DNSSEC Debugger - defense.gov

Domain Name:

Time: 2025-03-15 20:13:26 UTC

Analyzing DNSSEC problems for defense.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 48685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for defense.gov/A
	Received 618 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 618 octets ;; HEADER SECTION ;; id = 10648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . atEgruLUi8duv2qE1dOhBXUHurhWHaZbNblLA/irKf8UYusDOV1VgZdgI/kDq1YYJpDsKbRqEw8X Ph46PExwajA8FENBMrVRY82U4BwbZweeKNAEWmJFIKcxr80dVFv7Cu373PINeQfSw7ZiKC8wQqh3 LrVjCnvcjdsMb3aFeY4h+cnhprqPSwPP4HHwXWXu9aPIbNYtgvDocaxWIzlEhabro9BesukeCEd4 NAGEq4d5hL/LXcaO5bDeTPUE1UOSXYFygreVHJMWc73+RojKsGy1GpyDUd5V9HpRJaE1j6yDaJCF e+wAXosfS3yTF4pJ51Ox9tel0lpJi5lzrphJMA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 20734 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . atEgruLUi8duv2qE1dOhBXUHurhWHaZbNblLA/irKf8UYusDOV1VgZdgI/kDq1YYJpDsKbRqEw8X Ph46PExwajA8FENBMrVRY82U4BwbZweeKNAEWmJFIKcxr80dVFv7Cu373PINeQfSw7ZiKC8wQqh3 LrVjCnvcjdsMb3aFeY4h+cnhprqPSwPP4HHwXWXu9aPIbNYtgvDocaxWIzlEhabro9BesukeCEd4 NAGEq4d5hL/LXcaO5bDeTPUE1UOSXYFygreVHJMWc73+RojKsGy1GpyDUd5V9HpRJaE1j6yDaJCF e+wAXosfS3yTF4pJ51Ox9tel0lpJi5lzrphJMA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 31417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . atEgruLUi8duv2qE1dOhBXUHurhWHaZbNblLA/irKf8UYusDOV1VgZdgI/kDq1YYJpDsKbRqEw8X Ph46PExwajA8FENBMrVRY82U4BwbZweeKNAEWmJFIKcxr80dVFv7Cu373PINeQfSw7ZiKC8wQqh3 LrVjCnvcjdsMb3aFeY4h+cnhprqPSwPP4HHwXWXu9aPIbNYtgvDocaxWIzlEhabro9BesukeCEd4 NAGEq4d5hL/LXcaO5bDeTPUE1UOSXYFygreVHJMWc73+RojKsGy1GpyDUd5V9HpRJaE1j6yDaJCF e+wAXosfS3yTF4pJ51Ox9tel0lpJi5lzrphJMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . atEgruLUi8duv2qE1dOhBXUHurhWHaZbNblLA/irKf8UYusDOV1VgZdgI/kDq1YYJpDsKbRqEw8X Ph46PExwajA8FENBMrVRY82U4BwbZweeKNAEWmJFIKcxr80dVFv7Cu373PINeQfSw7ZiKC8wQqh3 LrVjCnvcjdsMb3aFeY4h+cnhprqPSwPP4HHwXWXu9aPIbNYtgvDocaxWIzlEhabro9BesukeCEd4 NAGEq4d5hL/LXcaO5bDeTPUE1UOSXYFygreVHJMWc73+RojKsGy1GpyDUd5V9HpRJaE1j6yDaJCF e+wAXosfS3yTF4pJ51Ox9tel0lpJi5lzrphJMA== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 29928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250423110549 20250221110549 2536 gov. 8LTuzTLcX9Wd9nBCTZVdduaicz4pZ+NmJMAFo3Y3JPJO/5dHGFSDqMxvXmCqDLfjROfPMhvdtrF3 X8BsZto/sQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250423110549 20250221110549 2536 gov. 8LTuzTLcX9Wd9nBCTZVdduaicz4pZ+NmJMAFo3Y3JPJO/5dHGFSDqMxvXmCqDLfjROfPMhvdtrF3 X8BsZto/sQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for defense.gov/A
	Received 354 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 354 octets ;; HEADER SECTION ;; id = 2117 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20250316211326 20250314191326 35496 gov. PW3CEuSjvLBvkfzLJMrd4Az0+zQkufpg9dFIVu5WZieBJnHQkB6loeeF/Zw0zLM+aXoWt0CpZarv H4Y8ipkVeQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for defense.gov/DNSKEY
	Received 354 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 354 octets ;; HEADER SECTION ;; id = 48214 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20250316211326 20250314191326 35496 gov. 9IzIFonpXEjC6GHKtPKMOBizMfhlNyPG1Gtxrly2FNJYtT3NOrq/ptqCgls9eMb9NwqaxE/0uEhz t/N0UqF+rg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone defense.gov

defense.gov

	Checking DS between gov and defense.gov
	Query to c.ns.gov for defense.gov/DS
	Received 187 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 187 octets ;; HEADER SECTION ;; id = 17219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DS ;; ANSWER SECTION (2 records) defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20250316211326 20250314191326 35496 gov. JuvtXq5ZPmyw7g2sD+C/IBde0Ag/grU7rEoVb0kTllE6LcBHVo6fkbd6/3dLOwnc3Wp5bQ+mH/Io UInG52K1fA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for defense.gov in the gov zone
	DS=33055/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20250316211326 20250314191326 35496 gov. JuvtXq5ZPmyw7g2sD+C/IBde0Ag/grU7rEoVb0kTllE6LcBHVo6fkbd6/3dLOwnc3Wp5bQ+mH/Io UInG52K1fA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=33055/SHA-256 is now in the chain-of-trust
	`defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec )`
	Query to asia2.akam.net for defense.gov/DNSKEY
	Received 1486 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 1486 octets ;; HEADER SECTION ;; id = 18342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (6 records) defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; keytag 1749 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcbcoD2eRRFVN54aTNw4z6Iszd+hGpjorTVoWVoNSRX/EAwT/X6nAIRtGyeXSLY3c3aEOOEd 2klM2mRmhj2oV/a9otBEdLuPnNStWLx55MJNsjd65BjjFN+/++5y68Sk07tzWkfkKltlWoVwUWKl gC+8N33CnhwoSkJG2ZJqII3d ) ; keytag 12123 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAe/EXv0jTuhUQjYfykIKxC+ZaNKxVhkQwdzh4QIGH2PkRn3ijBTs4DVLs2F8jeMcWkmOkxcX 7BHNKNe7gYL/2qsNnQgO46QK5gBCkimpdcM6uSN8z2ne9Z9A5W467tbVNTgfTkkcLB4zGWqFYknt qoG3RWypmgnuxvcywMKKBF/J ) ; keytag 12537 defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; keytag 33055 defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20250318063352 20250315053352 1749 defense.gov. 3OgZZjhIDe4nvQG/LCr/ma1BYK/DzXGwC9hwlRW+68HuRy1x+Jwwi1fBLPYLbgxiGmzT2ucxI2JL dUrlEdDiV4ZAOrYv+fGWTkPT7xNNPWgNH1r5Y/PS/+lD4bWAwR+DFGlMmyqalacRdZNOJUibdcmt cB3j4RwBZEF5ogKz/PK+RGlIpPezt3hFosAJcR4gmPtWTncstmCW9XznVzcC5Vk3GfSEWlDh0UnD tc+7ncr0LSAUJkxL8tvVWmHHYpviMk33OJKkygEnZ6TVISzWaIkGkMxe1b5wC/gXdAjcabzNvMJz 0SZBT7/kAVVu0vJ+QN6CQoE2sYoz5eIZN7ijQA== ) defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20250318063352 20250315053352 33055 defense.gov. XvUJrTeaGHbIQGek/Pvcei78Scw03tWTd8efBRyfygCHxXEATRNsiTIEoJTYbRgrjFI5WTyPH4mR kKsQE5NAER07b/+yv8UYcTSYv5VKkGOchUI0wkmWQy18SwNM61irm2369OOsBbZB8jaR3jGpk0r9 5IYhnuNtkoXOz5PNk+riq0YZXs5umkdEc2Q9KNGOmwrL0K6x6uKDf42mhTM9WEfou3MaPJkjtblc 3Z0Ux0FBuUeHY6bRD8hTRXomqoDrf66ftjQPaWy+qmiaIBBhL5Ep3YmAvEe6u46PA+tfJ3p7Crsk z/l4C/6cJf/Zj2sM9zQEBzKAmMVUvJk4kA49MA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for defense.gov
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; keytag 1749`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcbcoD2eRRFVN54aTNw4z6Iszd+hGpjorTVoWVoNSRX/EAwT/X6nAIRtGyeXSLY3c3aEOOEd 2klM2mRmhj2oV/a9otBEdLuPnNStWLx55MJNsjd65BjjFN+/++5y68Sk07tzWkfkKltlWoVwUWKl gC+8N33CnhwoSkJG2ZJqII3d ) ; keytag 12123`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAe/EXv0jTuhUQjYfykIKxC+ZaNKxVhkQwdzh4QIGH2PkRn3ijBTs4DVLs2F8jeMcWkmOkxcX 7BHNKNe7gYL/2qsNnQgO46QK5gBCkimpdcM6uSN8z2ne9Z9A5W467tbVNTgfTkkcLB4zGWqFYknt qoG3RWypmgnuxvcywMKKBF/J ) ; keytag 12537`
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; keytag 33055`
	DNSKEY=33055/SEP is now in the chain-of-trust
	DS=33055/SHA-256 verifies DNSKEY=33055/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20250318063352 20250315053352 1749 defense.gov. 3OgZZjhIDe4nvQG/LCr/ma1BYK/DzXGwC9hwlRW+68HuRy1x+Jwwi1fBLPYLbgxiGmzT2ucxI2JL dUrlEdDiV4ZAOrYv+fGWTkPT7xNNPWgNH1r5Y/PS/+lD4bWAwR+DFGlMmyqalacRdZNOJUibdcmt cB3j4RwBZEF5ogKz/PK+RGlIpPezt3hFosAJcR4gmPtWTncstmCW9XznVzcC5Vk3GfSEWlDh0UnD tc+7ncr0LSAUJkxL8tvVWmHHYpviMk33OJKkygEnZ6TVISzWaIkGkMxe1b5wC/gXdAjcabzNvMJz 0SZBT7/kAVVu0vJ+QN6CQoE2sYoz5eIZN7ijQA== )`
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20250318063352 20250315053352 33055 defense.gov. XvUJrTeaGHbIQGek/Pvcei78Scw03tWTd8efBRyfygCHxXEATRNsiTIEoJTYbRgrjFI5WTyPH4mR kKsQE5NAER07b/+yv8UYcTSYv5VKkGOchUI0wkmWQy18SwNM61irm2369OOsBbZB8jaR3jGpk0r9 5IYhnuNtkoXOz5PNk+riq0YZXs5umkdEc2Q9KNGOmwrL0K6x6uKDf42mhTM9WEfou3MaPJkjtblc 3Z0Ux0FBuUeHY6bRD8hTRXomqoDrf66ftjQPaWy+qmiaIBBhL5Ep3YmAvEe6u46PA+tfJ3p7Crsk z/l4C/6cJf/Zj2sM9zQEBzKAmMVUvJk4kA49MA== )`
	RRSIG=1749 and DNSKEY=1749/SEP verifies the DNSKEY RRset
	RRSIG=33055 and DNSKEY=33055/SEP verifies the DNSKEY RRset
	DNSKEY=1749/SEP is now in the chain-of-trust
	DNSKEY=12123 is now in the chain-of-trust
	DNSKEY=12537 is now in the chain-of-trust
	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 2121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. JwJ/Ov09kBLVeW4/tgLRHrh2cPx4GY9W2iRP0ACDL8LFroDpr/hvR4NmikUHtmU2zDWWS2uB6L/k mmMVqbrye2YTkWTF8fMaAsSdBRJhqD9yobVEzGCArAJuyurtHqvwA+vD6FaVlC3tJBCZVrN46oIO lP4b1HnLFZZxGc+cIB4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-116.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-95.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 602 octets ;; HEADER SECTION ;; id = 10437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20250318063352 20250315053352 12123 defense.gov. rF834AwqULS+ecBIEPCyogE/LdkxOVWGd8puPSMGaxpw5HwMiOw11AG1/V8SAP79K+jZPBnReGOC h/s45kayxDyM8yM6p8Eluxgr2SJHBmRYDqR5Ln0QjpL/eLcbS/CFF7kuZ0f5naaMXM22AFkGamxQ 4khWyFw5fPA/Cnhxj9E= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20250318063352 20250315053352 12123 defense.gov. r6WtakGHECmeXSU51RPD4WnQlqkqr4x5k5UhLVyietvsl+ZqE/7kyqOoFpxdv//S5I+vlHzMqyd2 VNTez2vaWiBzTNX3LZJdrnGHOzx35q2zVAtZA9WpSuwkRDOh37Lhvun2V4tOoqR0NRP1PkHIgEvO qCnzyM44XKu8wZb6AP8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use2.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 602 octets ;; HEADER SECTION ;; id = 10946 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20250318063352 20250315053352 12123 defense.gov. rF834AwqULS+ecBIEPCyogE/LdkxOVWGd8puPSMGaxpw5HwMiOw11AG1/V8SAP79K+jZPBnReGOC h/s45kayxDyM8yM6p8Eluxgr2SJHBmRYDqR5Ln0QjpL/eLcbS/CFF7kuZ0f5naaMXM22AFkGamxQ 4khWyFw5fPA/Cnhxj9E= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20250318063352 20250315053352 12123 defense.gov. r6WtakGHECmeXSU51RPD4WnQlqkqr4x5k5UhLVyietvsl+ZqE/7kyqOoFpxdv//S5I+vlHzMqyd2 VNTez2vaWiBzTNX3LZJdrnGHOzx35q2zVAtZA9WpSuwkRDOh37Lhvun2V4tOoqR0NRP1PkHIgEvO qCnzyM44XKu8wZb6AP8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use9.akam.net for defense.gov/SOA
	Received 602 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 602 octets ;; HEADER SECTION ;; id = 13347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20250318063352 20250315053352 12123 defense.gov. rF834AwqULS+ecBIEPCyogE/LdkxOVWGd8puPSMGaxpw5HwMiOw11AG1/V8SAP79K+jZPBnReGOC h/s45kayxDyM8yM6p8Eluxgr2SJHBmRYDqR5Ln0QjpL/eLcbS/CFF7kuZ0f5naaMXM22AFkGamxQ 4khWyFw5fPA/Cnhxj9E= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20250318063352 20250315053352 12123 defense.gov. r6WtakGHECmeXSU51RPD4WnQlqkqr4x5k5UhLVyietvsl+ZqE/7kyqOoFpxdv//S5I+vlHzMqyd2 VNTez2vaWiBzTNX3LZJdrnGHOzx35q2zVAtZA9WpSuwkRDOh37Lhvun2V4tOoqR0NRP1PkHIgEvO qCnzyM44XKu8wZb6AP8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usc5.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 602 octets ;; HEADER SECTION ;; id = 5081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20250318063352 20250315053352 12123 defense.gov. rF834AwqULS+ecBIEPCyogE/LdkxOVWGd8puPSMGaxpw5HwMiOw11AG1/V8SAP79K+jZPBnReGOC h/s45kayxDyM8yM6p8Eluxgr2SJHBmRYDqR5Ln0QjpL/eLcbS/CFF7kuZ0f5naaMXM22AFkGamxQ 4khWyFw5fPA/Cnhxj9E= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20250318063352 20250315053352 12123 defense.gov. r6WtakGHECmeXSU51RPD4WnQlqkqr4x5k5UhLVyietvsl+ZqE/7kyqOoFpxdv//S5I+vlHzMqyd2 VNTez2vaWiBzTNX3LZJdrnGHOzx35q2zVAtZA9WpSuwkRDOh37Lhvun2V4tOoqR0NRP1PkHIgEvO qCnzyM44XKu8wZb6AP8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to eur6.akam.net for defense.gov/SOA
	Received 602 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 602 octets ;; HEADER SECTION ;; id = 45521 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20250318063352 20250315053352 12123 defense.gov. rF834AwqULS+ecBIEPCyogE/LdkxOVWGd8puPSMGaxpw5HwMiOw11AG1/V8SAP79K+jZPBnReGOC h/s45kayxDyM8yM6p8Eluxgr2SJHBmRYDqR5Ln0QjpL/eLcbS/CFF7kuZ0f5naaMXM22AFkGamxQ 4khWyFw5fPA/Cnhxj9E= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20250318063352 20250315053352 12123 defense.gov. r6WtakGHECmeXSU51RPD4WnQlqkqr4x5k5UhLVyietvsl+ZqE/7kyqOoFpxdv//S5I+vlHzMqyd2 VNTez2vaWiBzTNX3LZJdrnGHOzx35q2zVAtZA9WpSuwkRDOh37Lhvun2V4tOoqR0NRP1PkHIgEvO qCnzyM44XKu8wZb6AP8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia3.akam.net for defense.gov/SOA
	Received 602 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 602 octets ;; HEADER SECTION ;; id = 18156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20250318063352 20250315053352 12123 defense.gov. rF834AwqULS+ecBIEPCyogE/LdkxOVWGd8puPSMGaxpw5HwMiOw11AG1/V8SAP79K+jZPBnReGOC h/s45kayxDyM8yM6p8Eluxgr2SJHBmRYDqR5Ln0QjpL/eLcbS/CFF7kuZ0f5naaMXM22AFkGamxQ 4khWyFw5fPA/Cnhxj9E= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20250318063352 20250315053352 12123 defense.gov. r6WtakGHECmeXSU51RPD4WnQlqkqr4x5k5UhLVyietvsl+ZqE/7kyqOoFpxdv//S5I+vlHzMqyd2 VNTez2vaWiBzTNX3LZJdrnGHOzx35q2zVAtZA9WpSuwkRDOh37Lhvun2V4tOoqR0NRP1PkHIgEvO qCnzyM44XKu8wZb6AP8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia2.akam.net for defense.gov/SOA
	Received 602 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 602 octets ;; HEADER SECTION ;; id = 59150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20250318063352 20250315053352 12123 defense.gov. rF834AwqULS+ecBIEPCyogE/LdkxOVWGd8puPSMGaxpw5HwMiOw11AG1/V8SAP79K+jZPBnReGOC h/s45kayxDyM8yM6p8Eluxgr2SJHBmRYDqR5Ln0QjpL/eLcbS/CFF7kuZ0f5naaMXM22AFkGamxQ 4khWyFw5fPA/Cnhxj9E= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20250318063352 20250315053352 12123 defense.gov. r6WtakGHECmeXSU51RPD4WnQlqkqr4x5k5UhLVyietvsl+ZqE/7kyqOoFpxdv//S5I+vlHzMqyd2 VNTez2vaWiBzTNX3LZJdrnGHOzx35q2zVAtZA9WpSuwkRDOh37Lhvun2V4tOoqR0NRP1PkHIgEvO qCnzyM44XKu8wZb6AP8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 52940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.44.91.171 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. NQCBG4r/aV9PjSClbCzTcc5mYo9cMMm3sjmyZ5F0Bjx4Xe43/oyogaHe3UrZSKg6sIn0r/lUtv5g KDrq8LnkbVe6RVHfHyq/6cBosBwHIwuNIj5WSA66iwRBNF9Ol8FXgoTlZ1Mgm6+qP/8pno9l8sY3 B38aiPHXcLbY5gvuW3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.44.91.171
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. NQCBG4r/aV9PjSClbCzTcc5mYo9cMMm3sjmyZ5F0Bjx4Xe43/oyogaHe3UrZSKg6sIn0r/lUtv5g KDrq8LnkbVe6RVHfHyq/6cBosBwHIwuNIj5WSA66iwRBNF9Ol8FXgoTlZ1Mgm6+qP/8pno9l8sY3 B38aiPHXcLbY5gvuW3s= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

defense.gov

	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 47656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. JwJ/Ov09kBLVeW4/tgLRHrh2cPx4GY9W2iRP0ACDL8LFroDpr/hvR4NmikUHtmU2zDWWS2uB6L/k mmMVqbrye2YTkWTF8fMaAsSdBRJhqD9yobVEzGCArAJuyurtHqvwA+vD6FaVlC3tJBCZVrN46oIO lP4b1HnLFZZxGc+cIB4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-95.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 28482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.204.20.150 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. JwJ/Ov09kBLVeW4/tgLRHrh2cPx4GY9W2iRP0ACDL8LFroDpr/hvR4NmikUHtmU2zDWWS2uB6L/k mmMVqbrye2YTkWTF8fMaAsSdBRJhqD9yobVEzGCArAJuyurtHqvwA+vD6FaVlC3tJBCZVrN46oIO lP4b1HnLFZZxGc+cIB4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.204.20.150
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. JwJ/Ov09kBLVeW4/tgLRHrh2cPx4GY9W2iRP0ACDL8LFroDpr/hvR4NmikUHtmU2zDWWS2uB6L/k mmMVqbrye2YTkWTF8fMaAsSdBRJhqD9yobVEzGCArAJuyurtHqvwA+vD6FaVlC3tJBCZVrN46oIO lP4b1HnLFZZxGc+cIB4= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

defense.gov

	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 49005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.214.244.13 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. IiH+1FurF9Eku2Yb1EGAASuXJY7jai7PRydAKDhqEzhJ1gqzEDgHt+jbcuBPCLsANSAX8s0UJUul kzi5gFZSf7k2q2X3Ow1aDOwS0BQh9ANzHgdtJ73jpuNOUSeaK4zKdb02Qy4+3URw1Jn4CFXoGZrK 6q12CUdtlQJKQeT+1m0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 6005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.214.244.13 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. IiH+1FurF9Eku2Yb1EGAASuXJY7jai7PRydAKDhqEzhJ1gqzEDgHt+jbcuBPCLsANSAX8s0UJUul kzi5gFZSf7k2q2X3Ow1aDOwS0BQh9ANzHgdtJ73jpuNOUSeaK4zKdb02Qy4+3URw1Jn4CFXoGZrK 6q12CUdtlQJKQeT+1m0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.214.244.13
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. IiH+1FurF9Eku2Yb1EGAASuXJY7jai7PRydAKDhqEzhJ1gqzEDgHt+jbcuBPCLsANSAX8s0UJUul kzi5gFZSf7k2q2X3Ow1aDOwS0BQh9ANzHgdtJ73jpuNOUSeaK4zKdb02Qy4+3URw1Jn4CFXoGZrK 6q12CUdtlQJKQeT+1m0= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

defense.gov

	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 25485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eur6.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 9731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 96.16.196.234
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

defense.gov

	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 29840 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usc5.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 32484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 96.16.196.234
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

defense.gov

	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 44065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.76.44.152 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. Cx0EvWRq1G80458hOtuT24zW3qubGghQHjmoqF+IylpGOvCBkVmOkMQjIb2ZQy5sOTPo9xotBZ3A hP4c7fV52frAMQEkI9YXcD5XdwxnQ/CwVj1W0XuCTaLveK4Wx+iucbJJgwiLxbLWIWKvXjf0w1FJ lKYV7g8U7mDniJR4m8k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia3.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 1877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 96.16.196.234
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

defense.gov

	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 59216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 69.192.42.132 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. A8G8M9SLMQmfMUVGT0qYO4kLw2balkC2kIaim7zBMlJkKhHzUOCKGV5Advg15H2Y7vuOc1sTJWPj Na4LAt27bXbG1+nOWc34GHVmHTFTBQ81LppzjpzSAf75wvXgV1SvCZCHUu6HC7oPb6rbYdIc77Zi 73asNG0zuwgw5Lwta9M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 38412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.214.244.13 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. IiH+1FurF9Eku2Yb1EGAASuXJY7jai7PRydAKDhqEzhJ1gqzEDgHt+jbcuBPCLsANSAX8s0UJUul kzi5gFZSf7k2q2X3Ow1aDOwS0BQh9ANzHgdtJ73jpuNOUSeaK4zKdb02Qy4+3URw1Jn4CFXoGZrK 6q12CUdtlQJKQeT+1m0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.214.244.13
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. IiH+1FurF9Eku2Yb1EGAASuXJY7jai7PRydAKDhqEzhJ1gqzEDgHt+jbcuBPCLsANSAX8s0UJUul kzi5gFZSf7k2q2X3Ow1aDOwS0BQh9ANzHgdtJ73jpuNOUSeaK4zKdb02Qy4+3URw1Jn4CFXoGZrK 6q12CUdtlQJKQeT+1m0= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

defense.gov

	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 27647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use9.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 27963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 96.16.196.234
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20250318063352 20250315053352 12123 defense.gov. VAnpOKcsNxZiL7CkBKlS9iCe1A1zn4gfzavBSzZ6ZtZDGRBu2TqsFqUIWQqrjntCNcmRbpZoTkOm ysY4r4dDv/57WteWu177XdpdlNMphSsaEHDht8Uvb3GHq6BCIlRc3FPxkf9TYQ0N5byin5W9EAKe +YYfvRwy7xfru1k/1Tc= )`
	RRSIG=12123 and DNSKEY=12123 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test defense.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: