DNSSEC Analyzer - dodig.mil

Domain Name:

Time: 2023-09-24 16:06:25 UTC, NTP stratum 4

Analyzing DNSSEC problems for dodig.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 19390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to k.root-servers.net for dodig.mil/A
	Received 804 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (804 octets) ;; HEADER SECTION ;; id = 8974 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for mil/DNSKEY
	Received 798 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (798 octets) ;; HEADER SECTION ;; id = 48130 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to b.root-servers.net for mil/DS
	Received 415 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (415 octets) ;; HEADER SECTION ;; id = 47268 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (1628 octets) ;; HEADER SECTION ;; id = 17943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=44065 is now in the chain-of-trust
	DNSKEY=14098 is now in the chain-of-trust
	Query to pac2.nipr.mil for dodig.mil/A
	Received 435 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (435 octets) ;; HEADER SECTION ;; id = 2344 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DODIG.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. DODIG.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. DODIG.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. DODIG.MIL. 10800 IN DS ( 41116 8 2 42113a09f5bb754d22b50a2f3b65ab57372258eae853cb62187ee8707046fd87 ) DODIG.MIL. 10800 IN DS 41116 8 1 94eb06e6b126e2f7fdc0e0ce7b50b8764820f915 DODIG.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hVLMDyvl3klkd4h73C1TRyurGOOOMUDZPlejHfN5U6TVBh03UGci+EybVricf44ObSj0zL7iOczU huxPOy7yINmmTrUiRF6T6Ij7v7O2qrD21fdiXVWNAm7GdknnCPNpb3NZJSz0ZhwItleXxsHFMrD3 NjYqcfScI5LfSsDqOPY= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to con1.nipr.mil for dodig.mil/DNSKEY
	Received 435 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (435 octets) ;; HEADER SECTION ;; id = 755 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DODIG.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. DODIG.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. DODIG.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. DODIG.MIL. 10800 IN DS ( 41116 8 2 42113a09f5bb754d22b50a2f3b65ab57372258eae853cb62187ee8707046fd87 ) DODIG.MIL. 10800 IN DS 41116 8 1 94eb06e6b126e2f7fdc0e0ce7b50b8764820f915 DODIG.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hVLMDyvl3klkd4h73C1TRyurGOOOMUDZPlejHfN5U6TVBh03UGci+EybVricf44ObSj0zL7iOczU huxPOy7yINmmTrUiRF6T6Ij7v7O2qrD21fdiXVWNAm7GdknnCPNpb3NZJSz0ZhwItleXxsHFMrD3 NjYqcfScI5LfSsDqOPY= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dodig.mil

dodig.mil

	Checking DS between mil and dodig.mil
	Query to eur1.nipr.mil for dodig.mil/DS
	Received 294 bytes from 199.252.154.234
	;; Response received from 199.252.154.234 (294 octets) ;; HEADER SECTION ;; id = 38714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN DS ;; ANSWER SECTION (3 records) DODIG.MIL. 10800 IN DS 41116 8 1 94eb06e6b126e2f7fdc0e0ce7b50b8764820f915 DODIG.MIL. 10800 IN DS ( 41116 8 2 42113a09f5bb754d22b50a2f3b65ab57372258eae853cb62187ee8707046fd87 ) DODIG.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hVLMDyvl3klkd4h73C1TRyurGOOOMUDZPlejHfN5U6TVBh03UGci+EybVricf44ObSj0zL7iOczU huxPOy7yINmmTrUiRF6T6Ij7v7O2qrD21fdiXVWNAm7GdknnCPNpb3NZJSz0ZhwItleXxsHFMrD3 NjYqcfScI5LfSsDqOPY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for dodig.mil in the mil zone
	DS=41116/SHA-1 has algorithm RSASHA256
	DS=41116/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DODIG.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. hVLMDyvl3klkd4h73C1TRyurGOOOMUDZPlejHfN5U6TVBh03UGci+EybVricf44ObSj0zL7iOczU huxPOy7yINmmTrUiRF6T6Ij7v7O2qrD21fdiXVWNAm7GdknnCPNpb3NZJSz0ZhwItleXxsHFMrD3 NjYqcfScI5LfSsDqOPY= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=41116/SHA-1 is now in the chain-of-trust
	`DODIG.MIL. 10800 IN DS 41116 8 1 94eb06e6b126e2f7fdc0e0ce7b50b8764820f915`
	`DODIG.MIL. 10800 IN DS ( 41116 8 2 42113a09f5bb754d22b50a2f3b65ab57372258eae853cb62187ee8707046fd87 )`
	Query to DNS-PUB-F2-U.PENTAGON.MIL for dodig.mil/DNSKEY
	Received 1818 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (1818 octets) ;; HEADER SECTION ;; id = 38056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN DNSKEY ;; ANSWER SECTION (8 records) dodig.mil. 573627 IN DNSKEY ( 257 3 8 AwEAAcbJQTCsMaIOs/VEw1MGvTNFpZ98YkqiR/mbJXQ3VuImizKWiTO9Ub4JYU2jDuXN0yzs1iMr 9c3WqnSaXOF1iNi+MpQQgGzbAHBYm10qeqP1an5aqcvNo63Z67Z2zd8KCooRw0SHs3a1DIpr7AJA KhiMDuToQpuwon5AnKwgmq/LpqsgjOuQ/nXURRcqyqT4mQ2OKEj5rTPsCeRQwqPC8xZTOr1yLXcB RPvQvTHjXI33ny2xbxKZJC8idQcHZ3PH0nO6LUGZXJjJy8GKwngNYE+BvG+FvhCDXdChXBB8zHXm H7xNDfCVlpqkPvTb3HwGiGcNs5rpt+uZW8Ut/GsqhHk= ) ; Key ID = 41116 dodig.mil. 573627 IN DNSKEY ( 256 3 8 AwEAAeZ0pLjo0Yde5nOetsWbyg6YbCPIkVV//wGhXd78T9eokKuERVnjUvH1n6nQZmixDWQRsI7T 6z6diq6PP8bEvm7hwICUO2WgSWvGrb/KHc92QGHrlygsSrwWF+OFWY6RVNHCyE6hjVZLAQ5V/grl JlJQFH+10nYk49MVWmZYkDv3 ) ; Key ID = 28428 dodig.mil. 573627 IN DNSKEY ( 256 3 8 AwEAAb3kqhq2faCWvlUdH3wUqYrSIJlXILi+Ly6znaVCORVh/fIzBu1IngS6QMuyMR4WJn9avoB5 ILqaeRfxzDBLiEfxayvUCipxv+liHjtxBWIW3nwipYd929QWKUcjbnsRCHKWf+iEGziPWKh6tvfT tUt0ezwmazn3/dUq+ZYaxlT5 ) ; Key ID = 35643 dodig.mil. 573627 IN DNSKEY ( 257 3 8 AwEAAcGJZZy+YxiDPuxKMC/i+aqUSayMOOGjp8pVtdktImLIQ9fVvBzusDghq/FjeYOhOdabFkly 07SkVSmHQmxdihDGdsvEo03aBKZcALi42bCdT4m9N1amCRArqzQap6+v4BxZQQp18OLyLjd4byrt nknpGbSiY20lFErvZ/3KflkH3708ZS9TqnxnbHNjYhX/iWIL2r6xFNNxfK2uSEVnKloyLhfiy4od bDtQsQCYTPZ/f9fMRV2Vq1InbRws3N068YQG9Jux6x3RwcCGqKyGeLGbJW1xvpJWMhXb2fNoU6v4 5/qPhRwQYgbUACUw6QPZtFltpV7UU7BT4ZFDC+wpCaU= ) ; Key ID = 23434 dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 23434 dodig.mil. WKQl8te7zpXD3bppkpjC98Q4KCip2SLhmWGcu2KukqF2eo55gRiEEqpzcNRTTLJdTgzHhLAyjqIF tCd2235wEPNU3GB7KMSEBQXUyu0fMEbyJ1g979IaHLcLlrrAMudRlHBWgW9bEVd0W6/zCdGNxwDh BkKCtMkbEKGQH1o55QbspU6ClhhgYtdIYD+CsfsYR04iEpegBNC9z29L5FnXejmdFuC5Ru6Yt1x4 mxPLECaICGfZZOuHmgdap6+NFC8ARgx0B9FF3sicek2VszGLO6sy1LaAVnhhBxsrfv9fdiN3xDL7 NJ4QimF9qq8DKkFjS25MgEM0iD1FZWRfKMaP5w== ) dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 28428 dodig.mil. TO6imHcavSduwrKmgG/VWnldnWfiuUIZji9SfukZtb8LaeC2OFU9d/kNtlgAhfBvnUe3Icuq7c5a s2Gk3k5lgZcbUYEXkWTUoM9JJt28Cn6H226FTjH6zOKNUaSh50iMdmcbiXnEdBgw89kA0uI6842J xLjnOmhK7G0HXL/8O2E= ) dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 35643 dodig.mil. j54u0UuIIiAIve+grUjJoC/2EqazoEwu06Ht4EA1EPmNaICinw6598rG2Du2R/Em2t80iJrRbI+0 8BD4TONpWSEz2JCmaPpN4KylX/KsngqHIu8ONW8jvJnpOQyrHmk98EWuapenp5dUC+DCuutSLR2I 4rcqwygyiaMreIjUNjk= ) dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 41116 dodig.mil. xQZYnhXjFpYqcsgVbmsMGQKvEBbt3UYcEPZ19V12fo3mobH+smO6LHhi2Hjpwbi7GswZ/FnCTalr bdfWJe4obwHl0FOCJKpelFR+gBumyalZWhcaD3o2vA73KQEGd7uvCo5w0UOlntUKXNUkDF53pcLp XTKb5Oy+msvMD3AYMK1Xh2+Rai7AwzrskIitzFAfzvReTgpBSorZFjzHsTXX7pRAniGn/iSn1d8P gveF1tNAwFlSWZAvJ4+V11A0OSlKE8M89VbXYTD/+hzQ03YdXP3/3mNNf0k5Itr8xV+q21mACMZd cY3zj1/xaAKqwkUTfyGSf31ExlZuOtml96xIBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for dodig.mil
	`dodig.mil. 573627 IN DNSKEY ( 257 3 8 AwEAAcbJQTCsMaIOs/VEw1MGvTNFpZ98YkqiR/mbJXQ3VuImizKWiTO9Ub4JYU2jDuXN0yzs1iMr 9c3WqnSaXOF1iNi+MpQQgGzbAHBYm10qeqP1an5aqcvNo63Z67Z2zd8KCooRw0SHs3a1DIpr7AJA KhiMDuToQpuwon5AnKwgmq/LpqsgjOuQ/nXURRcqyqT4mQ2OKEj5rTPsCeRQwqPC8xZTOr1yLXcB RPvQvTHjXI33ny2xbxKZJC8idQcHZ3PH0nO6LUGZXJjJy8GKwngNYE+BvG+FvhCDXdChXBB8zHXm H7xNDfCVlpqkPvTb3HwGiGcNs5rpt+uZW8Ut/GsqhHk= ) ; Key ID = 41116`
	`dodig.mil. 573627 IN DNSKEY ( 256 3 8 AwEAAeZ0pLjo0Yde5nOetsWbyg6YbCPIkVV//wGhXd78T9eokKuERVnjUvH1n6nQZmixDWQRsI7T 6z6diq6PP8bEvm7hwICUO2WgSWvGrb/KHc92QGHrlygsSrwWF+OFWY6RVNHCyE6hjVZLAQ5V/grl JlJQFH+10nYk49MVWmZYkDv3 ) ; Key ID = 28428`
	`dodig.mil. 573627 IN DNSKEY ( 256 3 8 AwEAAb3kqhq2faCWvlUdH3wUqYrSIJlXILi+Ly6znaVCORVh/fIzBu1IngS6QMuyMR4WJn9avoB5 ILqaeRfxzDBLiEfxayvUCipxv+liHjtxBWIW3nwipYd929QWKUcjbnsRCHKWf+iEGziPWKh6tvfT tUt0ezwmazn3/dUq+ZYaxlT5 ) ; Key ID = 35643`
	`dodig.mil. 573627 IN DNSKEY ( 257 3 8 AwEAAcGJZZy+YxiDPuxKMC/i+aqUSayMOOGjp8pVtdktImLIQ9fVvBzusDghq/FjeYOhOdabFkly 07SkVSmHQmxdihDGdsvEo03aBKZcALi42bCdT4m9N1amCRArqzQap6+v4BxZQQp18OLyLjd4byrt nknpGbSiY20lFErvZ/3KflkH3708ZS9TqnxnbHNjYhX/iWIL2r6xFNNxfK2uSEVnKloyLhfiy4od bDtQsQCYTPZ/f9fMRV2Vq1InbRws3N068YQG9Jux6x3RwcCGqKyGeLGbJW1xvpJWMhXb2fNoU6v4 5/qPhRwQYgbUACUw6QPZtFltpV7UU7BT4ZFDC+wpCaU= ) ; Key ID = 23434`
	DNSKEY=41116/SEP is now in the chain-of-trust
	DS=41116/SHA-1 verifies DNSKEY=41116/SEP
	DS=41116/SHA-256 verifies DNSKEY=41116/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 23434 dodig.mil. WKQl8te7zpXD3bppkpjC98Q4KCip2SLhmWGcu2KukqF2eo55gRiEEqpzcNRTTLJdTgzHhLAyjqIF tCd2235wEPNU3GB7KMSEBQXUyu0fMEbyJ1g979IaHLcLlrrAMudRlHBWgW9bEVd0W6/zCdGNxwDh BkKCtMkbEKGQH1o55QbspU6ClhhgYtdIYD+CsfsYR04iEpegBNC9z29L5FnXejmdFuC5Ru6Yt1x4 mxPLECaICGfZZOuHmgdap6+NFC8ARgx0B9FF3sicek2VszGLO6sy1LaAVnhhBxsrfv9fdiN3xDL7 NJ4QimF9qq8DKkFjS25MgEM0iD1FZWRfKMaP5w== )`
	`dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 28428 dodig.mil. TO6imHcavSduwrKmgG/VWnldnWfiuUIZji9SfukZtb8LaeC2OFU9d/kNtlgAhfBvnUe3Icuq7c5a s2Gk3k5lgZcbUYEXkWTUoM9JJt28Cn6H226FTjH6zOKNUaSh50iMdmcbiXnEdBgw89kA0uI6842J xLjnOmhK7G0HXL/8O2E= )`
	`dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 35643 dodig.mil. j54u0UuIIiAIve+grUjJoC/2EqazoEwu06Ht4EA1EPmNaICinw6598rG2Du2R/Em2t80iJrRbI+0 8BD4TONpWSEz2JCmaPpN4KylX/KsngqHIu8ONW8jvJnpOQyrHmk98EWuapenp5dUC+DCuutSLR2I 4rcqwygyiaMreIjUNjk= )`
	`dodig.mil. 573627 IN RRSIG ( DNSKEY 8 2 1296000 20231016080450 20230916073322 41116 dodig.mil. xQZYnhXjFpYqcsgVbmsMGQKvEBbt3UYcEPZ19V12fo3mobH+smO6LHhi2Hjpwbi7GswZ/FnCTalr bdfWJe4obwHl0FOCJKpelFR+gBumyalZWhcaD3o2vA73KQEGd7uvCo5w0UOlntUKXNUkDF53pcLp XTKb5Oy+msvMD3AYMK1Xh2+Rai7AwzrskIitzFAfzvReTgpBSorZFjzHsTXX7pRAniGn/iSn1d8P gveF1tNAwFlSWZAvJ4+V11A0OSlKE8M89VbXYTD/+hzQ03YdXP3/3mNNf0k5Itr8xV+q21mACMZd cY3zj1/xaAKqwkUTfyGSf31ExlZuOtml96xIBg== )`
	RRSIG=23434 and DNSKEY=23434/SEP verifies the DNSKEY RRset
	RRSIG=28428 and DNSKEY=28428 verifies the DNSKEY RRset
	RRSIG=35643 and DNSKEY=35643 verifies the DNSKEY RRset
	RRSIG=41116 and DNSKEY=41116/SEP verifies the DNSKEY RRset
	DNSKEY=28428 is now in the chain-of-trust
	DNSKEY=35643 is now in the chain-of-trust
	DNSKEY=23434/SEP is now in the chain-of-trust
	Query to DNS-PUB-F1-U.PENTAGON.MIL for dodig.mil/A
	Received 866 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (866 octets) ;; HEADER SECTION ;; id = 39295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dodig.mil. 300 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009029082 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dodig.mil. 300 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 28428 dodig.mil. Rrwcd5hsxpXZ8CDnaVX8/J/tLPFU8lV8GyyE8w1upiG6OJhkLNi3UPimLcRziSZJZMPUbWYok8rY gX1Qxhtv2VNomNJOejISBkUIT/lLB9Hdjmd+JTf7DG/35n6K4x25FGoT+68z36esYKBstcsbW7qJ HoGhdQXnm9/qdfVKdOM= ) dodig.mil. 300 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 35643 dodig.mil. rp0GDZkKUDVzCjLo2hbBrPPRRtZL9kvLAAHsby96+0v2PygT3j/WiScfogK1UYS9xGRXc0o7xeHs j+HL1bFWayzMZNFTUs+xt+CWot/mjVDaPD+cnmpgvIfvUudiebKorpnsBRI7GVfezoKMiQ9O+5+R OdI+eGyEnARCdKK01Ns= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 300 IN NSEC3 ( 1 0 10 828fbd3f5a t2bu831j1ve707td83if22jiqbd64djt NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 300 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 28428 dodig.mil. uCClO2TbImN9Qv6mcPN9aRkZLMUnLYZxvvmKyCpSEC9hQq1hnj8yXZbO7UxJYaE48m4n6TBY6PA/ J3FgN3hlFdyETQY2dAruL/PFFdS52d8DfcZUKaiLx+IPPxr+bB4I085U+5heJC5/zLZ0KS2+L6oB VcSkXv4yxUXxAhLhkmQ= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 300 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 35643 dodig.mil. nvJZT4c4MsznRCKoNJ3y/l6YBznJnYMFWgorVkbA67mGiiyIQ9resnTuIMHEdJHmwpFJdlsODqSJ eMItM5UXLNT+QGksb7W/5XGQuYrmurQcO76DuiF1U/E8IAyt9AX1A2OEydfPhmy9ybphbt4x/Hvq Pe9kLXK3SrbvDd4L4TI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F1-U.PENTAGON.MIL is authoritative for dodig.mil
	Found RRSIG signed by dodig.mil zone
	Query to DNS-PUB-F3-U.PENTAGON.MIL for dodig.mil/SOA
	Received 443 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (443 octets) ;; HEADER SECTION ;; id = 33690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN SOA ;; ANSWER SECTION (3 records) dodig.mil. 100 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009029082 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dodig.mil. 100 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 28428 dodig.mil. Rrwcd5hsxpXZ8CDnaVX8/J/tLPFU8lV8GyyE8w1upiG6OJhkLNi3UPimLcRziSZJZMPUbWYok8rY gX1Qxhtv2VNomNJOejISBkUIT/lLB9Hdjmd+JTf7DG/35n6K4x25FGoT+68z36esYKBstcsbW7qJ HoGhdQXnm9/qdfVKdOM= ) dodig.mil. 100 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 35643 dodig.mil. rp0GDZkKUDVzCjLo2hbBrPPRRtZL9kvLAAHsby96+0v2PygT3j/WiScfogK1UYS9xGRXc0o7xeHs j+HL1bFWayzMZNFTUs+xt+CWot/mjVDaPD+cnmpgvIfvUudiebKorpnsBRI7GVfezoKMiQ9O+5+R OdI+eGyEnARCdKK01Ns= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS-PUB-F2-U.PENTAGON.MIL for dodig.mil/SOA
	Timeout querying DNS-PUB-F2-U.PENTAGON.MIL/214.14.133.11 for dodig.mil/SOA
	All Queries to DNS-PUB-F2-U.PENTAGON.MIL for dodig.mil/SOA timed out or failed
	Query to DNS-PUB-F1-U.PENTAGON.MIL for dodig.mil/A
	Received 866 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (866 octets) ;; HEADER SECTION ;; id = 26122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dodig.mil. 297 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009029082 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 28428 dodig.mil. Rrwcd5hsxpXZ8CDnaVX8/J/tLPFU8lV8GyyE8w1upiG6OJhkLNi3UPimLcRziSZJZMPUbWYok8rY gX1Qxhtv2VNomNJOejISBkUIT/lLB9Hdjmd+JTf7DG/35n6K4x25FGoT+68z36esYKBstcsbW7qJ HoGhdQXnm9/qdfVKdOM= ) dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 35643 dodig.mil. rp0GDZkKUDVzCjLo2hbBrPPRRtZL9kvLAAHsby96+0v2PygT3j/WiScfogK1UYS9xGRXc0o7xeHs j+HL1bFWayzMZNFTUs+xt+CWot/mjVDaPD+cnmpgvIfvUudiebKorpnsBRI7GVfezoKMiQ9O+5+R OdI+eGyEnARCdKK01Ns= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN NSEC3 ( 1 0 10 828fbd3f5a t2bu831j1ve707td83if22jiqbd64djt NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 28428 dodig.mil. uCClO2TbImN9Qv6mcPN9aRkZLMUnLYZxvvmKyCpSEC9hQq1hnj8yXZbO7UxJYaE48m4n6TBY6PA/ J3FgN3hlFdyETQY2dAruL/PFFdS52d8DfcZUKaiLx+IPPxr+bB4I085U+5heJC5/zLZ0KS2+L6oB VcSkXv4yxUXxAhLhkmQ= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 35643 dodig.mil. nvJZT4c4MsznRCKoNJ3y/l6YBznJnYMFWgorVkbA67mGiiyIQ9resnTuIMHEdJHmwpFJdlsODqSJ eMItM5UXLNT+QGksb7W/5XGQuYrmurQcO76DuiF1U/E8IAyt9AX1A2OEydfPhmy9ybphbt4x/Hvq Pe9kLXK3SrbvDd4L4TI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`dodig.mil. 300 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 28428 dodig.mil. Rrwcd5hsxpXZ8CDnaVX8/J/tLPFU8lV8GyyE8w1upiG6OJhkLNi3UPimLcRziSZJZMPUbWYok8rY gX1Qxhtv2VNomNJOejISBkUIT/lLB9Hdjmd+JTf7DG/35n6K4x25FGoT+68z36esYKBstcsbW7qJ HoGhdQXnm9/qdfVKdOM= )`
	`dodig.mil. 300 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 35643 dodig.mil. rp0GDZkKUDVzCjLo2hbBrPPRRtZL9kvLAAHsby96+0v2PygT3j/WiScfogK1UYS9xGRXc0o7xeHs j+HL1bFWayzMZNFTUs+xt+CWot/mjVDaPD+cnmpgvIfvUudiebKorpnsBRI7GVfezoKMiQ9O+5+R OdI+eGyEnARCdKK01Ns= )`
	RRSIG=28428 and DNSKEY=28428 verifies the SOA RRset
	RRSIG=35643 and DNSKEY=35643 verifies the SOA RRset

dodig.mil

	Query to DNS-PUB-F3-U.PENTAGON.MIL for dodig.mil/A
	Received 866 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (866 octets) ;; HEADER SECTION ;; id = 60938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dodig.mil. 297 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009029082 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 28428 dodig.mil. Rrwcd5hsxpXZ8CDnaVX8/J/tLPFU8lV8GyyE8w1upiG6OJhkLNi3UPimLcRziSZJZMPUbWYok8rY gX1Qxhtv2VNomNJOejISBkUIT/lLB9Hdjmd+JTf7DG/35n6K4x25FGoT+68z36esYKBstcsbW7qJ HoGhdQXnm9/qdfVKdOM= ) dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 35643 dodig.mil. rp0GDZkKUDVzCjLo2hbBrPPRRtZL9kvLAAHsby96+0v2PygT3j/WiScfogK1UYS9xGRXc0o7xeHs j+HL1bFWayzMZNFTUs+xt+CWot/mjVDaPD+cnmpgvIfvUudiebKorpnsBRI7GVfezoKMiQ9O+5+R OdI+eGyEnARCdKK01Ns= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN NSEC3 ( 1 0 10 828fbd3f5a t2bu831j1ve707td83if22jiqbd64djt NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 28428 dodig.mil. uCClO2TbImN9Qv6mcPN9aRkZLMUnLYZxvvmKyCpSEC9hQq1hnj8yXZbO7UxJYaE48m4n6TBY6PA/ J3FgN3hlFdyETQY2dAruL/PFFdS52d8DfcZUKaiLx+IPPxr+bB4I085U+5heJC5/zLZ0KS2+L6oB VcSkXv4yxUXxAhLhkmQ= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 35643 dodig.mil. nvJZT4c4MsznRCKoNJ3y/l6YBznJnYMFWgorVkbA67mGiiyIQ9resnTuIMHEdJHmwpFJdlsODqSJ eMItM5UXLNT+QGksb7W/5XGQuYrmurQcO76DuiF1U/E8IAyt9AX1A2OEydfPhmy9ybphbt4x/Hvq Pe9kLXK3SrbvDd4L4TI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F3-U.PENTAGON.MIL is authoritative for dodig.mil
	Found RRSIG signed by dodig.mil zone
	Query to DNS-PUB-F3-U.PENTAGON.MIL for dodig.mil/A
	Received 866 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (866 octets) ;; HEADER SECTION ;; id = 57462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dodig.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dodig.mil. 297 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009029082 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 28428 dodig.mil. Rrwcd5hsxpXZ8CDnaVX8/J/tLPFU8lV8GyyE8w1upiG6OJhkLNi3UPimLcRziSZJZMPUbWYok8rY gX1Qxhtv2VNomNJOejISBkUIT/lLB9Hdjmd+JTf7DG/35n6K4x25FGoT+68z36esYKBstcsbW7qJ HoGhdQXnm9/qdfVKdOM= ) dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 35643 dodig.mil. rp0GDZkKUDVzCjLo2hbBrPPRRtZL9kvLAAHsby96+0v2PygT3j/WiScfogK1UYS9xGRXc0o7xeHs j+HL1bFWayzMZNFTUs+xt+CWot/mjVDaPD+cnmpgvIfvUudiebKorpnsBRI7GVfezoKMiQ9O+5+R OdI+eGyEnARCdKK01Ns= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN NSEC3 ( 1 0 10 828fbd3f5a t2bu831j1ve707td83if22jiqbd64djt NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 28428 dodig.mil. uCClO2TbImN9Qv6mcPN9aRkZLMUnLYZxvvmKyCpSEC9hQq1hnj8yXZbO7UxJYaE48m4n6TBY6PA/ J3FgN3hlFdyETQY2dAruL/PFFdS52d8DfcZUKaiLx+IPPxr+bB4I085U+5heJC5/zLZ0KS2+L6oB VcSkXv4yxUXxAhLhkmQ= ) SKIDU2AA9V61HO8K6F8M19OQRB979EGD.dodig.mil. 297 IN RRSIG ( NSEC3 8 3 3600 20231024074858 20230924073153 35643 dodig.mil. nvJZT4c4MsznRCKoNJ3y/l6YBznJnYMFWgorVkbA67mGiiyIQ9resnTuIMHEdJHmwpFJdlsODqSJ eMItM5UXLNT+QGksb7W/5XGQuYrmurQcO76DuiF1U/E8IAyt9AX1A2OEydfPhmy9ybphbt4x/Hvq Pe9kLXK3SrbvDd4L4TI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 28428 dodig.mil. Rrwcd5hsxpXZ8CDnaVX8/J/tLPFU8lV8GyyE8w1upiG6OJhkLNi3UPimLcRziSZJZMPUbWYok8rY gX1Qxhtv2VNomNJOejISBkUIT/lLB9Hdjmd+JTf7DG/35n6K4x25FGoT+68z36esYKBstcsbW7qJ HoGhdQXnm9/qdfVKdOM= )`
	`dodig.mil. 297 IN RRSIG ( SOA 8 2 300 20231024160211 20230924150211 35643 dodig.mil. rp0GDZkKUDVzCjLo2hbBrPPRRtZL9kvLAAHsby96+0v2PygT3j/WiScfogK1UYS9xGRXc0o7xeHs j+HL1bFWayzMZNFTUs+xt+CWot/mjVDaPD+cnmpgvIfvUudiebKorpnsBRI7GVfezoKMiQ9O+5+R OdI+eGyEnARCdKK01Ns= )`
	RRSIG=28428 and DNSKEY=28428 verifies the SOA RRset
	RRSIG=35643 and DNSKEY=35643 verifies the SOA RRset

dodig.mil

No response from dodig.mil nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dodig.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: