DNSSEC Debugger - dren.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-21 14:09:07 UTC

Analyzing DNSSEC problems for dren.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 36191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to h.root-servers.net for dren.mil/A
	Received 755 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 755 octets ;; HEADER SECTION ;; id = 24122 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . V7W+9tLmk4+eIQ3TIIjlJy7oRliVnLQ9QbqiT1PBfZH4PiyZFz8TQapu8dIAX8/bnJQwXlZFHzc0 0Xvdm/KE441ST3RkZusr8J1dTx0kzPDW3yEqtQHh8wPC+MeVpmZ5Ig9/bMnzLOH3d67r8zFBPc+l ahB++KTsHufoc29fzgZvyfAdT3gMcEzYR58A0mjypjraJ7ZoiL+Z9Bp2ansbUalIyE2SxnMPZnRP yttiX0BWU+8MU+kUKZHzldKAaU0EWexoxM9IkFLa21J+QCmGCqyyMV7hLpC9FLJx3WnEdnsLSlKQ tOsx/AQriFaFW8EBHritGgJzipjWwQDlM3X/Og== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for mil/DNSKEY
	Received 750 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 750 octets ;; HEADER SECTION ;; id = 48776 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . V7W+9tLmk4+eIQ3TIIjlJy7oRliVnLQ9QbqiT1PBfZH4PiyZFz8TQapu8dIAX8/bnJQwXlZFHzc0 0Xvdm/KE441ST3RkZusr8J1dTx0kzPDW3yEqtQHh8wPC+MeVpmZ5Ig9/bMnzLOH3d67r8zFBPc+l ahB++KTsHufoc29fzgZvyfAdT3gMcEzYR58A0mjypjraJ7ZoiL+Z9Bp2ansbUalIyE2SxnMPZnRP yttiX0BWU+8MU+kUKZHzldKAaU0EWexoxM9IkFLa21J+QCmGCqyyMV7hLpC9FLJx3WnEdnsLSlKQ tOsx/AQriFaFW8EBHritGgJzipjWwQDlM3X/Og== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to b.root-servers.net for mil/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 55213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . V7W+9tLmk4+eIQ3TIIjlJy7oRliVnLQ9QbqiT1PBfZH4PiyZFz8TQapu8dIAX8/bnJQwXlZFHzc0 0Xvdm/KE441ST3RkZusr8J1dTx0kzPDW3yEqtQHh8wPC+MeVpmZ5Ig9/bMnzLOH3d67r8zFBPc+l ahB++KTsHufoc29fzgZvyfAdT3gMcEzYR58A0mjypjraJ7ZoiL+Z9Bp2ansbUalIyE2SxnMPZnRP yttiX0BWU+8MU+kUKZHzldKAaU0EWexoxM9IkFLa21J+QCmGCqyyMV7hLpC9FLJx3WnEdnsLSlKQ tOsx/AQriFaFW8EBHritGgJzipjWwQDlM3X/Og== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . V7W+9tLmk4+eIQ3TIIjlJy7oRliVnLQ9QbqiT1PBfZH4PiyZFz8TQapu8dIAX8/bnJQwXlZFHzc0 0Xvdm/KE441ST3RkZusr8J1dTx0kzPDW3yEqtQHh8wPC+MeVpmZ5Ig9/bMnzLOH3d67r8zFBPc+l ahB++KTsHufoc29fzgZvyfAdT3gMcEzYR58A0mjypjraJ7ZoiL+Z9Bp2ansbUalIyE2SxnMPZnRP yttiX0BWU+8MU+kUKZHzldKAaU0EWexoxM9IkFLa21J+QCmGCqyyMV7hLpC9FLJx3WnEdnsLSlKQ tOsx/AQriFaFW8EBHritGgJzipjWwQDlM3X/Og== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to pac2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 1061 octets ;; HEADER SECTION ;; id = 41887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcoLn7RHnro749kkPhm54Z2iOwMBsW/GJNJ55/9JM5SWmejqzFeOBlK7N/UCOVW0sZwtXtjj eCnsVB7oUeN2hihbvWpA9/8jOn3sffyiPctFvK+dpv40o21Fj6VDIv4L3HFv/ZgDJS0JabQpKeW8 sCCkOxqoduO5Cgj/ePnmW8/l ) ; keytag 43458 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAab0bkxnAYNimczCeSDeJL+InkvWOvWkcYIyx35PoPCnM1SNa1UZb+uO/5VV6pYmYcbemSfD 8GYe7Tut3sB81bfXxAG6dFqi7q+sYBYmh4hbuz9trMcjHpYssq4A1moh6Es2RlPn87ItcgXCXZe0 5QUnZA+4nmcPrnDidyLxxa5T ) ; keytag 14353 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260728114539 20260721114539 43458 mil. ZQIiERX18AA0P3KEfvo/ZJdEf9ow6A+PlbaRu4aWsQNNgVxmLt9pFW8j679ei3olhPRSmYKMpMwM Uucv42J0r1FrMeZgESZ8XRkzuYowDWWUmYRErkogzIIBGgJsiVCT/FYYbYk0tp1EEJj2vx+M+py6 pef/gsoZ9kJw6c4TMb0= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260728114539 20260721114539 45019 mil. gjylOgxiE+82TatRP2SByxHdtAAVDmmS6KAcougDcnG6HpnFaIKBdN6tVesWH9iV2R83hrAvOsqy bcqC37xzD4qy6CG5FEm0QpCNj7Oq0L4D6njutxWAJw1YleHRimQ8dNokE+VDMpK8Dachc78LNntT bwjE7ndZKFrh1Ai24Us0BXGIuhuoaiT5H6/QvjK4f8AZA0T/XNsGYXlL1pGT6A9viYlldeK/kmfc 2b7G+lZRKE1Etjn7GHOfuBus7INWh2J6ZKxkESoPRgtlpgr1FJwJDJZ9WTZHiTUV3sPQ3OliFM62 7U/SRM7CtUCL3HEKLrgCTu4VVOxWKKOI4oLH9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcoLn7RHnro749kkPhm54Z2iOwMBsW/GJNJ55/9JM5SWmejqzFeOBlK7N/UCOVW0sZwtXtjj eCnsVB7oUeN2hihbvWpA9/8jOn3sffyiPctFvK+dpv40o21Fj6VDIv4L3HFv/ZgDJS0JabQpKeW8 sCCkOxqoduO5Cgj/ePnmW8/l ) ; keytag 43458`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAab0bkxnAYNimczCeSDeJL+InkvWOvWkcYIyx35PoPCnM1SNa1UZb+uO/5VV6pYmYcbemSfD 8GYe7Tut3sB81bfXxAG6dFqi7q+sYBYmh4hbuz9trMcjHpYssq4A1moh6Es2RlPn87ItcgXCXZe0 5QUnZA+4nmcPrnDidyLxxa5T ) ; keytag 14353`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260728114539 20260721114539 43458 mil. ZQIiERX18AA0P3KEfvo/ZJdEf9ow6A+PlbaRu4aWsQNNgVxmLt9pFW8j679ei3olhPRSmYKMpMwM Uucv42J0r1FrMeZgESZ8XRkzuYowDWWUmYRErkogzIIBGgJsiVCT/FYYbYk0tp1EEJj2vx+M+py6 pef/gsoZ9kJw6c4TMb0= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260728114539 20260721114539 45019 mil. gjylOgxiE+82TatRP2SByxHdtAAVDmmS6KAcougDcnG6HpnFaIKBdN6tVesWH9iV2R83hrAvOsqy bcqC37xzD4qy6CG5FEm0QpCNj7Oq0L4D6njutxWAJw1YleHRimQ8dNokE+VDMpK8Dachc78LNntT bwjE7ndZKFrh1Ai24Us0BXGIuhuoaiT5H6/QvjK4f8AZA0T/XNsGYXlL1pGT6A9viYlldeK/kmfc 2b7G+lZRKE1Etjn7GHOfuBus7INWh2J6ZKxkESoPRgtlpgr1FJwJDJZ9WTZHiTUV3sPQ3OliFM62 7U/SRM7CtUCL3HEKLrgCTu4VVOxWKKOI4oLH9w== )`
	RRSIG=43458 and DNSKEY=43458 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=43458 is now in the chain-of-trust
	DNSKEY=14353 is now in the chain-of-trust
	Query to con1.nipr.mil for dren.mil/A
	Timeout querying con1.nipr.mil/199.252.157.234 for dren.mil/A
	All Queries to con1.nipr.mil for dren.mil/A timed out or failed
	Query to eur2.nipr.mil for dren.mil/A
	Received 500 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 500 octets ;; HEADER SECTION ;; id = 19546 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DREN.MIL. 21600 IN NS AUTH-SANDIEGO.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-APG.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-WPAFB.DREN.MIL. DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 ) DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337 DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260728114539 20260721114539 43458 mil. RiGwLxo1lSHLjBzgSBpmpqU3h5SszjZpMDqjyJb3M+OhFoGzs42zTFejxLk6I1COkpQMP69rUn5N E83fMfqlV3I4vlTKVrXlQY2Kx0M4FomNH7QCdeRbKyorTgoz8yxneGwStTHRVZR1nuicBOD+QIN0 +b3g4XOX9r3hQzVkXrY= ) ;; ADDITIONAL SECTION (7 records) AUTH-SANDIEGO.DREN.MIL. 21600 IN A 140.32.61.226 AUTH-WPAFB.DREN.MIL. 21600 IN A 140.32.59.226 AUTH-APG.DREN.MIL. 21600 IN A 140.32.45.226 AUTH-SANDIEGO.DREN.MIL. 21600 IN AAAA 2001:480:b0:f003::226 AUTH-WPAFB.DREN.MIL. 21600 IN AAAA 2001:480:a0:f003::226 AUTH-APG.DREN.MIL. 21600 IN AAAA 2001:480:a1:f003::226 ;; { "EDNS-VERSION": 0 }
	Query to eur1.nipr.mil for dren.mil/DNSKEY
	Received 500 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 500 octets ;; HEADER SECTION ;; id = 11299 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DREN.MIL. 21600 IN NS AUTH-APG.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-WPAFB.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-SANDIEGO.DREN.MIL. DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 ) DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337 DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260728114539 20260721114539 43458 mil. RiGwLxo1lSHLjBzgSBpmpqU3h5SszjZpMDqjyJb3M+OhFoGzs42zTFejxLk6I1COkpQMP69rUn5N E83fMfqlV3I4vlTKVrXlQY2Kx0M4FomNH7QCdeRbKyorTgoz8yxneGwStTHRVZR1nuicBOD+QIN0 +b3g4XOX9r3hQzVkXrY= ) ;; ADDITIONAL SECTION (7 records) AUTH-SANDIEGO.DREN.MIL. 21600 IN A 140.32.61.226 AUTH-WPAFB.DREN.MIL. 21600 IN A 140.32.59.226 AUTH-APG.DREN.MIL. 21600 IN A 140.32.45.226 AUTH-SANDIEGO.DREN.MIL. 21600 IN AAAA 2001:480:b0:f003::226 AUTH-WPAFB.DREN.MIL. 21600 IN AAAA 2001:480:a0:f003::226 AUTH-APG.DREN.MIL. 21600 IN AAAA 2001:480:a1:f003::226 ;; { "EDNS-VERSION": 0 }
	Found child zone dren.mil

dren.mil

	Checking DS between mil and dren.mil
	Query to con2.nipr.mil for dren.mil/DS
	Received 292 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 292 octets ;; HEADER SECTION ;; id = 37791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN DS ;; ANSWER SECTION (3 records) DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337 DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 ) DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260728114539 20260721114539 43458 mil. RiGwLxo1lSHLjBzgSBpmpqU3h5SszjZpMDqjyJb3M+OhFoGzs42zTFejxLk6I1COkpQMP69rUn5N E83fMfqlV3I4vlTKVrXlQY2Kx0M4FomNH7QCdeRbKyorTgoz8yxneGwStTHRVZR1nuicBOD+QIN0 +b3g4XOX9r3hQzVkXrY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dren.mil in the mil zone
	DS=10624/SHA-1 uses a deprecated digest algorithm
	DS=10624/SHA-1 has algorithm ECDSAP256SHA256
	DS=10624/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260728114539 20260721114539 43458 mil. RiGwLxo1lSHLjBzgSBpmpqU3h5SszjZpMDqjyJb3M+OhFoGzs42zTFejxLk6I1COkpQMP69rUn5N E83fMfqlV3I4vlTKVrXlQY2Kx0M4FomNH7QCdeRbKyorTgoz8yxneGwStTHRVZR1nuicBOD+QIN0 +b3g4XOX9r3hQzVkXrY= )`
	RRSIG=43458 and DNSKEY=43458 verifies the DS RRset
	DS=10624/SHA-1 is now in the chain-of-trust
	`DREN.MIL. 10800 IN DS 10624 13 1 1dc04efc634a5074e40e2eed5e1965e4fe01e337`
	`DREN.MIL. 10800 IN DS ( 10624 13 2 838741c36ee00d6f96aab013cf90f4e7adea4580c52ae73361cb7c320adf0a35 )`
	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/DNSKEY
	Received 405 bytes from 140.32.61.226
	;; Response received from [140.32.61.226] 405 octets ;; HEADER SECTION ;; id = 39090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN DNSKEY ;; ANSWER SECTION (4 records) dren.mil. 3600 IN DNSKEY ( 256 3 13 m5VQrIAENh9SGiTW+OeUQUvU5Udeu+YRHd+A/8ITIiX9W3+KNFBLL0EtKyTs6fwglNkKaKnuwIR8 QJbTSxtV0g== ) ; keytag 45830 dren.mil. 3600 IN DNSKEY ( 257 3 13 VxjpHkaUlwmX8psFw2gcgfZhkIafQtm/8xp67p2/U73nZ3lUrym23k5ecpM2QrdA7kwA3smG95hU sTFr3MIM5g== ) ; keytag 10624 dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260820114849 20260721112153 10624 dren.mil. Nqfm8Y/RJrs+q4aDsBpjgN7J9Fx2Pcg34x2d4fZC5cdLW0+wgUrJALE8LVzSmg014bwg6vUD/cpd 7kPt4y/Ldg== ) dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260820114849 20260721112153 45830 dren.mil. dO6gPDRzKDdD21mT8pUNE2i07FhJvRq99nmTFTm0SPV/fARMo0/ou6F9A/zJrVEBHqJHSnMCeaiy J66L4wyJjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dren.mil
	`dren.mil. 3600 IN DNSKEY ( 256 3 13 m5VQrIAENh9SGiTW+OeUQUvU5Udeu+YRHd+A/8ITIiX9W3+KNFBLL0EtKyTs6fwglNkKaKnuwIR8 QJbTSxtV0g== ) ; keytag 45830`
	`dren.mil. 3600 IN DNSKEY ( 257 3 13 VxjpHkaUlwmX8psFw2gcgfZhkIafQtm/8xp67p2/U73nZ3lUrym23k5ecpM2QrdA7kwA3smG95hU sTFr3MIM5g== ) ; keytag 10624`
	DNSKEY=10624/SEP is now in the chain-of-trust
	DS=10624/SHA-1 verifies DNSKEY=10624/SEP
	DS=10624/SHA-256 verifies DNSKEY=10624/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260820114849 20260721112153 10624 dren.mil. Nqfm8Y/RJrs+q4aDsBpjgN7J9Fx2Pcg34x2d4fZC5cdLW0+wgUrJALE8LVzSmg014bwg6vUD/cpd 7kPt4y/Ldg== )`
	`dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260820114849 20260721112153 45830 dren.mil. dO6gPDRzKDdD21mT8pUNE2i07FhJvRq99nmTFTm0SPV/fARMo0/ou6F9A/zJrVEBHqJHSnMCeaiy J66L4wyJjg== )`
	RRSIG=10624 and DNSKEY=10624/SEP verifies the DNSKEY RRset
	RRSIG=45830 and DNSKEY=45830 verifies the DNSKEY RRset
	DNSKEY=45830 is now in the chain-of-trust
	Query to AUTH-WPAFB.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.59.226
	;; Response received from [140.32.59.226] 337 octets ;; HEADER SECTION ;; id = 30450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026052804 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260814223720 20260715220457 45830 dren.mil. YCOVd6BICp1fx8R2EPZPhOJRkd6T2h2U3QmWa9ubd+L/qInpseuYbMer/jkcBb+zuuTW3YcrDEj7 AJYpNd33zw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AUTH-WPAFB.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-APG.DREN.MIL for dren.mil/SOA
	Received 1128 bytes from 140.32.45.226
	;; Response received from [140.32.45.226] 1128 octets ;; HEADER SECTION ;; id = 21384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN SOA ;; ANSWER SECTION (2 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026052804 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== ) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN NS auth-sandiego.dren.mil. dren.mil. 3600 IN NS auth-wpafb.dren.mil. dren.mil. 3600 IN NS auth-apg.dren.mil. dren.mil. 3600 IN RRSIG ( NS 13 2 3600 20260804024533 20260705023307 45830 dren.mil. WcwpC2L7PuB1xarpmAnE1SU3Al3xXGYmXOAPncKAw6aAcc92Wn8a38YZkKs3JGduoIQR3LfAIANv UTMZ9kHHlw== ) ;; ADDITIONAL SECTION (13 records) auth-apg.dren.mil. 3600 IN A 140.32.45.226 auth-wpafb.dren.mil. 3600 IN A 140.32.59.226 auth-sandiego.dren.mil. 3600 IN A 140.32.61.226 auth-apg.dren.mil. 3600 IN AAAA 2001:480:a1:f003::226 auth-wpafb.dren.mil. 3600 IN AAAA 2001:480:a0:f003::226 auth-sandiego.dren.mil. 3600 IN AAAA 2001:480:b0:f003::226 auth-apg.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260809044405 20260710040421 45830 dren.mil. 8MshzCvmtMCeORdI1aVVKsftLzqBApWXor+7RXT24eZpG6cAybYmNVzmsxkdTSEDlyyskryC19Un geTCSj45kw== ) auth-apg.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260809044405 20260710040421 45830 dren.mil. Q7XTfxgTJCQotvhEY9urXt5Wt+qJ6K4iU/NbnXXHME5Z9YJ/s5WOyK4N5xlKCisHpKaG9LuHdGrq BOheFTPITQ== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260801135017 20260702131035 45830 dren.mil. UtQvI6AmpAxYWqDlqEW9BMfTvaGDlVvUe8UXyFFHwFbLDnTRcV6YfAmREj5sW1rVW2V8zOIJNyK9 NBDAcx22ZA== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260801135017 20260702131035 45830 dren.mil. /UBgibVaSKLRhvKBlP4lJUvp4b2Mc9u1tAPEzHMDpOwVEnQDTa8WF88ion8B/nZk2ACBpkGYHnmt JyHwaQaG3A== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260803122828 20260704115453 45830 dren.mil. K9SXNjipPZV3+rkeBxdZmRxuw/h7i4u0edIRm2jHaRQkWRW6XnUDNukonzty5pQMQ798JNKCEKLx v7Cid2whcg== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260803122828 20260704115453 45830 dren.mil. z38woHGEh5Dh3msona1BlyMIzYrxh5PYaKOWA6v7iH8Xm6pTQaCVPXYJmiQdy2ImWPylI3g7flBE jlsqwoGfgw== ) ;; { "EDNS-VERSION": 0 }
	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/SOA
	Received 1128 bytes from 140.32.61.226
	;; Response received from [140.32.61.226] 1128 octets ;; HEADER SECTION ;; id = 41336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN SOA ;; ANSWER SECTION (2 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026052804 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== ) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN NS auth-wpafb.dren.mil. dren.mil. 3600 IN NS auth-apg.dren.mil. dren.mil. 3600 IN NS auth-sandiego.dren.mil. dren.mil. 3600 IN RRSIG ( NS 13 2 3600 20260804024533 20260705023307 45830 dren.mil. WcwpC2L7PuB1xarpmAnE1SU3Al3xXGYmXOAPncKAw6aAcc92Wn8a38YZkKs3JGduoIQR3LfAIANv UTMZ9kHHlw== ) ;; ADDITIONAL SECTION (13 records) auth-apg.dren.mil. 3600 IN A 140.32.45.226 auth-wpafb.dren.mil. 3600 IN A 140.32.59.226 auth-sandiego.dren.mil. 3600 IN A 140.32.61.226 auth-apg.dren.mil. 3600 IN AAAA 2001:480:a1:f003::226 auth-wpafb.dren.mil. 3600 IN AAAA 2001:480:a0:f003::226 auth-sandiego.dren.mil. 3600 IN AAAA 2001:480:b0:f003::226 auth-apg.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260809044405 20260710040421 45830 dren.mil. 8MshzCvmtMCeORdI1aVVKsftLzqBApWXor+7RXT24eZpG6cAybYmNVzmsxkdTSEDlyyskryC19Un geTCSj45kw== ) auth-apg.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260809044405 20260710040421 45830 dren.mil. Q7XTfxgTJCQotvhEY9urXt5Wt+qJ6K4iU/NbnXXHME5Z9YJ/s5WOyK4N5xlKCisHpKaG9LuHdGrq BOheFTPITQ== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260801135017 20260702131035 45830 dren.mil. UtQvI6AmpAxYWqDlqEW9BMfTvaGDlVvUe8UXyFFHwFbLDnTRcV6YfAmREj5sW1rVW2V8zOIJNyK9 NBDAcx22ZA== ) auth-wpafb.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260801135017 20260702131035 45830 dren.mil. /UBgibVaSKLRhvKBlP4lJUvp4b2Mc9u1tAPEzHMDpOwVEnQDTa8WF88ion8B/nZk2ACBpkGYHnmt JyHwaQaG3A== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20260803122828 20260704115453 45830 dren.mil. K9SXNjipPZV3+rkeBxdZmRxuw/h7i4u0edIRm2jHaRQkWRW6XnUDNukonzty5pQMQ798JNKCEKLx v7Cid2whcg== ) auth-sandiego.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20260803122828 20260704115453 45830 dren.mil. z38woHGEh5Dh3msona1BlyMIzYrxh5PYaKOWA6v7iH8Xm6pTQaCVPXYJmiQdy2ImWPylI3g7flBE jlsqwoGfgw== ) ;; { "EDNS-VERSION": 0 }
	Query to AUTH-WPAFB.DREN.MIL for dren.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260814223720 20260715220457 45830 dren.mil. YCOVd6BICp1fx8R2EPZPhOJRkd6T2h2U3QmWa9ubd+L/qInpseuYbMer/jkcBb+zuuTW3YcrDEj7 AJYpNd33zw== )`
	RRSIG=45830 and DNSKEY=45830 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 1 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== )`
	RRSIG=45830 and DNSKEY=45830 verifies the SOA RRset

dren.mil

	Query to AUTH-APG.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.45.226
	;; Response received from [140.32.45.226] 337 octets ;; HEADER SECTION ;; id = 1423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026052804 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260814223720 20260715220457 45830 dren.mil. YCOVd6BICp1fx8R2EPZPhOJRkd6T2h2U3QmWa9ubd+L/qInpseuYbMer/jkcBb+zuuTW3YcrDEj7 AJYpNd33zw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AUTH-APG.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-APG.DREN.MIL for dren.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260814223720 20260715220457 45830 dren.mil. YCOVd6BICp1fx8R2EPZPhOJRkd6T2h2U3QmWa9ubd+L/qInpseuYbMer/jkcBb+zuuTW3YcrDEj7 AJYpNd33zw== )`
	RRSIG=45830 and DNSKEY=45830 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 1 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== )`
	RRSIG=45830 and DNSKEY=45830 verifies the SOA RRset

dren.mil

	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/A
	Received 337 bytes from 140.32.61.226
	;; Response received from [140.32.61.226] 337 octets ;; HEADER SECTION ;; id = 1731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2026052804 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260814223720 20260715220457 45830 dren.mil. YCOVd6BICp1fx8R2EPZPhOJRkd6T2h2U3QmWa9ubd+L/qInpseuYbMer/jkcBb+zuuTW3YcrDEj7 AJYpNd33zw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	AUTH-SANDIEGO.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-SANDIEGO.DREN.MIL for dren.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20260814223720 20260715220457 45830 dren.mil. YCOVd6BICp1fx8R2EPZPhOJRkd6T2h2U3QmWa9ubd+L/qInpseuYbMer/jkcBb+zuuTW3YcrDEj7 AJYpNd33zw== )`
	RRSIG=45830 and DNSKEY=45830 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 1 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20260820122153 20260721112153 45830 dren.mil. ojZ78ij80nx59VwTMwwqQhUbnp33ilfydBjRDivh6kPaF5HUZRAJq3rBf++Ui1mpzUn89nye05gV oHqVy8Ry2A== )`
	RRSIG=45830 and DNSKEY=45830 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dren.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: