DNSSEC Debugger - dtic.mil

Domain Name:

Time: 2026-02-13 06:36:58 UTC

Analyzing DNSSEC problems for dtic.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 10548 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to f.root-servers.net for dtic.mil/A
	Received 755 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 755 octets ;; HEADER SECTION ;; id = 53638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . cj0RlxswHSct9Oee2e8mz+uUNovrfY63ODsjElpwJXKGdkep2ZD+FlYvuXBSmZ99LjE7hSurx4/g k1Z3Rnb8JvhXpJ7zoHoMrlgqCq1Z/EE4Fs7s2cw2nQEtEFf/V5i0Ic2CUqn+B3qmF21E7hJqQySX +0RNSmloAMGIVZlof3P65KjIU1wfbX64jZ0rWULFqyZch3Cg4zIbvoVOrn1jO75VHI3OPR8/FL4r 85oVey0Sbpd0XVfvqCUggf42jRjhN69wQdGFEZhAlAF70KiyBQngNATf26MqiSxQRsT9olfL3I1+ 3AocCA28IGLZ2qW++oYAZ/w11MHLGOp5JLwatg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for mil/DNSKEY
	Received 750 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 750 octets ;; HEADER SECTION ;; id = 33415 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . cj0RlxswHSct9Oee2e8mz+uUNovrfY63ODsjElpwJXKGdkep2ZD+FlYvuXBSmZ99LjE7hSurx4/g k1Z3Rnb8JvhXpJ7zoHoMrlgqCq1Z/EE4Fs7s2cw2nQEtEFf/V5i0Ic2CUqn+B3qmF21E7hJqQySX +0RNSmloAMGIVZlof3P65KjIU1wfbX64jZ0rWULFqyZch3Cg4zIbvoVOrn1jO75VHI3OPR8/FL4r 85oVey0Sbpd0XVfvqCUggf42jRjhN69wQdGFEZhAlAF70KiyBQngNATf26MqiSxQRsT9olfL3I1+ 3AocCA28IGLZ2qW++oYAZ/w11MHLGOp5JLwatg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to b.root-servers.net for mil/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 58757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . cj0RlxswHSct9Oee2e8mz+uUNovrfY63ODsjElpwJXKGdkep2ZD+FlYvuXBSmZ99LjE7hSurx4/g k1Z3Rnb8JvhXpJ7zoHoMrlgqCq1Z/EE4Fs7s2cw2nQEtEFf/V5i0Ic2CUqn+B3qmF21E7hJqQySX +0RNSmloAMGIVZlof3P65KjIU1wfbX64jZ0rWULFqyZch3Cg4zIbvoVOrn1jO75VHI3OPR8/FL4r 85oVey0Sbpd0XVfvqCUggf42jRjhN69wQdGFEZhAlAF70KiyBQngNATf26MqiSxQRsT9olfL3I1+ 3AocCA28IGLZ2qW++oYAZ/w11MHLGOp5JLwatg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . cj0RlxswHSct9Oee2e8mz+uUNovrfY63ODsjElpwJXKGdkep2ZD+FlYvuXBSmZ99LjE7hSurx4/g k1Z3Rnb8JvhXpJ7zoHoMrlgqCq1Z/EE4Fs7s2cw2nQEtEFf/V5i0Ic2CUqn+B3qmF21E7hJqQySX +0RNSmloAMGIVZlof3P65KjIU1wfbX64jZ0rWULFqyZch3Cg4zIbvoVOrn1jO75VHI3OPR8/FL4r 85oVey0Sbpd0XVfvqCUggf42jRjhN69wQdGFEZhAlAF70KiyBQngNATf26MqiSxQRsT9olfL3I1+ 3AocCA28IGLZ2qW++oYAZ/w11MHLGOp5JLwatg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 1061 octets ;; HEADER SECTION ;; id = 36447 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZzeiX/rb+M/fCfWbanEAjZFBjZa2h2JzOIWqaqc8YUc6WQDlH/VGdG6u4U+jUfuWJGNTdzD IJiUSIuwsI4wT1/iolr7h63lmRu37rLvcCUXX8NYqJUjtOwuts4XVFaQHGNc/FpKr/QPXwLHmox8 VhRC5ZBNSV9NDY3Pdy7NRx6z ) ; keytag 35769 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220000115 20260213000115 7870 mil. KXMpe5DtDBe8gN+JtEwFnINDzNcpVwQjf+Ayhy8RWEvRvi02hvXXNunQIsUc8k90RQyCEZYSzEGS oCBJLzdjH1/jv5boNDdMNlCdYBMnQgTOWhnI0ALhtnohxd3gZodZyEGqVJEdfN8dGBCV5CYL8Qol 849QXNfQyKfUrwKN+aQ= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220000115 20260213000115 45019 mil. GO8xA6yly71xz8vpVNSgPck/C1U9Z/AoREdq+RsCxNv39qF20adic20wbWkQrq8vDx/sqc58Ps/U U7brAJFC3eZnTRZW++6/Q3OsWnjMh5a4w0cYotDSZsc9vxHxWapgl9+LJ18crJ9FMkqUNQfjSLDS js41/CcTZciBy/EjkmCyBFA9d3aPFIKZutL3JERfeiD8GMPK2sLj8WEMEiIelm7mARdiHjMVByol CmbKIA6fkhAHf1jlfIVy+dcP1lMalfQ9vjhRpJK5nQntZOw1f+6c4vGbYYx13iK5wUOVETK0Ln/G FvPZOkZ2fLgG4hTnL5w7C9iKIgRz1ZfS4d9AHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZzeiX/rb+M/fCfWbanEAjZFBjZa2h2JzOIWqaqc8YUc6WQDlH/VGdG6u4U+jUfuWJGNTdzD IJiUSIuwsI4wT1/iolr7h63lmRu37rLvcCUXX8NYqJUjtOwuts4XVFaQHGNc/FpKr/QPXwLHmox8 VhRC5ZBNSV9NDY3Pdy7NRx6z ) ; keytag 35769`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220000115 20260213000115 7870 mil. KXMpe5DtDBe8gN+JtEwFnINDzNcpVwQjf+Ayhy8RWEvRvi02hvXXNunQIsUc8k90RQyCEZYSzEGS oCBJLzdjH1/jv5boNDdMNlCdYBMnQgTOWhnI0ALhtnohxd3gZodZyEGqVJEdfN8dGBCV5CYL8Qol 849QXNfQyKfUrwKN+aQ= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220000115 20260213000115 45019 mil. GO8xA6yly71xz8vpVNSgPck/C1U9Z/AoREdq+RsCxNv39qF20adic20wbWkQrq8vDx/sqc58Ps/U U7brAJFC3eZnTRZW++6/Q3OsWnjMh5a4w0cYotDSZsc9vxHxWapgl9+LJ18crJ9FMkqUNQfjSLDS js41/CcTZciBy/EjkmCyBFA9d3aPFIKZutL3JERfeiD8GMPK2sLj8WEMEiIelm7mARdiHjMVByol CmbKIA6fkhAHf1jlfIVy+dcP1lMalfQ9vjhRpJK5nQntZOw1f+6c4vGbYYx13iK5wUOVETK0Ln/G FvPZOkZ2fLgG4hTnL5w7C9iKIgRz1ZfS4d9AHw== )`
	RRSIG=7870 and DNSKEY=7870 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=7870 is now in the chain-of-trust
	DNSKEY=35769 is now in the chain-of-trust
	Query to pac2.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 189 octets ;; HEADER SECTION ;; id = 19187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3017 IN A 214.48.252.101 dtic.mil. 3017 IN A 214.48.244.101 dtic.mil. 3017 IN A 214.48.248.101 dtic.mil. 3017 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pac2.nipr.mil is authoritative for dtic.mil
	Query to pac2.nipr.mil for dtic.mil/DNSKEY
	Received 301 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 301 octets ;; HEADER SECTION ;; id = 64957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dtic.mil. 81861 IN DNSKEY ( 256 3 13 vVim7BLByPKwqStUbWwfn38/P0Qkx/z21JYAIP4u58zFtu8IadLqFD9sBI6JMJ4+oWPR0MEd15hI HOlsfV3dsA== ) ; keytag 21655 dtic.mil. 81861 IN DNSKEY ( 257 3 13 mhhAxMAHaJyHQ3sT/zrfSygjHsNn4W96TvvdzdUoYm7Y19xCFau0GIAiNcnDp5ABq5PNXeLgYiVd P1kBmEbgQQ== ) ; keytag 57411 dtic.mil. 81861 IN RRSIG ( DNSKEY 13 2 86400 20260215053733 20260208045959 57411 dtic.mil. r3etxxK83UnU7EmRR6RxTckLHOHP/QJR1urUNtYTQTc8Xa6/zOUyX9u9FxFM1J+iR0OPp3MYIdfZ C0F8qCpyBw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone dtic.mil
	Attempting to learn nameservers for dtic.mil
	Query to pac2.nipr.mil for dtic.mil/NS
	Received 1052 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 1052 octets ;; HEADER SECTION ;; id = 15534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN NS ;; ANSWER SECTION (7 records) dtic.mil. 25117 IN NS dns4.nipr.mil. dtic.mil. 25117 IN NS dns1.nipr.mil. dtic.mil. 25117 IN NS dns2.nipr.mil. dtic.mil. 25117 IN NS dns3.nipr.mil. dtic.mil. 25117 IN NS dns6.nipr.mil. dtic.mil. 25117 IN NS dns5.nipr.mil. dtic.mil. 25117 IN RRSIG ( NS 13 2 86400 20260219063042 20260212055120 21655 dtic.mil. YSZrzk5GDb0nTBJwyKZupnAw7RRK0yYSs1bcFfLQtHSqcz27//VGxLJnZhUk8/IabEBqvBsf1+KR xbWnSDFiOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (13 records) dns1.nipr.mil. 21491 IN AAAA 2608:140:c:157::235 dns2.nipr.mil. 21529 IN AAAA 2608:120:c:162::243 dns3.nipr.mil. 21497 IN AAAA 2608:4122:2:154::243 dns4.nipr.mil. 21523 IN AAAA 2608:4163:1:143::243 dns5.nipr.mil. 21505 IN AAAA 2608:c184:1:180::243 dns6.nipr.mil. 21497 IN AAAA 2608:c144:1:155::243 dns1.nipr.mil. 21491 IN RRSIG ( AAAA 13 3 21600 20260219100049 20260212090446 37738 nipr.mil. PHM+hKDMkR2iKsq+G9hwqVglGsTm9oo1cxomhV8P/DbJWkRQN63iCn1MBEK8TgUS8D3VRF8rGIme Lv6ryVSrqw== ) dns2.nipr.mil. 21529 IN RRSIG ( AAAA 13 3 21600 20260219100049 20260212090446 37738 nipr.mil. LpMj86TV4LdjVJAmbn7ndbHxKYtozEktWfOSpQlUctPqKV6NOZJVWYPpgTZefyqtOaXTsu7rVMCp nmquwD4cnA== ) dns3.nipr.mil. 21497 IN RRSIG ( AAAA 13 3 21600 20260217160602 20260210153441 37738 nipr.mil. sUK0J39GeqF6difoc2w2hpWaxMd+j+nMMn4b52V6/dBLVzb+x3Klu77hETfu5kLWRvmk+/W9UnSG hZT9HxfSzA== ) dns4.nipr.mil. 21523 IN RRSIG ( AAAA 13 3 21600 20260215130139 20260208124519 37738 nipr.mil. xbGyXkmGVN/UaYjvxEsCOaU2tGmK/OUB2ZzHS+UyqAVc6Mum58/BDdgNoQmy4PAnxrm3gAp9sjwB sOJ09kRd9Q== ) dns5.nipr.mil. 21505 IN RRSIG ( AAAA 13 3 21600 20260215130139 20260208124519 37738 nipr.mil. g4l+ZmyRvV4ZeQH/fGL95dhyKYocqfA9sB2TO4V4gS2H6vWCeWpN6r+I51cLThjhLdCkYl7DwhIE Umhk6SJs9w== ) dns6.nipr.mil. 21497 IN RRSIG ( AAAA 13 3 21600 20260219082642 20260212081149 37738 nipr.mil. Xo/vR5xkwTRLTT7ey1zC0pcbGgZIRQu3QHAyy+/HQsnZBE9432812QUX2EoUARYUcQGekMXNkcpp Hyg7jAKqMg== ) ;; { "EDNS-VERSION": 0 }
	Found dtic.mil nameservers: dns4.nipr.mil, dns1.nipr.mil, dns2.nipr.mil, dns3.nipr.mil, dns6.nipr.mil, dns5.nipr.mil

dtic.mil

	Checking DS between mil and dtic.mil
	Query to eur1.nipr.mil for dtic.mil/DS
	Received 292 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 292 octets ;; HEADER SECTION ;; id = 11061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DS ;; ANSWER SECTION (3 records) DTIC.MIL. 10800 IN DS 57411 13 1 a8ba9f28372e7764e58bc63e920f4cbd78a92cbb DTIC.MIL. 10800 IN DS ( 57411 13 2 875f5e98c9196703b7505ceac4340f5e48975b6e60f6ad1694132589dcc1cb25 ) DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260220000115 20260213000115 7870 mil. tC/cuuEsfGx1DQB467f5b3AHhAJ7YuyiFbOqVdlDNYrzz3VY00Pa3yH3lCODltJI52wpwr5/sd41 VikojqSD/A6bukYx7YATYMWxjyohhSdKca4h6X0Nv20h/Vkm2VV6gWhYHv5NmBSg892qeQkC+adH lFsvsNtU5eBBN67MI30= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dtic.mil in the mil zone
	DS=57411/SHA-1 uses a deprecated digest algorithm
	DS=57411/SHA-1 has algorithm ECDSAP256SHA256
	DS=57411/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260220000115 20260213000115 7870 mil. tC/cuuEsfGx1DQB467f5b3AHhAJ7YuyiFbOqVdlDNYrzz3VY00Pa3yH3lCODltJI52wpwr5/sd41 VikojqSD/A6bukYx7YATYMWxjyohhSdKca4h6X0Nv20h/Vkm2VV6gWhYHv5NmBSg892qeQkC+adH lFsvsNtU5eBBN67MI30= )`
	RRSIG=7870 and DNSKEY=7870 verifies the DS RRset
	DS=57411/SHA-1 is now in the chain-of-trust
	`DTIC.MIL. 10800 IN DS 57411 13 1 a8ba9f28372e7764e58bc63e920f4cbd78a92cbb`
	`DTIC.MIL. 10800 IN DS ( 57411 13 2 875f5e98c9196703b7505ceac4340f5e48975b6e60f6ad1694132589dcc1cb25 )`
	Query to dns5.nipr.mil for dtic.mil/DNSKEY
	Received 301 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 301 octets ;; HEADER SECTION ;; id = 59852 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dtic.mil. 81861 IN DNSKEY ( 256 3 13 vVim7BLByPKwqStUbWwfn38/P0Qkx/z21JYAIP4u58zFtu8IadLqFD9sBI6JMJ4+oWPR0MEd15hI HOlsfV3dsA== ) ; keytag 21655 dtic.mil. 81861 IN DNSKEY ( 257 3 13 mhhAxMAHaJyHQ3sT/zrfSygjHsNn4W96TvvdzdUoYm7Y19xCFau0GIAiNcnDp5ABq5PNXeLgYiVd P1kBmEbgQQ== ) ; keytag 57411 dtic.mil. 81861 IN RRSIG ( DNSKEY 13 2 86400 20260215053733 20260208045959 57411 dtic.mil. r3etxxK83UnU7EmRR6RxTckLHOHP/QJR1urUNtYTQTc8Xa6/zOUyX9u9FxFM1J+iR0OPp3MYIdfZ C0F8qCpyBw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dtic.mil
	`dtic.mil. 81861 IN DNSKEY ( 256 3 13 vVim7BLByPKwqStUbWwfn38/P0Qkx/z21JYAIP4u58zFtu8IadLqFD9sBI6JMJ4+oWPR0MEd15hI HOlsfV3dsA== ) ; keytag 21655`
	`dtic.mil. 81861 IN DNSKEY ( 257 3 13 mhhAxMAHaJyHQ3sT/zrfSygjHsNn4W96TvvdzdUoYm7Y19xCFau0GIAiNcnDp5ABq5PNXeLgYiVd P1kBmEbgQQ== ) ; keytag 57411`
	DNSKEY=57411/SEP is now in the chain-of-trust
	DS=57411/SHA-1 verifies DNSKEY=57411/SEP
	DS=57411/SHA-256 verifies DNSKEY=57411/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dtic.mil. 81861 IN RRSIG ( DNSKEY 13 2 86400 20260215053733 20260208045959 57411 dtic.mil. r3etxxK83UnU7EmRR6RxTckLHOHP/QJR1urUNtYTQTc8Xa6/zOUyX9u9FxFM1J+iR0OPp3MYIdfZ C0F8qCpyBw== )`
	RRSIG=57411 and DNSKEY=57411/SEP verifies the DNSKEY RRset
	DNSKEY=21655 is now in the chain-of-trust
	Query to dns1.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 11726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3149 IN A 214.48.248.101 dtic.mil. 3149 IN A 214.48.244.101 dtic.mil. 3149 IN A 214.48.252.101 dtic.mil. 3149 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.nipr.mil is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to dns3.nipr.mil for dtic.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 21080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 14157 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260219110301 20260212100301 21655 dtic.mil. vzRDuJLSQHcKf4l9p3uU89F9vCy605u8POrJtMwq1Aqn1v36dEMl0xhKtGmGa4a57w47HnNM8fnZ VvO6CpNUzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns6.nipr.mil for dtic.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 37081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 14157 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260219110301 20260212100301 21655 dtic.mil. vzRDuJLSQHcKf4l9p3uU89F9vCy605u8POrJtMwq1Aqn1v36dEMl0xhKtGmGa4a57w47HnNM8fnZ VvO6CpNUzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns4.nipr.mil for dtic.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 34903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 14157 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260219110301 20260212100301 21655 dtic.mil. vzRDuJLSQHcKf4l9p3uU89F9vCy605u8POrJtMwq1Aqn1v36dEMl0xhKtGmGa4a57w47HnNM8fnZ VvO6CpNUzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns5.nipr.mil for dtic.mil/SOA
	Received 202 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 202 octets ;; HEADER SECTION ;; id = 34141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 14157 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260219110301 20260212100301 21655 dtic.mil. vzRDuJLSQHcKf4l9p3uU89F9vCy605u8POrJtMwq1Aqn1v36dEMl0xhKtGmGa4a57w47HnNM8fnZ VvO6CpNUzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.nipr.mil for dtic.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 47160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 14157 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260219110301 20260212100301 21655 dtic.mil. vzRDuJLSQHcKf4l9p3uU89F9vCy605u8POrJtMwq1Aqn1v36dEMl0xhKtGmGa4a57w47HnNM8fnZ VvO6CpNUzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 52660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3148 IN A 214.48.248.101 dtic.mil. 3148 IN A 214.48.244.101 dtic.mil. 3148 IN A 214.48.252.101 dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== )`
	RRSIG=21655 and DNSKEY=21655 verifies the A RRset

dtic.mil

	Query to dns2.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 12106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3017 IN A 214.48.252.101 dtic.mil. 3017 IN A 214.48.244.101 dtic.mil. 3017 IN A 214.48.248.101 dtic.mil. 3017 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.nipr.mil is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to dns2.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 60850 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3017 IN A 214.48.252.101 dtic.mil. 3017 IN A 214.48.244.101 dtic.mil. 3017 IN A 214.48.248.101 dtic.mil. 3017 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 3017 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== )`
	RRSIG=21655 and DNSKEY=21655 verifies the A RRset

dtic.mil

	Query to dns6.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 13929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3017 IN A 214.48.252.101 dtic.mil. 3017 IN A 214.48.244.101 dtic.mil. 3017 IN A 214.48.248.101 dtic.mil. 3017 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns6.nipr.mil is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to dns6.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 4968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3017 IN A 214.48.252.101 dtic.mil. 3017 IN A 214.48.244.101 dtic.mil. 3017 IN A 214.48.248.101 dtic.mil. 3017 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 3017 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== )`
	RRSIG=21655 and DNSKEY=21655 verifies the A RRset

dtic.mil

	Query to dns3.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 14240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3148 IN A 214.48.248.101 dtic.mil. 3148 IN A 214.48.244.101 dtic.mil. 3148 IN A 214.48.252.101 dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.nipr.mil is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to dns3.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 64164 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3148 IN A 214.48.248.101 dtic.mil. 3148 IN A 214.48.244.101 dtic.mil. 3148 IN A 214.48.252.101 dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== )`
	RRSIG=21655 and DNSKEY=21655 verifies the A RRset

dtic.mil

	Query to dns5.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 34123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3148 IN A 214.48.248.101 dtic.mil. 3148 IN A 214.48.244.101 dtic.mil. 3148 IN A 214.48.252.101 dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns5.nipr.mil is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to dns5.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 13395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3148 IN A 214.48.248.101 dtic.mil. 3148 IN A 214.48.244.101 dtic.mil. 3148 IN A 214.48.252.101 dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 3148 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== )`
	RRSIG=21655 and DNSKEY=21655 verifies the A RRset

dtic.mil

	Query to dns4.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 189 octets ;; HEADER SECTION ;; id = 44439 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3794 IN A 214.48.252.101 dtic.mil. 3794 IN A 214.48.244.101 dtic.mil. 3794 IN A 214.48.248.101 dtic.mil. 3794 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns4.nipr.mil is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to dns4.nipr.mil for dtic.mil/A
	Received 189 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 189 octets ;; HEADER SECTION ;; id = 9349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 3794 IN A 214.48.252.101 dtic.mil. 3794 IN A 214.48.244.101 dtic.mil. 3794 IN A 214.48.248.101 dtic.mil. 3794 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 3794 IN RRSIG ( A 13 2 7200 20260218071802 20260211070601 21655 dtic.mil. 3H37L25cWwPcnGKU1snORqVdYpSmIT4qj7j1KJF/ITlLwoos2WY2a3DxTSNqyoUiiTZRh131UHJS yXvqvFR/GQ== )`
	RRSIG=21655 and DNSKEY=21655 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dtic.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: