DNSSEC Debugger - defense.gov

Domain Name:

Time: 2024-10-30 22:51:38 UTC

Analyzing DNSSEC problems for defense.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 864 octets ;; HEADER SECTION ;; id = 62399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to m.root-servers.net for defense.gov/A
	Received 621 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 621 octets ;; HEADER SECTION ;; id = 7886 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . wrTZ2eNutA2DeGLfg/Y10zExPNyN/IhMEkHdZoOx4gnsk5XyYSRXroASuUSVczOtAfV1ko3f61AU asqQs9mWq9fWcrsTAPA51T2rHuFrVAakn2woYU9YYxgSo5OSG7XoksITZsobm8hYLmbA6d401vzC 1yRQWay7eHTk0OpgeYzZgnoCJIRQl/U6x+kQxYIUkITDE8EgQ7mrV5WcblrY0/mYFW+FgmYe8SSR 515d6O2QnRGzTcCnElwJeBHGvoETt2MyqiTUyZj8mlPt69k1OG3V710rFuGf18GB0TpL2S6KXjAu bdZ9wkkmPKhJLZQXRuAlLS30pXfIbmcENe2Lxg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 613 octets ;; HEADER SECTION ;; id = 10826 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . wrTZ2eNutA2DeGLfg/Y10zExPNyN/IhMEkHdZoOx4gnsk5XyYSRXroASuUSVczOtAfV1ko3f61AU asqQs9mWq9fWcrsTAPA51T2rHuFrVAakn2woYU9YYxgSo5OSG7XoksITZsobm8hYLmbA6d401vzC 1yRQWay7eHTk0OpgeYzZgnoCJIRQl/U6x+kQxYIUkITDE8EgQ7mrV5WcblrY0/mYFW+FgmYe8SSR 515d6O2QnRGzTcCnElwJeBHGvoETt2MyqiTUyZj8mlPt69k1OG3V710rFuGf18GB0TpL2S6KXjAu bdZ9wkkmPKhJLZQXRuAlLS30pXfIbmcENe2Lxg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 22100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . wrTZ2eNutA2DeGLfg/Y10zExPNyN/IhMEkHdZoOx4gnsk5XyYSRXroASuUSVczOtAfV1ko3f61AU asqQs9mWq9fWcrsTAPA51T2rHuFrVAakn2woYU9YYxgSo5OSG7XoksITZsobm8hYLmbA6d401vzC 1yRQWay7eHTk0OpgeYzZgnoCJIRQl/U6x+kQxYIUkITDE8EgQ7mrV5WcblrY0/mYFW+FgmYe8SSR 515d6O2QnRGzTcCnElwJeBHGvoETt2MyqiTUyZj8mlPt69k1OG3V710rFuGf18GB0TpL2S6KXjAu bdZ9wkkmPKhJLZQXRuAlLS30pXfIbmcENe2Lxg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . wrTZ2eNutA2DeGLfg/Y10zExPNyN/IhMEkHdZoOx4gnsk5XyYSRXroASuUSVczOtAfV1ko3f61AU asqQs9mWq9fWcrsTAPA51T2rHuFrVAakn2woYU9YYxgSo5OSG7XoksITZsobm8hYLmbA6d401vzC 1yRQWay7eHTk0OpgeYzZgnoCJIRQl/U6x+kQxYIUkITDE8EgQ7mrV5WcblrY0/mYFW+FgmYe8SSR 515d6O2QnRGzTcCnElwJeBHGvoETt2MyqiTUyZj8mlPt69k1OG3V710rFuGf18GB0TpL2S6KXjAu bdZ9wkkmPKhJLZQXRuAlLS30pXfIbmcENe2Lxg== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 62153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241224110537 20241024110537 2536 gov. C/bjhGJvW1Ig2Vo2en/3MaJnodA7jbIi7paFfpycm/dH6YL9oU0P995Aukaec0a23kaATQgiEwYv pOlgC2gH9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241224110537 20241024110537 2536 gov. C/bjhGJvW1Ig2Vo2en/3MaJnodA7jbIi7paFfpycm/dH6YL9oU0P995Aukaec0a23kaATQgiEwYv pOlgC2gH9g== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for defense.gov/A
	Received 354 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 354 octets ;; HEADER SECTION ;; id = 28262 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20241031235138 20241029215138 35496 gov. HJ9C8kfBVrE+hyqgjr0AOV9Lz5U2OivUv6JQesgYRtHW8mT8id3GSSOBBzp/Tv0GV+G/TSpMtgBj xMqyFvEoAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for defense.gov/DNSKEY
	Received 354 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 354 octets ;; HEADER SECTION ;; id = 37737 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20241031235138 20241029215138 35496 gov. tTsaZ4fx3UxfYOa7lqFn3e5cLz80uqZrjQYgQqMCyZ8/spteH8d4kfJtPyVcgP2YyOXamE96wN98 l9wlgY3keQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone defense.gov

defense.gov

	Checking DS between gov and defense.gov
	Query to d.ns.gov for defense.gov/DS
	Received 187 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 187 octets ;; HEADER SECTION ;; id = 41528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DS ;; ANSWER SECTION (2 records) defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20241031235138 20241029215138 35496 gov. jGYHEQt1eED37reZRtCYUn6B/3Cx0W0CKks5Z2nSOuLpE+y0xRuUIiq03U6fL3wHM87JlW1MUe36 UBk2q3gMBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for defense.gov in the gov zone
	DS=33055/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`defense.gov. 3600 IN RRSIG ( DS 13 2 3600 20241031235138 20241029215138 35496 gov. jGYHEQt1eED37reZRtCYUn6B/3Cx0W0CKks5Z2nSOuLpE+y0xRuUIiq03U6fL3wHM87JlW1MUe36 UBk2q3gMBg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=33055/SHA-256 is now in the chain-of-trust
	`defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec )`
	Query to ns1-95.akam.net for defense.gov/DNSKEY
	Received 1486 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 1486 octets ;; HEADER SECTION ;; id = 64590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (6 records) defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAdp6NRKakOj1kdllFmfpcLmnIJ8fOKVckx42PzyE3H/Cf3vNbYhMO6YxNAC+2UupvpEx+2nQ HM+wH9OzEV5kUSkJ+8KJXbzs8ZNLIXwLy4GtdwSgPwo6fDo/u8im0Ao/UzVCh8Zr7g7aUYRWNcrj XjQh1nHGqJ3srWut2dvrpKAj ) ; Key ID = 11703 defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; Key ID = 33055 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcEkiPXtGMH1f1s+qmUZ9GwdvYUJRxT8B6gRDYM9rtzYoJPHeVFj5PvI/eRS8daL3OUw1+56 gL7H6PqcSEfkBSuYGJal3L81T4sW87cF6++ZmvBgP5OeLhenHWhxEq/LWMe6k7PfIR9hQt/ELn7U sbLrQwX4tZy8k7SeTtKvPHH5 ) ; Key ID = 55583 defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; Key ID = 1749 defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20241102183344 20241030173344 1749 defense.gov. o3oo7bKquNeGJ4U6J+UrtkELYzkYIFErU2aoij7WdcpbZzhz6/Nb6zNuxO01S0rCbAMo8V7uyjHL Gla1Cyha1cmy7AyAL6VQUgAh9UhPimtaCp8FKJ+mURGrgmxqyAcQNof+RwSBkEtvPutKmVM1OUDO qBcO0xmsnnpU7gfB1Rj95uXMmPrd60A4qrejjTFI8EGAwflx3UMfB+KW9XD+nl9Ondi6LRxPbzKW QmSKb8gWde7NRLwThEJtxHya14Y//Jka7kuNBXydSBwrLouA/WfeNXcpSmi2RsfKhxv6w8WS5RRB RJR6JYcecZeXCxX12GLwoHiII0kYy7Bz5zToJg== ) defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20241102183344 20241030173344 33055 defense.gov. fvftzFKJXErqIbWGQLAcPZt/osM9ySe6/Tf/lnGWmEAG5MCjbuce6F//t4YPB2L5GKTb2yKohE8y MScdoUicb9RC0Oc6D4+yDpFLcasV3IM000C5M43HONvek4ocMNXkOZ68q/LvsnZyS6YpFD81UDQd UFX1zAtQiW6He6UzI+qHHWHeP3xpPGI6iSBFJCAP4Sr/UFDjCU8fZNCx4UhSPD+splkJlAogi7gr R0Y5979FMYN7DfYWFtm4i8FLp6NZ0ihNDOIomY1eyLe04hub0FJ5J8z5cGzzrVQ7wtXSP9E60BKx RX2I3g1u1zHL8No1mjHjx8fSQT85g6quIfsjFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for defense.gov
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAdp6NRKakOj1kdllFmfpcLmnIJ8fOKVckx42PzyE3H/Cf3vNbYhMO6YxNAC+2UupvpEx+2nQ HM+wH9OzEV5kUSkJ+8KJXbzs8ZNLIXwLy4GtdwSgPwo6fDo/u8im0Ao/UzVCh8Zr7g7aUYRWNcrj XjQh1nHGqJ3srWut2dvrpKAj ) ; Key ID = 11703`
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; Key ID = 33055`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcEkiPXtGMH1f1s+qmUZ9GwdvYUJRxT8B6gRDYM9rtzYoJPHeVFj5PvI/eRS8daL3OUw1+56 gL7H6PqcSEfkBSuYGJal3L81T4sW87cF6++ZmvBgP5OeLhenHWhxEq/LWMe6k7PfIR9hQt/ELn7U sbLrQwX4tZy8k7SeTtKvPHH5 ) ; Key ID = 55583`
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAeOiOlOnZq3nJ+ouYUmiwUCSdZtf05ZzZwMv/Hsi3ld26/BLl8TlcOWg/eMXL3bM4lRrWBjy ZduO3VYEi3LAuCF0t+nCGJC2SOnbnX10UmMqjP/qTNxgVt+j5MYTFyjUX5iUjOAv9q/QO+es9pJ0 RE7GqrmGpYpWi71VrE9r6Fnvv7/k0fiUexNyfzX90wcShvZEjgW7dug75iyEgZt15lv0nYIRVVSW dBjxU1mRjdQfIfjGEppLPklhHEXij1Fw3CZF48ftvp41dV3la4hJHgeAWsORqcDmVEooGzcdFjlp h0omwCE8rxNnLYY/Wyt9mi0poTLMyCMHyqTdIN2vxIU= ) ; Key ID = 1749`
	DNSKEY=33055/SEP is now in the chain-of-trust
	DS=33055/SHA-256 verifies DNSKEY=33055/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20241102183344 20241030173344 1749 defense.gov. o3oo7bKquNeGJ4U6J+UrtkELYzkYIFErU2aoij7WdcpbZzhz6/Nb6zNuxO01S0rCbAMo8V7uyjHL Gla1Cyha1cmy7AyAL6VQUgAh9UhPimtaCp8FKJ+mURGrgmxqyAcQNof+RwSBkEtvPutKmVM1OUDO qBcO0xmsnnpU7gfB1Rj95uXMmPrd60A4qrejjTFI8EGAwflx3UMfB+KW9XD+nl9Ondi6LRxPbzKW QmSKb8gWde7NRLwThEJtxHya14Y//Jka7kuNBXydSBwrLouA/WfeNXcpSmi2RsfKhxv6w8WS5RRB RJR6JYcecZeXCxX12GLwoHiII0kYy7Bz5zToJg== )`
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20241102183344 20241030173344 33055 defense.gov. fvftzFKJXErqIbWGQLAcPZt/osM9ySe6/Tf/lnGWmEAG5MCjbuce6F//t4YPB2L5GKTb2yKohE8y MScdoUicb9RC0Oc6D4+yDpFLcasV3IM000C5M43HONvek4ocMNXkOZ68q/LvsnZyS6YpFD81UDQd UFX1zAtQiW6He6UzI+qHHWHeP3xpPGI6iSBFJCAP4Sr/UFDjCU8fZNCx4UhSPD+splkJlAogi7gr R0Y5979FMYN7DfYWFtm4i8FLp6NZ0ihNDOIomY1eyLe04hub0FJ5J8z5cGzzrVQ7wtXSP9E60BKx RX2I3g1u1zHL8No1mjHjx8fSQT85g6quIfsjFw== )`
	RRSIG=1749 and DNSKEY=1749/SEP verifies the DNSKEY RRset
	RRSIG=33055 and DNSKEY=33055/SEP verifies the DNSKEY RRset
	DNSKEY=11703 is now in the chain-of-trust
	DNSKEY=55583 is now in the chain-of-trust
	DNSKEY=1749/SEP is now in the chain-of-trust
	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 25047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.90.84.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. n5VDYgwytscKZFjAxKRLkWbLE296SRW33B5aBJBQPwWf/YkMVJD36+QUUIvI8+cqApfY151n/keh OSR2/PvZIyTZMLH8W1H+HhUCC0VjbCHo10OAWyUFiFEsuaO4oXor+68FgJBHR2SCP77KKVhApV8E OTCCUQ6VY000gHwqw0k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eur6.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/SOA
	Received 602 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 602 octets ;; HEADER SECTION ;; id = 7662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20241102183344 20241030173344 55583 defense.gov. KNmpGeaL9+naaWdk65P7prmqg3vnVl8nUJBTocRZRpuO5OxUdueODOH10Nl0tMz/QTiKAHHH6wtP gcsuf3IXpX1eFqSdzC6rMGJJluK1MJ8PUltukpwXIVjo2CexEZ+yFqAjun8ctMaY9xnXjKm5qGeW nxvl1HRVmN+/jwM2Qfk= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20241102183344 20241030173344 55583 defense.gov. O6klN0WRY0Yp5LWJHaXkP5+0vYa3dUo4NQMSJJS/qnyq+mlAomi/MvuLBo6V6xy5ogewX+aSi01l 0WiB+ZRCEeVBj9L9OgPUXlBIYCYnVNyUUAxjr0Y91/0dC3h+xX8MflwDiNzmCmli+0pEgKXr59jt OEo21gEpT1hQmp1aOys= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usc5.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 602 octets ;; HEADER SECTION ;; id = 20917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20241102183344 20241030173344 55583 defense.gov. KNmpGeaL9+naaWdk65P7prmqg3vnVl8nUJBTocRZRpuO5OxUdueODOH10Nl0tMz/QTiKAHHH6wtP gcsuf3IXpX1eFqSdzC6rMGJJluK1MJ8PUltukpwXIVjo2CexEZ+yFqAjun8ctMaY9xnXjKm5qGeW nxvl1HRVmN+/jwM2Qfk= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20241102183344 20241030173344 55583 defense.gov. O6klN0WRY0Yp5LWJHaXkP5+0vYa3dUo4NQMSJJS/qnyq+mlAomi/MvuLBo6V6xy5ogewX+aSi01l 0WiB+ZRCEeVBj9L9OgPUXlBIYCYnVNyUUAxjr0Y91/0dC3h+xX8MflwDiNzmCmli+0pEgKXr59jt OEo21gEpT1hQmp1aOys= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia2.akam.net for defense.gov/SOA
	Received 602 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 602 octets ;; HEADER SECTION ;; id = 1670 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20241102183344 20241030173344 55583 defense.gov. KNmpGeaL9+naaWdk65P7prmqg3vnVl8nUJBTocRZRpuO5OxUdueODOH10Nl0tMz/QTiKAHHH6wtP gcsuf3IXpX1eFqSdzC6rMGJJluK1MJ8PUltukpwXIVjo2CexEZ+yFqAjun8ctMaY9xnXjKm5qGeW nxvl1HRVmN+/jwM2Qfk= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20241102183344 20241030173344 55583 defense.gov. O6klN0WRY0Yp5LWJHaXkP5+0vYa3dUo4NQMSJJS/qnyq+mlAomi/MvuLBo6V6xy5ogewX+aSi01l 0WiB+ZRCEeVBj9L9OgPUXlBIYCYnVNyUUAxjr0Y91/0dC3h+xX8MflwDiNzmCmli+0pEgKXr59jt OEo21gEpT1hQmp1aOys= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-116.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 602 octets ;; HEADER SECTION ;; id = 31323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20241102183344 20241030173344 55583 defense.gov. KNmpGeaL9+naaWdk65P7prmqg3vnVl8nUJBTocRZRpuO5OxUdueODOH10Nl0tMz/QTiKAHHH6wtP gcsuf3IXpX1eFqSdzC6rMGJJluK1MJ8PUltukpwXIVjo2CexEZ+yFqAjun8ctMaY9xnXjKm5qGeW nxvl1HRVmN+/jwM2Qfk= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20241102183344 20241030173344 55583 defense.gov. O6klN0WRY0Yp5LWJHaXkP5+0vYa3dUo4NQMSJJS/qnyq+mlAomi/MvuLBo6V6xy5ogewX+aSi01l 0WiB+ZRCEeVBj9L9OgPUXlBIYCYnVNyUUAxjr0Y91/0dC3h+xX8MflwDiNzmCmli+0pEgKXr59jt OEo21gEpT1hQmp1aOys= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia3.akam.net for defense.gov/SOA
	Received 602 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 602 octets ;; HEADER SECTION ;; id = 4043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20241102183344 20241030173344 55583 defense.gov. KNmpGeaL9+naaWdk65P7prmqg3vnVl8nUJBTocRZRpuO5OxUdueODOH10Nl0tMz/QTiKAHHH6wtP gcsuf3IXpX1eFqSdzC6rMGJJluK1MJ8PUltukpwXIVjo2CexEZ+yFqAjun8ctMaY9xnXjKm5qGeW nxvl1HRVmN+/jwM2Qfk= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20241102183344 20241030173344 55583 defense.gov. O6klN0WRY0Yp5LWJHaXkP5+0vYa3dUo4NQMSJJS/qnyq+mlAomi/MvuLBo6V6xy5ogewX+aSi01l 0WiB+ZRCEeVBj9L9OgPUXlBIYCYnVNyUUAxjr0Y91/0dC3h+xX8MflwDiNzmCmli+0pEgKXr59jt OEo21gEpT1hQmp1aOys= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use2.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 602 octets ;; HEADER SECTION ;; id = 20179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20241102183344 20241030173344 55583 defense.gov. KNmpGeaL9+naaWdk65P7prmqg3vnVl8nUJBTocRZRpuO5OxUdueODOH10Nl0tMz/QTiKAHHH6wtP gcsuf3IXpX1eFqSdzC6rMGJJluK1MJ8PUltukpwXIVjo2CexEZ+yFqAjun8ctMaY9xnXjKm5qGeW nxvl1HRVmN+/jwM2Qfk= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20241102183344 20241030173344 55583 defense.gov. O6klN0WRY0Yp5LWJHaXkP5+0vYa3dUo4NQMSJJS/qnyq+mlAomi/MvuLBo6V6xy5ogewX+aSi01l 0WiB+ZRCEeVBj9L9OgPUXlBIYCYnVNyUUAxjr0Y91/0dC3h+xX8MflwDiNzmCmli+0pEgKXr59jt OEo21gEpT1hQmp1aOys= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-95.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 602 octets ;; HEADER SECTION ;; id = 34926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726346 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20241102183344 20241030173344 55583 defense.gov. KNmpGeaL9+naaWdk65P7prmqg3vnVl8nUJBTocRZRpuO5OxUdueODOH10Nl0tMz/QTiKAHHH6wtP gcsuf3IXpX1eFqSdzC6rMGJJluK1MJ8PUltukpwXIVjo2CexEZ+yFqAjun8ctMaY9xnXjKm5qGeW nxvl1HRVmN+/jwM2Qfk= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20241102183344 20241030173344 55583 defense.gov. O6klN0WRY0Yp5LWJHaXkP5+0vYa3dUo4NQMSJJS/qnyq+mlAomi/MvuLBo6V6xy5ogewX+aSi01l 0WiB+ZRCEeVBj9L9OgPUXlBIYCYnVNyUUAxjr0Y91/0dC3h+xX8MflwDiNzmCmli+0pEgKXr59jt OEo21gEpT1hQmp1aOys= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 15361 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.90.84.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. n5VDYgwytscKZFjAxKRLkWbLE296SRW33B5aBJBQPwWf/YkMVJD36+QUUIvI8+cqApfY151n/keh OSR2/PvZIyTZMLH8W1H+HhUCC0VjbCHo10OAWyUFiFEsuaO4oXor+68FgJBHR2SCP77KKVhApV8E OTCCUQ6VY000gHwqw0k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.90.84.163
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. n5VDYgwytscKZFjAxKRLkWbLE296SRW33B5aBJBQPwWf/YkMVJD36+QUUIvI8+cqApfY151n/keh OSR2/PvZIyTZMLH8W1H+HhUCC0VjbCHo10OAWyUFiFEsuaO4oXor+68FgJBHR2SCP77KKVhApV8E OTCCUQ6VY000gHwqw0k= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

defense.gov

	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 43572 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.100.75.72 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. uImtxdMBIlOVQaYjwW8u6fY1DvkBIDzKVogEqXVTPwihPGcO/Tu7E/sj77uFflEuQeNr72kVbOqG ZoicW9iqHgOv+Gvks3YXoJRZmNpBwgEs7udDVGRRvSZAbZUjUx0lb20Svt54UjQ6G5NBdLP9hhgE WSIt/lNXj4ycBX9yPyk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 40959 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.100.75.72 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. uImtxdMBIlOVQaYjwW8u6fY1DvkBIDzKVogEqXVTPwihPGcO/Tu7E/sj77uFflEuQeNr72kVbOqG ZoicW9iqHgOv+Gvks3YXoJRZmNpBwgEs7udDVGRRvSZAbZUjUx0lb20Svt54UjQ6G5NBdLP9hhgE WSIt/lNXj4ycBX9yPyk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.100.75.72
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. uImtxdMBIlOVQaYjwW8u6fY1DvkBIDzKVogEqXVTPwihPGcO/Tu7E/sj77uFflEuQeNr72kVbOqG ZoicW9iqHgOv+Gvks3YXoJRZmNpBwgEs7udDVGRRvSZAbZUjUx0lb20Svt54UjQ6G5NBdLP9hhgE WSIt/lNXj4ycBX9yPyk= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

defense.gov

	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 39777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. ZmksomqnTuGPtQ70QlNQJdzj8ekPpSz02nkTi5CGH/JJO/872QFlCeO/3t4LGK/fzmXOAfgJSPph gLsHJwtiZKZrGqsxSa3qpQv8F4rGSuqbqxvGzyq+xji0kKBXjHCD+kXZGmqiWN4l4pDgbdfWxVJq +3GVLAtzDYRXgqDpuQE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-95.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 10850 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 96.16.196.234 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. ZmksomqnTuGPtQ70QlNQJdzj8ekPpSz02nkTi5CGH/JJO/872QFlCeO/3t4LGK/fzmXOAfgJSPph gLsHJwtiZKZrGqsxSa3qpQv8F4rGSuqbqxvGzyq+xji0kKBXjHCD+kXZGmqiWN4l4pDgbdfWxVJq +3GVLAtzDYRXgqDpuQE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 96.16.196.234
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. ZmksomqnTuGPtQ70QlNQJdzj8ekPpSz02nkTi5CGH/JJO/872QFlCeO/3t4LGK/fzmXOAfgJSPph gLsHJwtiZKZrGqsxSa3qpQv8F4rGSuqbqxvGzyq+xji0kKBXjHCD+kXZGmqiWN4l4pDgbdfWxVJq +3GVLAtzDYRXgqDpuQE= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

defense.gov

	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 33060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.208.52.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. FuyIbwcu+wxXx/XYiwTgDCb4Wok2nuNNLAglwnzMZtBgpk5yh5sI1DZgY9TDqSFgRfzhN1IjbsdV LSpciYGHFYgNdCRqW+oTLgu/9Z8OnHzteeGC+ySh889I1hX73thUG6DKpNCKOr4uho35CVfdR5sp H3hIudBX9XSf6X0wd7k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia3.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 26837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.208.52.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. FuyIbwcu+wxXx/XYiwTgDCb4Wok2nuNNLAglwnzMZtBgpk5yh5sI1DZgY9TDqSFgRfzhN1IjbsdV LSpciYGHFYgNdCRqW+oTLgu/9Z8OnHzteeGC+ySh889I1hX73thUG6DKpNCKOr4uho35CVfdR5sp H3hIudBX9XSf6X0wd7k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.208.52.163
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. FuyIbwcu+wxXx/XYiwTgDCb4Wok2nuNNLAglwnzMZtBgpk5yh5sI1DZgY9TDqSFgRfzhN1IjbsdV LSpciYGHFYgNdCRqW+oTLgu/9Z8OnHzteeGC+ySh889I1hX73thUG6DKpNCKOr4uho35CVfdR5sp H3hIudBX9XSf6X0wd7k= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

defense.gov

	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 23005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.12.20.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. JsehDauQzByb09IB5RmaA6LcWw7bUrMmy9dD59XeYOU6wS3npYT4BZNicJPNGDWBGPVR7wyE4Hs0 bV3A0ORVpanIl+Pz0b13y66J7gUu7nRDq5C1uuw8FVxes4hglhbXu+1wHmSTC5RmVGXkRvcrHpSq h3jeVT/owGO7W73hEVU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usc5.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 25999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.12.20.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. JsehDauQzByb09IB5RmaA6LcWw7bUrMmy9dD59XeYOU6wS3npYT4BZNicJPNGDWBGPVR7wyE4Hs0 bV3A0ORVpanIl+Pz0b13y66J7gUu7nRDq5C1uuw8FVxes4hglhbXu+1wHmSTC5RmVGXkRvcrHpSq h3jeVT/owGO7W73hEVU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.12.20.163
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. JsehDauQzByb09IB5RmaA6LcWw7bUrMmy9dD59XeYOU6wS3npYT4BZNicJPNGDWBGPVR7wyE4Hs0 bV3A0ORVpanIl+Pz0b13y66J7gUu7nRDq5C1uuw8FVxes4hglhbXu+1wHmSTC5RmVGXkRvcrHpSq h3jeVT/owGO7W73hEVU= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

defense.gov

	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 15011 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.205.132.164 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. RZGAunFeGKvQhWE+EGW3HueHZ0jFB4jiXQ5b37sL7UXLyI1EoqvX2DgopYM3k1NsEyo7N87QNuwf oGw1PFEENUypAOdMXKAbBkPCYK4pH/d10oQJv2eFSxSsHyhMz+H+7BM58ykMeqxuJmAFeRAuFNYQ 7c69RuXRcRPIGmWB09g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-116.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 31683 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.205.132.164 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. RZGAunFeGKvQhWE+EGW3HueHZ0jFB4jiXQ5b37sL7UXLyI1EoqvX2DgopYM3k1NsEyo7N87QNuwf oGw1PFEENUypAOdMXKAbBkPCYK4pH/d10oQJv2eFSxSsHyhMz+H+7BM58ykMeqxuJmAFeRAuFNYQ 7c69RuXRcRPIGmWB09g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.205.132.164
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. RZGAunFeGKvQhWE+EGW3HueHZ0jFB4jiXQ5b37sL7UXLyI1EoqvX2DgopYM3k1NsEyo7N87QNuwf oGw1PFEENUypAOdMXKAbBkPCYK4pH/d10oQJv2eFSxSsHyhMz+H+7BM58ykMeqxuJmAFeRAuFNYQ 7c69RuXRcRPIGmWB09g= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

defense.gov

	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 13759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.90.84.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. n5VDYgwytscKZFjAxKRLkWbLE296SRW33B5aBJBQPwWf/YkMVJD36+QUUIvI8+cqApfY151n/keh OSR2/PvZIyTZMLH8W1H+HhUCC0VjbCHo10OAWyUFiFEsuaO4oXor+68FgJBHR2SCP77KKVhApV8E OTCCUQ6VY000gHwqw0k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use9.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 21446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.208.52.163 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. FuyIbwcu+wxXx/XYiwTgDCb4Wok2nuNNLAglwnzMZtBgpk5yh5sI1DZgY9TDqSFgRfzhN1IjbsdV LSpciYGHFYgNdCRqW+oTLgu/9Z8OnHzteeGC+ySh889I1hX73thUG6DKpNCKOr4uho35CVfdR5sp H3hIudBX9XSf6X0wd7k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.208.52.163
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. FuyIbwcu+wxXx/XYiwTgDCb4Wok2nuNNLAglwnzMZtBgpk5yh5sI1DZgY9TDqSFgRfzhN1IjbsdV LSpciYGHFYgNdCRqW+oTLgu/9Z8OnHzteeGC+ySh889I1hX73thUG6DKpNCKOr4uho35CVfdR5sp H3hIudBX9XSf6X0wd7k= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

defense.gov

	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 56594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.176.238 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. brFhzbGAZnXcOwK5Ku5+K067mF7lY7G0M0VRhnW9av1EZnu4hZPmi5TCGibsEanyNktqxpO8TjSb P+xtpUHKPrpMyI+CSNDrBWOHlXV/N4/hSCJeYC3Hs689VWbLmi123Iaocg3lOx2szshiiwd8fXvB kUGdy5qx1mWHfvQo10Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 21412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.4.176.238 defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. brFhzbGAZnXcOwK5Ku5+K067mF7lY7G0M0VRhnW9av1EZnu4hZPmi5TCGibsEanyNktqxpO8TjSb P+xtpUHKPrpMyI+CSNDrBWOHlXV/N4/hSCJeYC3Hs689VWbLmi123Iaocg3lOx2szshiiwd8fXvB kUGdy5qx1mWHfvQo10Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.4.176.238
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20241102183344 20241030173344 55583 defense.gov. brFhzbGAZnXcOwK5Ku5+K067mF7lY7G0M0VRhnW9av1EZnu4hZPmi5TCGibsEanyNktqxpO8TjSb P+xtpUHKPrpMyI+CSNDrBWOHlXV/N4/hSCJeYC3Hs689VWbLmi123Iaocg3lOx2szshiiwd8fXvB kUGdy5qx1mWHfvQo10Q= )`
	RRSIG=55583 and DNSKEY=55583 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test defense.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: