DNSSEC Debugger - dtic.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-08-12 17:14:53 UTC

Analyzing DNSSEC problems for dtic.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 2999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to h.root-servers.net for dtic.mil/A
	Received 755 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 755 octets ;; HEADER SECTION ;; id = 16325 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . tdQzp+fZYc29bDZBFhodG21A1XlaoDCp5ghE+TEmX2lKPN458hCgT6jJrpc2jODfWur8vnXLd6vi K0woELb6l1JLFlrNReBSPUyVL5NMLvt8hemcaOeMLevoPMVAPwC1IyPGEBjk+UKpxsn9scFO8eYa D/fpciRkxG0D0RzyX9l4xBKeiIwyYnPD/RIFd/6SZ2hmlcOhCSiIXquZPY14swTQpxxtA57PUSX1 Y2NkMZh36CDGAOAC16FbkN/2675wlDqoW/Auiskob98HKcmp3Z7lZZzg0pcwSfLK1NSbn9FgB65A tsKlAsQXUf0WaUueRZo5A+SHAYRZ6F1HzoHvww== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for mil/DNSKEY
	Received 750 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 750 octets ;; HEADER SECTION ;; id = 52221 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . tdQzp+fZYc29bDZBFhodG21A1XlaoDCp5ghE+TEmX2lKPN458hCgT6jJrpc2jODfWur8vnXLd6vi K0woELb6l1JLFlrNReBSPUyVL5NMLvt8hemcaOeMLevoPMVAPwC1IyPGEBjk+UKpxsn9scFO8eYa D/fpciRkxG0D0RzyX9l4xBKeiIwyYnPD/RIFd/6SZ2hmlcOhCSiIXquZPY14swTQpxxtA57PUSX1 Y2NkMZh36CDGAOAC16FbkN/2675wlDqoW/Auiskob98HKcmp3Z7lZZzg0pcwSfLK1NSbn9FgB65A tsKlAsQXUf0WaUueRZo5A+SHAYRZ6F1HzoHvww== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to c.root-servers.net for mil/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 53281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . tdQzp+fZYc29bDZBFhodG21A1XlaoDCp5ghE+TEmX2lKPN458hCgT6jJrpc2jODfWur8vnXLd6vi K0woELb6l1JLFlrNReBSPUyVL5NMLvt8hemcaOeMLevoPMVAPwC1IyPGEBjk+UKpxsn9scFO8eYa D/fpciRkxG0D0RzyX9l4xBKeiIwyYnPD/RIFd/6SZ2hmlcOhCSiIXquZPY14swTQpxxtA57PUSX1 Y2NkMZh36CDGAOAC16FbkN/2675wlDqoW/Auiskob98HKcmp3Z7lZZzg0pcwSfLK1NSbn9FgB65A tsKlAsQXUf0WaUueRZo5A+SHAYRZ6F1HzoHvww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . tdQzp+fZYc29bDZBFhodG21A1XlaoDCp5ghE+TEmX2lKPN458hCgT6jJrpc2jODfWur8vnXLd6vi K0woELb6l1JLFlrNReBSPUyVL5NMLvt8hemcaOeMLevoPMVAPwC1IyPGEBjk+UKpxsn9scFO8eYa D/fpciRkxG0D0RzyX9l4xBKeiIwyYnPD/RIFd/6SZ2hmlcOhCSiIXquZPY14swTQpxxtA57PUSX1 Y2NkMZh36CDGAOAC16FbkN/2675wlDqoW/Auiskob98HKcmp3Z7lZZzg0pcwSfLK1NSbn9FgB65A tsKlAsQXUf0WaUueRZo5A+SHAYRZ6F1HzoHvww== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to pac2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 1061 octets ;; HEADER SECTION ;; id = 17587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAab0bkxnAYNimczCeSDeJL+InkvWOvWkcYIyx35PoPCnM1SNa1UZb+uO/5VV6pYmYcbemSfD 8GYe7Tut3sB81bfXxAG6dFqi7q+sYBYmh4hbuz9trMcjHpYssq4A1moh6Es2RlPn87ItcgXCXZe0 5QUnZA+4nmcPrnDidyLxxa5T ) ; keytag 14353 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcoLn7RHnro749kkPhm54Z2iOwMBsW/GJNJ55/9JM5SWmejqzFeOBlK7N/UCOVW0sZwtXtjj eCnsVB7oUeN2hihbvWpA9/8jOn3sffyiPctFvK+dpv40o21Fj6VDIv4L3HFv/ZgDJS0JabQpKeW8 sCCkOxqoduO5Cgj/ePnmW8/l ) ; keytag 43458 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260819115601 20260812115601 14353 mil. lTISuGk45V3/PDGn79ZxWyV3vYRPslnktR4i+DmZNm7cvFvher7xQhA68/8P7o1BqAW1jLq7TrK5 xboM9Osr5BDqQm1hNVDz+V//65726C6hvgLTRYlKqQop5imFk3cdQ05RRhp9+IC+vBXmsOy9NzIs Yg4Q8DzKW0ePF2tz0MA= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260819115601 20260812115601 45019 mil. aCCr6YnUlwEWOp6M1pbOFEE+nGPGE3Ptt95mNGjsWOpYqwFgGOcEh2wV3dplPlnz/0uExD152JCD 2CYzPcbzJome/n20qwi9SXllM2xQXnicclOQTuU1HEB37Rc0EEmJZF4ql5YekoXnr2GCe8Hbp0zX 3EvNJrN1YRq2wh0oQV/BMA/KTLJBmMxkk5Pad4ZGLyUBPRUM4j6i5jaUS3qixhMGlgj5HvPbWFvT VP2EGPWs6ZGvxGK46O/etpoGLp/DzzE6PgpR0ESx8mVMWh6HMCpwMzOoe2mL5vOySx7KO4TQJOx4 JV7yWRdPE0agxTSsNn2k8XmQGCOd7XCnIghWzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAab0bkxnAYNimczCeSDeJL+InkvWOvWkcYIyx35PoPCnM1SNa1UZb+uO/5VV6pYmYcbemSfD 8GYe7Tut3sB81bfXxAG6dFqi7q+sYBYmh4hbuz9trMcjHpYssq4A1moh6Es2RlPn87ItcgXCXZe0 5QUnZA+4nmcPrnDidyLxxa5T ) ; keytag 14353`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcoLn7RHnro749kkPhm54Z2iOwMBsW/GJNJ55/9JM5SWmejqzFeOBlK7N/UCOVW0sZwtXtjj eCnsVB7oUeN2hihbvWpA9/8jOn3sffyiPctFvK+dpv40o21Fj6VDIv4L3HFv/ZgDJS0JabQpKeW8 sCCkOxqoduO5Cgj/ePnmW8/l ) ; keytag 43458`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260819115601 20260812115601 14353 mil. lTISuGk45V3/PDGn79ZxWyV3vYRPslnktR4i+DmZNm7cvFvher7xQhA68/8P7o1BqAW1jLq7TrK5 xboM9Osr5BDqQm1hNVDz+V//65726C6hvgLTRYlKqQop5imFk3cdQ05RRhp9+IC+vBXmsOy9NzIs Yg4Q8DzKW0ePF2tz0MA= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260819115601 20260812115601 45019 mil. aCCr6YnUlwEWOp6M1pbOFEE+nGPGE3Ptt95mNGjsWOpYqwFgGOcEh2wV3dplPlnz/0uExD152JCD 2CYzPcbzJome/n20qwi9SXllM2xQXnicclOQTuU1HEB37Rc0EEmJZF4ql5YekoXnr2GCe8Hbp0zX 3EvNJrN1YRq2wh0oQV/BMA/KTLJBmMxkk5Pad4ZGLyUBPRUM4j6i5jaUS3qixhMGlgj5HvPbWFvT VP2EGPWs6ZGvxGK46O/etpoGLp/DzzE6PgpR0ESx8mVMWh6HMCpwMzOoe2mL5vOySx7KO4TQJOx4 JV7yWRdPE0agxTSsNn2k8XmQGCOd7XCnIghWzA== )`
	RRSIG=14353 and DNSKEY=14353 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=14353 is now in the chain-of-trust
	DNSKEY=43458 is now in the chain-of-trust
	Query to eur2.nipr.mil for dtic.mil/A
	Received 675 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 675 octets ;; HEADER SECTION ;; id = 36389 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 10800 IN DS 46320 13 1 821e97b5ae8ff9f561ceb7b1b1f5fc438b121fe2 DTIC.MIL. 10800 IN DS ( 46320 13 2 ca56a51a579153ce6c9c1bd1c3f2560a6a2e493d9b3422aa283a361a9f38218b ) DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260819115601 20260812115601 14353 mil. gYqSgu0wlucuGAMSnh02IXQG2uXEMoX2kX0e8webaasXmDQ9N+XbvjiMK326cqQmMGNA9I3FEQpR 06u/qAp7vtDNqVJtQaYPWX4PdZAx3f42KAXcQXtOuWWBLnirRSZwuHyKkQeM30SrCtoq4mKdOLFl ET2Pm7I+uzrlZUlId10= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to eur1.nipr.mil for dtic.mil/DNSKEY
	Received 675 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 675 octets ;; HEADER SECTION ;; id = 38966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 10800 IN DS 46320 13 1 821e97b5ae8ff9f561ceb7b1b1f5fc438b121fe2 DTIC.MIL. 10800 IN DS ( 46320 13 2 ca56a51a579153ce6c9c1bd1c3f2560a6a2e493d9b3422aa283a361a9f38218b ) DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260819115601 20260812115601 14353 mil. gYqSgu0wlucuGAMSnh02IXQG2uXEMoX2kX0e8webaasXmDQ9N+XbvjiMK326cqQmMGNA9I3FEQpR 06u/qAp7vtDNqVJtQaYPWX4PdZAx3f42KAXcQXtOuWWBLnirRSZwuHyKkQeM30SrCtoq4mKdOLFl ET2Pm7I+uzrlZUlId10= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dtic.mil

dtic.mil

	Checking DS between mil and dtic.mil
	Query to eur1.nipr.mil for dtic.mil/DS
	Received 292 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 292 octets ;; HEADER SECTION ;; id = 17427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DS ;; ANSWER SECTION (3 records) DTIC.MIL. 10800 IN DS 46320 13 1 821e97b5ae8ff9f561ceb7b1b1f5fc438b121fe2 DTIC.MIL. 10800 IN DS ( 46320 13 2 ca56a51a579153ce6c9c1bd1c3f2560a6a2e493d9b3422aa283a361a9f38218b ) DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260819115601 20260812115601 14353 mil. gYqSgu0wlucuGAMSnh02IXQG2uXEMoX2kX0e8webaasXmDQ9N+XbvjiMK326cqQmMGNA9I3FEQpR 06u/qAp7vtDNqVJtQaYPWX4PdZAx3f42KAXcQXtOuWWBLnirRSZwuHyKkQeM30SrCtoq4mKdOLFl ET2Pm7I+uzrlZUlId10= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dtic.mil in the mil zone
	DS=46320/SHA-1 uses a deprecated digest algorithm
	DS=46320/SHA-1 has algorithm ECDSAP256SHA256
	DS=46320/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260819115601 20260812115601 14353 mil. gYqSgu0wlucuGAMSnh02IXQG2uXEMoX2kX0e8webaasXmDQ9N+XbvjiMK326cqQmMGNA9I3FEQpR 06u/qAp7vtDNqVJtQaYPWX4PdZAx3f42KAXcQXtOuWWBLnirRSZwuHyKkQeM30SrCtoq4mKdOLFl ET2Pm7I+uzrlZUlId10= )`
	RRSIG=14353 and DNSKEY=14353 verifies the DS RRset
	DS=46320/SHA-1 is now in the chain-of-trust
	`DTIC.MIL. 10800 IN DS 46320 13 1 821e97b5ae8ff9f561ceb7b1b1f5fc438b121fe2`
	`DTIC.MIL. 10800 IN DS ( 46320 13 2 ca56a51a579153ce6c9c1bd1c3f2560a6a2e493d9b3422aa283a361a9f38218b )`
	Query to DNS5.NIPR.MIL for dtic.mil/DNSKEY
	Received 301 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 301 octets ;; HEADER SECTION ;; id = 22406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (3 records) dtic.mil. 15368 IN DNSKEY ( 257 3 13 QAQxni812deS7hN31WZZhYya5TPLxy+TGyodwCNaWz63BF1osoURqalDqKnMItrl/OJt8xtmTTdc gLiOBZh8iA== ) ; keytag 46320 dtic.mil. 15368 IN DNSKEY ( 256 3 13 1YU42POeOHTsgu6GFRdt2XVYsln7JvxG1Ybj1PKfqzukazttnz5HACpjki4Xo/dOqANmgSfQtnHB RAVNucJz0g== ) ; keytag 34137 dtic.mil. 15368 IN RRSIG ( DNSKEY 13 2 86400 20260817225428 20260810221047 46320 dtic.mil. D14oCYfq1ul2UyQUgwmJQFpqJJX5x/qk8iXfgGZyMIP8poDKLSzHdOjjoFjl/cO9oaXbL553XB+M ShMYcPhHpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dtic.mil
	`dtic.mil. 15368 IN DNSKEY ( 257 3 13 QAQxni812deS7hN31WZZhYya5TPLxy+TGyodwCNaWz63BF1osoURqalDqKnMItrl/OJt8xtmTTdc gLiOBZh8iA== ) ; keytag 46320`
	`dtic.mil. 15368 IN DNSKEY ( 256 3 13 1YU42POeOHTsgu6GFRdt2XVYsln7JvxG1Ybj1PKfqzukazttnz5HACpjki4Xo/dOqANmgSfQtnHB RAVNucJz0g== ) ; keytag 34137`
	DNSKEY=46320/SEP is now in the chain-of-trust
	DS=46320/SHA-1 verifies DNSKEY=46320/SEP
	DS=46320/SHA-256 verifies DNSKEY=46320/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dtic.mil. 15368 IN RRSIG ( DNSKEY 13 2 86400 20260817225428 20260810221047 46320 dtic.mil. D14oCYfq1ul2UyQUgwmJQFpqJJX5x/qk8iXfgGZyMIP8poDKLSzHdOjjoFjl/cO9oaXbL553XB+M ShMYcPhHpw== )`
	RRSIG=46320 and DNSKEY=46320/SEP verifies the DNSKEY RRset
	DNSKEY=34137 is now in the chain-of-trust
	Query to DNS6.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 44911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 2974 IN A 214.48.252.101 dtic.mil. 2974 IN A 214.48.248.101 dtic.mil. 2974 IN A 214.48.244.101 dtic.mil. 2974 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS1.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 26882 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 16292 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260819161703 20260812151703 34137 dtic.mil. MdWNYImG+q1IK6/fVlzu4NqHGo73GGQBiY6v9lcqLupVWgWv96reINFQhA2I4ZcujMyK+gZTOk11 AR9y4n2bWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 55707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 16292 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260819161703 20260812151703 34137 dtic.mil. MdWNYImG+q1IK6/fVlzu4NqHGo73GGQBiY6v9lcqLupVWgWv96reINFQhA2I4ZcujMyK+gZTOk11 AR9y4n2bWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 202 octets ;; HEADER SECTION ;; id = 55125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 16292 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260819161703 20260812151703 34137 dtic.mil. MdWNYImG+q1IK6/fVlzu4NqHGo73GGQBiY6v9lcqLupVWgWv96reINFQhA2I4ZcujMyK+gZTOk11 AR9y4n2bWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 56584 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 16292 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260819161703 20260812151703 34137 dtic.mil. MdWNYImG+q1IK6/fVlzu4NqHGo73GGQBiY6v9lcqLupVWgWv96reINFQhA2I4ZcujMyK+gZTOk11 AR9y4n2bWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 59378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 16292 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260819161703 20260812151703 34137 dtic.mil. MdWNYImG+q1IK6/fVlzu4NqHGo73GGQBiY6v9lcqLupVWgWv96reINFQhA2I4ZcujMyK+gZTOk11 AR9y4n2bWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dtic.mil/A
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 2974 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== )`
	RRSIG=34137 and DNSKEY=34137 verifies the A RRset

dtic.mil

	Query to DNS4.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 189 octets ;; HEADER SECTION ;; id = 10140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 6521 IN A 214.48.248.101 dtic.mil. 6521 IN A 214.48.244.101 dtic.mil. 6521 IN A 214.48.252.101 dtic.mil. 6521 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS4.NIPR.MIL for dtic.mil/A
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 6521 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== )`
	RRSIG=34137 and DNSKEY=34137 verifies the A RRset

dtic.mil

	Query to DNS2.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 45503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 2973 IN A 214.48.252.101 dtic.mil. 2973 IN A 214.48.248.101 dtic.mil. 2973 IN A 214.48.244.101 dtic.mil. 2973 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS2.NIPR.MIL for dtic.mil/A
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 2973 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== )`
	RRSIG=34137 and DNSKEY=34137 verifies the A RRset

dtic.mil

	Query to DNS3.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 6329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5904 IN A 214.48.252.101 dtic.mil. 5904 IN A 214.48.244.101 dtic.mil. 5904 IN A 214.48.248.101 dtic.mil. 5904 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS3.NIPR.MIL for dtic.mil/A
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5904 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== )`
	RRSIG=34137 and DNSKEY=34137 verifies the A RRset

dtic.mil

	Query to DNS1.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 56969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5904 IN A 214.48.252.101 dtic.mil. 5904 IN A 214.48.244.101 dtic.mil. 5904 IN A 214.48.248.101 dtic.mil. 5904 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS1.NIPR.MIL for dtic.mil/A
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5904 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== )`
	RRSIG=34137 and DNSKEY=34137 verifies the A RRset

dtic.mil

	Query to DNS5.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 59350 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 5904 IN A 214.48.252.101 dtic.mil. 5904 IN A 214.48.244.101 dtic.mil. 5904 IN A 214.48.248.101 dtic.mil. 5904 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS5.NIPR.MIL for dtic.mil/A
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.248.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 5904 IN RRSIG ( A 13 2 7200 20260814223438 20260807223301 34137 dtic.mil. Hk8fQgCiPWwXqeNw4dTFFLVkYUkTql+c7ppevKNd0qqfssANU+1hlQc3p/TPsNhxk6qzBkhlCRyX DUHKlaCs+w== )`
	RRSIG=34137 and DNSKEY=34137 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dtic.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: