DNSSEC Debugger - defense.gov

Domain Name:

Time: 2026-02-15 07:21:49 UTC

Analyzing DNSSEC problems for defense.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1141 octets ;; HEADER SECTION ;; id = 43986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for defense.gov/A
	Received 618 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 618 octets ;; HEADER SECTION ;; id = 33206 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 12341 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to g.root-servers.net for gov/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 17619 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 58084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for defense.gov/A
	Received 354 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 354 octets ;; HEADER SECTION ;; id = 64018 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216082149 20260214062149 35496 gov. ScS5B1bYc0rtUzkd/wCyH/8+jfnqaRJlMlkjr6um/zvTIn+Ler5GdLE+2u5WCMw+ojK1qEUW2JDC AQRxTuxAqQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for defense.gov/DNSKEY
	Received 354 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 354 octets ;; HEADER SECTION ;; id = 5565 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216082149 20260214062149 35496 gov. 3DviSGLlS7k/GT32xiTL9e3Ahvszi3OS7nfFm0jcR8r1dLX9N37oqq8REIeMcU+Mro0DCsN2MJdl gwKf+2Qowg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone defense.gov

defense.gov

	Checking DS between gov and defense.gov
	Query to b.ns.gov for defense.gov/DS
	Received 187 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 187 octets ;; HEADER SECTION ;; id = 47393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DS ;; ANSWER SECTION (2 records) defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216082149 20260214062149 35496 gov. zBV+451Se6ut6okcYh6GhW0UUEC4N4yEWHdm2ZuwBaLcWubcXEAxn43jSzkAhG9/DsOtae6n5xjz /fB1fHGuMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for defense.gov in the gov zone
	DS=33055/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216082149 20260214062149 35496 gov. zBV+451Se6ut6okcYh6GhW0UUEC4N4yEWHdm2ZuwBaLcWubcXEAxn43jSzkAhG9/DsOtae6n5xjz /fB1fHGuMg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=33055/SHA-256 is now in the chain-of-trust
	`defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec )`
	Query to ns1-95.akam.net for defense.gov/DNSKEY
	Received 1486 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 1486 octets ;; HEADER SECTION ;; id = 6431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (6 records) defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; keytag 33055 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAdiKiY7GHsTj9CnBvW9kYXy4o21Lz0SlDe+iL3EDyWPHg1zUshXxEbV7OjHZHvByfYpY/19T yuaLylztKXf5UGXtZAJj/rAA4MAgRrq4rYoYd7j3nsgSl+rhMs2ePGA0L+BMo4yTrKqxsEptpHVt Bt4Sfl3YSHudKeb8CvnM0pK3 ) ; keytag 51612 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAbqVsIPWFKBEV+iatzZRJNFHfs9gh4CZ9oV5t5d12nVlWQyNYPxtTLc5HfPfZO/jIi7I9Mqz V5Xr1XWtWST09Vyc19gAVsvMKKQY8//IyBc2jjiGSpvsm2w11C0Ws+wRpULixWlP9LXvkTC2cMrq vu6jrHIim6Y3mrhXNBL7Y+Rp ) ; keytag 24237 defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; keytag 1749 defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260218063654 20260215053654 1749 defense.gov. 0e0MEm33Nyt9eUkeTVYmDAWqsdFotgmEDYJaTEFNa6fqu1kfOEwQL0fB0rc7xZdvWDkaJbnBC6HT Y8BhOLlz6Oki6+Bd55ZEydfd9N2nkhiuiU3uAPb+K2tg4Q4KBpJbgqj8kiWCbukez9+WEeqBKf+8 WnwXqLdTwKJLwKJLSJAL+SeO8sH2zgC6WhWyiaybgIPycovuYwBwMymdpevwttemT6cvKEwPtB5Z sJHJpEfj4qQ5/VAZaepmsUVQ/6PB1KabId+5jc2F9SIqOqbLxAUHxgVlSIbrRUb5zMyk58pfy0tn 3n3oUqQsFAa3FLlXrW6rOBVSx/f05CXwZsZCVg== ) defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260218063654 20260215053654 33055 defense.gov. H/L0Y2QANOxlCvGu5mCwcjQ9DbNa3K3fTOsdI8jFKwuofXwdpnfdmLH9q53HkxOVDhFmi4L+oCzL SIEcvVFCTvNZmCsP7ZAYycWh4DhDmSWrCvAKUnY2v0apMUZTjXN0e+5YoBQav3Q4+zISKh9eMkAO JYqnbl+5BaudszSXHg4F2kBDk0mjgeEpnNKGVeddTIV6CVeyXWbzU4KUTrwzR4FhXa4WxeTJQFxv fg9oFxaJwZeKCKlI4tvZctMT48mj8e0LOhrsbYvmXCZ58YMQirNeyG5AAi48urT5vhIbLnTgFvf+ 4wLeTQxapKoIB9ark1hy632k95SuaPiHvcl69A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for defense.gov
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; keytag 33055`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAdiKiY7GHsTj9CnBvW9kYXy4o21Lz0SlDe+iL3EDyWPHg1zUshXxEbV7OjHZHvByfYpY/19T yuaLylztKXf5UGXtZAJj/rAA4MAgRrq4rYoYd7j3nsgSl+rhMs2ePGA0L+BMo4yTrKqxsEptpHVt Bt4Sfl3YSHudKeb8CvnM0pK3 ) ; keytag 51612`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAbqVsIPWFKBEV+iatzZRJNFHfs9gh4CZ9oV5t5d12nVlWQyNYPxtTLc5HfPfZO/jIi7I9Mqz V5Xr1XWtWST09Vyc19gAVsvMKKQY8//IyBc2jjiGSpvsm2w11C0Ws+wRpULixWlP9LXvkTC2cMrq vu6jrHIim6Y3mrhXNBL7Y+Rp ) ; keytag 24237`
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; keytag 1749`
	DNSKEY=33055/SEP is now in the chain-of-trust
	DS=33055/SHA-256 verifies DNSKEY=33055/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260218063654 20260215053654 1749 defense.gov. 0e0MEm33Nyt9eUkeTVYmDAWqsdFotgmEDYJaTEFNa6fqu1kfOEwQL0fB0rc7xZdvWDkaJbnBC6HT Y8BhOLlz6Oki6+Bd55ZEydfd9N2nkhiuiU3uAPb+K2tg4Q4KBpJbgqj8kiWCbukez9+WEeqBKf+8 WnwXqLdTwKJLwKJLSJAL+SeO8sH2zgC6WhWyiaybgIPycovuYwBwMymdpevwttemT6cvKEwPtB5Z sJHJpEfj4qQ5/VAZaepmsUVQ/6PB1KabId+5jc2F9SIqOqbLxAUHxgVlSIbrRUb5zMyk58pfy0tn 3n3oUqQsFAa3FLlXrW6rOBVSx/f05CXwZsZCVg== )`
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260218063654 20260215053654 33055 defense.gov. H/L0Y2QANOxlCvGu5mCwcjQ9DbNa3K3fTOsdI8jFKwuofXwdpnfdmLH9q53HkxOVDhFmi4L+oCzL SIEcvVFCTvNZmCsP7ZAYycWh4DhDmSWrCvAKUnY2v0apMUZTjXN0e+5YoBQav3Q4+zISKh9eMkAO JYqnbl+5BaudszSXHg4F2kBDk0mjgeEpnNKGVeddTIV6CVeyXWbzU4KUTrwzR4FhXa4WxeTJQFxv fg9oFxaJwZeKCKlI4tvZctMT48mj8e0LOhrsbYvmXCZ58YMQirNeyG5AAi48urT5vhIbLnTgFvf+ 4wLeTQxapKoIB9ark1hy632k95SuaPiHvcl69A== )`
	RRSIG=1749 and DNSKEY=1749/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=33055 and DNSKEY=33055/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 2 RRSIG and 4 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 64663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.176.238 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. swD7/qlH/sYaWQHpWb7sswPmTbPM+o/FWfpIqrbzFWFgOCqTjcNl1Nl2vEuAnWOPRbmgSkS958Zq QBX6rIPXKsed/8A20lO3SwZ1vvAYAgPc2SK16FTdNMNxWZDl2UeiLUHHIZVBdEjiiKdgMCKCGwAz 5+Gnvd8j/qvHxDagCR0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/SOA
	Received 602 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 602 octets ;; HEADER SECTION ;; id = 14664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726351 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20260218063654 20260215053654 24237 defense.gov. Nvufe8WCwszTdmkvSknsydfocpx1qd4v5HZVn4MSHdSZF4X3L0F+jkFfBowPm5YNT1SrHgwE86il YYfCXPgVJBcdY/npm4CKyP9VhyE+zAvOQV8ThA2w+d0MFlFY8S9OqHpYqmukejFGuzGBN/zXkk4a Riz6OmVI/xPBHLy8HpU= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20260218063654 20260215053654 24237 defense.gov. ISobJF56yj2M32NxCGW+KQgVFMXgmOhUd+F9U0tzsaHhlrxokAseecTpv6QPiCJSJhVnBaTCb5FZ eGD0LGgdF9fzHbBtqn/2aeRsWQXy8sIv80Cn8NWWRlNM/wvgDmc98ei6bv8ZgqZtoX/E4HOx6S6T aUgJnejDHPybZF2JOCc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usc5.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 602 octets ;; HEADER SECTION ;; id = 9229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726351 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20260218063654 20260215053654 24237 defense.gov. Nvufe8WCwszTdmkvSknsydfocpx1qd4v5HZVn4MSHdSZF4X3L0F+jkFfBowPm5YNT1SrHgwE86il YYfCXPgVJBcdY/npm4CKyP9VhyE+zAvOQV8ThA2w+d0MFlFY8S9OqHpYqmukejFGuzGBN/zXkk4a Riz6OmVI/xPBHLy8HpU= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20260218063654 20260215053654 24237 defense.gov. ISobJF56yj2M32NxCGW+KQgVFMXgmOhUd+F9U0tzsaHhlrxokAseecTpv6QPiCJSJhVnBaTCb5FZ eGD0LGgdF9fzHbBtqn/2aeRsWQXy8sIv80Cn8NWWRlNM/wvgDmc98ei6bv8ZgqZtoX/E4HOx6S6T aUgJnejDHPybZF2JOCc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-95.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 602 octets ;; HEADER SECTION ;; id = 57319 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726351 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20260218063654 20260215053654 24237 defense.gov. Nvufe8WCwszTdmkvSknsydfocpx1qd4v5HZVn4MSHdSZF4X3L0F+jkFfBowPm5YNT1SrHgwE86il YYfCXPgVJBcdY/npm4CKyP9VhyE+zAvOQV8ThA2w+d0MFlFY8S9OqHpYqmukejFGuzGBN/zXkk4a Riz6OmVI/xPBHLy8HpU= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20260218063654 20260215053654 24237 defense.gov. ISobJF56yj2M32NxCGW+KQgVFMXgmOhUd+F9U0tzsaHhlrxokAseecTpv6QPiCJSJhVnBaTCb5FZ eGD0LGgdF9fzHbBtqn/2aeRsWQXy8sIv80Cn8NWWRlNM/wvgDmc98ei6bv8ZgqZtoX/E4HOx6S6T aUgJnejDHPybZF2JOCc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-116.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 602 octets ;; HEADER SECTION ;; id = 59370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726351 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20260218063654 20260215053654 24237 defense.gov. Nvufe8WCwszTdmkvSknsydfocpx1qd4v5HZVn4MSHdSZF4X3L0F+jkFfBowPm5YNT1SrHgwE86il YYfCXPgVJBcdY/npm4CKyP9VhyE+zAvOQV8ThA2w+d0MFlFY8S9OqHpYqmukejFGuzGBN/zXkk4a Riz6OmVI/xPBHLy8HpU= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20260218063654 20260215053654 24237 defense.gov. ISobJF56yj2M32NxCGW+KQgVFMXgmOhUd+F9U0tzsaHhlrxokAseecTpv6QPiCJSJhVnBaTCb5FZ eGD0LGgdF9fzHbBtqn/2aeRsWQXy8sIv80Cn8NWWRlNM/wvgDmc98ei6bv8ZgqZtoX/E4HOx6S6T aUgJnejDHPybZF2JOCc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia3.akam.net for defense.gov/SOA
	Received 602 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 602 octets ;; HEADER SECTION ;; id = 61518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726351 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20260218063654 20260215053654 24237 defense.gov. Nvufe8WCwszTdmkvSknsydfocpx1qd4v5HZVn4MSHdSZF4X3L0F+jkFfBowPm5YNT1SrHgwE86il YYfCXPgVJBcdY/npm4CKyP9VhyE+zAvOQV8ThA2w+d0MFlFY8S9OqHpYqmukejFGuzGBN/zXkk4a Riz6OmVI/xPBHLy8HpU= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20260218063654 20260215053654 24237 defense.gov. ISobJF56yj2M32NxCGW+KQgVFMXgmOhUd+F9U0tzsaHhlrxokAseecTpv6QPiCJSJhVnBaTCb5FZ eGD0LGgdF9fzHbBtqn/2aeRsWQXy8sIv80Cn8NWWRlNM/wvgDmc98ei6bv8ZgqZtoX/E4HOx6S6T aUgJnejDHPybZF2JOCc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use2.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 602 octets ;; HEADER SECTION ;; id = 35643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726351 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20260218063654 20260215053654 24237 defense.gov. Nvufe8WCwszTdmkvSknsydfocpx1qd4v5HZVn4MSHdSZF4X3L0F+jkFfBowPm5YNT1SrHgwE86il YYfCXPgVJBcdY/npm4CKyP9VhyE+zAvOQV8ThA2w+d0MFlFY8S9OqHpYqmukejFGuzGBN/zXkk4a Riz6OmVI/xPBHLy8HpU= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20260218063654 20260215053654 24237 defense.gov. ISobJF56yj2M32NxCGW+KQgVFMXgmOhUd+F9U0tzsaHhlrxokAseecTpv6QPiCJSJhVnBaTCb5FZ eGD0LGgdF9fzHbBtqn/2aeRsWQXy8sIv80Cn8NWWRlNM/wvgDmc98ei6bv8ZgqZtoX/E4HOx6S6T aUgJnejDHPybZF2JOCc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to eur6.akam.net for defense.gov/SOA
	Received 602 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 602 octets ;; HEADER SECTION ;; id = 2854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726351 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20260218063654 20260215053654 24237 defense.gov. Nvufe8WCwszTdmkvSknsydfocpx1qd4v5HZVn4MSHdSZF4X3L0F+jkFfBowPm5YNT1SrHgwE86il YYfCXPgVJBcdY/npm4CKyP9VhyE+zAvOQV8ThA2w+d0MFlFY8S9OqHpYqmukejFGuzGBN/zXkk4a Riz6OmVI/xPBHLy8HpU= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20260218063654 20260215053654 24237 defense.gov. ISobJF56yj2M32NxCGW+KQgVFMXgmOhUd+F9U0tzsaHhlrxokAseecTpv6QPiCJSJhVnBaTCb5FZ eGD0LGgdF9fzHbBtqn/2aeRsWQXy8sIv80Cn8NWWRlNM/wvgDmc98ei6bv8ZgqZtoX/E4HOx6S6T aUgJnejDHPybZF2JOCc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 40118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.12.20.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. EMWw4VjUt5EoB3+A81VTt2O8gwebZrUJkWGOPhvqdn6sacet3yGAJHQwi/HJDLkWSKrBek8VD1Hj rwwK087aNRqcqLsHY7tkOFOJlp6g9nHqKU4afgeBRXL5jdNBKgAtH73x5Myl1tnkUAJEb1YnizTS JwAjSvoYr2gRGNzWP3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.12.20.163
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. EMWw4VjUt5EoB3+A81VTt2O8gwebZrUJkWGOPhvqdn6sacet3yGAJHQwi/HJDLkWSKrBek8VD1Hj rwwK087aNRqcqLsHY7tkOFOJlp6g9nHqKU4afgeBRXL5jdNBKgAtH73x5Myl1tnkUAJEb1YnizTS JwAjSvoYr2gRGNzWP3s= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

defense.gov

	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 25710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 184.25.231.248 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. YafDSyGdiiZlbFfrfRLNZGN5ugDZJsN1PLR539guK5L+5acHzJWTGt4AAMr1KVHFqrgAuY43uoyV UmZ8LdGpHZ7XKdCU1NhnE9oPurCBRJmG33odVzTT2KKv7r+5lt6nVWg+EQ89hY8hnZyphwhamum4 EoLHY/YXtKRPYWLhoC4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 42870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.13.149.246 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. Y3mN6hPylr133ZXKJzWtcdvhTZnwPLplI2/46a5AZq42cGFbG0G8Mj1ZprswVjOEeaT9ZrpfvY1t PX3YCyn/xYOOCyvZJOlIdpDSTXU+Tm2n5BABaeoVXRZQ0dYc5exlyUejeuOWP78L1IndeOSVBhhg wPD6RPlVh8ch2OAOvwY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.13.149.246
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. Y3mN6hPylr133ZXKJzWtcdvhTZnwPLplI2/46a5AZq42cGFbG0G8Mj1ZprswVjOEeaT9ZrpfvY1t PX3YCyn/xYOOCyvZJOlIdpDSTXU+Tm2n5BABaeoVXRZQ0dYc5exlyUejeuOWP78L1IndeOSVBhhg wPD6RPlVh8ch2OAOvwY= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

defense.gov

	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 38984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.13.149.246 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. Y3mN6hPylr133ZXKJzWtcdvhTZnwPLplI2/46a5AZq42cGFbG0G8Mj1ZprswVjOEeaT9ZrpfvY1t PX3YCyn/xYOOCyvZJOlIdpDSTXU+Tm2n5BABaeoVXRZQ0dYc5exlyUejeuOWP78L1IndeOSVBhhg wPD6RPlVh8ch2OAOvwY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-116.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 41439 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.176.238 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. swD7/qlH/sYaWQHpWb7sswPmTbPM+o/FWfpIqrbzFWFgOCqTjcNl1Nl2vEuAnWOPRbmgSkS958Zq QBX6rIPXKsed/8A20lO3SwZ1vvAYAgPc2SK16FTdNMNxWZDl2UeiLUHHIZVBdEjiiKdgMCKCGwAz 5+Gnvd8j/qvHxDagCR0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.4.176.238
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. swD7/qlH/sYaWQHpWb7sswPmTbPM+o/FWfpIqrbzFWFgOCqTjcNl1Nl2vEuAnWOPRbmgSkS958Zq QBX6rIPXKsed/8A20lO3SwZ1vvAYAgPc2SK16FTdNMNxWZDl2UeiLUHHIZVBdEjiiKdgMCKCGwAz 5+Gnvd8j/qvHxDagCR0= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

defense.gov

	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 33951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.13.149.246 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. Y3mN6hPylr133ZXKJzWtcdvhTZnwPLplI2/46a5AZq42cGFbG0G8Mj1ZprswVjOEeaT9ZrpfvY1t PX3YCyn/xYOOCyvZJOlIdpDSTXU+Tm2n5BABaeoVXRZQ0dYc5exlyUejeuOWP78L1IndeOSVBhhg wPD6RPlVh8ch2OAOvwY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-95.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 19687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.176.238 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. swD7/qlH/sYaWQHpWb7sswPmTbPM+o/FWfpIqrbzFWFgOCqTjcNl1Nl2vEuAnWOPRbmgSkS958Zq QBX6rIPXKsed/8A20lO3SwZ1vvAYAgPc2SK16FTdNMNxWZDl2UeiLUHHIZVBdEjiiKdgMCKCGwAz 5+Gnvd8j/qvHxDagCR0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.4.176.238
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. swD7/qlH/sYaWQHpWb7sswPmTbPM+o/FWfpIqrbzFWFgOCqTjcNl1Nl2vEuAnWOPRbmgSkS958Zq QBX6rIPXKsed/8A20lO3SwZ1vvAYAgPc2SK16FTdNMNxWZDl2UeiLUHHIZVBdEjiiKdgMCKCGwAz 5+Gnvd8j/qvHxDagCR0= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

defense.gov

	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 20192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 184.31.70.235 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. cShP+ePNW3dxl52uYyq6aVz2Din/85H0Hh4hTu/QS8A1DXub/+KaWMzNohnV4GEX7aVUJ4DlNH5y V40EdXIZPz9m139iZ880BVBJiOAicHiBzu0QYpdzVLT6AT+rCFCiVp24NwiAbZUhRDi2glT9n9LY Folw19FtRFsKNjoqOCU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usc5.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 11298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 184.31.70.235 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. cShP+ePNW3dxl52uYyq6aVz2Din/85H0Hh4hTu/QS8A1DXub/+KaWMzNohnV4GEX7aVUJ4DlNH5y V40EdXIZPz9m139iZ880BVBJiOAicHiBzu0QYpdzVLT6AT+rCFCiVp24NwiAbZUhRDi2glT9n9LY Folw19FtRFsKNjoqOCU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 184.31.70.235
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. cShP+ePNW3dxl52uYyq6aVz2Din/85H0Hh4hTu/QS8A1DXub/+KaWMzNohnV4GEX7aVUJ4DlNH5y V40EdXIZPz9m139iZ880BVBJiOAicHiBzu0QYpdzVLT6AT+rCFCiVp24NwiAbZUhRDi2glT9n9LY Folw19FtRFsKNjoqOCU= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

defense.gov

	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 20516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 184.31.70.235 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. cShP+ePNW3dxl52uYyq6aVz2Din/85H0Hh4hTu/QS8A1DXub/+KaWMzNohnV4GEX7aVUJ4DlNH5y V40EdXIZPz9m139iZ880BVBJiOAicHiBzu0QYpdzVLT6AT+rCFCiVp24NwiAbZUhRDi2glT9n9LY Folw19FtRFsKNjoqOCU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia3.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 10682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 184.31.70.235 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. cShP+ePNW3dxl52uYyq6aVz2Din/85H0Hh4hTu/QS8A1DXub/+KaWMzNohnV4GEX7aVUJ4DlNH5y V40EdXIZPz9m139iZ880BVBJiOAicHiBzu0QYpdzVLT6AT+rCFCiVp24NwiAbZUhRDi2glT9n9LY Folw19FtRFsKNjoqOCU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 184.31.70.235
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. cShP+ePNW3dxl52uYyq6aVz2Din/85H0Hh4hTu/QS8A1DXub/+KaWMzNohnV4GEX7aVUJ4DlNH5y V40EdXIZPz9m139iZ880BVBJiOAicHiBzu0QYpdzVLT6AT+rCFCiVp24NwiAbZUhRDi2glT9n9LY Folw19FtRFsKNjoqOCU= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

defense.gov

	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 28554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.100.75.72 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. c9FVv++OO6xrVn15AfYjRmdI6ILQdCR7UE/awht4mU9r66RdVLOeDhH94jhJmh9yFiwub1IrXdPh U1WVK0u1gXvl0/1+tpu4dM0jMQjsOrYVhHTUDWX6gCi0JNy7a7kzJEDNsU/KZ+ZfToi1buJO/4Ga i0BNCFoT9GlLT8yoVWA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eur6.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 4169 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.13.149.246 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. Y3mN6hPylr133ZXKJzWtcdvhTZnwPLplI2/46a5AZq42cGFbG0G8Mj1ZprswVjOEeaT9ZrpfvY1t PX3YCyn/xYOOCyvZJOlIdpDSTXU+Tm2n5BABaeoVXRZQ0dYc5exlyUejeuOWP78L1IndeOSVBhhg wPD6RPlVh8ch2OAOvwY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.13.149.246
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. Y3mN6hPylr133ZXKJzWtcdvhTZnwPLplI2/46a5AZq42cGFbG0G8Mj1ZprswVjOEeaT9ZrpfvY1t PX3YCyn/xYOOCyvZJOlIdpDSTXU+Tm2n5BABaeoVXRZQ0dYc5exlyUejeuOWP78L1IndeOSVBhhg wPD6RPlVh8ch2OAOvwY= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

defense.gov

	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 49889 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.176.238 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. swD7/qlH/sYaWQHpWb7sswPmTbPM+o/FWfpIqrbzFWFgOCqTjcNl1Nl2vEuAnWOPRbmgSkS958Zq QBX6rIPXKsed/8A20lO3SwZ1vvAYAgPc2SK16FTdNMNxWZDl2UeiLUHHIZVBdEjiiKdgMCKCGwAz 5+Gnvd8j/qvHxDagCR0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use9.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 13186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.12.20.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. EMWw4VjUt5EoB3+A81VTt2O8gwebZrUJkWGOPhvqdn6sacet3yGAJHQwi/HJDLkWSKrBek8VD1Hj rwwK087aNRqcqLsHY7tkOFOJlp6g9nHqKU4afgeBRXL5jdNBKgAtH73x5Myl1tnkUAJEb1YnizTS JwAjSvoYr2gRGNzWP3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.12.20.163
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20260218063654 20260215053654 24237 defense.gov. EMWw4VjUt5EoB3+A81VTt2O8gwebZrUJkWGOPhvqdn6sacet3yGAJHQwi/HJDLkWSKrBek8VD1Hj rwwK087aNRqcqLsHY7tkOFOJlp6g9nHqKU4afgeBRXL5jdNBKgAtH73x5Myl1tnkUAJEb1YnizTS JwAjSvoYr2gRGNzWP3s= )`
	RRSIG=24237 and DNSKEY=24237 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test defense.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: