DNSSEC Debugger - dtic.mil

Domain Name:

Time: 2024-07-27 07:21:28 UTC

Analyzing DNSSEC problems for dtic.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 32821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to g.root-servers.net for dtic.mil/A
	Received 758 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 758 octets ;; HEADER SECTION ;; id = 64601 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 750 octets ;; HEADER SECTION ;; id = 57047 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to j.root-servers.net for mil/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 56460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . gFGU9cCSQCyR2W1c8TiPEDVImeQQp5S198q103H9+ODw3iJ8iHtN7xzyEviXjoiU2OIuK3ZSR9JX r4PsXqC90e0RXIqBcURF4ChIny65eBnOuT54dXB5eg/VvRMNZOB16LpIV1P0QvEt7kq+eve611eu io0b4FBpj54A+Dg6g/GM8H0Cvf6Ka4THPlXjJ4ITFx2rlypgKVU+DtqYmBYycgxnEC1l2/tS5gBE ZvtCivHP18sHaBbmYACvoToFc3009z/o2Wfq6Y2WfgAR/4ZlUEEAQ2SxYEWNxUyXVYouEw8eNvm5 9gigDWR3aaHNZnNjUFj4PY9hvwyh+GvhSB1kXw== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 1061 octets ;; HEADER SECTION ;; id = 4509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= )`
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=54036 and DNSKEY=54036 verifies the DNSKEY RRset
	DNSKEY=21018 is now in the chain-of-trust
	DNSKEY=54036 is now in the chain-of-trust
	Query to eur2.nipr.mil for dtic.mil/A
	Received 678 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 678 octets ;; HEADER SECTION ;; id = 46703 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 ) DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. fAF/H8+v6pnL+Se2Ez7MbbZPw9oK0V0v9mcNHFYW133SZUBRxqQG1yDCIILr9YBUT8BNBo6hJUEh DdVWTgqiezu/qD7uUtIny9PXXRKqN9FscVE08/jW50pES/t+Oep8oBjFu0F1laXW/xRDrrmMrcy4 W+6Yt28zot5cRWAi/eE= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to pac2.nipr.mil for dtic.mil/DNSKEY
	Received 678 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 678 octets ;; HEADER SECTION ;; id = 56617 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DTIC.MIL. 21600 IN NS DNS2.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS4.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS1.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS5.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS6.NIPR.MIL. DTIC.MIL. 21600 IN NS DNS3.NIPR.MIL. DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 ) DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. fAF/H8+v6pnL+Se2Ez7MbbZPw9oK0V0v9mcNHFYW133SZUBRxqQG1yDCIILr9YBUT8BNBo6hJUEh DdVWTgqiezu/qD7uUtIny9PXXRKqN9FscVE08/jW50pES/t+Oep8oBjFu0F1laXW/xRDrrmMrcy4 W+6Yt28zot5cRWAi/eE= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone dtic.mil

dtic.mil

	Checking DS between mil and dtic.mil
	Query to pac2.nipr.mil for dtic.mil/DS
	Received 292 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 292 octets ;; HEADER SECTION ;; id = 62379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DS ;; ANSWER SECTION (3 records) DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 ) DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. fAF/H8+v6pnL+Se2Ez7MbbZPw9oK0V0v9mcNHFYW133SZUBRxqQG1yDCIILr9YBUT8BNBo6hJUEh DdVWTgqiezu/qD7uUtIny9PXXRKqN9FscVE08/jW50pES/t+Oep8oBjFu0F1laXW/xRDrrmMrcy4 W+6Yt28zot5cRWAi/eE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dtic.mil in the mil zone
	DS=9884/SHA-1 uses a deprecated digest algorithm
	DS=9884/SHA-256 has algorithm ECDSAP256SHA256
	DS=9884/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`DTIC.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. fAF/H8+v6pnL+Se2Ez7MbbZPw9oK0V0v9mcNHFYW133SZUBRxqQG1yDCIILr9YBUT8BNBo6hJUEh DdVWTgqiezu/qD7uUtIny9PXXRKqN9FscVE08/jW50pES/t+Oep8oBjFu0F1laXW/xRDrrmMrcy4 W+6Yt28zot5cRWAi/eE= )`
	RRSIG=54036 and DNSKEY=54036 verifies the DS RRset
	DS=9884/SHA-256 is now in the chain-of-trust
	`DTIC.MIL. 10800 IN DS ( 9884 13 2 1eb537263fc208d1a3fa4b68b9c9717602d1460cc2c3db6eb27c7ddfd39e2986 )`
	`DTIC.MIL. 10800 IN DS 9884 13 1 2494bac037bb9204e1ec77f0fb7ede7fbf895afd`
	Query to DNS5.NIPR.MIL for dtic.mil/DNSKEY
	Received 405 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 405 octets ;; HEADER SECTION ;; id = 4989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN DNSKEY ;; ANSWER SECTION (4 records) dtic.mil. 2212 IN DNSKEY ( 256 3 13 r35hZky8EgPNyal7zORHd1z78VXbmgVo09iavn2JwXtYOrkzk5SIl3ZR5cdXcudkjhPxvI6QKdCk m5py49WVJA== ) ; Key ID = 38152 dtic.mil. 2212 IN DNSKEY ( 257 3 13 g14l53MNnHRyHNSnqWSCCy9nJOTfu8tamf7s+VitXebIcAxeEwv4qnXDZekBnsTIEQFkr74HS42R iRZJ8f4e9A== ) ; Key ID = 9884 dtic.mil. 2212 IN RRSIG ( DNSKEY 13 2 86400 20240730235959 20240723230000 9884 dtic.mil. fF9KxcKkl+XGebBS4fQ57Em0unu5u1TEgLjhME1NxaMkQwpGr7jJunvOBBw9bAtn5FqQ1QdSJV4s 1AiRopqZ7g== ) dtic.mil. 2212 IN RRSIG ( DNSKEY 13 2 86400 20240730235959 20240723230000 38152 dtic.mil. GNVE4BLUEF8SUW2reLSHD94uyBk+rwEadR5xej1LOlR1dV3RPOxbQbFXVWeprzZtINPDGo8d/TAi kLV4EtEfzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dtic.mil
	`dtic.mil. 2212 IN DNSKEY ( 256 3 13 r35hZky8EgPNyal7zORHd1z78VXbmgVo09iavn2JwXtYOrkzk5SIl3ZR5cdXcudkjhPxvI6QKdCk m5py49WVJA== ) ; Key ID = 38152`
	`dtic.mil. 2212 IN DNSKEY ( 257 3 13 g14l53MNnHRyHNSnqWSCCy9nJOTfu8tamf7s+VitXebIcAxeEwv4qnXDZekBnsTIEQFkr74HS42R iRZJ8f4e9A== ) ; Key ID = 9884`
	DNSKEY=9884/SEP is now in the chain-of-trust
	DS=9884/SHA-256 verifies DNSKEY=9884/SEP
	DS=9884/SHA-1 verifies DNSKEY=9884/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dtic.mil. 2212 IN RRSIG ( DNSKEY 13 2 86400 20240730235959 20240723230000 9884 dtic.mil. fF9KxcKkl+XGebBS4fQ57Em0unu5u1TEgLjhME1NxaMkQwpGr7jJunvOBBw9bAtn5FqQ1QdSJV4s 1AiRopqZ7g== )`
	`dtic.mil. 2212 IN RRSIG ( DNSKEY 13 2 86400 20240730235959 20240723230000 38152 dtic.mil. GNVE4BLUEF8SUW2reLSHD94uyBk+rwEadR5xej1LOlR1dV3RPOxbQbFXVWeprzZtINPDGo8d/TAi kLV4EtEfzA== )`
	RRSIG=9884 and DNSKEY=9884/SEP verifies the DNSKEY RRset
	RRSIG=38152 and DNSKEY=38152 verifies the DNSKEY RRset
	DNSKEY=38152 is now in the chain-of-trust
	Query to DNS4.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 189 octets ;; HEADER SECTION ;; id = 51484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1729 IN A 214.48.248.101 dtic.mil. 1729 IN A 214.48.244.101 dtic.mil. 1729 IN A 214.48.252.101 dtic.mil. 1729 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS2.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 55808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86054 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6422 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86054 IN RRSIG ( SOA 13 2 86400 20240803024300 20240727014300 38152 dtic.mil. JERurzK5veMQlEN1v5s9oZqzBRztw+mHdFpMTjGxSdp31Fj5p4l1HeAbDu5dwIu62xci1P2CwAEo nmN/wv8aWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 202 octets ;; HEADER SECTION ;; id = 63770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6422 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240803024300 20240727014300 38152 dtic.mil. JERurzK5veMQlEN1v5s9oZqzBRztw+mHdFpMTjGxSdp31Fj5p4l1HeAbDu5dwIu62xci1P2CwAEo nmN/wv8aWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 50490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6422 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240803024300 20240727014300 38152 dtic.mil. JERurzK5veMQlEN1v5s9oZqzBRztw+mHdFpMTjGxSdp31Fj5p4l1HeAbDu5dwIu62xci1P2CwAEo nmN/wv8aWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 31236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86054 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6422 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86054 IN RRSIG ( SOA 13 2 86400 20240803024300 20240727014300 38152 dtic.mil. JERurzK5veMQlEN1v5s9oZqzBRztw+mHdFpMTjGxSdp31Fj5p4l1HeAbDu5dwIu62xci1P2CwAEo nmN/wv8aWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for dtic.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 16489 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN SOA ;; ANSWER SECTION (2 records) dtic.mil. 86054 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 6422 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) dtic.mil. 86054 IN RRSIG ( SOA 13 2 86400 20240803024300 20240727014300 38152 dtic.mil. JERurzK5veMQlEN1v5s9oZqzBRztw+mHdFpMTjGxSdp31Fj5p4l1HeAbDu5dwIu62xci1P2CwAEo nmN/wv8aWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 189 octets ;; HEADER SECTION ;; id = 43340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1729 IN A 214.48.248.101 dtic.mil. 1729 IN A 214.48.244.101 dtic.mil. 1729 IN A 214.48.252.101 dtic.mil. 1729 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	dtic.mil A RR has value 214.48.252.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 1729 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== )`
	RRSIG=38152 and DNSKEY=38152 verifies the A RRset

dtic.mil

	Query to DNS5.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 41386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 2364 IN A 214.48.252.101 dtic.mil. 2364 IN A 214.48.248.101 dtic.mil. 2364 IN A 214.48.244.101 dtic.mil. 2364 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS5.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 189 octets ;; HEADER SECTION ;; id = 40248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 2364 IN A 214.48.252.101 dtic.mil. 2364 IN A 214.48.248.101 dtic.mil. 2364 IN A 214.48.244.101 dtic.mil. 2364 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 2364 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== )`
	RRSIG=38152 and DNSKEY=38152 verifies the A RRset

dtic.mil

	Query to DNS3.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 27559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 2364 IN A 214.48.252.101 dtic.mil. 2364 IN A 214.48.248.101 dtic.mil. 2364 IN A 214.48.244.101 dtic.mil. 2364 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS3.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 189 octets ;; HEADER SECTION ;; id = 41810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 2364 IN A 214.48.252.101 dtic.mil. 2364 IN A 214.48.248.101 dtic.mil. 2364 IN A 214.48.244.101 dtic.mil. 2364 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 2364 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== )`
	RRSIG=38152 and DNSKEY=38152 verifies the A RRset

dtic.mil

	Query to DNS2.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 49818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1691 IN A 214.48.248.101 dtic.mil. 1691 IN A 214.48.252.101 dtic.mil. 1691 IN A 214.48.244.101 dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS2.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 189 octets ;; HEADER SECTION ;; id = 50985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1691 IN A 214.48.248.101 dtic.mil. 1691 IN A 214.48.252.101 dtic.mil. 1691 IN A 214.48.244.101 dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== )`
	RRSIG=38152 and DNSKEY=38152 verifies the A RRset

dtic.mil

	Query to DNS1.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 11579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1691 IN A 214.48.248.101 dtic.mil. 1691 IN A 214.48.252.101 dtic.mil. 1691 IN A 214.48.244.101 dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS1.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 189 octets ;; HEADER SECTION ;; id = 64912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1691 IN A 214.48.248.101 dtic.mil. 1691 IN A 214.48.252.101 dtic.mil. 1691 IN A 214.48.244.101 dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== )`
	RRSIG=38152 and DNSKEY=38152 verifies the A RRset

dtic.mil

	Query to DNS6.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 32249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1691 IN A 214.48.248.101 dtic.mil. 1691 IN A 214.48.252.101 dtic.mil. 1691 IN A 214.48.244.101 dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for dtic.mil
	Found RRSIG signed by dtic.mil zone
	Query to DNS6.NIPR.MIL for dtic.mil/A
	Received 189 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 189 octets ;; HEADER SECTION ;; id = 65059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dtic.mil. IN A ;; ANSWER SECTION (4 records) dtic.mil. 1691 IN A 214.48.248.101 dtic.mil. 1691 IN A 214.48.252.101 dtic.mil. 1691 IN A 214.48.244.101 dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dtic.mil A RR has value 214.48.248.101
	dtic.mil A RR has value 214.48.252.101
	dtic.mil A RR has value 214.48.244.101
	Found 1 RRSIGs over A RRset
	`dtic.mil. 1691 IN RRSIG ( A 13 2 7200 20240802180526 20240726171122 38152 dtic.mil. rbzC41/5C60Gg6UdkC7JcF0Cno4MNLwXF0eVufDiSkHARJ3Nau9/kI3HDMVBCBcV/S6nMSgNEGAL aGnHXUMW2Q== )`
	RRSIG=38152 and DNSKEY=38152 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dtic.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: