DNSSEC Debugger - dren.mil

Domain Name:

Time: 2026-03-31 06:17:33 UTC

Analyzing DNSSEC problems for dren.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1414 octets ;; HEADER SECTION ;; id = 56182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=54393 is now in the chain-of-trust
	Query to e.root-servers.net for dren.mil/A
	Received 755 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 755 octets ;; HEADER SECTION ;; id = 4352 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . lnkgtBdorLtcpig1mzcFDNTvDZdJvMjeGxMhRqo5uZfKTrq3tRXVBTU8NsXVjDGfEefaR4qHVtCY ndBGS4hkV9c8Wl8fNXvmXqbYRn/rkI26nm2JofLazHUvHUtiWIYisNhD+gjX6fWj+hy36Of7UBwv vD4D8Zm1et/W3lPYu+xnaKo6w7GM5A+9Btc7Oc0krHB8Xp4mrhzm9b2+z2feQylsMEtERSYTafvG v0LZiE8j67fHHcppmwtrcXw2hJtcQKnmbD6i6XLw7YxS7QHsl3dF42lONDSq/Wa1PBtHmGpvX+sd m23MUhiVjn1K6mwjk8JmkciSdEvV8q7zMzK4Mw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for mil/DNSKEY
	Received 750 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 750 octets ;; HEADER SECTION ;; id = 53753 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . lnkgtBdorLtcpig1mzcFDNTvDZdJvMjeGxMhRqo5uZfKTrq3tRXVBTU8NsXVjDGfEefaR4qHVtCY ndBGS4hkV9c8Wl8fNXvmXqbYRn/rkI26nm2JofLazHUvHUtiWIYisNhD+gjX6fWj+hy36Of7UBwv vD4D8Zm1et/W3lPYu+xnaKo6w7GM5A+9Btc7Oc0krHB8Xp4mrhzm9b2+z2feQylsMEtERSYTafvG v0LZiE8j67fHHcppmwtrcXw2hJtcQKnmbD6i6XLw7YxS7QHsl3dF42lONDSq/Wa1PBtHmGpvX+sd m23MUhiVjn1K6mwjk8JmkciSdEvV8q7zMzK4Mw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to m.root-servers.net for mil/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 367 octets ;; HEADER SECTION ;; id = 19026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . lnkgtBdorLtcpig1mzcFDNTvDZdJvMjeGxMhRqo5uZfKTrq3tRXVBTU8NsXVjDGfEefaR4qHVtCY ndBGS4hkV9c8Wl8fNXvmXqbYRn/rkI26nm2JofLazHUvHUtiWIYisNhD+gjX6fWj+hy36Of7UBwv vD4D8Zm1et/W3lPYu+xnaKo6w7GM5A+9Btc7Oc0krHB8Xp4mrhzm9b2+z2feQylsMEtERSYTafvG v0LZiE8j67fHHcppmwtrcXw2hJtcQKnmbD6i6XLw7YxS7QHsl3dF42lONDSq/Wa1PBtHmGpvX+sd m23MUhiVjn1K6mwjk8JmkciSdEvV8q7zMzK4Mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . lnkgtBdorLtcpig1mzcFDNTvDZdJvMjeGxMhRqo5uZfKTrq3tRXVBTU8NsXVjDGfEefaR4qHVtCY ndBGS4hkV9c8Wl8fNXvmXqbYRn/rkI26nm2JofLazHUvHUtiWIYisNhD+gjX6fWj+hy36Of7UBwv vD4D8Zm1et/W3lPYu+xnaKo6w7GM5A+9Btc7Oc0krHB8Xp4mrhzm9b2+z2feQylsMEtERSYTafvG v0LZiE8j67fHHcppmwtrcXw2hJtcQKnmbD6i6XLw7YxS7QHsl3dF42lONDSq/Wa1PBtHmGpvX+sd m23MUhiVjn1K6mwjk8JmkciSdEvV8q7zMzK4Mw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 1061 octets ;; HEADER SECTION ;; id = 64367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcpNTrDTZXzIwH8H8eWAH9VERqrrfTgjS1YY/2rOKalo+cf15BbY4qUOgbCSi6dCRsVl4KKo Jz62gslsu8HxfpU97PxByI5BfqqIO0C8a3YAmk2a1eZn52owCLqCC8HoX7aYUcXCbpCNGLZ4oNdN Nxa/5j36ptc9H21V8Ulq2BSV ) ; keytag 50931 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZzeiX/rb+M/fCfWbanEAjZFBjZa2h2JzOIWqaqc8YUc6WQDlH/VGdG6u4U+jUfuWJGNTdzD IJiUSIuwsI4wT1/iolr7h63lmRu37rLvcCUXX8NYqJUjtOwuts4XVFaQHGNc/FpKr/QPXwLHmox8 VhRC5ZBNSV9NDY3Pdy7NRx6z ) ; keytag 35769 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260406230654 20260330230654 35769 mil. LFDHv/D8eC10HHjmVEgTGGPlLuHHZEDSq2otoTEsdjy8euLx6QyIcouI4VEUu1ycKWAsNHzqu0bm GLWZrdRTxTe+FapVw19nE/ytge57O2yYdnjw7QZVfPTdoZ6IDVYhirQcjmIU1NRy+V06Nt8qRJpD 85HgL4pR1UaNZy7fuwc= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260406230654 20260330230654 45019 mil. aOK9vEl+SID/9mUZWf55KAyOxQ+66KcCt3rbZ/oH79sHnefzw62LNrmiKKH2bxU9uCUiF9FAEHOL sPnHQhiuY4fAWRG+eLTRd5cWt8YQgtAVCSjp1OroA1QciuCnjJf7mZOiFVgqShnKTEfzRD9OUPSa MvQQe/97JNxVvJXOOvteR2Kl57r6aYvmX96UKPQvGP6r6auXI4CTVIVW6cy9OBGu1dZb9hji5pbA vAbO+iyuW70iksYyLoH0OjbceHGkWL7R8sod0bci4EnZiwMgBBfOyctsyFiyjpxmf8Y7opOQLTmr UB+RsMVEqndkBS+v595NZTV0hqZoQRa1jDY+gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcpNTrDTZXzIwH8H8eWAH9VERqrrfTgjS1YY/2rOKalo+cf15BbY4qUOgbCSi6dCRsVl4KKo Jz62gslsu8HxfpU97PxByI5BfqqIO0C8a3YAmk2a1eZn52owCLqCC8HoX7aYUcXCbpCNGLZ4oNdN Nxa/5j36ptc9H21V8Ulq2BSV ) ; keytag 50931`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZzeiX/rb+M/fCfWbanEAjZFBjZa2h2JzOIWqaqc8YUc6WQDlH/VGdG6u4U+jUfuWJGNTdzD IJiUSIuwsI4wT1/iolr7h63lmRu37rLvcCUXX8NYqJUjtOwuts4XVFaQHGNc/FpKr/QPXwLHmox8 VhRC5ZBNSV9NDY3Pdy7NRx6z ) ; keytag 35769`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260406230654 20260330230654 35769 mil. LFDHv/D8eC10HHjmVEgTGGPlLuHHZEDSq2otoTEsdjy8euLx6QyIcouI4VEUu1ycKWAsNHzqu0bm GLWZrdRTxTe+FapVw19nE/ytge57O2yYdnjw7QZVfPTdoZ6IDVYhirQcjmIU1NRy+V06Nt8qRJpD 85HgL4pR1UaNZy7fuwc= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260406230654 20260330230654 45019 mil. aOK9vEl+SID/9mUZWf55KAyOxQ+66KcCt3rbZ/oH79sHnefzw62LNrmiKKH2bxU9uCUiF9FAEHOL sPnHQhiuY4fAWRG+eLTRd5cWt8YQgtAVCSjp1OroA1QciuCnjJf7mZOiFVgqShnKTEfzRD9OUPSa MvQQe/97JNxVvJXOOvteR2Kl57r6aYvmX96UKPQvGP6r6auXI4CTVIVW6cy9OBGu1dZb9hji5pbA vAbO+iyuW70iksYyLoH0OjbceHGkWL7R8sod0bci4EnZiwMgBBfOyctsyFiyjpxmf8Y7opOQLTmr UB+RsMVEqndkBS+v595NZTV0hqZoQRa1jDY+gQ== )`
	RRSIG=35769 and DNSKEY=35769 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=50931 is now in the chain-of-trust
	DNSKEY=35769 is now in the chain-of-trust
	Query to con2.nipr.mil for dren.mil/A
	Received 500 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 500 octets ;; HEADER SECTION ;; id = 47880 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DREN.MIL. 21600 IN NS AUTH-APG.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-SANDIEGO.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-WPAFB.DREN.MIL. DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337 DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 ) DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260406230654 20260330230654 35769 mil. hBYNON1LTn2MYrFlnVzSVDkiWhxdoRyqUb2Hnx8xpQyLGYmbfXZkdW/tNvhXKUIC2EBP9K4idbJR P9cEQGTeSxpsvqbk+D/hXi1EiFra27CTXqy0KUdk6ggmhaVHjtBazri9QOqhMVzxX/svZtj4ryqt nSVYbmBJPdp4mYZJA7g= ) ;; ADDITIONAL SECTION (7 records) AUTH-SANDIEGO.DREN.MIL. 21600 IN A 140.32.61.226 AUTH-WPAFB.DREN.MIL. 21600 IN A 140.32.59.226 AUTH-APG.DREN.MIL. 21600 IN A 140.32.45.226 AUTH-SANDIEGO.DREN.MIL. 21600 IN AAAA 2001:480:b0:f003::226 AUTH-WPAFB.DREN.MIL. 21600 IN AAAA 2001:480:a0:f003::226 AUTH-APG.DREN.MIL. 21600 IN AAAA 2001:480:a1:f003::226 ;; { "EDNS-VERSION": 0 }
	Query to pac2.nipr.mil for dren.mil/DNSKEY
	Received 405 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 405 octets ;; HEADER SECTION ;; id = 51953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN DNSKEY ;; ANSWER SECTION (4 records) dren.mil. 3065 IN DNSKEY ( 257 3 13 VxjpHkaUlwmX8psFw2gcgfZhkIafQtm/8xp67p2/U73nZ3lUrym23k5ecpM2QrdA7kwA3smG95hU sTFr3MIM5g== ) ; keytag 10624 dren.mil. 3065 IN DNSKEY ( 256 3 13 m5VQrIAENh9SGiTW+OeUQUvU5Udeu+YRHd+A/8ITIiX9W3+KNFBLL0EtKyTs6fwglNkKaKnuwIR8 QJbTSxtV0g== ) ; keytag 45830 dren.mil. 3065 IN RRSIG ( DNSKEY 13 2 3600 20260430012810 20260331011427 10624 dren.mil. O70Bei+DHNVtmeuNcWz1Nl7Pi09hqH9WHXlDDXv16PTnLEs8MshdmwFyKzISzcyk8KgBZWmJmRkj UDtBPW/itA== ) dren.mil. 3065 IN RRSIG ( DNSKEY 13 2 3600 20260430012810 20260331011427 45830 dren.mil. jmIYUDq/CfWyKOB5TUc5dwYcLAcDCGO+NvWq3Lk2ftC+iQHwfUbp0X3IiwrsgSLP3wM/lJ1ewt4c enHcq4Lejg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone dren.mil
	Attempting to learn nameservers for dren.mil
	Query to pac1.nipr.mil for dren.mil/NS
	Received 500 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 500 octets ;; HEADER SECTION ;; id = 34256 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN NS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DREN.MIL. 21600 IN NS AUTH-SANDIEGO.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-WPAFB.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-APG.DREN.MIL. DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 ) DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337 DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260406230654 20260330230654 35769 mil. hBYNON1LTn2MYrFlnVzSVDkiWhxdoRyqUb2Hnx8xpQyLGYmbfXZkdW/tNvhXKUIC2EBP9K4idbJR P9cEQGTeSxpsvqbk+D/hXi1EiFra27CTXqy0KUdk6ggmhaVHjtBazri9QOqhMVzxX/svZtj4ryqt nSVYbmBJPdp4mYZJA7g= ) ;; ADDITIONAL SECTION (7 records) AUTH-SANDIEGO.DREN.MIL. 21600 IN A 140.32.61.226 AUTH-WPAFB.DREN.MIL. 21600 IN A 140.32.59.226 AUTH-APG.DREN.MIL. 21600 IN A 140.32.45.226 AUTH-SANDIEGO.DREN.MIL. 21600 IN AAAA 2001:480:b0:f003::226 AUTH-WPAFB.DREN.MIL. 21600 IN AAAA 2001:480:a0:f003::226 AUTH-APG.DREN.MIL. 21600 IN AAAA 2001:480:a1:f003::226 ;; { "EDNS-VERSION": 0 }
	Found dren.mil nameservers: AUTH-SANDIEGO.DREN.MIL, AUTH-WPAFB.DREN.MIL, AUTH-APG.DREN.MIL

dren.mil

	Checking DS between mil and dren.mil
	Query to con2.nipr.mil for dren.mil/DS
	Received 292 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 292 octets ;; HEADER SECTION ;; id = 18497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN DS ;; ANSWER SECTION (3 records) DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 ) DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337 DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260406230654 20260330230654 35769 mil. hBYNON1LTn2MYrFlnVzSVDkiWhxdoRyqUb2Hnx8xpQyLGYmbfXZkdW/tNvhXKUIC2EBP9K4idbJR P9cEQGTeSxpsvqbk+D/hXi1EiFra27CTXqy0KUdk6ggmhaVHjtBazri9QOqhMVzxX/svZtj4ryqt nSVYbmBJPdp4mYZJA7g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dren.mil in the mil zone
	DS=10624/SHA-1 uses a deprecated digest algorithm
	DS=10624/SHA-256 has algorithm ECDSAP256SHA256
	DS=10624/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260406230654 20260330230654 35769 mil. hBYNON1LTn2MYrFlnVzSVDkiWhxdoRyqUb2Hnx8xpQyLGYmbfXZkdW/tNvhXKUIC2EBP9K4idbJR P9cEQGTeSxpsvqbk+D/hXi1EiFra27CTXqy0KUdk6ggmhaVHjtBazri9QOqhMVzxX/svZtj4ryqt nSVYbmBJPdp4mYZJA7g= )`
	RRSIG=35769 and DNSKEY=35769 verifies the DS RRset
	DS=10624/SHA-256 is now in the chain-of-trust
	`DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 )`
	`DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337`
	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/DNSKEY
	Received 405 bytes from 140.32.61.226
	;; Response received from [140.32.61.226] 405 octets ;; HEADER SECTION ;; id = 65166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN DNSKEY ;; ANSWER SECTION (4 records) dren.mil. 3600 IN DNSKEY ( 257 3 13 VxjpHkaUlwmX8psFw2gcgfZhkIafQtm/8xp67p2/U73nZ3lUrym23k5ecpM2QrdA7kwA3smG95hU sTFr3MIM5g== ) ; keytag 10624 dren.mil. 3600 IN DNSKEY ( 256 3 13 m5VQrIAENh9SGiTW+OeUQUvU5Udeu+YRHd+A/8ITIiX9W3+KNFBLL0EtKyTs6fwglNkKaKnuwIR8 QJbTSxtV0g== ) ; keytag 45830 dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260430012810 20260331011427 10624 dren.mil. O70Bei+DHNVtmeuNcWz1Nl7Pi09hqH9WHXlDDXv16PTnLEs8MshdmwFyKzISzcyk8KgBZWmJmRkj UDtBPW/itA== ) dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260430012810 20260331011427 45830 dren.mil. jmIYUDq/CfWyKOB5TUc5dwYcLAcDCGO+NvWq3Lk2ftC+iQHwfUbp0X3IiwrsgSLP3wM/lJ1ewt4c enHcq4Lejg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dren.mil
	`dren.mil. 3600 IN DNSKEY ( 257 3 13 VxjpHkaUlwmX8psFw2gcgfZhkIafQtm/8xp67p2/U73nZ3lUrym23k5ecpM2QrdA7kwA3smG95hU sTFr3MIM5g== ) ; keytag 10624`
	`dren.mil. 3600 IN DNSKEY ( 256 3 13 m5VQrIAENh9SGiTW+OeUQUvU5Udeu+YRHd+A/8ITIiX9W3+KNFBLL0EtKyTs6fwglNkKaKnuwIR8 QJbTSxtV0g== ) ; keytag 45830`
	DNSKEY=10624/SEP is now in the chain-of-trust
	DS=10624/SHA-256 verifies DNSKEY=10624/SEP
	DS=10624/SHA-1 verifies DNSKEY=10624/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260430012810 20260331011427 10624 dren.mil. O70Bei+DHNVtmeuNcWz1Nl7Pi09hqH9WHXlDDXv16PTnLEs8MshdmwFyKzISzcyk8KgBZWmJmRkj UDtBPW/itA== )`
	`dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260430012810 20260331011427 45830 dren.mil. jmIYUDq/CfWyKOB5TUc5dwYcLAcDCGO+NvWq3Lk2ftC+iQHwfUbp0X3IiwrsgSLP3wM/lJ1ewt4c enHcq4Lejg== )`
	RRSIG=10624 and DNSKEY=10624/SEP verifies the DNSKEY RRset
	RRSIG=45830 and DNSKEY=45830 verifies the DNSKEY RRset
	DNSKEY=45830 is now in the chain-of-trust
	Query to AUTH-WPAFB.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.59.226
	;; Response received from [140.32.59.226] 337 octets ;; HEADER SECTION ;; id = 52281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AUTH-WPAFB.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/SOA
	Received 1128 bytes from 140.32.61.226
	;; Response received from [140.32.61.226] 1128 octets ;; HEADER SECTION ;; id = 4423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN SOA ;; ANSWER SECTION (2 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN NS auth-wpafb.dren.mil. dren.mil. 3600 IN NS auth-sandiego.dren.mil. dren.mil. 3600 IN NS auth-apg.dren.mil. dren.mil. 3600 IN RRSIG ( NS 13 2 3600 20260413182315 20260314180749 45830 dren.mil. 8Uy5ql7CbuJSItLcOEG6lkq7QkG5Sv55SD3d4IscZ8i/TIWwkW+H9TqjdxIWe077KBIhgFfdebWB vF6ubPJJNQ== ) ;; ADDITIONAL SECTION (13 records) auth-apg.dren.mil. 3600 IN A 140.32.45.226 auth-wpafb.dren.mil. 3600 IN A 140.32.59.226 auth-sandiego.dren.mil. 3600 IN A 140.32.61.226 auth-apg.dren.mil. 3600 IN AAAA 2001:480:a1:f003::226 auth-wpafb.dren.mil. 3600 IN AAAA 2001:480:a0:f003::226 auth-sandiego.dren.mil. 3600 IN AAAA 2001:480:b0:f003::226 auth-apg.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260418200058 20260319190827 45830 dren.mil. XjKRAGAPM9i0li2Zc/PTam5bAXl9mj/ikWzZfvkZrMgD369BYoGm43Wf/0tuTndWdKvi4FEGfD7r 2O6EX+OeYQ== ) auth-apg.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260418200058 20260319190827 45830 dren.mil. XSkUDQtUnDNIMJ+T+2nltS/jY9Y3j5+y/z50IREvyulq3OureiN/ngCnsUpaoSbW76BU+++v5GlI /GyDQNfOYw== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260411030641 20260312025857 45830 dren.mil. vZKktuECG2BbK16F7e3NJbOliIeHYSAW9TXGT+FOYnNi2Ln4pbCqpvJoGpA6vOoAHwO0Wiigfrgw IsNgvDIh/Q== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260411030641 20260312025857 45830 dren.mil. 5kyk1zqwo8okDzjEdT8BJumJJ4CsfuV2abHLBaYDQpS1WtbK/QE8HMVEfD7GsvssuTTO7z94+w42 81UrzyinMA== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260413021853 20260314014321 45830 dren.mil. Xhs/CK3Gy3ji5bBU8qXkKsC30utMPBKi7HJGlrXCsK5k2/wMyb6cTxTccsehzmX8qXy5ETXNxFMe l6J2nhuhaw== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260413021853 20260314014321 45830 dren.mil. gYLFDZQSRZZTWAuJJqBQXJQCMo775PNcWzkLmDGnk7LnARNg25HmSJ53I2MObMfzgovMOyulfEz6 o5ToYP/mtA== ) ;; { "EDNS-VERSION": 0 }
	Query to AUTH-APG.DREN.MIL for dren.mil/SOA
	Received 1128 bytes from 140.32.45.226
	;; Response received from [140.32.45.226] 1128 octets ;; HEADER SECTION ;; id = 19517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN SOA ;; ANSWER SECTION (2 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN NS auth-apg.dren.mil. dren.mil. 3600 IN NS auth-sandiego.dren.mil. dren.mil. 3600 IN NS auth-wpafb.dren.mil. dren.mil. 3600 IN RRSIG ( NS 13 2 3600 20260413182315 20260314180749 45830 dren.mil. 8Uy5ql7CbuJSItLcOEG6lkq7QkG5Sv55SD3d4IscZ8i/TIWwkW+H9TqjdxIWe077KBIhgFfdebWB vF6ubPJJNQ== ) ;; ADDITIONAL SECTION (13 records) auth-apg.dren.mil. 3600 IN A 140.32.45.226 auth-wpafb.dren.mil. 3600 IN A 140.32.59.226 auth-sandiego.dren.mil. 3600 IN A 140.32.61.226 auth-apg.dren.mil. 3600 IN AAAA 2001:480:a1:f003::226 auth-wpafb.dren.mil. 3600 IN AAAA 2001:480:a0:f003::226 auth-sandiego.dren.mil. 3600 IN AAAA 2001:480:b0:f003::226 auth-apg.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260418200058 20260319190827 45830 dren.mil. XjKRAGAPM9i0li2Zc/PTam5bAXl9mj/ikWzZfvkZrMgD369BYoGm43Wf/0tuTndWdKvi4FEGfD7r 2O6EX+OeYQ== ) auth-apg.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260418200058 20260319190827 45830 dren.mil. XSkUDQtUnDNIMJ+T+2nltS/jY9Y3j5+y/z50IREvyulq3OureiN/ngCnsUpaoSbW76BU+++v5GlI /GyDQNfOYw== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260411030641 20260312025857 45830 dren.mil. vZKktuECG2BbK16F7e3NJbOliIeHYSAW9TXGT+FOYnNi2Ln4pbCqpvJoGpA6vOoAHwO0Wiigfrgw IsNgvDIh/Q== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260411030641 20260312025857 45830 dren.mil. 5kyk1zqwo8okDzjEdT8BJumJJ4CsfuV2abHLBaYDQpS1WtbK/QE8HMVEfD7GsvssuTTO7z94+w42 81UrzyinMA== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260413021853 20260314014321 45830 dren.mil. Xhs/CK3Gy3ji5bBU8qXkKsC30utMPBKi7HJGlrXCsK5k2/wMyb6cTxTccsehzmX8qXy5ETXNxFMe l6J2nhuhaw== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260413021853 20260314014321 45830 dren.mil. gYLFDZQSRZZTWAuJJqBQXJQCMo775PNcWzkLmDGnk7LnARNg25HmSJ53I2MObMfzgovMOyulfEz6 o5ToYP/mtA== ) ;; { "EDNS-VERSION": 0 }
	Query to AUTH-WPAFB.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.59.226
	;; Response received from [140.32.59.226] 337 octets ;; HEADER SECTION ;; id = 22731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== )`
	RRSIG=45830 and DNSKEY=45830 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 1 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== )`
	RRSIG=45830 and DNSKEY=45830 verifies the SOA RRset

dren.mil

	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.61.226
	;; Response received from [140.32.61.226] 337 octets ;; HEADER SECTION ;; id = 8344 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AUTH-SANDIEGO.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.61.226
	;; Response received from [140.32.61.226] 337 octets ;; HEADER SECTION ;; id = 8585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== )`
	RRSIG=45830 and DNSKEY=45830 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 1 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== )`
	RRSIG=45830 and DNSKEY=45830 verifies the SOA RRset

dren.mil

	Query to AUTH-APG.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.45.226
	;; Response received from [140.32.45.226] 337 octets ;; HEADER SECTION ;; id = 13092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AUTH-APG.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-APG.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.45.226
	;; Response received from [140.32.45.226] 337 octets ;; HEADER SECTION ;; id = 35069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026021872 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260424132622 20260325124534 45830 dren.mil. w4BxnZZlqZR96GanWtQG93zoHuAsEIEU4nYMVeVgtQb8Fp8/c15BnF+t0gHPw6yf+7ynX82+LNjB v+kqJcPLlQ== )`
	RRSIG=45830 and DNSKEY=45830 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 1 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260430021427 20260331011427 45830 dren.mil. rPipCzWtJsd/n7hEeVBOsjJGawtReWTG2YNec5cn35jET1djqxRXSYYuYOZw/zb+6fobeC3fKFHR +yOBkhdoFQ== )`
	RRSIG=45830 and DNSKEY=45830 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dren.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: