DNSSEC Debugger - dtic.mil

Domain Name:

Time: 2025-05-21 04:11:18 UTC

Analyzing DNSSEC problems for dtic.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 36490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	Query to e.root-servers.net for dtic.mil/A
	Received 755 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 755 octets ;; HEADER SECTION ;; id = 24073 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . ID6rtFSb/bptZXARrzLf1VzSyiW3l72Z9mB8n0KcqUQPpbk3xZS+2X29qZ38nNsIa9flUzf6ec97 /lEtplxmvjf1CUGSH5BTZbgz+sphCRVliDP6wLHSt78QfDwicthHqj3uRNFoWZiOyZsfkO0oDSUt KL3NNV5gcQisPgxiQBH0k/m+WpsqrpHXvjxX6yPN0MIOq9ItWzDk01OQ0MXwcJlrLARGJ3fK7quq Gr5UkeXWvx7UqYABpjee51feV/m4RYxJW8oGOROSgr6Nf7sKr1VdgJ06L8YoX5BLtNPEsc6IRh54 0rm4kD68RO/5p5tREzwpkBlNEasaYErdlIHflQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 750 octets ;; HEADER SECTION ;; id = 10131 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . ID6rtFSb/bptZXARrzLf1VzSyiW3l72Z9mB8n0KcqUQPpbk3xZS+2X29qZ38nNsIa9flUzf6ec97 /lEtplxmvjf1CUGSH5BTZbgz+sphCRVliDP6wLHSt78QfDwicthHqj3uRNFoWZiOyZsfkO0oDSUt KL3NNV5gcQisPgxiQBH0k/m+WpsqrpHXvjxX6yPN0MIOq9ItWzDk01OQ0MXwcJlrLARGJ3fK7quq Gr5UkeXWvx7UqYABpjee51feV/m4RYxJW8oGOROSgr6Nf7sKr1VdgJ06L8YoX5BLtNPEsc6IRh54 0rm4kD68RO/5p5tREzwpkBlNEasaYErdlIHflQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 24211 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . ID6rtFSb/bptZXARrzLf1VzSyiW3l72Z9mB8n0KcqUQPpbk3xZS+2X29qZ38nNsIa9flUzf6ec97 /lEtplxmvjf1CUGSH5BTZbgz+sphCRVliDP6wLHSt78QfDwicthHqj3uRNFoWZiOyZsfkO0oDSUt KL3NNV5gcQisPgxiQBH0k/m+WpsqrpHXvjxX6yPN0MIOq9ItWzDk01OQ0MXwcJlrLARGJ3fK7quq Gr5UkeXWvx7UqYABpjee51feV/m4RYxJW8oGOROSgr6Nf7sKr1VdgJ06L8YoX5BLtNPEsc6IRh54 0rm4kD68RO/5p5tREzwpkBlNEasaYErdlIHflQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=63500/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20250602170000 20250520160000 53148 . ID6rtFSb/bptZXARrzLf1VzSyiW3l72Z9mB8n0KcqUQPpbk3xZS+2X29qZ38nNsIa9flUzf6ec97 /lEtplxmvjf1CUGSH5BTZbgz+sphCRVliDP6wLHSt78QfDwicthHqj3uRNFoWZiOyZsfkO0oDSUt KL3NNV5gcQisPgxiQBH0k/m+WpsqrpHXvjxX6yPN0MIOq9ItWzDk01OQ0MXwcJlrLARGJ3fK7quq Gr5UkeXWvx7UqYABpjee51feV/m4RYxJW8oGOROSgr6Nf7sKr1VdgJ06L8YoX5BLtNPEsc6IRh54 0rm4kD68RO/5p5tREzwpkBlNEasaYErdlIHflQ== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=63500/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 )`
	Query to eur2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 1061 octets ;; HEADER SECTION ;; id = 34528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdMKFuRf2WnTOPuYPW66iQIsPnxjugRBz3F3kK8o9cUPc3IRy6wwxg/XTzJUBJF8irM+QsUj 7iQvPZrWVEcxzLpH/nqE2Buj5ov7Psjdr/TJcHdH8GczQIzMyweUczqpDbyYv2A5dqEscnQU3bBA YnY5UUDg52j9FqXfE+s5KWq9 ) ; keytag 55824 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250527235231 20250520235231 55824 mil. bNw5TAFlEF/wxkljOZeoqpHCNw9xz0TDouNRja4AXxdA22exQLiHfPgu/+GR/tqhFEONd7Fb2/JO +chbBFZ0EjtbRReXuz+Ct2Qm/sy18HG/j/nYMokXm3B9Ouek6gm4DI9savJsKK7KZ4Ujv7uPf80D drLfI/N1srN/P4SHET8= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250527235231 20250520235231 63500 mil. c+Ufkie/+h+oKCOGAxlpd/uZoVU7gv+KUi/w6k5OAvCFF8+HNZ/5O/ezZXFHOOQnnid0BeJy1B+v OpJ995TC+r9nfcWP6FRLTgtaWWGi3sbBMY6YSwFW1N9gahu5ynz/q3A5i1UhAx9DcjxkU0RpvCqj hx/m7HlPhYgZ1Fn1vOPUYVpRBSOYYX7WgHhCTexh/iLxzaCVKIXhZC4BradZF1kY5y6yk4tBvhDM CYp2yBsehMDFyg37jtKOTkZN39HXX5vuJctp1MgN+tw4qfVQ2ZqoyqfM77yPfbQSLJkaG9x1PomL GXRNAghAn7hqsYnHnwsm2Dqi5esXYNmdcQJ9cw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdMKFuRf2WnTOPuYPW66iQIsPnxjugRBz3F3kK8o9cUPc3IRy6wwxg/XTzJUBJF8irM+QsUj 7iQvPZrWVEcxzLpH/nqE2Buj5ov7Psjdr/TJcHdH8GczQIzMyweUczqpDbyYv2A5dqEscnQU3bBA YnY5UUDg52j9FqXfE+s5KWq9 ) ; keytag 55824`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128`
	DNSKEY=63500/SEP is now in the chain-of-trust
	DS=63500/SHA-256 verifies DNSKEY=63500/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250527235231 20250520235231 55824 mil. bNw5TAFlEF/wxkljOZeoqpHCNw9xz0TDouNRja4AXxdA22exQLiHfPgu/+GR/tqhFEONd7Fb2/JO +chbBFZ0EjtbRReXuz+Ct2Qm/sy18HG/j/nYMokXm3B9Ouek6gm4DI9savJsKK7KZ4Ujv7uPf80D drLfI/N1srN/P4SHET8= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250527235231 20250520235231 63500 mil. c+Ufkie/+h+oKCOGAxlpd/uZoVU7gv+KUi/w6k5OAvCFF8+HNZ/5O/ezZXFHOOQnnid0BeJy1B+v OpJ995TC+r9nfcWP6FRLTgtaWWGi3sbBMY6YSwFW1N9gahu5ynz/q3A5i1UhAx9DcjxkU0RpvCqj hx/m7HlPhYgZ1Fn1vOPUYVpRBSOYYX7WgHhCTexh/iLxzaCVKIXhZC4BradZF1kY5y6yk4tBvhDM CYp2yBsehMDFyg37jtKOTkZN39HXX5vuJctp1MgN+tw4qfVQ2ZqoyqfM77yPfbQSLJkaG9x1PomL GXRNAghAn7hqsYnHnwsm2Dqi5esXYNmdcQJ9cw== )`
	RRSIG=55824 and DNSKEY=55824 verifies the DNSKEY RRset
	RRSIG=63500 and DNSKEY=63500/SEP verifies the DNSKEY RRset
	DNSKEY=55824 is now in the chain-of-trust
	DNSKEY=14128 is now in the chain-of-trust
	Query to con2.nipr.mil for dtic.mil/A
	Received 678 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 678 octets ;; HEADER SECTION ;; id = 4811 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 ) DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250527235231 20250520235231 55824 mil. gK/4RlJ5gNetGYikk36TuoTKq2cQ7s6kKdottpXyg27+oqXHZ5q9IWJndcYWdhhe6MtyotQlEnNW 0cSU11X+dXwr0MpWFPotQkANccYEV3I4gMHxJoRV35KrqUw7iHSkksuv35MLLnuC0jZczatl0Etd wjLzg1CBbuRN+0o/GyM= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to con1.nipr.mil for dtic.mil/DNSKEY
	Received 678 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 678 octets ;; HEADER SECTION ;; id = 24882 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 ) DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250527235231 20250520235231 55824 mil. gK/4RlJ5gNetGYikk36TuoTKq2cQ7s6kKdottpXyg27+oqXHZ5q9IWJndcYWdhhe6MtyotQlEnNW 0cSU11X+dXwr0MpWFPotQkANccYEV3I4gMHxJoRV35KrqUw7iHSkksuv35MLLnuC0jZczatl0Etd wjLzg1CBbuRN+0o/GyM= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dtic.mil

dtic.mil

	Checking DS between mil and dtic.mil
	Query to pac2.nipr.mil for dtic.mil/DS
	Received 292 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 292 octets ;; HEADER SECTION ;; id = 47944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DS ;; ANSWER SECTION (3 records) DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 ) DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250527235231 20250520235231 55824 mil. gK/4RlJ5gNetGYikk36TuoTKq2cQ7s6kKdottpXyg27+oqXHZ5q9IWJndcYWdhhe6MtyotQlEnNW 0cSU11X+dXwr0MpWFPotQkANccYEV3I4gMHxJoRV35KrqUw7iHSkksuv35MLLnuC0jZczatl0Etd wjLzg1CBbuRN+0o/GyM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dtic.mil in the mil zone
	DS=9884/SHA-1 uses a deprecated digest algorithm
	DS=9884/SHA-256 has algorithm ECDSAP256SHA256
	DS=9884/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250527235231 20250520235231 55824 mil. gK/4RlJ5gNetGYikk36TuoTKq2cQ7s6kKdottpXyg27+oqXHZ5q9IWJndcYWdhhe6MtyotQlEnNW 0cSU11X+dXwr0MpWFPotQkANccYEV3I4gMHxJoRV35KrqUw7iHSkksuv35MLLnuC0jZczatl0Etd wjLzg1CBbuRN+0o/GyM= )`
	RRSIG=55824 and DNSKEY=55824 verifies the DS RRset
	DS=9884/SHA-256 is now in the chain-of-trust
	`DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 )`
	`DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd`
	Query to DNS1.NIPR.MIL for dtic.mil/DNSKEY
	Received 301 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 301 octets ;; HEADER SECTION ;; id = 26511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dtic.mil. 28585 IN DNSKEY ( 257 3 13 g14l53MNnHRyHNSnqWSCCy9nJOTfu8tamf7s+VitXebIcAxeEwv4qnXDZekBnsTIEQFkr74HS42R iRZJ8f4e9A== ) ; keytag 9884 dtic.mil. 28585 IN DNSKEY ( 256 3 13 ZJTiFz6r+KqUP4+oWBlm3+906UeImQ0P7yM/R6HD4byucT0shluuNNViLA9LuxufuaCCuYgXAvce MVJ7ERYPZg== ) ; keytag 26317 dtic.mil. 28585 IN RRSIG ( DNSKEY 13 2 86400 20250522163942 20250515162328 9884 dtic.mil. xqQcRZYCa654QmxhDBtQmE3Etd3K3cLbR/kvmz+ljIkK9lHbdtZUf/Pj/4JFk0Xe/vjLqAPx47j6 QLH4+MwIlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dtic.mil
	`dtic.mil. 28585 IN DNSKEY ( 257 3 13 g14l53MNnHRyHNSnqWSCCy9nJOTfu8tamf7s+VitXebIcAxeEwv4qnXDZekBnsTIEQFkr74HS42R iRZJ8f4e9A== ) ; keytag 9884`
	`dtic.mil. 28585 IN DNSKEY ( 256 3 13 ZJTiFz6r+KqUP4+oWBlm3+906UeImQ0P7yM/R6HD4byucT0shluuNNViLA9LuxufuaCCuYgXAvce MVJ7ERYPZg== ) ; keytag 26317`
	DNSKEY=9884/SEP is now in the chain-of-trust
	DS=9884/SHA-256 verifies DNSKEY=9884/SEP
	DS=9884/SHA-1 verifies DNSKEY=9884/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dtic.mil. 28585 IN RRSIG ( DNSKEY 13 2 86400 20250522163942 20250515162328 9884 dtic.mil. xqQcRZYCa654QmxhDBtQmE3Etd3K3cLbR/kvmz+ljIkK9lHbdtZUf/Pj/4JFk0Xe/vjLqAPx47j6 QLH4+MwIlA== )`
	RRSIG=9884 and DNSKEY=9884/SEP verifies the DNSKEY RRset
	DNSKEY=26317 is now in the chain-of-trust
	Query to DNS1.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 52069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1884 IN A 214.48.248.101 dtic.mil. 1884 IN A 214.48.244.101 dtic.mil. 1884 IN A 214.48.252.101 dtic.mil. 1884 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS4.NIPR.MIL for dtic.mil/SOA
	Error querying DNS4.NIPR.MIL/199.252.143.243 for dtic.mil/SOA: 'query timed out'
	All Queries to DNS4.NIPR.MIL for dtic.mil/SOA timed out or failed
	Query to DNS3.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 25556 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 10807 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528040330 20250521030330 26317 dtic.mil. bEUbnuQ3vHOJSaL3vPTuDG9oIisZSJPcsnde4UdvgeIZXrxoJSikiZOLNHSlgKEWwStGAdtsGhEQ qzw4ieHS7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 55607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 10807 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528040330 20250521030330 26317 dtic.mil. bEUbnuQ3vHOJSaL3vPTuDG9oIisZSJPcsnde4UdvgeIZXrxoJSikiZOLNHSlgKEWwStGAdtsGhEQ qzw4ieHS7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 202 octets ;; HEADER SECTION ;; id = 28903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 10807 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528040330 20250521030330 26317 dtic.mil. bEUbnuQ3vHOJSaL3vPTuDG9oIisZSJPcsnde4UdvgeIZXrxoJSikiZOLNHSlgKEWwStGAdtsGhEQ qzw4ieHS7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 55437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 10807 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250528040330 20250521030330 26317 dtic.mil. bEUbnuQ3vHOJSaL3vPTuDG9oIisZSJPcsnde4UdvgeIZXrxoJSikiZOLNHSlgKEWwStGAdtsGhEQ qzw4ieHS7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 19349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1881 IN A 214.48.248.101 dtic.mil. 1881 IN A 214.48.244.101 dtic.mil. 1881 IN A 214.48.252.101 dtic.mil. 1881 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 1881 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== )`
	RRSIG=26317 and DNSKEY=26317 verifies the A RRset

dtic.mil

	Query to DNS3.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 51246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5031 IN A 214.48.244.101 dtic.mil. 5031 IN A 214.48.252.101 dtic.mil. 5031 IN A 214.48.248.101 dtic.mil. 5031 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS3.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 16936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5031 IN A 214.48.244.101 dtic.mil. 5031 IN A 214.48.252.101 dtic.mil. 5031 IN A 214.48.248.101 dtic.mil. 5031 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5031 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== )`
	RRSIG=26317 and DNSKEY=26317 verifies the A RRset

dtic.mil

	Query to DNS2.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 35641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5792 IN A 214.48.244.101 dtic.mil. 5792 IN A 214.48.248.101 dtic.mil. 5792 IN A 214.48.252.101 dtic.mil. 5792 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS2.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 46605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5792 IN A 214.48.244.101 dtic.mil. 5792 IN A 214.48.248.101 dtic.mil. 5792 IN A 214.48.252.101 dtic.mil. 5792 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5792 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== )`
	RRSIG=26317 and DNSKEY=26317 verifies the A RRset

dtic.mil

	Query to DNS5.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 43078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5031 IN A 214.48.244.101 dtic.mil. 5031 IN A 214.48.252.101 dtic.mil. 5031 IN A 214.48.248.101 dtic.mil. 5031 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS5.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 52430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5031 IN A 214.48.244.101 dtic.mil. 5031 IN A 214.48.252.101 dtic.mil. 5031 IN A 214.48.248.101 dtic.mil. 5031 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5031 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== )`
	RRSIG=26317 and DNSKEY=26317 verifies the A RRset

dtic.mil

	Query to DNS6.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 3214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5792 IN A 214.48.244.101 dtic.mil. 5792 IN A 214.48.248.101 dtic.mil. 5792 IN A 214.48.252.101 dtic.mil. 5792 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS6.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 25017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5792 IN A 214.48.244.101 dtic.mil. 5792 IN A 214.48.248.101 dtic.mil. 5792 IN A 214.48.252.101 dtic.mil. 5792 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5792 IN RRSIG ( A 13 2 7200 20250527163816 20250520161001 26317 dtic.mil. y+GREWgEnsD5rrWkjX4wMITgzcwQouAwD9P5KdUR52IHWc/q2joVjEkiBdZ/ybqc7gMshVvv3A5n aQ3gOz4DkA== )`
	RRSIG=26317 and DNSKEY=26317 verifies the A RRset

dtic.mil

No response from dtic.mil nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dtic.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: