use2.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 602 octets ;; HEADER SECTION ;; id = 65375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726344 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240729183048 20240726173048 64175 defense.gov. OIDYlbLm+9qHut7jS2XnBYHo2AjlNcUspM6BZP2K2YVa9qNtg9o6wCb5ozhf/vfgeToQGIGLcAZ/ ipPyffyUDLN3Ntcc2JFMfh95AOLal0kLwDH5U7nKAfALlCNVVCH3flH0rDOE/nLjUz2mM6B1xlH5 l0XlUkTzQFxphQs4XvQ= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240729183048 20240726173048 64175 defense.gov. dEEke74uKq1G9yCKxBRSRGRg/Lq15id+yI1hsgCQV7gHz9rDi8E9qyCZ4IiPlCcDMLBnZdkxeDpf zt2cTiUYVFhnb4+NuEf+MPn7S6RkYPpJoVDtlU+TngVY7XcnTkc+gaR5KT1RDvtPO/3nUowr4oQ/ 69Cu4AO7ohawaqfR2QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia2.akam.net for defense.gov/SOA
	Received 602 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 602 octets ;; HEADER SECTION ;; id = 11981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726344 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240729183048 20240726173048 64175 defense.gov. OIDYlbLm+9qHut7jS2XnBYHo2AjlNcUspM6BZP2K2YVa9qNtg9o6wCb5ozhf/vfgeToQGIGLcAZ/ ipPyffyUDLN3Ntcc2JFMfh95AOLal0kLwDH5U7nKAfALlCNVVCH3flH0rDOE/nLjUz2mM6B1xlH5 l0XlUkTzQFxphQs4XvQ= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240729183048 20240726173048 64175 defense.gov. dEEke74uKq1G9yCKxBRSRGRg/Lq15id+yI1hsgCQV7gHz9rDi8E9qyCZ4IiPlCcDMLBnZdkxeDpf zt2cTiUYVFhnb4+NuEf+MPn7S6RkYPpJoVDtlU+TngVY7XcnTkc+gaR5KT1RDvtPO/3nUowr4oQ/ 69Cu4AO7ohawaqfR2QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to eur6.akam.net for defense.gov/SOA
	Received 602 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 602 octets ;; HEADER SECTION ;; id = 60621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726344 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240729183048 20240726173048 64175 defense.gov. OIDYlbLm+9qHut7jS2XnBYHo2AjlNcUspM6BZP2K2YVa9qNtg9o6wCb5ozhf/vfgeToQGIGLcAZ/ ipPyffyUDLN3Ntcc2JFMfh95AOLal0kLwDH5U7nKAfALlCNVVCH3flH0rDOE/nLjUz2mM6B1xlH5 l0XlUkTzQFxphQs4XvQ= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240729183048 20240726173048 64175 defense.gov. dEEke74uKq1G9yCKxBRSRGRg/Lq15id+yI1hsgCQV7gHz9rDi8E9qyCZ4IiPlCcDMLBnZdkxeDpf zt2cTiUYVFhnb4+NuEf+MPn7S6RkYPpJoVDtlU+TngVY7XcnTkc+gaR5KT1RDvtPO/3nUowr4oQ/ 69Cu4AO7ohawaqfR2QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia3.akam.net for defense.gov/SOA
	Received 602 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 602 octets ;; HEADER SECTION ;; id = 55645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726344 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240729183048 20240726173048 64175 defense.gov. OIDYlbLm+9qHut7jS2XnBYHo2AjlNcUspM6BZP2K2YVa9qNtg9o6wCb5ozhf/vfgeToQGIGLcAZ/ ipPyffyUDLN3Ntcc2JFMfh95AOLal0kLwDH5U7nKAfALlCNVVCH3flH0rDOE/nLjUz2mM6B1xlH5 l0XlUkTzQFxphQs4XvQ= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240729183048 20240726173048 64175 defense.gov. dEEke74uKq1G9yCKxBRSRGRg/Lq15id+yI1hsgCQV7gHz9rDi8E9qyCZ4IiPlCcDMLBnZdkxeDpf zt2cTiUYVFhnb4+NuEf+MPn7S6RkYPpJoVDtlU+TngVY7XcnTkc+gaR5KT1RDvtPO/3nUowr4oQ/ 69Cu4AO7ohawaqfR2QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-116.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 602 octets ;; HEADER SECTION ;; id = 45914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726344 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240729183048 20240726173048 64175 defense.gov. OIDYlbLm+9qHut7jS2XnBYHo2AjlNcUspM6BZP2K2YVa9qNtg9o6wCb5ozhf/vfgeToQGIGLcAZ/ ipPyffyUDLN3Ntcc2JFMfh95AOLal0kLwDH5U7nKAfALlCNVVCH3flH0rDOE/nLjUz2mM6B1xlH5 l0XlUkTzQFxphQs4XvQ= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240729183048 20240726173048 64175 defense.gov. dEEke74uKq1G9yCKxBRSRGRg/Lq15id+yI1hsgCQV7gHz9rDi8E9qyCZ4IiPlCcDMLBnZdkxeDpf zt2cTiUYVFhnb4+NuEf+MPn7S6RkYPpJoVDtlU+TngVY7XcnTkc+gaR5KT1RDvtPO/3nUowr4oQ/ 69Cu4AO7ohawaqfR2QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-95.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 602 octets ;; HEADER SECTION ;; id = 1905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726344 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240729183048 20240726173048 64175 defense.gov. OIDYlbLm+9qHut7jS2XnBYHo2AjlNcUspM6BZP2K2YVa9qNtg9o6wCb5ozhf/vfgeToQGIGLcAZ/ ipPyffyUDLN3Ntcc2JFMfh95AOLal0kLwDH5U7nKAfALlCNVVCH3flH0rDOE/nLjUz2mM6B1xlH5 l0XlUkTzQFxphQs4XvQ= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240729183048 20240726173048 64175 defense.gov. dEEke74uKq1G9yCKxBRSRGRg/Lq15id+yI1hsgCQV7gHz9rDi8E9qyCZ4IiPlCcDMLBnZdkxeDpf zt2cTiUYVFhnb4+NuEf+MPn7S6RkYPpJoVDtlU+TngVY7XcnTkc+gaR5KT1RDvtPO/3nUowr4oQ/ 69Cu4AO7ohawaqfR2QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 49522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.36.137 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. P191Ap55nhsvSv+gGhO6vZYOHWhQnNr9SFxPy5CT48nKJzIyId7AqZMZWbLx31HgLfXwfpIlXjPu GPz8xVkSwnRHAaEGmi1elufi4nLfuYoYf/oMjiqBGVdIdJtpis3mccVGK9M4ZmIhS/OhPTLQo1co LTxj24jB+XKh2/nR4Xc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.4.36.137
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. P191Ap55nhsvSv+gGhO6vZYOHWhQnNr9SFxPy5CT48nKJzIyId7AqZMZWbLx31HgLfXwfpIlXjPu GPz8xVkSwnRHAaEGmi1elufi4nLfuYoYf/oMjiqBGVdIdJtpis3mccVGK9M4ZmIhS/OhPTLQo1co LTxj24jB+XKh2/nR4Xc= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

defense.gov

	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 3502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.90.84.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. jfOB9y9DB1x4Liwg9uSd6RkN/NB0UJma0VKfBmrL1kb0c/OjhGea//yCJeR3wQ1anm+Ea0R0g6/Q KOoB6nosPTSEAzuW82QqI2NMP46rp72A1rEVCD4cdNuUBdjwgYMmtBv6WCCcXia5wbGHix74F5IL Q7JApJD89Miloh80rMI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eur6.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 61366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.90.84.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. jfOB9y9DB1x4Liwg9uSd6RkN/NB0UJma0VKfBmrL1kb0c/OjhGea//yCJeR3wQ1anm+Ea0R0g6/Q KOoB6nosPTSEAzuW82QqI2NMP46rp72A1rEVCD4cdNuUBdjwgYMmtBv6WCCcXia5wbGHix74F5IL Q7JApJD89Miloh80rMI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.90.84.163
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. jfOB9y9DB1x4Liwg9uSd6RkN/NB0UJma0VKfBmrL1kb0c/OjhGea//yCJeR3wQ1anm+Ea0R0g6/Q KOoB6nosPTSEAzuW82QqI2NMP46rp72A1rEVCD4cdNuUBdjwgYMmtBv6WCCcXia5wbGHix74F5IL Q7JApJD89Miloh80rMI= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

defense.gov

	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 59450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.58.244.140 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. O+yNtSVQiNZzAkM1Gt0SUle37gSEqMxhHhkBE3erYK5NUn+tkfc6ZCDih0YpurBpypp1wYL88PUY uapa86Qu/e86ER8ziNGPeTngSBhX2CIcR4oO76YAiys2bJGikFjGrOxQQDgKG9+yJppPGSo+PxYY u4dgAM2vvQUT7WSiuEI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-95.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 33519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.204.20.150
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

defense.gov

	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 54928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.184.79 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. nY0h1j6btcMPksM25fQ02ILTxVYe7Lg5wlmmN9fmvw5vMUchDqtnFQIai80ingrq+cEGB7LY+Vwu Nq7hYQqDmA3jKkSwXkTNTBgxkngUf/rxzbIebER83Vp0DmJx/Uxrmur/ykL/bw4JnTUj30nEKwLw V/nn1LnunsOt8M+I1eE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 60740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.198.122.203 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. F4LWmAv/MJj+uxY/dRvAcZIaYBbsYrB1nHypY61iyZ1XUK6RlbCBsXetdS4jkI97m1DKT6vBHLuA +7TjLRN1Q9X56mlqvQxQ8N8SY6415isdA31dgXVEkI0Hvkgr+4ZU6oYVW6ddq0ejUZT6bOm5omP7 /VfxKR0DrjNtGrU/oiQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.198.122.203
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. F4LWmAv/MJj+uxY/dRvAcZIaYBbsYrB1nHypY61iyZ1XUK6RlbCBsXetdS4jkI97m1DKT6vBHLuA +7TjLRN1Q9X56mlqvQxQ8N8SY6415isdA31dgXVEkI0Hvkgr+4ZU6oYVW6ddq0ejUZT6bOm5omP7 /VfxKR0DrjNtGrU/oiQ= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

defense.gov

	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 18330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use9.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 6561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.204.20.150
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

defense.gov

	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 53280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.58.244.140 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. O+yNtSVQiNZzAkM1Gt0SUle37gSEqMxhHhkBE3erYK5NUn+tkfc6ZCDih0YpurBpypp1wYL88PUY uapa86Qu/e86ER8ziNGPeTngSBhX2CIcR4oO76YAiys2bJGikFjGrOxQQDgKG9+yJppPGSo+PxYY u4dgAM2vvQUT7WSiuEI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-116.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 62176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.204.20.150
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

defense.gov

	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 19763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.184.79 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. nY0h1j6btcMPksM25fQ02ILTxVYe7Lg5wlmmN9fmvw5vMUchDqtnFQIai80ingrq+cEGB7LY+Vwu Nq7hYQqDmA3jKkSwXkTNTBgxkngUf/rxzbIebER83Vp0DmJx/Uxrmur/ykL/bw4JnTUj30nEKwLw V/nn1LnunsOt8M+I1eE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 2953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.184.79 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. nY0h1j6btcMPksM25fQ02ILTxVYe7Lg5wlmmN9fmvw5vMUchDqtnFQIai80ingrq+cEGB7LY+Vwu Nq7hYQqDmA3jKkSwXkTNTBgxkngUf/rxzbIebER83Vp0DmJx/Uxrmur/ykL/bw4JnTUj30nEKwLw V/nn1LnunsOt8M+I1eE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.4.184.79
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. nY0h1j6btcMPksM25fQ02ILTxVYe7Lg5wlmmN9fmvw5vMUchDqtnFQIai80ingrq+cEGB7LY+Vwu Nq7hYQqDmA3jKkSwXkTNTBgxkngUf/rxzbIebER83Vp0DmJx/Uxrmur/ykL/bw4JnTUj30nEKwLw V/nn1LnunsOt8M+I1eE= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

defense.gov

	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 44431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.36.137 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. P191Ap55nhsvSv+gGhO6vZYOHWhQnNr9SFxPy5CT48nKJzIyId7AqZMZWbLx31HgLfXwfpIlXjPu GPz8xVkSwnRHAaEGmi1elufi4nLfuYoYf/oMjiqBGVdIdJtpis3mccVGK9M4ZmIhS/OhPTLQo1co LTxj24jB+XKh2/nR4Xc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia3.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 49033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.204.20.150
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240729183048 20240726173048 64175 defense.gov. HF1e9T9QmigJxJVwBM1ExdI0867m6IiyIXOAywA9ExXLZYeNb0pqYwqCncXwMtOLUclPmNML/Qj6 eIpb7NoRIysxfjhyKuHSiqYwq9u5Tj0WJRUZDGqKDk2A59Et5y5lBhU5GoYtlPqp5tiaTVcVaLWc UOHSr2wZ2q24LXx21aA= )`
	RRSIG=64175 and DNSKEY=64175 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test defense.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: