DNSSEC Analyzer - dren.mil

Domain Name:

Time: 2023-09-24 18:14:40 UTC, NTP stratum 4

Analyzing DNSSEC problems for dren.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (1139 octets) ;; HEADER SECTION ;; id = 16150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to j.root-servers.net for dren.mil/A
	Received 803 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (803 octets) ;; HEADER SECTION ;; id = 11806 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for mil/DNSKEY
	Received 801 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (801 octets) ;; HEADER SECTION ;; id = 54097 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to e.root-servers.net for mil/DS
	Received 415 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (415 octets) ;; HEADER SECTION ;; id = 40865 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for mil in the . zone
	DS=62470/SHA-256 has algorithm RSASHA256
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=62470/SHA-256 is now in the chain-of-trust
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (1628 octets) ;; HEADER SECTION ;; id = 54081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=44065 is now in the chain-of-trust
	DNSKEY=14098 is now in the chain-of-trust
	Query to eur1.nipr.mil for dren.mil/A
	Timeout querying eur1.nipr.mil/199.252.154.234 for dren.mil/A
	All Queries to eur1.nipr.mil for dren.mil/A timed out or failed
	Query to pac1.nipr.mil for dren.mil/A
	Received 501 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (501 octets) ;; HEADER SECTION ;; id = 17846 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DREN.MIL. 21600 IN NS AUTH-WEST.DREN.MIL. DREN.MIL. 21600 IN NS NS1.ARL.HPC.MIL. DREN.MIL. 21600 IN NS AUTH-EAST.DREN.MIL. DREN.MIL. 10800 IN DS ( 60084 13 2 74122d31c8db7cad81e180832fff08bb828df294ba2cde315f2d9cb73c43b4a8 ) DREN.MIL. 10800 IN DS 60084 13 1 2f77e1427f5a04aa5983369e5bcd53c5227e0caf DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. ZGUj57lp6TlOQXAJIrmoCUl6/kNrJrjPkmzgDANeRL9IlPVoAlmx8jyEAdYwqNZ9mUvdVBTUxE1o 9aQF8kn8pjfVxoZoMTbM5exNIhxiUgu/Qzw8GPpeMiB/3ZLt/lczfrBrZ1K2iWTpAWmuDG0ZWp0F Z4OH0YaVWSSVHqIbf3E= ) ;; ADDITIONAL SECTION (7 records) AUTH-WEST.DREN.MIL. 21600 IN A 140.32.61.226 AUTH-EAST.DREN.MIL. 21600 IN A 140.32.59.226 NS1.ARL.HPC.MIL. 21600 IN A 140.32.131.142 AUTH-WEST.DREN.MIL. 21600 IN AAAA 2001:480:b0:f003::226 AUTH-EAST.DREN.MIL. 21600 IN AAAA 2001:480:a0:f003::226 NS1.ARL.HPC.MIL. 21600 IN AAAA 2001:480:31:ffff::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pac2.nipr.mil for dren.mil/DNSKEY
	Received 501 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (501 octets) ;; HEADER SECTION ;; id = 18754 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DREN.MIL. 21600 IN NS NS1.ARL.HPC.MIL. DREN.MIL. 21600 IN NS AUTH-EAST.DREN.MIL. DREN.MIL. 21600 IN NS AUTH-WEST.DREN.MIL. DREN.MIL. 10800 IN DS ( 60084 13 2 74122d31c8db7cad81e180832fff08bb828df294ba2cde315f2d9cb73c43b4a8 ) DREN.MIL. 10800 IN DS 60084 13 1 2f77e1427f5a04aa5983369e5bcd53c5227e0caf DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. ZGUj57lp6TlOQXAJIrmoCUl6/kNrJrjPkmzgDANeRL9IlPVoAlmx8jyEAdYwqNZ9mUvdVBTUxE1o 9aQF8kn8pjfVxoZoMTbM5exNIhxiUgu/Qzw8GPpeMiB/3ZLt/lczfrBrZ1K2iWTpAWmuDG0ZWp0F Z4OH0YaVWSSVHqIbf3E= ) ;; ADDITIONAL SECTION (7 records) AUTH-WEST.DREN.MIL. 21600 IN A 140.32.61.226 AUTH-EAST.DREN.MIL. 21600 IN A 140.32.59.226 NS1.ARL.HPC.MIL. 21600 IN A 140.32.131.142 AUTH-WEST.DREN.MIL. 21600 IN AAAA 2001:480:b0:f003::226 AUTH-EAST.DREN.MIL. 21600 IN AAAA 2001:480:a0:f003::226 NS1.ARL.HPC.MIL. 21600 IN AAAA 2001:480:31:ffff::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dren.mil

dren.mil

	Checking DS between mil and dren.mil
	Query to con2.nipr.mil for dren.mil/DS
	Received 292 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (292 octets) ;; HEADER SECTION ;; id = 12363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN DS ;; ANSWER SECTION (3 records) DREN.MIL. 10800 IN DS 60084 13 1 2f77e1427f5a04aa5983369e5bcd53c5227e0caf DREN.MIL. 10800 IN DS ( 60084 13 2 74122d31c8db7cad81e180832fff08bb828df294ba2cde315f2d9cb73c43b4a8 ) DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. ZGUj57lp6TlOQXAJIrmoCUl6/kNrJrjPkmzgDANeRL9IlPVoAlmx8jyEAdYwqNZ9mUvdVBTUxE1o 9aQF8kn8pjfVxoZoMTbM5exNIhxiUgu/Qzw8GPpeMiB/3ZLt/lczfrBrZ1K2iWTpAWmuDG0ZWp0F Z4OH0YaVWSSVHqIbf3E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for dren.mil in the mil zone
	DS=60084/SHA-1 has algorithm ECDSAP256SHA256
	DS=60084/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DREN.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. ZGUj57lp6TlOQXAJIrmoCUl6/kNrJrjPkmzgDANeRL9IlPVoAlmx8jyEAdYwqNZ9mUvdVBTUxE1o 9aQF8kn8pjfVxoZoMTbM5exNIhxiUgu/Qzw8GPpeMiB/3ZLt/lczfrBrZ1K2iWTpAWmuDG0ZWp0F Z4OH0YaVWSSVHqIbf3E= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=60084/SHA-1 is now in the chain-of-trust
	`DREN.MIL. 10800 IN DS 60084 13 1 2f77e1427f5a04aa5983369e5bcd53c5227e0caf`
	`DREN.MIL. 10800 IN DS ( 60084 13 2 74122d31c8db7cad81e180832fff08bb828df294ba2cde315f2d9cb73c43b4a8 )`
	Query to NS1.ARL.HPC.MIL for dren.mil/DNSKEY
	Received 1549 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (1549 octets) ;; HEADER SECTION ;; id = 57245 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN DNSKEY ;; ANSWER SECTION (8 records) dren.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAciReu85C+rbVm7Az/Iwh7PFx5/K8AaqFwA/4Lm4GeZgI0ndkYFy1N4GUIOrkmHud/AG8fOk O0K6wGOn5tTsru1ZR70IOyGAs5VJ2AgQPOKkOM4Mhm/p22RjKlLwRaysPRk9RKxzf9KM+J6zV5LL l7O0arLGn40HpyNBq/Y2bEA99GT7HMIh34tBtqC+1Dbi8w92Ea/+64P4p2zsmlTCEvHUNt81kAHz oGkJDVwQqVOh/9cqCYkCuqnB9JloSFss/wJqsh7Yg2jMkGrUr/5zLN0IpcPf0YfWSiMZFtYrJwE9 9Kq2fzWoNvedrVYvyNEgtWcHvBqPwXHMb+qLzDyWZr0= ) ; Key ID = 1012 dren.mil. 3600 IN DNSKEY ( 256 3 8 AwEAAb1HMGZvgXh6qAtBrShBHVRhQc/VFlLL45KKwVqSGtbAMvVi6L7M6aLdNvQ4jF1wmUfmWHgH tCDIAJHBWe5O3IoiETAMyKVesNlXjse7HvXDdLG05k19ElkaNO8YkdScNC5b6DQ4/lTsSBQyLxRR 6IKgSe09P1eIJZsdoKfuiaRM9sWi2bSSM3A0V3OludDP3mHGMUaorXq45lGPoAzrrQCTRkvpuS7f ON3WNvRZkIw6gsLhxpUerxF59qUr0fvdtyBN9ZyWd9GGrCO1Yf4FeW/7yu3hIK/5amxyNo/vQFhS ESDASUXvdLs9NbJ4RF+mjDWQX3csvaZRteCPk3QMl7k= ) ; Key ID = 47466 dren.mil. 3600 IN DNSKEY ( 257 3 13 ezUxvFvrUv8XhlboLyOpAmYwqW/7U5os9TjZizeU4O5k61epgg//eG+nADeeAg/Nh+PLB73RpBWm JPmoGPbuaw== ) ; Key ID = 60084 dren.mil. 3600 IN DNSKEY ( 256 3 13 wNYg0VFQy4tRJC0HkW8us3f3LLhpPGpLMBf6KHivQPsD8Y+UiW48wKrK1ukSS2majAL42N4xK+Qy KUyF2TlbzA== ) ; Key ID = 14070 dren.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20231024054624 20230924052834 1012 dren.mil. ATXxAkhUGzBJ2d14kWNR9tENOCPzB6TFof9kGLSokZFXn9FonBGuglCVHIYLsP1flm0e+lY0xC54 OgSk8Um01k22vXJOdt22Gr/TpAxQ+zyqlVHRMqXG46GoFFMHCcenllFD7HzlqFzG7+MXbXxO7nKe Emhxt+VoCGfkYIxmd+xQrsnsJzCAeuKJF1SCKXBBDVIrQHscwFhlxZfbbTZoC7WJfw2N9tkiUr8O rZI1qrG8Ett6vIiDrzh/+dF2NT0OfGR9t+T94p+W223/ERamdO4boSRuaqifB0BhHyYwPhsVfs0P Xrw+0UjV/bMgA6CiAAHpkdSqBBwfzoFJa0oXmg== ) dren.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20231024054624 20230924052834 47466 dren.mil. ngwcJcPPgK0sycW/U1BsjIJGcPtH4AFlzgXSt5vbr3/QuUSCRIWfLhrXJTqg+t3lLQgtQPLYirYR cdUhcOvK5t7QjGUpJgAtkYjkNVwRr4ymPL7qzgRpbDzwYlZA31Mpm9tlNisd2dmmqvWEMWaQQBgU a4YliIUv3w2aEtU76L0hFhFpnb1q9/rv9JnspMe2AZKMTcPt+0IhCrnxY74HLHh6VYO0rJTOzWXX CxFkhHb41UXCPM4iD/jKsQXEwWAewk1YHNXYbkXDXbDHyExrdd61nn0sQCzluvskonjzUgN3r2IZ aT3tnf3uPdAjtSQ0vc8AqhImUcajReoNjTtKwQ== ) dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231024054624 20230924052834 14070 dren.mil. bcT1teXmS5sl/MSwCpqlojxLB1KtWmn47pABuiqyPnunWX6eCkmKsTyBgzj2JPmHJqNFxbftmjW8 6Rfk/+Gddg== ) dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231024054624 20230924052834 60084 dren.mil. WZh9cONfa5zq7L59S5QUbmoTB8Xz2F2ICf3sij123oUSyK6WZ3yalCC5xJR14GUbUlFZvAvQ+sPY 06XHP4ZaoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for dren.mil
	`dren.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAciReu85C+rbVm7Az/Iwh7PFx5/K8AaqFwA/4Lm4GeZgI0ndkYFy1N4GUIOrkmHud/AG8fOk O0K6wGOn5tTsru1ZR70IOyGAs5VJ2AgQPOKkOM4Mhm/p22RjKlLwRaysPRk9RKxzf9KM+J6zV5LL l7O0arLGn40HpyNBq/Y2bEA99GT7HMIh34tBtqC+1Dbi8w92Ea/+64P4p2zsmlTCEvHUNt81kAHz oGkJDVwQqVOh/9cqCYkCuqnB9JloSFss/wJqsh7Yg2jMkGrUr/5zLN0IpcPf0YfWSiMZFtYrJwE9 9Kq2fzWoNvedrVYvyNEgtWcHvBqPwXHMb+qLzDyWZr0= ) ; Key ID = 1012`
	`dren.mil. 3600 IN DNSKEY ( 256 3 8 AwEAAb1HMGZvgXh6qAtBrShBHVRhQc/VFlLL45KKwVqSGtbAMvVi6L7M6aLdNvQ4jF1wmUfmWHgH tCDIAJHBWe5O3IoiETAMyKVesNlXjse7HvXDdLG05k19ElkaNO8YkdScNC5b6DQ4/lTsSBQyLxRR 6IKgSe09P1eIJZsdoKfuiaRM9sWi2bSSM3A0V3OludDP3mHGMUaorXq45lGPoAzrrQCTRkvpuS7f ON3WNvRZkIw6gsLhxpUerxF59qUr0fvdtyBN9ZyWd9GGrCO1Yf4FeW/7yu3hIK/5amxyNo/vQFhS ESDASUXvdLs9NbJ4RF+mjDWQX3csvaZRteCPk3QMl7k= ) ; Key ID = 47466`
	`dren.mil. 3600 IN DNSKEY ( 257 3 13 ezUxvFvrUv8XhlboLyOpAmYwqW/7U5os9TjZizeU4O5k61epgg//eG+nADeeAg/Nh+PLB73RpBWm JPmoGPbuaw== ) ; Key ID = 60084`
	`dren.mil. 3600 IN DNSKEY ( 256 3 13 wNYg0VFQy4tRJC0HkW8us3f3LLhpPGpLMBf6KHivQPsD8Y+UiW48wKrK1ukSS2majAL42N4xK+Qy KUyF2TlbzA== ) ; Key ID = 14070`
	DNSKEY=60084/SEP is now in the chain-of-trust
	DS=60084/SHA-1 verifies DNSKEY=60084/SEP
	DS=60084/SHA-256 verifies DNSKEY=60084/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`dren.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20231024054624 20230924052834 1012 dren.mil. ATXxAkhUGzBJ2d14kWNR9tENOCPzB6TFof9kGLSokZFXn9FonBGuglCVHIYLsP1flm0e+lY0xC54 OgSk8Um01k22vXJOdt22Gr/TpAxQ+zyqlVHRMqXG46GoFFMHCcenllFD7HzlqFzG7+MXbXxO7nKe Emhxt+VoCGfkYIxmd+xQrsnsJzCAeuKJF1SCKXBBDVIrQHscwFhlxZfbbTZoC7WJfw2N9tkiUr8O rZI1qrG8Ett6vIiDrzh/+dF2NT0OfGR9t+T94p+W223/ERamdO4boSRuaqifB0BhHyYwPhsVfs0P Xrw+0UjV/bMgA6CiAAHpkdSqBBwfzoFJa0oXmg== )`
	`dren.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20231024054624 20230924052834 47466 dren.mil. ngwcJcPPgK0sycW/U1BsjIJGcPtH4AFlzgXSt5vbr3/QuUSCRIWfLhrXJTqg+t3lLQgtQPLYirYR cdUhcOvK5t7QjGUpJgAtkYjkNVwRr4ymPL7qzgRpbDzwYlZA31Mpm9tlNisd2dmmqvWEMWaQQBgU a4YliIUv3w2aEtU76L0hFhFpnb1q9/rv9JnspMe2AZKMTcPt+0IhCrnxY74HLHh6VYO0rJTOzWXX CxFkhHb41UXCPM4iD/jKsQXEwWAewk1YHNXYbkXDXbDHyExrdd61nn0sQCzluvskonjzUgN3r2IZ aT3tnf3uPdAjtSQ0vc8AqhImUcajReoNjTtKwQ== )`
	`dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231024054624 20230924052834 14070 dren.mil. bcT1teXmS5sl/MSwCpqlojxLB1KtWmn47pABuiqyPnunWX6eCkmKsTyBgzj2JPmHJqNFxbftmjW8 6Rfk/+Gddg== )`
	`dren.mil. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231024054624 20230924052834 60084 dren.mil. WZh9cONfa5zq7L59S5QUbmoTB8Xz2F2ICf3sij123oUSyK6WZ3yalCC5xJR14GUbUlFZvAvQ+sPY 06XHP4ZaoA== )`
	RRSIG=1012 and DNSKEY=1012/SEP verifies the DNSKEY RRset
	RRSIG=47466 and DNSKEY=47466 verifies the DNSKEY RRset
	RRSIG=14070 and DNSKEY=14070 verifies the DNSKEY RRset
	RRSIG=60084 and DNSKEY=60084/SEP verifies the DNSKEY RRset
	DNSKEY=1012/SEP is now in the chain-of-trust
	DNSKEY=47466 is now in the chain-of-trust
	DNSKEY=14070 is now in the chain-of-trust
	Query to AUTH-WEST.DREN.MIL for dren.mil/A
	Received 929 bytes from 140.32.61.226
	;; Response received from 140.32.61.226 (929 octets) ;; HEADER SECTION ;; id = 47978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== ) dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	AUTH-WEST.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-EAST.DREN.MIL for dren.mil/SOA
	Received 1050 bytes from 140.32.59.226
	;; Response received from 140.32.59.226 (1050 octets) ;; HEADER SECTION ;; id = 25378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN SOA ;; ANSWER SECTION (3 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) ;; AUTHORITY SECTION (5 records) dren.mil. 3600 IN NS auth-east.dren.mil. dren.mil. 3600 IN NS auth-west.dren.mil. dren.mil. 3600 IN NS ns1.arl.hpc.mil. dren.mil. 3600 IN RRSIG ( NS 8 2 3600 20231023002723 20230923000651 47466 dren.mil. Yz38Y87rB5huw6W8vTvfjVS4sFZ0WkPPErvCZxDItk/hHJndNliLhvkE2Uu+0eWw8XtNZThKn+ay iZbsEOS+Kj17h0wI1Ex380VTjsOy/ABTmPRy6rAX2VtAEZMYizImKM09bz1f3xfD2oakOaiuegto K+dRcS3zIS/98PovnrNttkIFomNyEpOUXP+vY7VxB9zqa1ZuHg+fL46Bwl0pMjf2Kqx/JLsyBmuQ WkQ0cSF0hVO8+3fTRP0e6EbRXvx62tkFy3n+oUPLAOfh6oI3GP9YG2e4oUTcd3V8eByxF/x/+9/9 hHi1i8HeqPKRtPLazGAB1kokFhQJKF4BqLus8w== ) dren.mil. 3600 IN RRSIG ( NS 13 2 3600 20231023002723 20230923000651 14070 dren.mil. FIT/4gTWDh71g1CrNi6GlKB9J5GF++zRSF+bT+IpSQvJXgyHt21M+m532t43TKpURqSkvE1goXj3 9fZZk6occQ== ) ;; ADDITIONAL SECTION (5 records) auth-east.dren.mil. 3600 IN A 140.32.59.226 auth-west.dren.mil. 3600 IN A 140.32.61.226 auth-east.dren.mil. 3600 IN AAAA 2001:480:a0:f003::226 auth-west.dren.mil. 3600 IN AAAA 2001:480:b0:f003::226 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS1.ARL.HPC.MIL for dren.mil/SOA
	Received 1094 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (1094 octets) ;; HEADER SECTION ;; id = 26674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN SOA ;; ANSWER SECTION (3 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) ;; AUTHORITY SECTION (5 records) dren.mil. 3600 IN NS auth-west.dren.mil. dren.mil. 3600 IN NS auth-east.dren.mil. dren.mil. 3600 IN NS ns1.arl.hpc.mil. dren.mil. 3600 IN RRSIG ( NS 8 2 3600 20231023002723 20230923000651 47466 dren.mil. Yz38Y87rB5huw6W8vTvfjVS4sFZ0WkPPErvCZxDItk/hHJndNliLhvkE2Uu+0eWw8XtNZThKn+ay iZbsEOS+Kj17h0wI1Ex380VTjsOy/ABTmPRy6rAX2VtAEZMYizImKM09bz1f3xfD2oakOaiuegto K+dRcS3zIS/98PovnrNttkIFomNyEpOUXP+vY7VxB9zqa1ZuHg+fL46Bwl0pMjf2Kqx/JLsyBmuQ WkQ0cSF0hVO8+3fTRP0e6EbRXvx62tkFy3n+oUPLAOfh6oI3GP9YG2e4oUTcd3V8eByxF/x/+9/9 hHi1i8HeqPKRtPLazGAB1kokFhQJKF4BqLus8w== ) dren.mil. 3600 IN RRSIG ( NS 13 2 3600 20231023002723 20230923000651 14070 dren.mil. FIT/4gTWDh71g1CrNi6GlKB9J5GF++zRSF+bT+IpSQvJXgyHt21M+m532t43TKpURqSkvE1goXj3 9fZZk6occQ== ) ;; ADDITIONAL SECTION (7 records) ns1.arl.hpc.mil. 3600 IN A 140.32.131.142 auth-east.dren.mil. 3600 IN A 140.32.59.226 auth-west.dren.mil. 3600 IN A 140.32.61.226 ns1.arl.hpc.mil. 3600 IN AAAA 2001:480:31:ffff::53 auth-east.dren.mil. 3600 IN AAAA 2001:480:a0:f003::226 auth-west.dren.mil. 3600 IN AAAA 2001:480:b0:f003::226 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to AUTH-WEST.DREN.MIL for dren.mil/A
	Received 929 bytes from 140.32.61.226
	;; Response received from 140.32.61.226 (929 octets) ;; HEADER SECTION ;; id = 11304 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== ) dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 2 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== )`
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== )`
	RRSIG=47466 and DNSKEY=47466 verifies the NSEC RRset
	RRSIG=14070 and DNSKEY=14070 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 2 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== )`
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== )`
	RRSIG=47466 and DNSKEY=47466 verifies the SOA RRset
	RRSIG=14070 and DNSKEY=14070 verifies the SOA RRset

dren.mil

	Query to AUTH-EAST.DREN.MIL for dren.mil/A
	Received 929 bytes from 140.32.59.226
	;; Response received from 140.32.59.226 (929 octets) ;; HEADER SECTION ;; id = 41511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== ) dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	AUTH-EAST.DREN.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to AUTH-EAST.DREN.MIL for dren.mil/A
	Received 929 bytes from 140.32.59.226
	;; Response received from 140.32.59.226 (929 octets) ;; HEADER SECTION ;; id = 14912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== ) dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 2 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== )`
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== )`
	RRSIG=47466 and DNSKEY=47466 verifies the NSEC RRset
	RRSIG=14070 and DNSKEY=14070 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 2 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== )`
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== )`
	RRSIG=47466 and DNSKEY=47466 verifies the SOA RRset
	RRSIG=14070 and DNSKEY=14070 verifies the SOA RRset

dren.mil

	Query to NS1.ARL.HPC.MIL for dren.mil/A
	Received 929 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (929 octets) ;; HEADER SECTION ;; id = 8691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== ) dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS1.ARL.HPC.MIL is authoritative for dren.mil
	Found RRSIG signed by dren.mil zone
	Query to NS1.ARL.HPC.MIL for dren.mil/A
	Received 929 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (929 octets) ;; HEADER SECTION ;; id = 50484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.mil. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2023090803 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== ) dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== ) dren.mil. 3600 IN NSEC _dmarc.dren.mil. NS SOA MX TXT RRSIG NSEC DNSKEY CAA dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== ) dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 2 RRSIGs over NSEC RRset
	`dren.mil. 3600 IN RRSIG ( NSEC 8 2 3600 20231014011942 20230914001942 47466 dren.mil. k/k1vcMMpv9P6D2OWkjrOdE4cv8Y/va6GHpQ8Ln5ZJmUGIuYEmVWbqY0TrZdfNv2ekD5f1pUDbNZ qnkyURaEikRGIqT+Dzk0er4IYWaQY50SF+94zty3GSOgm7oBLOPQ5pJcGunOs40xboGsLtnfkUMN MH9kCRXpM/nzyYYeprRTTWDlmeVh6ixMTgonKjGqjHfPfkpeSSEkElyg12U6lmZTQ5/FIjf80Gda fwCAkObEyWYOhK4iQhkQDvGKaT6QbGVEaBjiHhZ0cSwY0NEwXzovT+4TyR9TqgQKRXjdpD75fSQX mtxrTvlguOR2n5PUO6lfikeAXmqEsA6YQtkTYA== )`
	`dren.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20231014011942 20230914001942 14070 dren.mil. Abdpk6j5YoIULCAybLYo8WsHWll2A3c3wAbgdIN8x72lcxKVpV8PPMTgiSTN9fjD5FV0lyNth2n8 LUY81u05zQ== )`
	RRSIG=47466 and DNSKEY=47466 verifies the NSEC RRset
	RRSIG=14070 and DNSKEY=14070 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.mil
	Found 2 RRSIGs over SOA RRset
	`dren.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231024062834 20230924052834 47466 dren.mil. sAB06QAix/CbSLtrzBqPypykolsPDg4kNMKxXc8SlLMiQ6dUMryA/FAHdduL9DQViyXn9eREj57c 5uW3N6QLGFsrUZ3LSDzz7fZCbzCFOlzU//LsGEHPQxGb2Lvg7k/JOJOKBXrOacFKEJHcdTQOc2vv JFmGhxnbzL9zYY/FwgzRlUqpDQQgbstciCkm1GDwVi/I+daVvkgPrtgmj5EeRfL85NIuFb3gvCP/ XULfh+H8eqRWVKE5mZj/ktOAyzK9W74V5L1yD4YGkptTIFVuBgztXgQMqED1YR56MLXai96a6JW7 kKsE/SdN3RIhDDDrMpcIr3wtEA7hri+Skut6xA== )`
	`dren.mil. 3600 IN RRSIG ( SOA 13 2 3600 20231024062834 20230924052834 14070 dren.mil. IxBXc4+baE+mliNDtqjem7/Vd6icR60871zrBQZDKIlf76JWJ7XEg/CD3NjbBbqhGwAvqH8ZYAZ7 RUsFEWei/A== )`
	RRSIG=47466 and DNSKEY=47466 verifies the SOA RRset
	RRSIG=14070 and DNSKEY=14070 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dren.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: