DNSSEC Debugger - disa.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-17 18:29:26 UTC

Analyzing DNSSEC problems for disa.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 52367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to d.root-servers.net for disa.mil/A
	Received 755 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 755 octets ;; HEADER SECTION ;; id = 41162 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . Ob4xj2LfqdXMRsGFeaKWIKfo7czKney85by12FuJoxEgx5Q+2Mo9glkGIjwQMfljR+E41Kx6Yc1K 9gsI/tu6hwlywkspjG4Jf1mD+su10quADoXTb/4HVCc3kTKnE5G3uv9v/3n1xSoLrUlW4gDKaaYj PsLJA4X+Q5UjQV/zi/ACyvCqVuUBIbD/ht0ndbdtRp6rJ5nuyQFOjf+p2MYIQX4vnsPu9XppwKwS woYSchAVqqcd0qlDU+s2WpyPB/SCRPUqnD9UoPiDhx2OcC55U6y5Er7l9punxgWOy0BxeExRKfg3 zREP9g2N80kM+QghxzjqbvAHFEatddt6ieTknQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 750 octets ;; HEADER SECTION ;; id = 30702 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . Ob4xj2LfqdXMRsGFeaKWIKfo7czKney85by12FuJoxEgx5Q+2Mo9glkGIjwQMfljR+E41Kx6Yc1K 9gsI/tu6hwlywkspjG4Jf1mD+su10quADoXTb/4HVCc3kTKnE5G3uv9v/3n1xSoLrUlW4gDKaaYj PsLJA4X+Q5UjQV/zi/ACyvCqVuUBIbD/ht0ndbdtRp6rJ5nuyQFOjf+p2MYIQX4vnsPu9XppwKwS woYSchAVqqcd0qlDU+s2WpyPB/SCRPUqnD9UoPiDhx2OcC55U6y5Er7l9punxgWOy0BxeExRKfg3 zREP9g2N80kM+QghxzjqbvAHFEatddt6ieTknQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to a.root-servers.net for mil/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 33613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . Ob4xj2LfqdXMRsGFeaKWIKfo7czKney85by12FuJoxEgx5Q+2Mo9glkGIjwQMfljR+E41Kx6Yc1K 9gsI/tu6hwlywkspjG4Jf1mD+su10quADoXTb/4HVCc3kTKnE5G3uv9v/3n1xSoLrUlW4gDKaaYj PsLJA4X+Q5UjQV/zi/ACyvCqVuUBIbD/ht0ndbdtRp6rJ5nuyQFOjf+p2MYIQX4vnsPu9XppwKwS woYSchAVqqcd0qlDU+s2WpyPB/SCRPUqnD9UoPiDhx2OcC55U6y5Er7l9punxgWOy0BxeExRKfg3 zREP9g2N80kM+QghxzjqbvAHFEatddt6ieTknQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . Ob4xj2LfqdXMRsGFeaKWIKfo7czKney85by12FuJoxEgx5Q+2Mo9glkGIjwQMfljR+E41Kx6Yc1K 9gsI/tu6hwlywkspjG4Jf1mD+su10quADoXTb/4HVCc3kTKnE5G3uv9v/3n1xSoLrUlW4gDKaaYj PsLJA4X+Q5UjQV/zi/ACyvCqVuUBIbD/ht0ndbdtRp6rJ5nuyQFOjf+p2MYIQX4vnsPu9XppwKwS woYSchAVqqcd0qlDU+s2WpyPB/SCRPUqnD9UoPiDhx2OcC55U6y5Er7l9punxgWOy0BxeExRKfg3 zREP9g2N80kM+QghxzjqbvAHFEatddt6ieTknQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 1061 octets ;; HEADER SECTION ;; id = 64945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKGgOyd9pwnzlCcPNBga7Re4GsHv3y/x4uTR8vVKtKrbBRq7ITQJ5lgU1R8dYD3rpMQY6sO Q6itUxFk+MYgVAbfJ/Fi5alaYnv0jtkU+J/lPd3KRX/M7fIAmz3Cmp0IKhpQAdeXG0/j3TSA1jTS x3GlajBxLhTZ+C6dfGCELb9D ) ; keytag 22014 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb+BodjfUWUtBuYlbVkJuci7llIVNYfnDSyFUIRmoIpZW3s/yFEp3/xkGsIGnlhjbG97/ir8 yx0YSX1pxWdvYi+7gMwWsSV145Zu2x08IfC6Z6uHiNqgmanVcQ2Ms5Jy0bVyYAfBi4oCmMj1+/Qa MEszTRHTCi+yB906hhztkZO3 ) ; keytag 12574 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 22014 mil. YCFMUD5LVGHZsbxidGKGFEfVgZBamUWos0BYcq2VPP3P79GoO7QfTG8oQA1bi87wbw7vOZ5PBsrd ixg5/2MKBX72hwhcO+kpKu5Jn16hq6TuMwS0Czznfl3loulAcDlEGQMCeqNUVyNlHHKZ0JabxyLj IF4Z9zyaKIGGbjqrBQc= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 45019 mil. IfDClwC9awkmhx8beMhBGV0Rsbb92+sf2iwkowPCC84kbo9I4Ot8f4nd6Ld82+ARC+UD7ap3GLJG kseHie5ZrqaHASYksd4GHmCQu3tOeJ7Mkqrqqy7zMonx3kyW70/BhOqpJAgBbv15SwmcHYTSnKcz cb26sExHw49DscbDGgo+q7SE4yqFxD2JS2rjh//q2JCTwRIsj82ZLLfIkfJcnbtRGqqnXr55Qb2o 4xUVfia7SuG5nfxX5/I23q/W+t6qEgiFS4qlDX04AWOFt2/WF/GCXxJs652v9QInR6Rg63/si3dB rpKoTKELTEeuRxG6kqOgKgWkJ8szr6H2uigaHA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKGgOyd9pwnzlCcPNBga7Re4GsHv3y/x4uTR8vVKtKrbBRq7ITQJ5lgU1R8dYD3rpMQY6sO Q6itUxFk+MYgVAbfJ/Fi5alaYnv0jtkU+J/lPd3KRX/M7fIAmz3Cmp0IKhpQAdeXG0/j3TSA1jTS x3GlajBxLhTZ+C6dfGCELb9D ) ; keytag 22014`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb+BodjfUWUtBuYlbVkJuci7llIVNYfnDSyFUIRmoIpZW3s/yFEp3/xkGsIGnlhjbG97/ir8 yx0YSX1pxWdvYi+7gMwWsSV145Zu2x08IfC6Z6uHiNqgmanVcQ2Ms5Jy0bVyYAfBi4oCmMj1+/Qa MEszTRHTCi+yB906hhztkZO3 ) ; keytag 12574`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 22014 mil. YCFMUD5LVGHZsbxidGKGFEfVgZBamUWos0BYcq2VPP3P79GoO7QfTG8oQA1bi87wbw7vOZ5PBsrd ixg5/2MKBX72hwhcO+kpKu5Jn16hq6TuMwS0Czznfl3loulAcDlEGQMCeqNUVyNlHHKZ0JabxyLj IF4Z9zyaKIGGbjqrBQc= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 45019 mil. IfDClwC9awkmhx8beMhBGV0Rsbb92+sf2iwkowPCC84kbo9I4Ot8f4nd6Ld82+ARC+UD7ap3GLJG kseHie5ZrqaHASYksd4GHmCQu3tOeJ7Mkqrqqy7zMonx3kyW70/BhOqpJAgBbv15SwmcHYTSnKcz cb26sExHw49DscbDGgo+q7SE4yqFxD2JS2rjh//q2JCTwRIsj82ZLLfIkfJcnbtRGqqnXr55Qb2o 4xUVfia7SuG5nfxX5/I23q/W+t6qEgiFS4qlDX04AWOFt2/WF/GCXxJs652v9QInR6Rg63/si3dB rpKoTKELTEeuRxG6kqOgKgWkJ8szr6H2uigaHA== )`
	RRSIG=22014 and DNSKEY=22014 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=22014 is now in the chain-of-trust
	DNSKEY=12574 is now in the chain-of-trust
	Query to pac2.nipr.mil for disa.mil/A
	Received 467 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 467 octets ;; HEADER SECTION ;; id = 4969 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DISA.MIL. 21600 IN NS DNS1.DISA.MIL. DISA.MIL. 21600 IN NS DNS2.DISA.MIL. DISA.MIL. 21600 IN NS DNS5.DISA.MIL. DISA.MIL. 21600 IN NS DNS4.DISA.MIL. DISA.MIL. 21600 IN NS DNS3.DISA.MIL. DISA.MIL. 10800 IN DS ( 26566 8 2 58f28b648e5256fcce9137b317f039e10ae4dad503bf2f18635a661f6ab5eef4 ) DISA.MIL. 10800 IN DS 26566 8 1 776b4117853faeefa11cbfd3a1cf1ebada4de8ab DISA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. pvLTkwv5+v98KuDKzqnd9nEleGCbkCuBRf3yyAdNWNOKjODQOaU6PPzzqGL0id0Vn75fX9J9TdGc F+dlz+2LtQvZPfAIuDQWCdmsWJ2fxJQ+QCYAjTDGTIjtOOSz4f1+T3RFB7tG0mYHO4w2R1PClT4O pVnLGPZGOAexfX5D+Ns= ) ;; ADDITIONAL SECTION (6 records) DNS5.DISA.MIL. 21600 IN A 215.65.126.185 DNS4.DISA.MIL. 21600 IN A 214.23.245.6 DNS3.DISA.MIL. 21600 IN A 214.3.125.232 DNS2.DISA.MIL. 21600 IN A 131.77.60.232 DNS1.DISA.MIL. 21600 IN A 152.229.110.232 ;; { "EDNS-VERSION": 0 }
	Query to eur2.nipr.mil for disa.mil/DNSKEY
	Received 467 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 467 octets ;; HEADER SECTION ;; id = 17303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DISA.MIL. 21600 IN NS DNS4.DISA.MIL. DISA.MIL. 21600 IN NS DNS2.DISA.MIL. DISA.MIL. 21600 IN NS DNS1.DISA.MIL. DISA.MIL. 21600 IN NS DNS3.DISA.MIL. DISA.MIL. 21600 IN NS DNS5.DISA.MIL. DISA.MIL. 10800 IN DS ( 26566 8 2 58f28b648e5256fcce9137b317f039e10ae4dad503bf2f18635a661f6ab5eef4 ) DISA.MIL. 10800 IN DS 26566 8 1 776b4117853faeefa11cbfd3a1cf1ebada4de8ab DISA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. pvLTkwv5+v98KuDKzqnd9nEleGCbkCuBRf3yyAdNWNOKjODQOaU6PPzzqGL0id0Vn75fX9J9TdGc F+dlz+2LtQvZPfAIuDQWCdmsWJ2fxJQ+QCYAjTDGTIjtOOSz4f1+T3RFB7tG0mYHO4w2R1PClT4O pVnLGPZGOAexfX5D+Ns= ) ;; ADDITIONAL SECTION (6 records) DNS5.DISA.MIL. 21600 IN A 215.65.126.185 DNS4.DISA.MIL. 21600 IN A 214.23.245.6 DNS3.DISA.MIL. 21600 IN A 214.3.125.232 DNS2.DISA.MIL. 21600 IN A 131.77.60.232 DNS1.DISA.MIL. 21600 IN A 152.229.110.232 ;; { "EDNS-VERSION": 0 }
	Found child zone disa.mil

disa.mil

	Checking DS between mil and disa.mil
	Query to con2.nipr.mil for disa.mil/DS
	Received 292 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 292 octets ;; HEADER SECTION ;; id = 30639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN DS ;; ANSWER SECTION (3 records) DISA.MIL. 10800 IN DS ( 26566 8 2 58f28b648e5256fcce9137b317f039e10ae4dad503bf2f18635a661f6ab5eef4 ) DISA.MIL. 10800 IN DS 26566 8 1 776b4117853faeefa11cbfd3a1cf1ebada4de8ab DISA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. pvLTkwv5+v98KuDKzqnd9nEleGCbkCuBRf3yyAdNWNOKjODQOaU6PPzzqGL0id0Vn75fX9J9TdGc F+dlz+2LtQvZPfAIuDQWCdmsWJ2fxJQ+QCYAjTDGTIjtOOSz4f1+T3RFB7tG0mYHO4w2R1PClT4O pVnLGPZGOAexfX5D+Ns= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for disa.mil in the mil zone
	DS=26566/SHA-1 uses a deprecated digest algorithm
	DS=26566/SHA-256 has algorithm RSASHA256
	DS=26566/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DISA.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. pvLTkwv5+v98KuDKzqnd9nEleGCbkCuBRf3yyAdNWNOKjODQOaU6PPzzqGL0id0Vn75fX9J9TdGc F+dlz+2LtQvZPfAIuDQWCdmsWJ2fxJQ+QCYAjTDGTIjtOOSz4f1+T3RFB7tG0mYHO4w2R1PClT4O pVnLGPZGOAexfX5D+Ns= )`
	RRSIG=22014 and DNSKEY=22014 verifies the DS RRset
	DS=26566/SHA-256 is now in the chain-of-trust
	`DISA.MIL. 10800 IN DS ( 26566 8 2 58f28b648e5256fcce9137b317f039e10ae4dad503bf2f18635a661f6ab5eef4 )`
	`DISA.MIL. 10800 IN DS 26566 8 1 776b4117853faeefa11cbfd3a1cf1ebada4de8ab`
	Query to DNS3.DISA.MIL for disa.mil/DNSKEY
	Received 1073 bytes from 214.3.125.232
	;; Response received from [214.3.125.232] 1073 octets ;; HEADER SECTION ;; id = 46153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN DNSKEY ;; ANSWER SECTION (5 records) disa.mil. 169766 IN DNSKEY ( 256 3 8 AwEAAcCUqIJuXs8hE9kLQ1KGTp82f8berBXm7gkjpWF6cE4Z5JdojSnAN1UIwJZFgEFW01ersDoR tOpxOlFZ5JCakaBjzWEc+XUd+sjSFTcxEtD0FMhvJ0XxDZrYh73wPe2UbI/d0eII5jGr1g9C1uuu jZCadTkSnbiFEqEW/XTIdf6b ) ; keytag 56133 disa.mil. 169766 IN DNSKEY ( 257 3 8 AwEAAb4cY2CsKXjnXh3TuAhuwugGNVqk1siSHzy9bEybmKSBknrtGjqH3cvd3UcnNSRUhDW1U20p +4UecOu17g5H3BFaWO1M5Tc2vbpULBRV4fm/oX04OVuNnyvlBTL5AXCR3R03ur5bpOgsQzT9BJ1g Z0bSvnOLLK6w11fm4I8MJ46DUcWoA93ASk08fAyYIcSg2fPVsbnMh35OoQMqS/rmi2IKP+L8kFPe ONzce9wLmMgtJzy+RXmQ/rvGD1hs/4zuGNjtNs20CsawcsMruRG4CauVfYmZRLuRrs81SEi3nLpg vyvfHn+lo3AeiicgDrj1xY0Ym600+Z8upg+I2W8Bnac= ) ; keytag 26566 disa.mil. 169766 IN DNSKEY ( 256 3 8 AwEAAZUPXylG1z+sSOjV/q+1rd6CJgqT6edAtcfB3JrayYDiBxCLMboOEiDZSMnqEtV/tJhyBAmu SKazGKswf26aQBfcAX3SSUZV4fgJ4QPJZnmnh0QIa5KaRrkDcFB1DStnxZRIcexB9CFp7RJTwjm2 9u7KWNkyBU/1jofScenxstBZ ) ; keytag 44883 disa.mil. 169766 IN RRSIG ( DNSKEY 8 2 172800 20260521003002 20260517000238 26566 disa.mil. nMjuuQE9fHOgiJERdK2+FGWl+r/7LnQotR/jKpHggM9VuWN2CaoybyBk/SX2AvJV/Ewq/reCcIVR K28Vvnxbug997lG93LhFzcS+ZjplG4AiBAm5sc6yP8GwK5lCtp79bgfhnU2MYfjZcgh8JdnulNlS c9yG5Sudsj/L5c8v4q9H2O1j02mMvUsyotCZqV8/U58CCP8x9+4nQDFsAniyVn78eCV01N7jzYR4 25W30lg+gVT51IxebCEWbRD0Y2Iv3aanWTLOX9EX4awvDOmFM327wuh5HYnuLIaQlKq8jrb0OcdH Zrvm50Ag4lrVcy7SdP8qGJfRDcY4Kln/es6f1Q== ) disa.mil. 169766 IN RRSIG ( DNSKEY 8 2 172800 20260521003002 20260517000238 56133 disa.mil. pSpC77CJY025z90RyxpJ2mOLLBH2T7mOr3cwu2gw7ht3kh8Z7Dt7d/nUgJzM2mleamHQnpjTlyzD dMBRhThHAtLm8NyWfcc4ny8BpzVSCtw7ZoT1DbS3jJQGVVQLbs4rzPGyhmQmu/822+ZRvmPlN93x s5B7LAcLc34SpaNZmX0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for disa.mil
	`disa.mil. 169766 IN DNSKEY ( 256 3 8 AwEAAcCUqIJuXs8hE9kLQ1KGTp82f8berBXm7gkjpWF6cE4Z5JdojSnAN1UIwJZFgEFW01ersDoR tOpxOlFZ5JCakaBjzWEc+XUd+sjSFTcxEtD0FMhvJ0XxDZrYh73wPe2UbI/d0eII5jGr1g9C1uuu jZCadTkSnbiFEqEW/XTIdf6b ) ; keytag 56133`
	`disa.mil. 169766 IN DNSKEY ( 257 3 8 AwEAAb4cY2CsKXjnXh3TuAhuwugGNVqk1siSHzy9bEybmKSBknrtGjqH3cvd3UcnNSRUhDW1U20p +4UecOu17g5H3BFaWO1M5Tc2vbpULBRV4fm/oX04OVuNnyvlBTL5AXCR3R03ur5bpOgsQzT9BJ1g Z0bSvnOLLK6w11fm4I8MJ46DUcWoA93ASk08fAyYIcSg2fPVsbnMh35OoQMqS/rmi2IKP+L8kFPe ONzce9wLmMgtJzy+RXmQ/rvGD1hs/4zuGNjtNs20CsawcsMruRG4CauVfYmZRLuRrs81SEi3nLpg vyvfHn+lo3AeiicgDrj1xY0Ym600+Z8upg+I2W8Bnac= ) ; keytag 26566`
	`disa.mil. 169766 IN DNSKEY ( 256 3 8 AwEAAZUPXylG1z+sSOjV/q+1rd6CJgqT6edAtcfB3JrayYDiBxCLMboOEiDZSMnqEtV/tJhyBAmu SKazGKswf26aQBfcAX3SSUZV4fgJ4QPJZnmnh0QIa5KaRrkDcFB1DStnxZRIcexB9CFp7RJTwjm2 9u7KWNkyBU/1jofScenxstBZ ) ; keytag 44883`
	DNSKEY=26566/SEP is now in the chain-of-trust
	DS=26566/SHA-256 verifies DNSKEY=26566/SEP
	DS=26566/SHA-1 verifies DNSKEY=26566/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`disa.mil. 169766 IN RRSIG ( DNSKEY 8 2 172800 20260521003002 20260517000238 26566 disa.mil. nMjuuQE9fHOgiJERdK2+FGWl+r/7LnQotR/jKpHggM9VuWN2CaoybyBk/SX2AvJV/Ewq/reCcIVR K28Vvnxbug997lG93LhFzcS+ZjplG4AiBAm5sc6yP8GwK5lCtp79bgfhnU2MYfjZcgh8JdnulNlS c9yG5Sudsj/L5c8v4q9H2O1j02mMvUsyotCZqV8/U58CCP8x9+4nQDFsAniyVn78eCV01N7jzYR4 25W30lg+gVT51IxebCEWbRD0Y2Iv3aanWTLOX9EX4awvDOmFM327wuh5HYnuLIaQlKq8jrb0OcdH Zrvm50Ag4lrVcy7SdP8qGJfRDcY4Kln/es6f1Q== )`
	`disa.mil. 169766 IN RRSIG ( DNSKEY 8 2 172800 20260521003002 20260517000238 56133 disa.mil. pSpC77CJY025z90RyxpJ2mOLLBH2T7mOr3cwu2gw7ht3kh8Z7Dt7d/nUgJzM2mleamHQnpjTlyzD dMBRhThHAtLm8NyWfcc4ny8BpzVSCtw7ZoT1DbS3jJQGVVQLbs4rzPGyhmQmu/822+ZRvmPlN93x s5B7LAcLc34SpaNZmX0= )`
	RRSIG=26566 and DNSKEY=26566/SEP verifies the DNSKEY RRset
	RRSIG=56133 and DNSKEY=56133 verifies the DNSKEY RRset
	DNSKEY=56133 is now in the chain-of-trust
	DNSKEY=44883 is now in the chain-of-trust
	Query to DNS4.DISA.MIL for disa.mil/A
	Received 221 bytes from 214.23.245.6
	;; Response received from [214.23.245.6] 221 octets ;; HEADER SECTION ;; id = 37739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN A ;; ANSWER SECTION (2 records) disa.mil. 5576 IN A 156.112.108.76 disa.mil. 5576 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.DISA.MIL is authoritative for disa.mil
	Found RRSIG signed by disa.mil zone
	Query to DNS2.DISA.MIL for disa.mil/SOA
	Received 282 bytes from 131.77.60.232
	;; Response received from [131.77.60.232] 282 octets ;; HEADER SECTION ;; id = 41144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN SOA ;; ANSWER SECTION (2 records) disa.mil. 7200 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2027835316 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) disa.mil. 7200 IN RRSIG ( SOA 8 2 7200 20260521143640 20260517133640 56133 disa.mil. sAnQqI777ew7sOjBByhiKUcN7/XCHgA4hwnNKaFHHHechqd4K8HhDeYyVygBQWSr7byc5FyM63cE GSHtabBW/r1Qrvw6cTCxlTO9rsZ7T+0D7PefEXAsI8Xp/XBvmiX62Uj1kzaNzfN9lSwNvwxnTrIa pcA1UhkVwbMgbvzQ3yI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.DISA.MIL for disa.mil/SOA
	Received 282 bytes from 215.65.126.185
	;; Response received from [215.65.126.185] 282 octets ;; HEADER SECTION ;; id = 42453 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN SOA ;; ANSWER SECTION (2 records) disa.mil. 6665 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2027835316 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) disa.mil. 6665 IN RRSIG ( SOA 8 2 7200 20260521143640 20260517133640 56133 disa.mil. sAnQqI777ew7sOjBByhiKUcN7/XCHgA4hwnNKaFHHHechqd4K8HhDeYyVygBQWSr7byc5FyM63cE GSHtabBW/r1Qrvw6cTCxlTO9rsZ7T+0D7PefEXAsI8Xp/XBvmiX62Uj1kzaNzfN9lSwNvwxnTrIa pcA1UhkVwbMgbvzQ3yI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.DISA.MIL for disa.mil/SOA
	Received 282 bytes from 214.3.125.232
	;; Response received from [214.3.125.232] 282 octets ;; HEADER SECTION ;; id = 19996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN SOA ;; ANSWER SECTION (2 records) disa.mil. 6665 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2027835316 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) disa.mil. 6665 IN RRSIG ( SOA 8 2 7200 20260521143640 20260517133640 56133 disa.mil. sAnQqI777ew7sOjBByhiKUcN7/XCHgA4hwnNKaFHHHechqd4K8HhDeYyVygBQWSr7byc5FyM63cE GSHtabBW/r1Qrvw6cTCxlTO9rsZ7T+0D7PefEXAsI8Xp/XBvmiX62Uj1kzaNzfN9lSwNvwxnTrIa pcA1UhkVwbMgbvzQ3yI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.DISA.MIL for disa.mil/SOA
	Received 282 bytes from 152.229.110.232
	;; Response received from [152.229.110.232] 282 octets ;; HEADER SECTION ;; id = 52158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN SOA ;; ANSWER SECTION (2 records) disa.mil. 2982 IN SOA ( dns1.disa.mil. disa\.tinker\.ie\.list\.dci-ii-dns.mail.mil. 2027835316 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) disa.mil. 2982 IN RRSIG ( SOA 8 2 7200 20260521143640 20260517133640 56133 disa.mil. sAnQqI777ew7sOjBByhiKUcN7/XCHgA4hwnNKaFHHHechqd4K8HhDeYyVygBQWSr7byc5FyM63cE GSHtabBW/r1Qrvw6cTCxlTO9rsZ7T+0D7PefEXAsI8Xp/XBvmiX62Uj1kzaNzfN9lSwNvwxnTrIa pcA1UhkVwbMgbvzQ3yI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.DISA.MIL for disa.mil/A
	disa.mil A RR has value 156.112.108.76
	Found 1 RRSIGs over A RRset
	`disa.mil. 5576 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= )`
	RRSIG=56133 and DNSKEY=56133 verifies the A RRset

disa.mil

	Query to DNS5.DISA.MIL for disa.mil/A
	Received 221 bytes from 215.65.126.185
	;; Response received from [215.65.126.185] 221 octets ;; HEADER SECTION ;; id = 34718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN A ;; ANSWER SECTION (2 records) disa.mil. 4166 IN A 156.112.108.76 disa.mil. 4166 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.DISA.MIL is authoritative for disa.mil
	Found RRSIG signed by disa.mil zone
	Query to DNS5.DISA.MIL for disa.mil/A
	disa.mil A RR has value 156.112.108.76
	Found 1 RRSIGs over A RRset
	`disa.mil. 4166 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= )`
	RRSIG=56133 and DNSKEY=56133 verifies the A RRset

disa.mil

	Query to DNS1.DISA.MIL for disa.mil/A
	Received 221 bytes from 152.229.110.232
	;; Response received from [152.229.110.232] 221 octets ;; HEADER SECTION ;; id = 33468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN A ;; ANSWER SECTION (2 records) disa.mil. 5576 IN A 156.112.108.76 disa.mil. 5576 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.DISA.MIL is authoritative for disa.mil
	Found RRSIG signed by disa.mil zone
	Query to DNS1.DISA.MIL for disa.mil/A
	disa.mil A RR has value 156.112.108.76
	Found 1 RRSIGs over A RRset
	`disa.mil. 5576 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= )`
	RRSIG=56133 and DNSKEY=56133 verifies the A RRset

disa.mil

	Query to DNS3.DISA.MIL for disa.mil/A
	Received 221 bytes from 214.3.125.232
	;; Response received from [214.3.125.232] 221 octets ;; HEADER SECTION ;; id = 26910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN A ;; ANSWER SECTION (2 records) disa.mil. 4166 IN A 156.112.108.76 disa.mil. 4166 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.DISA.MIL is authoritative for disa.mil
	Found RRSIG signed by disa.mil zone
	Query to DNS3.DISA.MIL for disa.mil/A
	disa.mil A RR has value 156.112.108.76
	Found 1 RRSIGs over A RRset
	`disa.mil. 4166 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= )`
	RRSIG=56133 and DNSKEY=56133 verifies the A RRset

disa.mil

	Query to DNS2.DISA.MIL for disa.mil/A
	Received 221 bytes from 131.77.60.232
	;; Response received from [131.77.60.232] 221 octets ;; HEADER SECTION ;; id = 28234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; disa.mil. IN A ;; ANSWER SECTION (2 records) disa.mil. 449 IN A 156.112.108.76 disa.mil. 449 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.DISA.MIL is authoritative for disa.mil
	Found RRSIG signed by disa.mil zone
	Query to DNS2.DISA.MIL for disa.mil/A
	disa.mil A RR has value 156.112.108.76
	Found 1 RRSIGs over A RRset
	`disa.mil. 449 IN RRSIG ( A 8 2 7200 20260521081246 20260517074546 56133 disa.mil. nuY1p5x3+Ysin2eG3hOPzdSnEaPgX/iX/g4pGBho1r1IgdpM1ZoF3BqfZIyFFRoWR8htK8gJRUK5 29UCq1kxwamYXdu+2/HbK0TmxxkMlbC4ig+6VR+MqBUBxC0m+dWF6utiE8e8nVT+cnOeYmtSqNpH POzms2rtcLz4meTpIJQ= )`
	RRSIG=56133 and DNSKEY=56133 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test disa.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: