DNSSEC Analyzer - dren.net

Domain Name:

Time: 2023-09-24 17:12:45 UTC, NTP stratum 4

Analyzing DNSSEC problems for dren.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (1139 octets) ;; HEADER SECTION ;; id = 17064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to k.root-servers.net for dren.net/A
	Received 1168 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (1168 octets) ;; HEADER SECTION ;; id = 5632 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for net/DNSKEY
	Received 1163 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1163 octets) ;; HEADER SECTION ;; id = 42729 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to k.root-servers.net for net/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (367 octets) ;; HEADER SECTION ;; id = 48021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to f.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (775 octets) ;; HEADER SECTION ;; id = 14750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQOstEm49K0FIgk1w6UGsbSAhErae1/r2RYzSpWvUe2ksZ/QcVpVx8GPnjJDb6hFhbU5sbpu89qb g4FmlAAqs9Bn+Lm2E1joNbeiCZ5HRC3/jK0m2D8+YCz6YcnV4EmpMoxxeQdwLAQ3XO6GAttKtApU 493b1XkjIS5sr4DR4uBMlw6rhxiSL7fnVShVzOS7jfPcdglU8qmatZFNMs///cS5 ) ; Key ID = 39455 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231001162830 20230916162330 35886 net. C0+8AhpBvQh8g+1WCw0fqhf19LBWU6OQ6QR7orTH4USucZIVL1fF2zoRLEzpaUmIGQPMTnnXZKyM xuZmijyaUEzj59HYnciFY7HQw/wBPKgDmg1GIXOO8mWEzgaG3WZdxmg/m4taYtP8q4cZjzw0c8An vudWBHeJeoOU+RLnnspJhPWmTzonlb2v5YREnc77MEeSYrI+Cpjvh7W88gxI+XGHtSOc3SWYGUy6 gxwI15kIy1azkmWpKibE0/Z+JVwwsT1RZvRWUK6G+qFa4FzfuGfio4p4mhH+4Dp+Wvf6kpi7BKxd NjI2YASuLfEosbr9SHHv2O04lwCLwOABqfq+dw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQOstEm49K0FIgk1w6UGsbSAhErae1/r2RYzSpWvUe2ksZ/QcVpVx8GPnjJDb6hFhbU5sbpu89qb g4FmlAAqs9Bn+Lm2E1joNbeiCZ5HRC3/jK0m2D8+YCz6YcnV4EmpMoxxeQdwLAQ3XO6GAttKtApU 493b1XkjIS5sr4DR4uBMlw6rhxiSL7fnVShVzOS7jfPcdglU8qmatZFNMs///cS5 ) ; Key ID = 39455`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231001162830 20230916162330 35886 net. C0+8AhpBvQh8g+1WCw0fqhf19LBWU6OQ6QR7orTH4USucZIVL1fF2zoRLEzpaUmIGQPMTnnXZKyM xuZmijyaUEzj59HYnciFY7HQw/wBPKgDmg1GIXOO8mWEzgaG3WZdxmg/m4taYtP8q4cZjzw0c8An vudWBHeJeoOU+RLnnspJhPWmTzonlb2v5YREnc77MEeSYrI+Cpjvh7W88gxI+XGHtSOc3SWYGUy6 gxwI15kIy1azkmWpKibE0/Z+JVwwsT1RZvRWUK6G+qFa4FzfuGfio4p4mhH+4Dp+Wvf6kpi7BKxd NjI2YASuLfEosbr9SHHv2O04lwCLwOABqfq+dw== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=39455 is now in the chain-of-trust
	Query to i.gtld-servers.net for dren.net/A
	Received 410 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (410 octets) ;; HEADER SECTION ;; id = 32532 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.net. 172800 IN NS ns1.arl.hpc.mil. dren.net. 172800 IN NS auth-east.dren.mil. dren.net. 172800 IN NS auth-west.dren.mil. dren.net. 86400 IN DS ( 28488 10 2 b80a758af0689273d9f27503839730d34fc8a371acefe39692b9f5de7f5690b7 ) dren.net. 86400 IN DS ( 25698 10 2 d2b392c6138be174dcd851568859c511a82507277886a932cd11346954d21cd9 ) dren.net. 86400 IN RRSIG ( DS 8 2 86400 20230928065403 20230921054403 39455 net. MBCgtSzZbKXHVXy2BtgyxuTeavaO6HR38kbdOK2+82Q0rcp1VZ7TbzkkKxmXr7O0V2Vwqdo1n7tR h7ymDZboLTtOlcSFmCGJOZL1gyP649rZ4LFLJKCK4zOR1x261tw/i0cukpDz4+Tl5mq1iUljiEg3 UorpuUiTS+PSuJb5PNIxtr8dcoa8GJuKcJRpNhbWcLfibvJpspX/vt2ls/EkDQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.gtld-servers.net for dren.net/DNSKEY
	Received 410 bytes from 192.41.162.30
	;; Response received from 192.41.162.30 (410 octets) ;; HEADER SECTION ;; id = 32967 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dren.net. 172800 IN NS ns1.arl.hpc.mil. dren.net. 172800 IN NS auth-east.dren.mil. dren.net. 172800 IN NS auth-west.dren.mil. dren.net. 86400 IN DS ( 28488 10 2 b80a758af0689273d9f27503839730d34fc8a371acefe39692b9f5de7f5690b7 ) dren.net. 86400 IN DS ( 25698 10 2 d2b392c6138be174dcd851568859c511a82507277886a932cd11346954d21cd9 ) dren.net. 86400 IN RRSIG ( DS 8 2 86400 20230928065403 20230921054403 39455 net. MBCgtSzZbKXHVXy2BtgyxuTeavaO6HR38kbdOK2+82Q0rcp1VZ7TbzkkKxmXr7O0V2Vwqdo1n7tR h7ymDZboLTtOlcSFmCGJOZL1gyP649rZ4LFLJKCK4zOR1x261tw/i0cukpDz4+Tl5mq1iUljiEg3 UorpuUiTS+PSuJb5PNIxtr8dcoa8GJuKcJRpNhbWcLfibvJpspX/vt2ls/EkDQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dren.net

dren.net

	Checking DS between net and dren.net
	Query to m.gtld-servers.net for dren.net/DS
	Received 1200 bytes from 192.55.83.30
	;; Response received from 192.55.83.30 (1200 octets) ;; HEADER SECTION ;; id = 55803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 22 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN DS ;; ANSWER SECTION (3 records) dren.net. 86400 IN DS ( 28488 10 2 b80a758af0689273d9f27503839730d34fc8a371acefe39692b9f5de7f5690b7 ) dren.net. 86400 IN DS ( 25698 10 2 d2b392c6138be174dcd851568859c511a82507277886a932cd11346954d21cd9 ) dren.net. 86400 IN RRSIG ( DS 8 2 86400 20230928065403 20230921054403 39455 net. MBCgtSzZbKXHVXy2BtgyxuTeavaO6HR38kbdOK2+82Q0rcp1VZ7TbzkkKxmXr7O0V2Vwqdo1n7tR h7ymDZboLTtOlcSFmCGJOZL1gyP649rZ4LFLJKCK4zOR1x261tw/i0cukpDz4+Tl5mq1iUljiEg3 UorpuUiTS+PSuJb5PNIxtr8dcoa8GJuKcJRpNhbWcLfibvJpspX/vt2ls/EkDQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20230929065908 20230922054908 39455 net. TUFcgcS1wludkcgm1Y8MwTaAXbUd2UGl+hQUTflUBjSUYsiFG7JUc3/sJOALS8MGDh/YC8pLURcf hT7wdlorPRG8PAi1S5ZLwPOV7kPwmtrBlKBk/y6ukmto3t1NeUzhOmyEp+SiSEPfvMG8iOrchFlP TI/01OsXOi5KdPwIm0w34EjDNFx2RPxVx0N0qpWb+aoUZTr5D9PMsrgoIClRsw== ) ;; ADDITIONAL SECTION (22 records) l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for dren.net in the net zone
	DS=28488/SHA-256 has algorithm RSASHA512
	DS=25698/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`dren.net. 86400 IN RRSIG ( DS 8 2 86400 20230928065403 20230921054403 39455 net. MBCgtSzZbKXHVXy2BtgyxuTeavaO6HR38kbdOK2+82Q0rcp1VZ7TbzkkKxmXr7O0V2Vwqdo1n7tR h7ymDZboLTtOlcSFmCGJOZL1gyP649rZ4LFLJKCK4zOR1x261tw/i0cukpDz4+Tl5mq1iUljiEg3 UorpuUiTS+PSuJb5PNIxtr8dcoa8GJuKcJRpNhbWcLfibvJpspX/vt2ls/EkDQ== )`
	RRSIG=39455 and DNSKEY=39455 verifies the DS RRset
	DS=28488/SHA-256 is now in the chain-of-trust
	DS=25698/SHA-256 is now in the chain-of-trust
	`dren.net. 86400 IN DS ( 28488 10 2 b80a758af0689273d9f27503839730d34fc8a371acefe39692b9f5de7f5690b7 )`
	`dren.net. 86400 IN DS ( 25698 10 2 d2b392c6138be174dcd851568859c511a82507277886a932cd11346954d21cd9 )`
	Query to ns1.arl.hpc.mil for dren.net/DNSKEY
	Received 2205 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (2205 octets) ;; HEADER SECTION ;; id = 35323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN DNSKEY ;; ANSWER SECTION (4 records) dren.net. 3600 IN DNSKEY ( 256 3 10 AwEAAa6qZRQmG8IxkpRiJ1LXv3rB3y9v9+6XRPSW4L5cABJZxnFPLepEma8HMYnACl70xoKLIrGW yplQ/EyA0hHT3IYhoLgm6GtXKqJS6SxGWTbD6qrD9DkjidmlcQHdr1uhAOocFX2CQxUk8IychdKg 8nz2PwyVZ1rNr9vfAgEeppUgXlhY2uBGrQhoUBaG6F42qwd8WtCtTzudgrbLXagB5jLzO20jAiUI 9Ki77gzZDbSd2chJG86JJH4l3SBqjBgKouwAvCf5Ch/i14P8GkocbsGStIL411uVKeSAt/B5sgRM XLR+33GtnnXud4x1wBVcL0FNg50hyjPWJ+78vZ/DaLSllj5XVg/b8NwbICbeyip2eTvZWC8HH1oO vyz+BXWp1Cf4GyxSeZ4FoH5PRNWSeLciuZQpXloMpgK42j+6IfdIeH4akl2oBKVKaQ2BDeZxZN4H UOAsmweC8mJl0edt/SJRSZv1Fo4Hnxa32tudZCXashjE6fY0qtclj8+IcaSJgnBYFKKRgPhzYwTv Pwr6SvgNsv++ECl/1DQlnJ2quuKlMyxHStr8kgWBMcRMnL+xtYhfY0C4cimGvzU0ocfDHN/rtcYo hgNTIHa6FyfegInoex+vRmRZR1YVZ4ebr0czAh7mZndruHbAhjS+BB1M54H5PYpTya1xt2xumW5L DiLf ) ; Key ID = 17708 dren.net. 3600 IN DNSKEY ( 257 3 10 AwEAAbA9RJ0ptCUjwP8Bs2Mn+Glv6JBPh9Hy6WHzhA4kTkRNkmzpCEJy572FUaFk2FyXYWWGQIfU 4QICDJAg/hoBRn6VMFrMYdHdNSKiY4A6kAWRinGSDW4ox2BuASZR6nmSNIukmPGAGFMR9JVTyEfn OldpiPiXC+ia1Vo9oG/FG/9QMtvPd87Q696yfpg6AYsrJjQajnVJcSVRsG9QvNeSpB0hZQhNDnEc gnTCBvtIlmOsy85i/Q1GDuVCJhwM16COrp+k1XMCK6un6Zx8FxVamGCXAntyvlI7ZGyz0BG2nyaW lk2K3BpYLpc5bENWsLBEI8PwebZ/3oYTyCFT/PDH1u5vdg4VJ7OnmaELL7GcL7ep3+vwc0hmPyJM 3TayYsGd5YJ0iwaw9ajwA8dytUJUR2Jchzf/iHPcYkPX+v1pGVPH+zRXbybJS4ALribZxI+bmWCv j6BYFHm7QSy/5DtD+zEVwIRQaDifrTS44sOeNU+irDaC2hIqhuLU9JVRelkY5hl350QpKwJ+mTBS CzC8VopNfNMyMjYhScb2uECc5LAfJsvK6skAXOqKesX4hJLa8DX86wLM0enp/qLDSchYHItFFtkr AUhwyqT7DDRI+jY4m2yunXB/7X0E80FsYygG1ZxikFoj8SYhM9NBr3jOYiev4NLBENkRaolJsEBl Voev ) ; Key ID = 25698 dren.net. 3600 IN RRSIG ( DNSKEY 10 2 3600 20231003081728 20230903075423 17708 dren.net. mrOGZnyn4sf7kSUkBGbYBAy326WMBdFETrbJz1yupEvVWyeFknWxAkIQZmEeR23Sl5WTjgzXodts ZImBDaTXxfRHFhiBd7PDIt2nyhf6/sLfLNXfwjSk694Hp9TiG6hw3oyb43dw8ZKKt1sizhVaKazV MC2L26zec25kcySGmOcYWLCR5tWAAGLZ360FHRsZ9h9GWMmuD0yt+vgoQLsOCWXDqLv2YQKe2o+A F6pVqoMGelcT1I74bdsN6lJjixqNbHXD6awGeklO7c23K/bUDOScYVOZDmzkHHcsNJwIPoe0+PDx 88spLNQmFsKQ56ah3+gGMZG4TbXAuMQB2Y2ev4glUXKeYaRNIG5OFbiqjo/X9svo++qLemYmKjUp IoeCQZ8Am/Zx6g0FLa/AbAbGQqBJMgJzAbqg1m+UhTEl1zSgs+eh3uefnFSIPGsYHFbOp6PXihQO 2eOp5GioUirWemVd5nAhlV+ZT1KzRQ1iMP35SB/6dsw6X5qrhMFgDD9bXiaYXh1uej24qxCX75rw I1cXdu2QL1QMtUcmw1oqWNCkvbbh4ksIbECuFFU8rIPu9z7S+nPvdvoqFgjdfN0wPZ3b05Xz9MaZ xSWXZFdIKXyW9Tq3O8jjoCz5sCRidRhEySUQDq3gWwYpL3u9tbXX4ivU1DZAa6GPsHvTnaZS/tU= ) dren.net. 3600 IN RRSIG ( DNSKEY 10 2 3600 20231003081728 20230903075423 25698 dren.net. Th09Or3IBbTZmnH0DtT3pm+piv3gzQC3V1uLF18xzS5dXJiZ0GnntmisgnlmLND9StIZ4KKLKqzE g9KsEC8ZDs4xoPe7SBAd4ekCz+ccwDBtpJ0s1+eRmmlvCvKbND5SiTQQaiNfaaXu4yge12BtgY/o 2vVs1S0vo29Gt47rKzMe4erDlj7/QZfBOQ4TByyzy3C1R9mA0Z2YhWHHA3/en/896c0/yAyuYiXt qodQ0xB67llF++ASc5bDw/hUjwj4awdCgF9FuQS/mbmueOUdPl9vJqaCygbQQgUxqtBzc5QCUWEb 6vfQhpy6hgJuEr5NQmkCFI1IQsgMx1zO5zFaZEy7R1ykPsulRfobwmmcTintizJ19Dsk5yqZd51T xhtng8rAuxIoTSd2LlmK94Awsj7NsdR9vEt7fJBaliW822scCyrbrKH3LfcXn+fxHQtzxJAvYgrp U8OEPGHLd1Ae5Wy2c9fjSigwvPjAJREjh2rUCDiHkyt9ds1rgIAoWrONkcxXhXXzRYeYGCAUdn28 MSGxSGTYdbOpaiLbWTCTSqq7+zrAO+EAT6wNUCN3/AoCkvVe4io/1Oku3DqBKG7+lTYZ4w58LiUA l148Q8CBuU7QwYzDN/nP7c09OParh1gTzVM3NyZwpO4hv/BmSPfcVjk87M5oeiJ0ZP0kt3AHGw8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dren.net
	dren.net. 3600 IN DNSKEY ( 256 3 10 AwEAAa6qZRQmG8IxkpRiJ1LXv3rB3y9v9+6XRPSW4L5cABJZxnFPLepEma8HMYnACl70xoKLIrGW yplQ/EyA0hHT3IYhoLgm6GtXKqJS6SxGWTbD6qrD9DkjidmlcQHdr1uhAOocFX2CQxUk8IychdKg 8nz2PwyVZ1rNr9vfAgEeppUgXlhY2uBGrQhoUBaG6F42qwd8WtCtTzudgrbLXagB5jLzO20jAiUI 9Ki77gzZDbSd2chJG86JJH4l3SBqjBgKouwAvCf5Ch/i14P8GkocbsGStIL411uVKeSAt/B5sgRM XLR+33GtnnXud4x1wBVcL0FNg50hyjPWJ+78vZ/DaLSllj5XVg/b8NwbICbeyip2eTvZWC8HH1oO vyz+BXWp1Cf4GyxSeZ4FoH5PRNWSeLciuZQpXloMpgK42j+6IfdIeH4akl2oBKVKaQ2BDeZxZN4H UOAsmweC8mJl0edt/SJRSZv1Fo4Hnxa32tudZCXashjE6fY0qtclj8+IcaSJgnBYFKKRgPhzYwTv Pwr6SvgNsv++ECl/1DQlnJ2quuKlMyxHStr8kgWBMcRMnL+xtYhfY0C4cimGvzU0ocfDHN/rtcYo hgNTIHa6FyfegInoex+vRmRZR1YVZ4ebr0czAh7mZndruHbAhjS+BB1M54H5PYpTya1xt2xumW5L DiLf ) ; Key ID = 17708
	dren.net. 3600 IN DNSKEY ( 257 3 10 AwEAAbA9RJ0ptCUjwP8Bs2Mn+Glv6JBPh9Hy6WHzhA4kTkRNkmzpCEJy572FUaFk2FyXYWWGQIfU 4QICDJAg/hoBRn6VMFrMYdHdNSKiY4A6kAWRinGSDW4ox2BuASZR6nmSNIukmPGAGFMR9JVTyEfn OldpiPiXC+ia1Vo9oG/FG/9QMtvPd87Q696yfpg6AYsrJjQajnVJcSVRsG9QvNeSpB0hZQhNDnEc gnTCBvtIlmOsy85i/Q1GDuVCJhwM16COrp+k1XMCK6un6Zx8FxVamGCXAntyvlI7ZGyz0BG2nyaW lk2K3BpYLpc5bENWsLBEI8PwebZ/3oYTyCFT/PDH1u5vdg4VJ7OnmaELL7GcL7ep3+vwc0hmPyJM 3TayYsGd5YJ0iwaw9ajwA8dytUJUR2Jchzf/iHPcYkPX+v1pGVPH+zRXbybJS4ALribZxI+bmWCv j6BYFHm7QSy/5DtD+zEVwIRQaDifrTS44sOeNU+irDaC2hIqhuLU9JVRelkY5hl350QpKwJ+mTBS CzC8VopNfNMyMjYhScb2uECc5LAfJsvK6skAXOqKesX4hJLa8DX86wLM0enp/qLDSchYHItFFtkr AUhwyqT7DDRI+jY4m2yunXB/7X0E80FsYygG1ZxikFoj8SYhM9NBr3jOYiev4NLBENkRaolJsEBl Voev ) ; Key ID = 25698
	DNSKEY=25698/SEP is now in the chain-of-trust
	DS=25698/SHA-256 verifies DNSKEY=25698/SEP
	DS=28488/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	dren.net. 3600 IN RRSIG ( DNSKEY 10 2 3600 20231003081728 20230903075423 17708 dren.net. mrOGZnyn4sf7kSUkBGbYBAy326WMBdFETrbJz1yupEvVWyeFknWxAkIQZmEeR23Sl5WTjgzXodts ZImBDaTXxfRHFhiBd7PDIt2nyhf6/sLfLNXfwjSk694Hp9TiG6hw3oyb43dw8ZKKt1sizhVaKazV MC2L26zec25kcySGmOcYWLCR5tWAAGLZ360FHRsZ9h9GWMmuD0yt+vgoQLsOCWXDqLv2YQKe2o+A F6pVqoMGelcT1I74bdsN6lJjixqNbHXD6awGeklO7c23K/bUDOScYVOZDmzkHHcsNJwIPoe0+PDx 88spLNQmFsKQ56ah3+gGMZG4TbXAuMQB2Y2ev4glUXKeYaRNIG5OFbiqjo/X9svo++qLemYmKjUp IoeCQZ8Am/Zx6g0FLa/AbAbGQqBJMgJzAbqg1m+UhTEl1zSgs+eh3uefnFSIPGsYHFbOp6PXihQO 2eOp5GioUirWemVd5nAhlV+ZT1KzRQ1iMP35SB/6dsw6X5qrhMFgDD9bXiaYXh1uej24qxCX75rw I1cXdu2QL1QMtUcmw1oqWNCkvbbh4ksIbECuFFU8rIPu9z7S+nPvdvoqFgjdfN0wPZ3b05Xz9MaZ xSWXZFdIKXyW9Tq3O8jjoCz5sCRidRhEySUQDq3gWwYpL3u9tbXX4ivU1DZAa6GPsHvTnaZS/tU= )
	dren.net. 3600 IN RRSIG ( DNSKEY 10 2 3600 20231003081728 20230903075423 25698 dren.net. Th09Or3IBbTZmnH0DtT3pm+piv3gzQC3V1uLF18xzS5dXJiZ0GnntmisgnlmLND9StIZ4KKLKqzE g9KsEC8ZDs4xoPe7SBAd4ekCz+ccwDBtpJ0s1+eRmmlvCvKbND5SiTQQaiNfaaXu4yge12BtgY/o 2vVs1S0vo29Gt47rKzMe4erDlj7/QZfBOQ4TByyzy3C1R9mA0Z2YhWHHA3/en/896c0/yAyuYiXt qodQ0xB67llF++ASc5bDw/hUjwj4awdCgF9FuQS/mbmueOUdPl9vJqaCygbQQgUxqtBzc5QCUWEb 6vfQhpy6hgJuEr5NQmkCFI1IQsgMx1zO5zFaZEy7R1ykPsulRfobwmmcTintizJ19Dsk5yqZd51T xhtng8rAuxIoTSd2LlmK94Awsj7NsdR9vEt7fJBaliW822scCyrbrKH3LfcXn+fxHQtzxJAvYgrp U8OEPGHLd1Ae5Wy2c9fjSigwvPjAJREjh2rUCDiHkyt9ds1rgIAoWrONkcxXhXXzRYeYGCAUdn28 MSGxSGTYdbOpaiLbWTCTSqq7+zrAO+EAT6wNUCN3/AoCkvVe4io/1Oku3DqBKG7+lTYZ4w58LiUA l148Q8CBuU7QwYzDN/nP7c09OParh1gTzVM3NyZwpO4hv/BmSPfcVjk87M5oeiJ0ZP0kt3AHGw8= )
	RRSIG=17708 and DNSKEY=17708 verifies the DNSKEY RRset
	RRSIG=25698 and DNSKEY=25698/SEP verifies the DNSKEY RRset
	DNSKEY=17708 is now in the chain-of-trust
	Query to auth-west.dren.mil for dren.net/A
	Received 1244 bytes from 140.32.61.226
	;; Response received from 140.32.61.226 (1244 octets) ;; HEADER SECTION ;; id = 22610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) dren.net. 3600 IN NSEC ( _jabber._tcp.dren.net. NS SOA MX TXT RRSIG NSEC DNSKEY ) dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	auth-west.dren.mil is authoritative for dren.net
	Found RRSIG signed by dren.net zone
	Query to auth-east.dren.mil for dren.net/SOA
	Received 1274 bytes from 140.32.59.226
	;; Response received from 140.32.59.226 (1274 octets) ;; HEADER SECTION ;; id = 20294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN SOA ;; ANSWER SECTION (2 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN NS ns1.arl.hpc.mil. dren.net. 3600 IN NS auth-west.dren.mil. dren.net. 3600 IN NS auth-east.dren.mil. dren.net. 3600 IN RRSIG ( NS 10 2 3600 20231017124404 20230917115954 17708 dren.net. j8ceCXVM8bplAbjiE1wM3XRusEG4yCHVkoIqik4KMYgyie8pxBetI5U7+N+f/dQd2R64b786qiYy X1ZgdGHkuBF0fJ+w5i+pvGSCB7uyFwinL3S2Gg/I1o5gNTr5WgLbe4l0Zevnt/KzRJCZ6EeOFJ3g jptYWUua1LYxeM+6O/4NzPafqpLbLKZwnZHyG+oBvzup1BXb+pmvaGtt28sdZYc/nDIleQSDhmTZ KyaxVTZPBeQKbgfN6Euvt8xT3PE6oQh7Oh2cN8lfgJAH/evhL5I0IjWtys6wd/4sVBzm9aQ+QlQa wF1i2YYk6n9zWRNSMiIlk02mPI/ZnhftO1Qzbx+BkWPcP8zyxZiCNZW2YBdY7/OcVVA0GpqnB3NE BH6wEPrK2MagQN5q1KfRL8tOVwEdkXlTXqwJTP0j0ledsvgL7TVTW7otpqvsYSX/w5rHRYHdFpK/ R7M+GMD8ywj4dltaRlDZmANl1Y9C06bbFOT84jRn0bAgk/x0I9ouTIN8IloVLsGr7+Sq+blU7CqB eyQ44YcyL6MJAoFWEu5ciw5Dxwn9UFhD8nMGEF7OLG2ZW/VH52iVxWlwzNN8YX4iHaRKEtjMS2bQ m2uQ1pnlhWR84gifGaa0vYO/OOJzR8ElVy8C5qxFpUiqrqzniBzm0xyGQga4pVap4jYHA2oHgKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.arl.hpc.mil for dren.net/SOA
	Received 3220 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (3220 octets) ;; HEADER SECTION ;; id = 53294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN SOA ;; ANSWER SECTION (2 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN NS auth-east.dren.mil. dren.net. 3600 IN NS auth-west.dren.mil. dren.net. 3600 IN NS ns1.arl.hpc.mil. dren.net. 3600 IN RRSIG ( NS 10 2 3600 20231017124404 20230917115954 17708 dren.net. j8ceCXVM8bplAbjiE1wM3XRusEG4yCHVkoIqik4KMYgyie8pxBetI5U7+N+f/dQd2R64b786qiYy X1ZgdGHkuBF0fJ+w5i+pvGSCB7uyFwinL3S2Gg/I1o5gNTr5WgLbe4l0Zevnt/KzRJCZ6EeOFJ3g jptYWUua1LYxeM+6O/4NzPafqpLbLKZwnZHyG+oBvzup1BXb+pmvaGtt28sdZYc/nDIleQSDhmTZ KyaxVTZPBeQKbgfN6Euvt8xT3PE6oQh7Oh2cN8lfgJAH/evhL5I0IjWtys6wd/4sVBzm9aQ+QlQa wF1i2YYk6n9zWRNSMiIlk02mPI/ZnhftO1Qzbx+BkWPcP8zyxZiCNZW2YBdY7/OcVVA0GpqnB3NE BH6wEPrK2MagQN5q1KfRL8tOVwEdkXlTXqwJTP0j0ledsvgL7TVTW7otpqvsYSX/w5rHRYHdFpK/ R7M+GMD8ywj4dltaRlDZmANl1Y9C06bbFOT84jRn0bAgk/x0I9ouTIN8IloVLsGr7+Sq+blU7CqB eyQ44YcyL6MJAoFWEu5ciw5Dxwn9UFhD8nMGEF7OLG2ZW/VH52iVxWlwzNN8YX4iHaRKEtjMS2bQ m2uQ1pnlhWR84gifGaa0vYO/OOJzR8ElVy8C5qxFpUiqrqzniBzm0xyGQga4pVap4jYHA2oHgKk= ) ;; ADDITIONAL SECTION (17 records) ns1.arl.hpc.mil. 3600 IN A 140.32.131.142 auth-east.dren.mil. 3600 IN A 140.32.59.226 auth-west.dren.mil. 3600 IN A 140.32.61.226 ns1.arl.hpc.mil. 3600 IN AAAA 2001:480:31:ffff::53 auth-east.dren.mil. 3600 IN AAAA 2001:480:a0:f003::226 auth-west.dren.mil. 3600 IN AAAA 2001:480:b0:f003::226 ns1.arl.hpc.mil. 3600 IN RRSIG ( A 13 4 3600 20230929123308 20230922122817 59220 arl.hpc.mil. 1MLoU6p6fThjzwG/JVJ1KZIhDGm1psvZfgKz+ErqPyW8dDqbi2klOAsFI5Gxk2BNg7Q9K3fDVeTr WrPwqzVefg== ) ns1.arl.hpc.mil. 3600 IN RRSIG ( AAAA 13 4 3600 20230929172405 20230922172346 59220 arl.hpc.mil. aTpW0GNx7xuamgF01Xtd/92DZWR6nEYVw87MRjl8UQTG3h4mwIBdmcTZjfA5lcM++t7k842vOH3G w55k7dE/LQ== ) auth-east.dren.mil. 3600 IN RRSIG ( A 8 3 3600 20231023004122 20230922234338 47466 dren.mil. gtU7cqgxQ/bup6BOAdTkaIA/K3Xu4UqJfHxgPQ1ORq4akvPDIFYP+UGzvz7sBm3YCsNk0L8GOZwI hh861D2gYxTTENGeDtAmyVAUtWxUoPUht9bwNxgcJErZFpAJ+wI6t5mFJ5nbxtQ7muiXCAIJ8oth xbT2QYvgDFUCYf/0uiBkriuklbaxzNosVBbSV74RIjXPlYt4adVCXj0OIxEdGcduIEUb/2LMBhUe LBtxt3Xgmhy6u/5SanwWSh9VPHACTsybIF3Fm5zFu2PUpjM9FdPyMoMHDO+WQwmO7APvo4Jevoxe t74ktsklvYhuLInUCzBIVlvXTPOP8bzAKjicCg== ) auth-east.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20231023004122 20230922234338 14070 dren.mil. QknO6b4ThLtdP5DGzMV1ElnQfqut9cHxn6qX1DWy8eWzbP2BrM9kPpZehc6wuKu2dF0jQ07ozkfJ 9cyroRnTag== ) auth-east.dren.mil. 3600 IN RRSIG ( AAAA 8 3 3600 20231023004122 20230922234338 47466 dren.mil. ZKDHqqFL4bC/jqqlDRO8ZqKjqO2jI7HsAAEpcz4hjC24cLyFt7XOlcrZN4Unjb2KGtbvki7UQnbn CX6w6VZ6D7IY6Bnsj1v6Vvw9Z2I92OqHtbui+xqvxlHcVN0GqPKS7MD/tHS0mP1Mw1MXy2yaYqId 79WVTcxWDulsOSoTHL8cvVdy7qXWx6qPZjJ+5NkiU5GfSsW5+6LgUyf3GPFa0Opo5ngLk4H4t05d jt0bgxTYyWEs2azGDxjwdgczw9KDxRdag9H36c6Gd89mWvmR+gyl+7O30yKyCxImxbPDijsGqtie 71m+tM9rjBLU629zagc5egPl8st4T5SnieKPKw== ) auth-east.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20231023004122 20230922234338 14070 dren.mil. GSex6nGoDfYz9vuIG5m2tlTzufy9OgSrOjZmnVDXK+XVRtKNK0gFWscFRZmH6MfV+eWQDqyaX0eF BFGspQdiXw== ) auth-west.dren.mil. 3600 IN RRSIG ( A 8 3 3600 20231023004122 20230922234338 47466 dren.mil. HQkatJdujTT4tWzHPvickECSOFaCkiG3TEQsBCWjcen7JzSAiwGU9DcVpXxiXDHMUzQqpE75JIPn Rx4Z3LJIWxNpt8MShU1Q61600BGRDZgvAjvU5WS26cyymLU7itqwT0smBc8NPb8xpIIJ3zBHTPO6 I3V90wot33SCXYYjA8wFuuH6qcaZsXRcn6xCmIuFSSh38ocHGLEZeakp967PTvntbaO+FkzOZTGZ uGMN98PGtggkxIbJP0gz5Sg9Qq3gA7Woth+dKtfXnRaipM6lzQ58FuoQQWpDGLzw3l/9EEBDugyy HYjwxm4Ohfkzz1pQT6pOEjrzXDQ9cz2acLI3Ew== ) auth-west.dren.mil. 3600 IN RRSIG ( A 13 3 3600 20231023004122 20230922234338 14070 dren.mil. S5rFonCXJDkPhVIE1+vten9BvacvZ8YtnRr4Tu+FBoMEMJITOTQ1pvT2WPBGug1wlPv2PEsQN9sV bHBVgGUmFA== ) auth-west.dren.mil. 3600 IN RRSIG ( AAAA 8 3 3600 20231023004122 20230922234338 47466 dren.mil. N3UjXXh4UQQiwbmxb9dHX0fK96WxhbZwxLVNnpqxUSIxwvMwltRWWkpV9YRMJH1VNUKt8KBcz/qF qLIEiWawbVoKh/SFp+H/wx7n8cq96oLg0FPgWEd4w6UX2NKqgGZWICEAB/iqYXF0Fd+DeXEKhfpF ZJ9vcP4fygePB1Gv+7uRkrryAPAUOlXWSowY+3oV80PJRxRkHsoEammyTHREczLdGpafpRRL3oic +SdHVc5JRYOWoraWMdBTElSbug3oKwGfz1iSc/taRfXyUTgA7cqyZWlfy4wCfZIOMrv+IXPnY0sf Ueo7/PB1afWg+lZ8hkh5gTis0wGbajnsNEroDA== ) auth-west.dren.mil. 3600 IN RRSIG ( AAAA 13 3 3600 20231023004122 20230922234338 14070 dren.mil. ONYyJ0dUK+7iFlWdQuOBRnKlVdDafBAFi28NX/rMBRzfF2mEaXo6VikE9s7xewNsLioKMNqeSu/k AN0lgroHbQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth-west.dren.mil for dren.net/A
	Received 1244 bytes from 140.32.61.226
	;; Response received from 140.32.61.226 (1244 octets) ;; HEADER SECTION ;; id = 58948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) dren.net. 3600 IN NSEC ( _jabber._tcp.dren.net. NS SOA MX TXT RRSIG NSEC DNSKEY ) dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= )
	RRSIG=17708 and DNSKEY=17708 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.net
	Found 1 RRSIGs over SOA RRset
	dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= )
	RRSIG=17708 and DNSKEY=17708 verifies the SOA RRset

dren.net

	Query to ns1.arl.hpc.mil for dren.net/A
	Received 1244 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (1244 octets) ;; HEADER SECTION ;; id = 42331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) dren.net. 3600 IN NSEC ( _jabber._tcp.dren.net. NS SOA MX TXT RRSIG NSEC DNSKEY ) dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.arl.hpc.mil is authoritative for dren.net
	Found RRSIG signed by dren.net zone
	Query to ns1.arl.hpc.mil for dren.net/A
	Received 1244 bytes from 140.32.131.142
	;; Response received from 140.32.131.142 (1244 octets) ;; HEADER SECTION ;; id = 33069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) dren.net. 3600 IN NSEC ( _jabber._tcp.dren.net. NS SOA MX TXT RRSIG NSEC DNSKEY ) dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= )
	RRSIG=17708 and DNSKEY=17708 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.net
	Found 1 RRSIGs over SOA RRset
	dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= )
	RRSIG=17708 and DNSKEY=17708 verifies the SOA RRset

dren.net

	Query to auth-east.dren.mil for dren.net/A
	Received 1244 bytes from 140.32.59.226
	;; Response received from 140.32.59.226 (1244 octets) ;; HEADER SECTION ;; id = 13359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) dren.net. 3600 IN NSEC ( _jabber._tcp.dren.net. NS SOA MX TXT RRSIG NSEC DNSKEY ) dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	auth-east.dren.mil is authoritative for dren.net
	Found RRSIG signed by dren.net zone
	Query to auth-east.dren.mil for dren.net/A
	Received 1244 bytes from 140.32.59.226
	;; Response received from 140.32.59.226 (1244 octets) ;; HEADER SECTION ;; id = 38776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dren.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dren.net. 3600 IN SOA ( nsm.dren.mil. hostmaster.dren.mil. 2022112092 ;serial 10800 ;refresh 3600 ;retry 691200 ;expire 3600 ;minimum ) dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= ) dren.net. 3600 IN NSEC ( _jabber._tcp.dren.net. NS SOA MX TXT RRSIG NSEC DNSKEY ) dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	dren.net. 3600 IN RRSIG ( NSEC 10 2 3600 20231005211116 20230905210921 17708 dren.net. RU2WNCLihEaEyk6DEf9aDynyrBu31JpWp8aMtpNND4IjXSFbjzuUlb5BBeiTBA0PuZHXyWX3nHmP 69+IhAeNxiemch/SR+n7AqIaz+P6bwWIztqtFk8dIfQrT/FMX9eWQLIlec/9wIjWSGT3vRBOewly KWDOYdImxJSelcdY84uVE7uA/Awit33ZE4hP8wx9SCxsvPhBEh4MAFc2db2c1gKySWFcWYmABSZj sLqzuQOxZxjtAtcglodfh+VTBuh5NyGRixzp03meE/rH1TogE9l6qzJe6+v7LcliLFAhJO3OkSpg IVewhp+TKzwewyJz75cPbjrXtJT7Nq7A+b7jbYh3PchA6EDhgZSSWBFxN8flQ9u5tX8pV/we8HA7 uutPzXXTHkTR7VKLFbhQQG9asjxHe8bWhOe6mAcBUAIiZHvAA1lNXdy7uPwq2bKsPR3T+SX6m/Su PQwTerB4hVyFCCwMVGTeqtBRqo1PR+ITxVjR6vJTXbDmxanSMkdhf8kFPtevsaK0yusltyDWFpfQ 1x30Vel5WA8xO7fybTzRgCXHLRjxRiIrhtMSiL1lpyXAH2TIe6kprbjnLkfzHVKM4R7p3jrMBM4X gtCnQeRitBRF0r+AyqPE/1WAGdkWQnJQ8ffygp0Hs3LVJpbc1Hx89KOqpHsvErX0uHDGh6a0Ftk= )
	RRSIG=17708 and DNSKEY=17708 verifies the NSEC RRset
	NSEC proves no records of type A exist for dren.net
	Found 1 RRSIGs over SOA RRset
	dren.net. 3600 IN RRSIG ( SOA 10 2 3600 20231017180730 20230917170730 17708 dren.net. m8RbTdMhssaSZ5x0oyOTVIHAe/BY+/66HIBk8m2dPi13bg3NY8t3Y4eaWmF0IvSzcVkxu0QlGnW7 u+JQjNSxbZ+SCGayjBsWPZ53Z6VEGoEVHjw5/x5mO6ysnZw0UdILkgNpBP5ydTiSWEJOBzL+Pa7A RrZWBtHhDZ9aFv/N1nOGd9V6OGOsBEgzLaOHDWl66H8vlELHbuYk6cyNcZKWf+UObua1OHND2x7O kRe7k1Ik3jpUlOdVPd0uPt+o8e4opnetmQFLpD9KJQcsP+BkVrslZX/UWZh3CdARi+rjyFI9N+bU 4BgIDtXn5hp43TG5u5YEN6U6qlBiM+GoePEm6LgIcSptEMEttlIjOo3KoOkOlSJAF9m6Ef8ohGVm 2iEhUrdMHMdq9zcQEoULdnbfwWLGozJqDqGvRcubo5jMBM5qqj48rj55ubWSZs4ZQnmin1XJnE1i i3SBBnRfbhCMkaJsWlv4mrGtAINeml4zcPNthst9Wyff0BfmhGFUQcqzSx1N2Pq23qSy6woGOTL8 HrKTftCAMG8V/KL6HI+JpIfHpDqi/SqYNCC6kCSIw37sqUBkA0+W9niL5qbWPiouvefWvUu+krij erWmrqg2rm0kZpUo9mC4KospsMGYWwK1HbeS32BHLUnItd6DCvxrwj9LOKD9QME/GM0sZYSxzk0= )
	RRSIG=17708 and DNSKEY=17708 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dren.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: