DNSSEC Analyzer - dspo.mil

Domain Name:

Time: 2023-09-24 17:56:45 UTC, NTP stratum 4

Analyzing DNSSEC problems for dspo.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (1139 octets) ;; HEADER SECTION ;; id = 64554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to g.root-servers.net for dspo.mil/A
	Received 806 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (806 octets) ;; HEADER SECTION ;; id = 33930 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for mil/DNSKEY
	Received 798 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (798 octets) ;; HEADER SECTION ;; id = 44207 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to k.root-servers.net for mil/DS
	Received 415 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (415 octets) ;; HEADER SECTION ;; id = 37552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (1628 octets) ;; HEADER SECTION ;; id = 52171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=44065 is now in the chain-of-trust
	DNSKEY=14098 is now in the chain-of-trust
	Query to con2.nipr.mil for dspo.mil/A
	Received 433 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (433 octets) ;; HEADER SECTION ;; id = 4978 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DSPO.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. DSPO.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. DSPO.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. DSPO.MIL. 10800 IN DS 60412 8 1 5d559c2d69d182e3cc3e3cd4d134207b5fd25e09 DSPO.MIL. 10800 IN DS ( 60412 8 2 64170421594cd4f097a8c8952f92a78714909429667ab44a1a8896fd3f52b5f9 ) DSPO.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. T558tl23y0wqQPdnvohmTpyGGhGm8Mns599OugjYq1r4FdtZxmrAcNzLKfurs9xgi/WaLWzJ0DFV nUynjYgr3h8/kzpV6ujbbPu4SRR2j2W4xHXeH4IldXU+Z5YQdoCe9PYaXYbh6xrQ71bfbr2CwO3f psMzC/ZdMj27BihOlPU= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to eur2.nipr.mil for dspo.mil/DNSKEY
	Received 433 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (433 octets) ;; HEADER SECTION ;; id = 27436 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DSPO.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. DSPO.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. DSPO.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. DSPO.MIL. 10800 IN DS ( 60412 8 2 64170421594cd4f097a8c8952f92a78714909429667ab44a1a8896fd3f52b5f9 ) DSPO.MIL. 10800 IN DS 60412 8 1 5d559c2d69d182e3cc3e3cd4d134207b5fd25e09 DSPO.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. T558tl23y0wqQPdnvohmTpyGGhGm8Mns599OugjYq1r4FdtZxmrAcNzLKfurs9xgi/WaLWzJ0DFV nUynjYgr3h8/kzpV6ujbbPu4SRR2j2W4xHXeH4IldXU+Z5YQdoCe9PYaXYbh6xrQ71bfbr2CwO3f psMzC/ZdMj27BihOlPU= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dspo.mil

dspo.mil

	Checking DS between mil and dspo.mil
	Query to eur2.nipr.mil for dspo.mil/DS
	Received 292 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (292 octets) ;; HEADER SECTION ;; id = 33337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN DS ;; ANSWER SECTION (3 records) DSPO.MIL. 10800 IN DS 60412 8 1 5d559c2d69d182e3cc3e3cd4d134207b5fd25e09 DSPO.MIL. 10800 IN DS ( 60412 8 2 64170421594cd4f097a8c8952f92a78714909429667ab44a1a8896fd3f52b5f9 ) DSPO.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. T558tl23y0wqQPdnvohmTpyGGhGm8Mns599OugjYq1r4FdtZxmrAcNzLKfurs9xgi/WaLWzJ0DFV nUynjYgr3h8/kzpV6ujbbPu4SRR2j2W4xHXeH4IldXU+Z5YQdoCe9PYaXYbh6xrQ71bfbr2CwO3f psMzC/ZdMj27BihOlPU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for dspo.mil in the mil zone
	DS=60412/SHA-1 has algorithm RSASHA256
	DS=60412/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DSPO.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. T558tl23y0wqQPdnvohmTpyGGhGm8Mns599OugjYq1r4FdtZxmrAcNzLKfurs9xgi/WaLWzJ0DFV nUynjYgr3h8/kzpV6ujbbPu4SRR2j2W4xHXeH4IldXU+Z5YQdoCe9PYaXYbh6xrQ71bfbr2CwO3f psMzC/ZdMj27BihOlPU= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=60412/SHA-1 is now in the chain-of-trust
	`DSPO.MIL. 10800 IN DS 60412 8 1 5d559c2d69d182e3cc3e3cd4d134207b5fd25e09`
	`DSPO.MIL. 10800 IN DS ( 60412 8 2 64170421594cd4f097a8c8952f92a78714909429667ab44a1a8896fd3f52b5f9 )`
	Query to DNS-PUB-F2-U.PENTAGON.MIL for dspo.mil/DNSKEY
	Received 1813 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (1813 octets) ;; HEADER SECTION ;; id = 61170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN DNSKEY ;; ANSWER SECTION (8 records) dspo.mil. 601066 IN DNSKEY ( 257 3 8 AwEAAZi1bzhnsZPt+qnX4m+PZ7R1GNQPPiTeCHh6kZxReweUa2QYP+jUDPDyoovZNvpHbUNyBKeA 4CfmneJKQfIDe+KMgBA3eaqRsXLIuTLvQiuB19QsHBrtpQimT4g14x/tp826BqsMKrtaggCwfnpA xdAcvZlkOar0BOZ8YeOKsFJFoV94QJSjAkVpRmwwOgB2JrPFeqJpn6Y5giLcj1uO8DWVusQuVqG4 eqJ3fsvVCNj10SFszBVXQ3nWyuuGQI6YOexuj4lVnHd87nGliMJhNwDPLSRt0BvE+oGvboIPYWtp x1gE3DbNeZ9+80AtQLdpN+1N1dNjtoCvo3nNFMOo068= ) ; Key ID = 60412 dspo.mil. 601066 IN DNSKEY ( 256 3 8 AwEAAbXr/vum78gV54lVpLRRlsfIh3LztPZ7m66v53fdJMDOYBDGCxAn9MRp660qLi8mWXfplLGd oy9xtFVriPjYqMThdTFacUKQMQ/uvri3CuiXEmAvfLPZ9sc72hM4ikmNkFGbR94SrPkYzR4v54DY wax8AcpmkbE1WZoqniztEAIh ) ; Key ID = 29943 dspo.mil. 601066 IN DNSKEY ( 256 3 8 AwEAAc21cyYzErZtlELH7Wf5ZFFozriAc42HqYA5x8lHVccgvR4pgTiKxyQTZWPMmBfxzujaYjqH gT+c8FiYZvA7SXUAWXwIOwtX60ZJXZGdYGeleqddTSz5OfiRTjrhMlWVnbP+YRrB1n6fYQXc75Nr ihWcHc9Of9ryI6INe2AJ8JIF ) ; Key ID = 23553 dspo.mil. 601066 IN DNSKEY ( 257 3 8 AwEAAfkK1FQrGqz3ZtdUDaxbd+ts0xEwnN1yTE9w2p1ac+GxWk4RtTsFuYOHXFAA9Ga9XwckE4EW zVNUaA5wNcoiW73cJRbKBMv5noXJDtpjHBk3pKzfuZJrmtKKQndMVsnG4Wf37XpwKqletg3Nt2wQ DOwV0Z7INV1L9qLxvexR/ZhwapCu1TbF0uKEDi7ctK4IyjaquleUV57bzk2mM9oILLhtxGoyI+G4 dD8z3gp6/pPh6UkObVruwxAKgvgXlAb5BSdGJvOgl4xDcGeAESijQeXu3pR5LaqvCm2bgLGfn9ef QvpYzLtMbWQBqC3T15NvUK/js4+vRCXS9eem37C6ZiU= ) ; Key ID = 10036 dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 10036 dspo.mil. b7iq7h2vZ/v8tyIBKB5XWtEWpvhOR313oKry7D+fxYus6r+MkoUeqgtND+YR6O9Qkt95KAxjC7A2 2tHZDS6eQp7aFuMgy3h64hOKruNmd5qzSCaBWSZzq1eY0WAPRitRFdvkfBo5pfe1qCH9AMgJrbMu V3GaDzjFqEg9YLrGT3SXaLmQkMiJT6KSSCsi5sV3L3e+df5c4sNyYZQmdHhG7Df77n/vqOvEsshW hJ6Mc+BWGv39T1slSQN54LZXck6EJt55w0ltpey2Fnwne+Gdy1u7Uhtxnmt8AiyTrV/Hnkqbmxrc 96xpaievqKyEgc9p5MQ4TcQpOr7wNDpXuHwtQw== ) dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 23553 dspo.mil. d7cvYGNe+47wjBvJnC40GfEOx86dNKsIcj6JrFTWwgQhB18IfkAL9n54UXx2zgGIONUjOUi2Jwi+ CmKIK5GnnxN/TMqzu59GsZjI6JWZIWg0ukLIo2BvRPRBm8gVX+2HBl0OALQ8ZBH0C5rJ5j3WRzjg 7VK4/9r75dZTjAlXVJY= ) dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 29943 dspo.mil. NTb9sMvMQ5jt8FBNq+v/s7WiR6wtk6pRU4lBBQig0Wdx6T25CX3brHMxKSdoSP8ydUmW1mZkitb1 Nx85s81q2SGAsx8yHenIxqhdJY9C+UoYNaU6XN0voGp8O1eJuFjuqQDDoyJqkt4Mu3fKGMkLMUvM jZQeFz3XGBzqSbGLySg= ) dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 60412 dspo.mil. DXAsck0qJvT2rdh6mL+IoFji65DMi2SBxb4z7sYK8Cuom8EMDpp9KeLVgoL383FblaEU5S4GnFfN ut1R8q/xfU+ZZcNZndnC0QHjubedrMGY4xUETLlnjv/JdOhbVqpWkcAa/xlYfz0BLp3cEvrENCwt pDXhWTr5gAzbrtu9pLT1+2l1tKusKElm8zaVDUOj6YsrpCBs3pejeWlNAV0RrTGBL5zWyGQugAIG OtbfFaa5RdEl3EFFAcQOf3cJLOIyNVzdEuxQZZ8FVtye4XRwfpeHWEcYkKKdC/41SFYgbKP7zg40 8PEJrpOyRBF44OfgMWQ2eGF9mimmphEzBEqsBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for dspo.mil
	`dspo.mil. 601066 IN DNSKEY ( 257 3 8 AwEAAZi1bzhnsZPt+qnX4m+PZ7R1GNQPPiTeCHh6kZxReweUa2QYP+jUDPDyoovZNvpHbUNyBKeA 4CfmneJKQfIDe+KMgBA3eaqRsXLIuTLvQiuB19QsHBrtpQimT4g14x/tp826BqsMKrtaggCwfnpA xdAcvZlkOar0BOZ8YeOKsFJFoV94QJSjAkVpRmwwOgB2JrPFeqJpn6Y5giLcj1uO8DWVusQuVqG4 eqJ3fsvVCNj10SFszBVXQ3nWyuuGQI6YOexuj4lVnHd87nGliMJhNwDPLSRt0BvE+oGvboIPYWtp x1gE3DbNeZ9+80AtQLdpN+1N1dNjtoCvo3nNFMOo068= ) ; Key ID = 60412`
	`dspo.mil. 601066 IN DNSKEY ( 256 3 8 AwEAAbXr/vum78gV54lVpLRRlsfIh3LztPZ7m66v53fdJMDOYBDGCxAn9MRp660qLi8mWXfplLGd oy9xtFVriPjYqMThdTFacUKQMQ/uvri3CuiXEmAvfLPZ9sc72hM4ikmNkFGbR94SrPkYzR4v54DY wax8AcpmkbE1WZoqniztEAIh ) ; Key ID = 29943`
	`dspo.mil. 601066 IN DNSKEY ( 256 3 8 AwEAAc21cyYzErZtlELH7Wf5ZFFozriAc42HqYA5x8lHVccgvR4pgTiKxyQTZWPMmBfxzujaYjqH gT+c8FiYZvA7SXUAWXwIOwtX60ZJXZGdYGeleqddTSz5OfiRTjrhMlWVnbP+YRrB1n6fYQXc75Nr ihWcHc9Of9ryI6INe2AJ8JIF ) ; Key ID = 23553`
	`dspo.mil. 601066 IN DNSKEY ( 257 3 8 AwEAAfkK1FQrGqz3ZtdUDaxbd+ts0xEwnN1yTE9w2p1ac+GxWk4RtTsFuYOHXFAA9Ga9XwckE4EW zVNUaA5wNcoiW73cJRbKBMv5noXJDtpjHBk3pKzfuZJrmtKKQndMVsnG4Wf37XpwKqletg3Nt2wQ DOwV0Z7INV1L9qLxvexR/ZhwapCu1TbF0uKEDi7ctK4IyjaquleUV57bzk2mM9oILLhtxGoyI+G4 dD8z3gp6/pPh6UkObVruwxAKgvgXlAb5BSdGJvOgl4xDcGeAESijQeXu3pR5LaqvCm2bgLGfn9ef QvpYzLtMbWQBqC3T15NvUK/js4+vRCXS9eem37C6ZiU= ) ; Key ID = 10036`
	DNSKEY=60412/SEP is now in the chain-of-trust
	DS=60412/SHA-1 verifies DNSKEY=60412/SEP
	DS=60412/SHA-256 verifies DNSKEY=60412/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 10036 dspo.mil. b7iq7h2vZ/v8tyIBKB5XWtEWpvhOR313oKry7D+fxYus6r+MkoUeqgtND+YR6O9Qkt95KAxjC7A2 2tHZDS6eQp7aFuMgy3h64hOKruNmd5qzSCaBWSZzq1eY0WAPRitRFdvkfBo5pfe1qCH9AMgJrbMu V3GaDzjFqEg9YLrGT3SXaLmQkMiJT6KSSCsi5sV3L3e+df5c4sNyYZQmdHhG7Df77n/vqOvEsshW hJ6Mc+BWGv39T1slSQN54LZXck6EJt55w0ltpey2Fnwne+Gdy1u7Uhtxnmt8AiyTrV/Hnkqbmxrc 96xpaievqKyEgc9p5MQ4TcQpOr7wNDpXuHwtQw== )`
	`dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 23553 dspo.mil. d7cvYGNe+47wjBvJnC40GfEOx86dNKsIcj6JrFTWwgQhB18IfkAL9n54UXx2zgGIONUjOUi2Jwi+ CmKIK5GnnxN/TMqzu59GsZjI6JWZIWg0ukLIo2BvRPRBm8gVX+2HBl0OALQ8ZBH0C5rJ5j3WRzjg 7VK4/9r75dZTjAlXVJY= )`
	`dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 29943 dspo.mil. NTb9sMvMQ5jt8FBNq+v/s7WiR6wtk6pRU4lBBQig0Wdx6T25CX3brHMxKSdoSP8ydUmW1mZkitb1 Nx85s81q2SGAsx8yHenIxqhdJY9C+UoYNaU6XN0voGp8O1eJuFjuqQDDoyJqkt4Mu3fKGMkLMUvM jZQeFz3XGBzqSbGLySg= )`
	`dspo.mil. 601066 IN RRSIG ( DNSKEY 8 2 1296000 20231023134555 20230923125529 60412 dspo.mil. DXAsck0qJvT2rdh6mL+IoFji65DMi2SBxb4z7sYK8Cuom8EMDpp9KeLVgoL383FblaEU5S4GnFfN ut1R8q/xfU+ZZcNZndnC0QHjubedrMGY4xUETLlnjv/JdOhbVqpWkcAa/xlYfz0BLp3cEvrENCwt pDXhWTr5gAzbrtu9pLT1+2l1tKusKElm8zaVDUOj6YsrpCBs3pejeWlNAV0RrTGBL5zWyGQugAIG OtbfFaa5RdEl3EFFAcQOf3cJLOIyNVzdEuxQZZ8FVtye4XRwfpeHWEcYkKKdC/41SFYgbKP7zg40 8PEJrpOyRBF44OfgMWQ2eGF9mimmphEzBEqsBQ== )`
	RRSIG=10036 and DNSKEY=10036/SEP verifies the DNSKEY RRset
	RRSIG=23553 and DNSKEY=23553 verifies the DNSKEY RRset
	RRSIG=29943 and DNSKEY=29943 verifies the DNSKEY RRset
	RRSIG=60412 and DNSKEY=60412/SEP verifies the DNSKEY RRset
	DNSKEY=29943 is now in the chain-of-trust
	DNSKEY=23553 is now in the chain-of-trust
	DNSKEY=10036/SEP is now in the chain-of-trust
	Query to DNS-PUB-F1-U.PENTAGON.MIL for dspo.mil/A
	Received 861 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (861 octets) ;; HEADER SECTION ;; id = 25146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dspo.mil. 3288 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN NSEC3 ( 1 0 10 663291747d kj63h6a07fs5as6bvgajs1vo48fh7nih NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 23553 dspo.mil. TLvCPf/5W5+InQ0kjnIpoWbi/EOgfMIanDAKqBfQB5KIRrY7jxdbbgh+NMtuhAMTRUpVcosR3ELl LptWvCN6ZEpgW87nQNG98xeKB7oPRTuA9ziEh0VhMgKqcAZp0jOLm7/6iqw7IfMDZontCDFTWcqD Jcc+Zk7nifSuJunP19Y= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 29943 dspo.mil. ck4qVRQUoENRbdh6sPWWybioRywoKISPeOEUk6Lme0pp9JXoATPIph1j6m7zY08OBkz8cl+rEGwe LcFirK8fytX9dAQGtn236O7jeFaZ2wSzhNyFIr6Ht0hj6XHY1RIYPEwApK2Ij1gZ6RNmReZWa5gY lL9Rx7QwktHuX9REMxI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F1-U.PENTAGON.MIL is authoritative for dspo.mil
	Found RRSIG signed by dspo.mil zone
	Query to DNS-PUB-F3-U.PENTAGON.MIL for dspo.mil/SOA
	Received 440 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (440 octets) ;; HEADER SECTION ;; id = 14848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN SOA ;; ANSWER SECTION (3 records) dspo.mil. 43200 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 43200 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 43200 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS-PUB-F2-U.PENTAGON.MIL for dspo.mil/SOA
	Received 440 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (440 octets) ;; HEADER SECTION ;; id = 27485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN SOA ;; ANSWER SECTION (3 records) dspo.mil. 43200 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 43200 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 43200 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS-PUB-F1-U.PENTAGON.MIL for dspo.mil/A
	Received 861 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (861 octets) ;; HEADER SECTION ;; id = 14809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dspo.mil. 3288 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN NSEC3 ( 1 0 10 663291747d kj63h6a07fs5as6bvgajs1vo48fh7nih NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 23553 dspo.mil. TLvCPf/5W5+InQ0kjnIpoWbi/EOgfMIanDAKqBfQB5KIRrY7jxdbbgh+NMtuhAMTRUpVcosR3ELl LptWvCN6ZEpgW87nQNG98xeKB7oPRTuA9ziEh0VhMgKqcAZp0jOLm7/6iqw7IfMDZontCDFTWcqD Jcc+Zk7nifSuJunP19Y= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 29943 dspo.mil. ck4qVRQUoENRbdh6sPWWybioRywoKISPeOEUk6Lme0pp9JXoATPIph1j6m7zY08OBkz8cl+rEGwe LcFirK8fytX9dAQGtn236O7jeFaZ2wSzhNyFIr6Ht0hj6XHY1RIYPEwApK2Ij1gZ6RNmReZWa5gY lL9Rx7QwktHuX9REMxI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= )`
	`dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= )`
	RRSIG=23553 and DNSKEY=23553 verifies the SOA RRset
	RRSIG=29943 and DNSKEY=29943 verifies the SOA RRset

dspo.mil

	Query to DNS-PUB-F3-U.PENTAGON.MIL for dspo.mil/A
	Received 861 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (861 octets) ;; HEADER SECTION ;; id = 55763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dspo.mil. 3288 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN NSEC3 ( 1 0 10 663291747d kj63h6a07fs5as6bvgajs1vo48fh7nih NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 23553 dspo.mil. TLvCPf/5W5+InQ0kjnIpoWbi/EOgfMIanDAKqBfQB5KIRrY7jxdbbgh+NMtuhAMTRUpVcosR3ELl LptWvCN6ZEpgW87nQNG98xeKB7oPRTuA9ziEh0VhMgKqcAZp0jOLm7/6iqw7IfMDZontCDFTWcqD Jcc+Zk7nifSuJunP19Y= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 29943 dspo.mil. ck4qVRQUoENRbdh6sPWWybioRywoKISPeOEUk6Lme0pp9JXoATPIph1j6m7zY08OBkz8cl+rEGwe LcFirK8fytX9dAQGtn236O7jeFaZ2wSzhNyFIr6Ht0hj6XHY1RIYPEwApK2Ij1gZ6RNmReZWa5gY lL9Rx7QwktHuX9REMxI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F3-U.PENTAGON.MIL is authoritative for dspo.mil
	Found RRSIG signed by dspo.mil zone
	Query to DNS-PUB-F3-U.PENTAGON.MIL for dspo.mil/A
	Received 861 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (861 octets) ;; HEADER SECTION ;; id = 39539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dspo.mil. 3288 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN NSEC3 ( 1 0 10 663291747d kj63h6a07fs5as6bvgajs1vo48fh7nih NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 23553 dspo.mil. TLvCPf/5W5+InQ0kjnIpoWbi/EOgfMIanDAKqBfQB5KIRrY7jxdbbgh+NMtuhAMTRUpVcosR3ELl LptWvCN6ZEpgW87nQNG98xeKB7oPRTuA9ziEh0VhMgKqcAZp0jOLm7/6iqw7IfMDZontCDFTWcqD Jcc+Zk7nifSuJunP19Y= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3288 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 29943 dspo.mil. ck4qVRQUoENRbdh6sPWWybioRywoKISPeOEUk6Lme0pp9JXoATPIph1j6m7zY08OBkz8cl+rEGwe LcFirK8fytX9dAQGtn236O7jeFaZ2wSzhNyFIr6Ht0hj6XHY1RIYPEwApK2Ij1gZ6RNmReZWa5gY lL9Rx7QwktHuX9REMxI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= )`
	`dspo.mil. 3288 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= )`
	RRSIG=23553 and DNSKEY=23553 verifies the SOA RRset
	RRSIG=29943 and DNSKEY=29943 verifies the SOA RRset

dspo.mil

	Query to DNS-PUB-F2-U.PENTAGON.MIL for dspo.mil/A
	Received 861 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (861 octets) ;; HEADER SECTION ;; id = 60178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dspo.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 23553 dspo.mil. TLvCPf/5W5+InQ0kjnIpoWbi/EOgfMIanDAKqBfQB5KIRrY7jxdbbgh+NMtuhAMTRUpVcosR3ELl LptWvCN6ZEpgW87nQNG98xeKB7oPRTuA9ziEh0VhMgKqcAZp0jOLm7/6iqw7IfMDZontCDFTWcqD Jcc+Zk7nifSuJunP19Y= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 29943 dspo.mil. ck4qVRQUoENRbdh6sPWWybioRywoKISPeOEUk6Lme0pp9JXoATPIph1j6m7zY08OBkz8cl+rEGwe LcFirK8fytX9dAQGtn236O7jeFaZ2wSzhNyFIr6Ht0hj6XHY1RIYPEwApK2Ij1gZ6RNmReZWa5gY lL9Rx7QwktHuX9REMxI= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3600 IN NSEC3 ( 1 0 10 663291747d kj63h6a07fs5as6bvgajs1vo48fh7nih NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F2-U.PENTAGON.MIL is authoritative for dspo.mil
	Found RRSIG signed by dspo.mil zone
	Query to DNS-PUB-F2-U.PENTAGON.MIL for dspo.mil/A
	Received 861 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (861 octets) ;; HEADER SECTION ;; id = 32326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dspo.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dspo.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 1605 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) dspo.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= ) dspo.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3600 IN NSEC3 ( 1 0 10 663291747d kj63h6a07fs5as6bvgajs1vo48fh7nih NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 23553 dspo.mil. TLvCPf/5W5+InQ0kjnIpoWbi/EOgfMIanDAKqBfQB5KIRrY7jxdbbgh+NMtuhAMTRUpVcosR3ELl LptWvCN6ZEpgW87nQNG98xeKB7oPRTuA9ziEh0VhMgKqcAZp0jOLm7/6iqw7IfMDZontCDFTWcqD Jcc+Zk7nifSuJunP19Y= ) 1B0RTDNJ6GMMGV2HC5TL1LD780Q34V8K.dspo.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231023134555 20230923125529 29943 dspo.mil. ck4qVRQUoENRbdh6sPWWybioRywoKISPeOEUk6Lme0pp9JXoATPIph1j6m7zY08OBkz8cl+rEGwe LcFirK8fytX9dAQGtn236O7jeFaZ2wSzhNyFIr6Ht0hj6XHY1RIYPEwApK2Ij1gZ6RNmReZWa5gY lL9Rx7QwktHuX9REMxI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`dspo.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 23553 dspo.mil. uoQ48s9oUJZUvZnRGn9zuhIyz4Zi05Gs7c+lKMMp+JpqU6jIGw/D3BSGKItaDwuaRhW/Dvrrqqpa lR5C6GJ6oeV3nQRPzE4K/Vcmjinbrbs6gaoVWZ38pVdUD1a5gSpijJFVhc+BvY4MdU4W3kzQDKKD thCV2ZXmcm5BagK5KQk= )`
	`dspo.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231023173939 20230923163939 29943 dspo.mil. ezLqnDxRGdal+PMwNh8+95nEjDkIDxjtX4cqtebortPn/eoCtNg2MoejyHvN6liyVXhD+W+c2c2s yzWQf1nq/DN5ZdbOOV62iDjJEFDSfn07Jj/8EA7t258CBXxLMQ9S9avXwtqBoOzAHsrXXK7W+Ugk plItEC6Q1g93FeXfS98= )`
	RRSIG=23553 and DNSKEY=23553 verifies the SOA RRset
	RRSIG=29943 and DNSKEY=29943 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dspo.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: