DNSSEC Debugger - health.mil

Domain Name:

Time: 2025-12-16 20:36:36 UTC

Analyzing DNSSEC problems for health.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 32518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to j.root-servers.net for health.mil/A
	Received 757 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 757 octets ;; HEADER SECTION ;; id = 31095 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . cqXmH/MeMNm+muSGHszrdsiyw9cktAF0ZREufcugefsTzSQ/YbGsL27aHyBwMUmrqa2/jm0lZOaj U40NmaypwFiU2Glw7DU37ahhRLUHPlmPDn96jYGS7WXx593Ui2ejVA+SZAV5uX0A8qTR+iYWggop XlHJNQsh8XUVEtOX9iIiJvLNZA8RkQZSsapU2awmTPHS1pE3g58Se+rnS+gwS7ecB9P4rYE6JXDh roRF11jFmh5RJDvnWT4vU7uM1tVx92EI37Dn6Z3xeDqd1PRd5Ad09nNIZwH7yALT9dcHDAr6Uj90 ZzY02PuZpmSo/cbea1gGUacrLbveK/nNdKZXYA== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for mil/DNSKEY
	Received 753 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 753 octets ;; HEADER SECTION ;; id = 62024 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . cqXmH/MeMNm+muSGHszrdsiyw9cktAF0ZREufcugefsTzSQ/YbGsL27aHyBwMUmrqa2/jm0lZOaj U40NmaypwFiU2Glw7DU37ahhRLUHPlmPDn96jYGS7WXx593Ui2ejVA+SZAV5uX0A8qTR+iYWggop XlHJNQsh8XUVEtOX9iIiJvLNZA8RkQZSsapU2awmTPHS1pE3g58Se+rnS+gwS7ecB9P4rYE6JXDh roRF11jFmh5RJDvnWT4vU7uM1tVx92EI37Dn6Z3xeDqd1PRd5Ad09nNIZwH7yALT9dcHDAr6Uj90 ZzY02PuZpmSo/cbea1gGUacrLbveK/nNdKZXYA== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 16036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . cqXmH/MeMNm+muSGHszrdsiyw9cktAF0ZREufcugefsTzSQ/YbGsL27aHyBwMUmrqa2/jm0lZOaj U40NmaypwFiU2Glw7DU37ahhRLUHPlmPDn96jYGS7WXx593Ui2ejVA+SZAV5uX0A8qTR+iYWggop XlHJNQsh8XUVEtOX9iIiJvLNZA8RkQZSsapU2awmTPHS1pE3g58Se+rnS+gwS7ecB9P4rYE6JXDh roRF11jFmh5RJDvnWT4vU7uM1tVx92EI37Dn6Z3xeDqd1PRd5Ad09nNIZwH7yALT9dcHDAr6Uj90 ZzY02PuZpmSo/cbea1gGUacrLbveK/nNdKZXYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . cqXmH/MeMNm+muSGHszrdsiyw9cktAF0ZREufcugefsTzSQ/YbGsL27aHyBwMUmrqa2/jm0lZOaj U40NmaypwFiU2Glw7DU37ahhRLUHPlmPDn96jYGS7WXx593Ui2ejVA+SZAV5uX0A8qTR+iYWggop XlHJNQsh8XUVEtOX9iIiJvLNZA8RkQZSsapU2awmTPHS1pE3g58Se+rnS+gwS7ecB9P4rYE6JXDh roRF11jFmh5RJDvnWT4vU7uM1tVx92EI37Dn6Z3xeDqd1PRd5Ad09nNIZwH7yALT9dcHDAr6Uj90 ZzY02PuZpmSo/cbea1gGUacrLbveK/nNdKZXYA== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 1061 octets ;; HEADER SECTION ;; id = 16144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAeH4qbIC0vYVg16oYi6tipjNeVw4a7fpmyPV89A/wQ8jaNl09mAdDw4UK4GB6apYMtDrPENP ZdlFCFKs1oXwgZBi8hwh94othqdi3wMRVFKmPgy2gLkvGuB1m5RhwFFY7+gn1grcVnCm8ZpU6ajg WY6jWpSGsoDlrsKAx2y/IRSp ) ; keytag 27018 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251223121917 20251216121917 27018 mil. th17qxsabBi1n+Rkxh9NqF6iSgswjNDFM8hoK0taTQWg73P1h7tvoQ5z8FdDsisfje15n8mk1pSc VlllJ5gYDWK42yAJ47ObMB27ioRHgxSKHYWS7+coI0cPhDfcin0U51bxnwZ76pMoXZ7C1PMOmPtA 3LSjHMZs4bk5TmyTnhM= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251223121917 20251216121917 45019 mil. aTmjuex97WBsVA5FoSP8LcmVX72EDhMdjYNOqM7hM44RfyP34sFhzScRk5mrcZNdJ7FStDYZUCE2 IzvuLXXbFKDe+sGt3jQi0EC7A8T2molPKA5FQYHioRZ+zQx3c74Cc3fm7QzxrCqYU4b1PGE7z/pd yMlHA3X/g94C/yyWyl1tBK12NtK905iSqdJuOEmbOrHjqmbYqkqazMVayReml392JtEuzAg6bsuB 4nstWpilus+B3qO28I1wtXOgG2QZnyIaHzViB7xpaM/aPLIpXlCuAh4e50WQSzt8g6I6gY5inTqN q/UoRC7JEw4/ntDpYRRwW7uZtU502bAw4x/E0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAYyGPLwsYcbyipISwwWNmcUlMU6Iy/mUas21MtvfvfE4PFz2fO6WHwgBd3W7eiA8J7wpWlet OSUqALodLgYI39uaA/cNwJ0EAE4oaf0jcsRMUeNIbN7UG/QMeRLvOBwW7Y5m1E0abw4SsH7p6HOY zWaxWqlGVABd4FbTRrlcLVT7 ) ; keytag 48003`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAeH4qbIC0vYVg16oYi6tipjNeVw4a7fpmyPV89A/wQ8jaNl09mAdDw4UK4GB6apYMtDrPENP ZdlFCFKs1oXwgZBi8hwh94othqdi3wMRVFKmPgy2gLkvGuB1m5RhwFFY7+gn1grcVnCm8ZpU6ajg WY6jWpSGsoDlrsKAx2y/IRSp ) ; keytag 27018`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251223121917 20251216121917 27018 mil. th17qxsabBi1n+Rkxh9NqF6iSgswjNDFM8hoK0taTQWg73P1h7tvoQ5z8FdDsisfje15n8mk1pSc VlllJ5gYDWK42yAJ47ObMB27ioRHgxSKHYWS7+coI0cPhDfcin0U51bxnwZ76pMoXZ7C1PMOmPtA 3LSjHMZs4bk5TmyTnhM= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20251223121917 20251216121917 45019 mil. aTmjuex97WBsVA5FoSP8LcmVX72EDhMdjYNOqM7hM44RfyP34sFhzScRk5mrcZNdJ7FStDYZUCE2 IzvuLXXbFKDe+sGt3jQi0EC7A8T2molPKA5FQYHioRZ+zQx3c74Cc3fm7QzxrCqYU4b1PGE7z/pd yMlHA3X/g94C/yyWyl1tBK12NtK905iSqdJuOEmbOrHjqmbYqkqazMVayReml392JtEuzAg6bsuB 4nstWpilus+B3qO28I1wtXOgG2QZnyIaHzViB7xpaM/aPLIpXlCuAh4e50WQSzt8g6I6gY5inTqN q/UoRC7JEw4/ntDpYRRwW7uZtU502bAw4x/E0Q== )`
	RRSIG=27018 and DNSKEY=27018 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=48003 is now in the chain-of-trust
	DNSKEY=27018 is now in the chain-of-trust
	Query to con1.nipr.mil for health.mil/A
	Received 629 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 629 octets ;; HEADER SECTION ;; id = 567 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) HEALTH.MIL. 21600 IN NS NS01-EE-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-NCR-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-CC-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-NWC-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-PAC-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-SEA-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-SEC-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-WE-GW.HEALTH.MIL. HEALTH.MIL. 10800 IN DS ( 23177 8 2 67facd45e013051e6925cad502a45de637af572e2c1815832b3c774bb95f0f9b ) HEALTH.MIL. 10800 IN DS 23177 8 1 9d690f17148fa032d7b1d86562096e9997fa236e HEALTH.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251223121917 20251216121917 27018 mil. dVl82u53sn+FQLWAkJBpOPJCGjZMPqjENESfatImdW/Fcms/ANm5AvhC5iD5CYGiRnXAXRHzyMpN H1zOUyq9y8k1kM9qzatRBY7k9syKiJhD4dC+WZnpqmkQnis7zSBBUSlqemFp4iisNOSi7DJ/nPVE 2JsC6ER4B55W0Q/XAxE= ) ;; ADDITIONAL SECTION (9 records) NS01-SEC-GW.HEALTH.MIL. 21600 IN A 214.2.209.178 NS01-SEA-GW.HEALTH.MIL. 21600 IN A 214.2.216.178 NS01-PAC-GW.HEALTH.MIL. 21600 IN A 214.2.215.178 NS01-NWC-GW.HEALTH.MIL. 21600 IN A 214.2.211.178 NS01-NCR-GW.HEALTH.MIL. 21600 IN A 214.2.208.178 NS01-WE-GW.HEALTH.MIL. 21600 IN A 214.2.214.178 NS01-EE-GW.HEALTH.MIL. 21600 IN A 214.2.213.178 NS01-CC-GW.HEALTH.MIL. 21600 IN A 214.2.210.178 ;; { "EDNS-VERSION": 0 }
	Query to pac1.nipr.mil for health.mil/DNSKEY
	Received 629 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 629 octets ;; HEADER SECTION ;; id = 24943 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) HEALTH.MIL. 21600 IN NS NS01-PAC-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-WE-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-NCR-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-CC-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-EE-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-SEA-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-SEC-GW.HEALTH.MIL. HEALTH.MIL. 21600 IN NS NS01-NWC-GW.HEALTH.MIL. HEALTH.MIL. 10800 IN DS ( 23177 8 2 67facd45e013051e6925cad502a45de637af572e2c1815832b3c774bb95f0f9b ) HEALTH.MIL. 10800 IN DS 23177 8 1 9d690f17148fa032d7b1d86562096e9997fa236e HEALTH.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251223121917 20251216121917 27018 mil. dVl82u53sn+FQLWAkJBpOPJCGjZMPqjENESfatImdW/Fcms/ANm5AvhC5iD5CYGiRnXAXRHzyMpN H1zOUyq9y8k1kM9qzatRBY7k9syKiJhD4dC+WZnpqmkQnis7zSBBUSlqemFp4iisNOSi7DJ/nPVE 2JsC6ER4B55W0Q/XAxE= ) ;; ADDITIONAL SECTION (9 records) NS01-SEC-GW.HEALTH.MIL. 21600 IN A 214.2.209.178 NS01-SEA-GW.HEALTH.MIL. 21600 IN A 214.2.216.178 NS01-PAC-GW.HEALTH.MIL. 21600 IN A 214.2.215.178 NS01-NWC-GW.HEALTH.MIL. 21600 IN A 214.2.211.178 NS01-NCR-GW.HEALTH.MIL. 21600 IN A 214.2.208.178 NS01-WE-GW.HEALTH.MIL. 21600 IN A 214.2.214.178 NS01-EE-GW.HEALTH.MIL. 21600 IN A 214.2.213.178 NS01-CC-GW.HEALTH.MIL. 21600 IN A 214.2.210.178 ;; { "EDNS-VERSION": 0 }
	Found child zone health.mil

health.mil

	Checking DS between mil and health.mil
	Query to pac2.nipr.mil for health.mil/DS
	Received 296 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 296 octets ;; HEADER SECTION ;; id = 11465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN DS ;; ANSWER SECTION (3 records) HEALTH.MIL. 10800 IN DS ( 23177 8 2 67facd45e013051e6925cad502a45de637af572e2c1815832b3c774bb95f0f9b ) HEALTH.MIL. 10800 IN DS 23177 8 1 9d690f17148fa032d7b1d86562096e9997fa236e HEALTH.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251223121917 20251216121917 27018 mil. dVl82u53sn+FQLWAkJBpOPJCGjZMPqjENESfatImdW/Fcms/ANm5AvhC5iD5CYGiRnXAXRHzyMpN H1zOUyq9y8k1kM9qzatRBY7k9syKiJhD4dC+WZnpqmkQnis7zSBBUSlqemFp4iisNOSi7DJ/nPVE 2JsC6ER4B55W0Q/XAxE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for health.mil in the mil zone
	DS=23177/SHA-1 uses a deprecated digest algorithm
	DS=23177/SHA-256 has algorithm RSASHA256
	DS=23177/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`HEALTH.MIL. 10800 IN RRSIG ( DS 8 2 10800 20251223121917 20251216121917 27018 mil. dVl82u53sn+FQLWAkJBpOPJCGjZMPqjENESfatImdW/Fcms/ANm5AvhC5iD5CYGiRnXAXRHzyMpN H1zOUyq9y8k1kM9qzatRBY7k9syKiJhD4dC+WZnpqmkQnis7zSBBUSlqemFp4iisNOSi7DJ/nPVE 2JsC6ER4B55W0Q/XAxE= )`
	RRSIG=27018 and DNSKEY=27018 verifies the DS RRset
	DS=23177/SHA-256 is now in the chain-of-trust
	`HEALTH.MIL. 10800 IN DS ( 23177 8 2 67facd45e013051e6925cad502a45de637af572e2c1815832b3c774bb95f0f9b )`
	`HEALTH.MIL. 10800 IN DS 23177 8 1 9d690f17148fa032d7b1d86562096e9997fa236e`
	Query to NS01-WE-GW.HEALTH.MIL for health.mil/DNSKEY
	Received 2313 bytes from 214.2.214.178
	;; Response received from [214.2.214.178] 2313 octets ;; HEADER SECTION ;; id = 33065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN DNSKEY ;; ANSWER SECTION (8 records) health.mil. 166295 IN DNSKEY ( 256 3 8 AwEAAZ3OZo9Pa9XYxfQ8ESajLUQJIpj4bcb/kFswUD/KRHnooBpviEitIp0dXolCQVYuSZX/coOx hUFHMilcY6PlqcOHtDK6I1UdHKu96ubXoQFM0LdUGPi4j+qx+61p+0ip4LV0dK0a08agB1qizJh0 8OOb3hNg+Ptf+Q2cWiCz+9cc26vhC6B36jk98nyx+dmf9AyuByGRVkRftiqi2iO/vhn4NyDiEO4/ ROR2vF532i+dbHGivpTjCjuCvPEV1hp5wrv2eVNFNOxHw6sFasrZEjJv1dwZ9CUvgVPJgwfQDX8n Cxd7ZYijYe5FLlbMi5fkg9+sLpXPNyAzyz8FpXlBbSk= ) ; keytag 64875 health.mil. 166295 IN DNSKEY ( 257 3 8 AwEAAc6egY0Bfe8MXjdxuxrOUa61WJtUnQEdg6AXeugQGruqWjmQrUms8tRcNyaTUsSRce72h4mT 8s4ZsJ0opw+p8Zj0FXKexSgJ4xNm1JZeNKEw3LwkNU2PVrPUPUUk7eJB7LzrFjfapYFgUM98qu3U ygNGqkOh1tY6xs/pK2sxOn1ShW+U4pmFjuWrEowY/9ihA8Oi9hk0LXNA4iXwEHNF7WcfPuCCPqWm opBJ3DZqOlnC0GqSnF1PKQ+5CjoXdpcR6q7/7Le9Q2ZfynwoEkvf6uXA43lmnMRq4n/vh5iC/gJr KOE1Iqp87PdchPYZV9VuGaAEJTxSE8UBm/ymBqbKITk= ) ; keytag 37576 health.mil. 166295 IN DNSKEY ( 256 3 8 AwEAAa04jw8nRhGFGK/7lJN9eR3MwIrxjYWy76YjoZrLD+wQOFtWCcmgghEyNuWdsLsP4cPh0/J9 naYjUiU0CLxmu5Dx4rUWqf81dxBqoU3JDfM1smtLTvOYQclCtAabtdGKnLQ+T6MrOstCT/wLPRJ6 97Yoz0Z86nKvxmW0P3ovFiRPbG07sJlErRb5F7bj81ick1lu3gs+RcH29Uz1aiXzNl8nDmIm03p4 kxEQq5Ad5/EHM5w6vF17qPC7+B2Y2dU+gwyB361/Ny85rpVxn/6ZsCrAnn70eLJo7JFd7B4wFnaf pgYj45r5uY+pJ7auidfvJwDVh0l7RRyrDxPSx3JEAqU= ) ; keytag 34090 health.mil. 166295 IN DNSKEY ( 256 3 8 AwEAAd2adUbu1rE9DmdC63nOZNBI8QSwmQ0iUZae9Xxd4iFZgPxDgdWYz+k3l4uKhWwVbojFWvae japo8Gwx0TvI+TAQNcAWklAEdsElJlozaEhoxzBabZCCuQm88TdCBCwHkIlWEERXBuFYbD78rsii 1GJmpnk25mcvtuS36KTIvfUbDpDdmihYjN3VBBQf22eR5MLqtjzL4JY4QG+/QcM15nQrYXeoN5vB LV1qtQUG1ATiuL8uvOGGnnUqLNkoV9ynw1p2OkcF4nbU8hZ7tfgysTv00AZaNnKd//yOWWDZKliC SqOyl36YnvPKNNUwUiveJzl+47qOCAGei3QXJyG/LH8= ) ; keytag 49599 health.mil. 166295 IN DNSKEY ( 257 3 8 AwEAAae/iU7CziG+PSe0EwM8ApvowWvYPYTgtr6vHLBWSR5NgqG2GH8tLf3rsYfrZ8u7uS1s9FkG hfo2IM4Hv3ya3HhF7X561G6mCEZ1jsQXQJK6WJy/NQVhJjqNsukAiR6c12IazBWrGolVrrPhpVLg jeETrDba3NNVf8tVhNEEWAJ53CVr8MQ/mSEvIyiCGeJWCBvJBDMV63x854Nc2NHfIr43JlXryGzh g/bu1khurHLGYOEqPwmmrC0b3P/dJhp5Gn02tJ2pyulwuq80r620AWDVEpKuzFhoWahw6T9XZCAM jcxklA+lOvJEIIg8Jw96F9a2r2G9/HlEuVtSj9IDlFE= ) ; keytag 23177 health.mil. 166295 IN RRSIG ( DNSKEY 8 2 172800 20251220135638 20251216133630 23177 health.mil. Rps2qLvOCQB9lTLrpVUmnMQXNGswTzlv2Yl4Rk868Y60ukSigknl/Z+Ww+lRXzgY2JtRvZmXnS7f WuHjR+hpER6ap2lX8ZzTJSe8Hi/xn4oTtWhGVn50M3Lzg8jI/SAAvlI7OWR31SZ99oiqbsHyYV/i srWgbLAesS25kJGWKyfIw8c9WyDxK0zpXSC6FaSoVvI5K6+Di9wufjaag/ZkKDO4nOFLdSwWG+C8 RDzRXEDppUWI2ptiztpHXDUmrUkuXFhk+WOSeWJAiOlXv/ZmCX8LnZrOvkAPjjs+QOXDi4feLlO6 WyyjrmbafoCcXFeYoQawFkqc0oJiBha0Y46h8w== ) health.mil. 166295 IN RRSIG ( DNSKEY 8 2 172800 20251220135638 20251216133630 37576 health.mil. uuYTyxQZYhpTNNOrdpN0MRVIWnJCWe1cV+/mCdgZmm3lJon9y0biIcHEBWQFKn/+mOPtrpTJ8ZMi cWEfazBOhVLhqMEWTQsk0f91KgU//IMd5lXypUXioTYpxMbHzPa8RzmK4YhKpi5W0wNhys5vRtlT aS7kznR+auN3wSi7nqkjF4PTdrxgwdA2qWCQ1O9lEvKBqvMuHSel0Az6ruKwDg6R5SGlVP1iTXn0 8R9VhVkXz0K7ofLl/JQZRQt9ieUucF7g4426S8yRqEYLNAVzpVf8PU9jj3nexiRHvelcrc/8fkbU tpWoxdSAC1K8lG+9QGQ9+RIbSxrYNWLN57AB0w== ) health.mil. 166295 IN RRSIG ( DNSKEY 8 2 172800 20251220135638 20251216133630 64875 health.mil. kB4VMolDWNmGc83tpaBLM9W6DJ47XO+dxrATHmYgLB9HSzgeVf2FMW41ZLlBaJ2Lk+2bGjjQuC99 QmufEp7E8TzKpLmeYinev8T4F5dL8y5UEB3AJ4HCAqA90xCWbVOMVZpCmhw/sA5ZNg5xUcRCG01I 8sB0K5XYbC+eXHG+G+uSd24hncZQZXRUTyRHZvZ+DCTzhxvvnIlQ5VOYmUbI271qfVjzVIvqI82D Zosel8c8GxmFlqScTa9wds2gXAwvKqF7mGHUuIClpCMfI14Kr8Zv5jItnBFBVZqXJZMD+4mXOdxS su/AQAee2gi/3nADmpYBJtzn/jeZ9Yjvb3lWig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for health.mil
	`health.mil. 166295 IN DNSKEY ( 256 3 8 AwEAAZ3OZo9Pa9XYxfQ8ESajLUQJIpj4bcb/kFswUD/KRHnooBpviEitIp0dXolCQVYuSZX/coOx hUFHMilcY6PlqcOHtDK6I1UdHKu96ubXoQFM0LdUGPi4j+qx+61p+0ip4LV0dK0a08agB1qizJh0 8OOb3hNg+Ptf+Q2cWiCz+9cc26vhC6B36jk98nyx+dmf9AyuByGRVkRftiqi2iO/vhn4NyDiEO4/ ROR2vF532i+dbHGivpTjCjuCvPEV1hp5wrv2eVNFNOxHw6sFasrZEjJv1dwZ9CUvgVPJgwfQDX8n Cxd7ZYijYe5FLlbMi5fkg9+sLpXPNyAzyz8FpXlBbSk= ) ; keytag 64875`
	`health.mil. 166295 IN DNSKEY ( 257 3 8 AwEAAc6egY0Bfe8MXjdxuxrOUa61WJtUnQEdg6AXeugQGruqWjmQrUms8tRcNyaTUsSRce72h4mT 8s4ZsJ0opw+p8Zj0FXKexSgJ4xNm1JZeNKEw3LwkNU2PVrPUPUUk7eJB7LzrFjfapYFgUM98qu3U ygNGqkOh1tY6xs/pK2sxOn1ShW+U4pmFjuWrEowY/9ihA8Oi9hk0LXNA4iXwEHNF7WcfPuCCPqWm opBJ3DZqOlnC0GqSnF1PKQ+5CjoXdpcR6q7/7Le9Q2ZfynwoEkvf6uXA43lmnMRq4n/vh5iC/gJr KOE1Iqp87PdchPYZV9VuGaAEJTxSE8UBm/ymBqbKITk= ) ; keytag 37576`
	`health.mil. 166295 IN DNSKEY ( 256 3 8 AwEAAa04jw8nRhGFGK/7lJN9eR3MwIrxjYWy76YjoZrLD+wQOFtWCcmgghEyNuWdsLsP4cPh0/J9 naYjUiU0CLxmu5Dx4rUWqf81dxBqoU3JDfM1smtLTvOYQclCtAabtdGKnLQ+T6MrOstCT/wLPRJ6 97Yoz0Z86nKvxmW0P3ovFiRPbG07sJlErRb5F7bj81ick1lu3gs+RcH29Uz1aiXzNl8nDmIm03p4 kxEQq5Ad5/EHM5w6vF17qPC7+B2Y2dU+gwyB361/Ny85rpVxn/6ZsCrAnn70eLJo7JFd7B4wFnaf pgYj45r5uY+pJ7auidfvJwDVh0l7RRyrDxPSx3JEAqU= ) ; keytag 34090`
	`health.mil. 166295 IN DNSKEY ( 256 3 8 AwEAAd2adUbu1rE9DmdC63nOZNBI8QSwmQ0iUZae9Xxd4iFZgPxDgdWYz+k3l4uKhWwVbojFWvae japo8Gwx0TvI+TAQNcAWklAEdsElJlozaEhoxzBabZCCuQm88TdCBCwHkIlWEERXBuFYbD78rsii 1GJmpnk25mcvtuS36KTIvfUbDpDdmihYjN3VBBQf22eR5MLqtjzL4JY4QG+/QcM15nQrYXeoN5vB LV1qtQUG1ATiuL8uvOGGnnUqLNkoV9ynw1p2OkcF4nbU8hZ7tfgysTv00AZaNnKd//yOWWDZKliC SqOyl36YnvPKNNUwUiveJzl+47qOCAGei3QXJyG/LH8= ) ; keytag 49599`
	`health.mil. 166295 IN DNSKEY ( 257 3 8 AwEAAae/iU7CziG+PSe0EwM8ApvowWvYPYTgtr6vHLBWSR5NgqG2GH8tLf3rsYfrZ8u7uS1s9FkG hfo2IM4Hv3ya3HhF7X561G6mCEZ1jsQXQJK6WJy/NQVhJjqNsukAiR6c12IazBWrGolVrrPhpVLg jeETrDba3NNVf8tVhNEEWAJ53CVr8MQ/mSEvIyiCGeJWCBvJBDMV63x854Nc2NHfIr43JlXryGzh g/bu1khurHLGYOEqPwmmrC0b3P/dJhp5Gn02tJ2pyulwuq80r620AWDVEpKuzFhoWahw6T9XZCAM jcxklA+lOvJEIIg8Jw96F9a2r2G9/HlEuVtSj9IDlFE= ) ; keytag 23177`
	DNSKEY=23177/SEP is now in the chain-of-trust
	DS=23177/SHA-256 verifies DNSKEY=23177/SEP
	DS=23177/SHA-1 verifies DNSKEY=23177/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`health.mil. 166295 IN RRSIG ( DNSKEY 8 2 172800 20251220135638 20251216133630 23177 health.mil. Rps2qLvOCQB9lTLrpVUmnMQXNGswTzlv2Yl4Rk868Y60ukSigknl/Z+Ww+lRXzgY2JtRvZmXnS7f WuHjR+hpER6ap2lX8ZzTJSe8Hi/xn4oTtWhGVn50M3Lzg8jI/SAAvlI7OWR31SZ99oiqbsHyYV/i srWgbLAesS25kJGWKyfIw8c9WyDxK0zpXSC6FaSoVvI5K6+Di9wufjaag/ZkKDO4nOFLdSwWG+C8 RDzRXEDppUWI2ptiztpHXDUmrUkuXFhk+WOSeWJAiOlXv/ZmCX8LnZrOvkAPjjs+QOXDi4feLlO6 WyyjrmbafoCcXFeYoQawFkqc0oJiBha0Y46h8w== )`
	`health.mil. 166295 IN RRSIG ( DNSKEY 8 2 172800 20251220135638 20251216133630 37576 health.mil. uuYTyxQZYhpTNNOrdpN0MRVIWnJCWe1cV+/mCdgZmm3lJon9y0biIcHEBWQFKn/+mOPtrpTJ8ZMi cWEfazBOhVLhqMEWTQsk0f91KgU//IMd5lXypUXioTYpxMbHzPa8RzmK4YhKpi5W0wNhys5vRtlT aS7kznR+auN3wSi7nqkjF4PTdrxgwdA2qWCQ1O9lEvKBqvMuHSel0Az6ruKwDg6R5SGlVP1iTXn0 8R9VhVkXz0K7ofLl/JQZRQt9ieUucF7g4426S8yRqEYLNAVzpVf8PU9jj3nexiRHvelcrc/8fkbU tpWoxdSAC1K8lG+9QGQ9+RIbSxrYNWLN57AB0w== )`
	`health.mil. 166295 IN RRSIG ( DNSKEY 8 2 172800 20251220135638 20251216133630 64875 health.mil. kB4VMolDWNmGc83tpaBLM9W6DJ47XO+dxrATHmYgLB9HSzgeVf2FMW41ZLlBaJ2Lk+2bGjjQuC99 QmufEp7E8TzKpLmeYinev8T4F5dL8y5UEB3AJ4HCAqA90xCWbVOMVZpCmhw/sA5ZNg5xUcRCG01I 8sB0K5XYbC+eXHG+G+uSd24hncZQZXRUTyRHZvZ+DCTzhxvvnIlQ5VOYmUbI271qfVjzVIvqI82D Zosel8c8GxmFlqScTa9wds2gXAwvKqF7mGHUuIClpCMfI14Kr8Zv5jItnBFBVZqXJZMD+4mXOdxS su/AQAee2gi/3nADmpYBJtzn/jeZ9Yjvb3lWig== )`
	RRSIG=23177 and DNSKEY=23177/SEP verifies the DNSKEY RRset
	RRSIG=37576 and DNSKEY=37576/SEP verifies the DNSKEY RRset
	RRSIG=64875 and DNSKEY=64875 verifies the DNSKEY RRset
	DNSKEY=64875 is now in the chain-of-trust
	DNSKEY=37576/SEP is now in the chain-of-trust
	DNSKEY=34090 is now in the chain-of-trust
	DNSKEY=49599 is now in the chain-of-trust
	Query to NS01-SEA-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.216.178
	;; Response received from [214.2.216.178] 353 octets ;; HEADER SECTION ;; id = 33631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 42 IN A 214.10.40.15 health.mil. 42 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-SEA-GW.HEALTH.MIL is authoritative for health.mil
	Found RRSIG signed by health.mil zone
	Query to NS01-SEC-GW.HEALTH.MIL for health.mil/SOA
	Received 436 bytes from 214.2.209.178
	;; Response received from [214.2.209.178] 436 octets ;; HEADER SECTION ;; id = 17217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN SOA ;; ANSWER SECTION (2 records) health.mil. 699 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.hsse-dnsad.health.mil. 20401126 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 420 ;minimum ) health.mil. 699 IN RRSIG ( SOA 8 2 900 20251220203229 20251216193229 64875 health.mil. WD/Fgkfbzm+hpXGcMB77AN4JzFUGouGUrwoLMqCIGgHS/S+Gq4xVvKA16lB52GuKZJviaOKy+fxO gIAOfVx+HiuQhOQjuL1BxxO17mibM+IuyPFZEWPzEVmDXba8iEGGOg2sRsV4AYHUIKzhu+7+paSy 8Eq385ODmd6mf7du3vc8AvZQQQaSxW3N3eMbKCQMc214DTMfKMGhp7oMg+xcfLgrXQBok6ThxQKk w4zqVHB8sMxrdDsRBfXblz09TJiBu9SleJdzgrf+YmrbSdAwI8rWi4GpdZrAq1iXrtwG2VbwWfZr +/ojblb9ae2xOXfz4vQROgdUXZcftwfDuKCP3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-NCR-GW.HEALTH.MIL for health.mil/SOA
	Received 436 bytes from 214.2.208.178
	;; Response received from [214.2.208.178] 436 octets ;; HEADER SECTION ;; id = 25106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN SOA ;; ANSWER SECTION (2 records) health.mil. 87 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.hsse-dnsad.health.mil. 20401122 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 420 ;minimum ) health.mil. 87 IN RRSIG ( SOA 8 2 900 20251220202057 20251216192057 64875 health.mil. Nltx2Op2Lq4H7B7eF0CrsfpMxCZN6iS8KY+g3yQjsNUS0xVPMGzQpVqPyjmw+ytZaS5eP61WJcLZ ypZTURMt8t/KRBf/U13Z7xJf2ZaoryU7G6dJ7FjWR+eVpmxzRa5jVaecwpMsQl/rry51HWRXmYda 1/DOPtgP7LQnk26WD/3H1/pMXTZgVK9A8xaeI/vSWLrhNGK1WMAwD7daVKYYm0kUe0PaLD9yseDu ltga6qtnMLI7MmnaxKFprkIvKNtdN3eUbHNHMuW0obtHpaBC6ThUVEbzCg7vSQpVF5Z5CObNR3SB 1bQ2l0oB00RQ0TvQhEK9xrCz1GQHNpU+6oL6uQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-NCR-GW.HEALTH.MIL serial (20401122) differs from NS01-SEC-GW.HEALTH.MIL serial (20401126)
	Query to NS01-EE-GW.HEALTH.MIL for health.mil/SOA
	Received 436 bytes from 214.2.213.178
	;; Response received from [214.2.213.178] 436 octets ;; HEADER SECTION ;; id = 49898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN SOA ;; ANSWER SECTION (2 records) health.mil. 698 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.hsse-dnsad.health.mil. 20401126 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 420 ;minimum ) health.mil. 698 IN RRSIG ( SOA 8 2 900 20251220203229 20251216193229 64875 health.mil. WD/Fgkfbzm+hpXGcMB77AN4JzFUGouGUrwoLMqCIGgHS/S+Gq4xVvKA16lB52GuKZJviaOKy+fxO gIAOfVx+HiuQhOQjuL1BxxO17mibM+IuyPFZEWPzEVmDXba8iEGGOg2sRsV4AYHUIKzhu+7+paSy 8Eq385ODmd6mf7du3vc8AvZQQQaSxW3N3eMbKCQMc214DTMfKMGhp7oMg+xcfLgrXQBok6ThxQKk w4zqVHB8sMxrdDsRBfXblz09TJiBu9SleJdzgrf+YmrbSdAwI8rWi4GpdZrAq1iXrtwG2VbwWfZr +/ojblb9ae2xOXfz4vQROgdUXZcftwfDuKCP3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-CC-GW.HEALTH.MIL for health.mil/SOA
	Received 436 bytes from 214.2.210.178
	;; Response received from [214.2.210.178] 436 octets ;; HEADER SECTION ;; id = 34926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN SOA ;; ANSWER SECTION (2 records) health.mil. 698 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.hsse-dnsad.health.mil. 20401126 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 420 ;minimum ) health.mil. 698 IN RRSIG ( SOA 8 2 900 20251220203229 20251216193229 64875 health.mil. WD/Fgkfbzm+hpXGcMB77AN4JzFUGouGUrwoLMqCIGgHS/S+Gq4xVvKA16lB52GuKZJviaOKy+fxO gIAOfVx+HiuQhOQjuL1BxxO17mibM+IuyPFZEWPzEVmDXba8iEGGOg2sRsV4AYHUIKzhu+7+paSy 8Eq385ODmd6mf7du3vc8AvZQQQaSxW3N3eMbKCQMc214DTMfKMGhp7oMg+xcfLgrXQBok6ThxQKk w4zqVHB8sMxrdDsRBfXblz09TJiBu9SleJdzgrf+YmrbSdAwI8rWi4GpdZrAq1iXrtwG2VbwWfZr +/ojblb9ae2xOXfz4vQROgdUXZcftwfDuKCP3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-NWC-GW.HEALTH.MIL for health.mil/SOA
	Received 436 bytes from 214.2.211.178
	;; Response received from [214.2.211.178] 436 octets ;; HEADER SECTION ;; id = 45083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN SOA ;; ANSWER SECTION (2 records) health.mil. 698 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.hsse-dnsad.health.mil. 20401126 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 420 ;minimum ) health.mil. 698 IN RRSIG ( SOA 8 2 900 20251220203229 20251216193229 64875 health.mil. WD/Fgkfbzm+hpXGcMB77AN4JzFUGouGUrwoLMqCIGgHS/S+Gq4xVvKA16lB52GuKZJviaOKy+fxO gIAOfVx+HiuQhOQjuL1BxxO17mibM+IuyPFZEWPzEVmDXba8iEGGOg2sRsV4AYHUIKzhu+7+paSy 8Eq385ODmd6mf7du3vc8AvZQQQaSxW3N3eMbKCQMc214DTMfKMGhp7oMg+xcfLgrXQBok6ThxQKk w4zqVHB8sMxrdDsRBfXblz09TJiBu9SleJdzgrf+YmrbSdAwI8rWi4GpdZrAq1iXrtwG2VbwWfZr +/ojblb9ae2xOXfz4vQROgdUXZcftwfDuKCP3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-WE-GW.HEALTH.MIL for health.mil/SOA
	Received 436 bytes from 214.2.214.178
	;; Response received from [214.2.214.178] 436 octets ;; HEADER SECTION ;; id = 14270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN SOA ;; ANSWER SECTION (2 records) health.mil. 13 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.hsse-dnsad.health.mil. 20401122 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 420 ;minimum ) health.mil. 13 IN RRSIG ( SOA 8 2 900 20251220202057 20251216192057 64875 health.mil. Nltx2Op2Lq4H7B7eF0CrsfpMxCZN6iS8KY+g3yQjsNUS0xVPMGzQpVqPyjmw+ytZaS5eP61WJcLZ ypZTURMt8t/KRBf/U13Z7xJf2ZaoryU7G6dJ7FjWR+eVpmxzRa5jVaecwpMsQl/rry51HWRXmYda 1/DOPtgP7LQnk26WD/3H1/pMXTZgVK9A8xaeI/vSWLrhNGK1WMAwD7daVKYYm0kUe0PaLD9yseDu ltga6qtnMLI7MmnaxKFprkIvKNtdN3eUbHNHMuW0obtHpaBC6ThUVEbzCg7vSQpVF5Z5CObNR3SB 1bQ2l0oB00RQ0TvQhEK9xrCz1GQHNpU+6oL6uQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-WE-GW.HEALTH.MIL serial (20401122) differs from NS01-SEC-GW.HEALTH.MIL serial (20401126)
	Query to NS01-PAC-GW.HEALTH.MIL for health.mil/SOA
	Received 436 bytes from 214.2.215.178
	;; Response received from [214.2.215.178] 436 octets ;; HEADER SECTION ;; id = 22986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN SOA ;; ANSWER SECTION (2 records) health.mil. 13 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.hsse-dnsad.health.mil. 20401122 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 420 ;minimum ) health.mil. 13 IN RRSIG ( SOA 8 2 900 20251220202057 20251216192057 64875 health.mil. Nltx2Op2Lq4H7B7eF0CrsfpMxCZN6iS8KY+g3yQjsNUS0xVPMGzQpVqPyjmw+ytZaS5eP61WJcLZ ypZTURMt8t/KRBf/U13Z7xJf2ZaoryU7G6dJ7FjWR+eVpmxzRa5jVaecwpMsQl/rry51HWRXmYda 1/DOPtgP7LQnk26WD/3H1/pMXTZgVK9A8xaeI/vSWLrhNGK1WMAwD7daVKYYm0kUe0PaLD9yseDu ltga6qtnMLI7MmnaxKFprkIvKNtdN3eUbHNHMuW0obtHpaBC6ThUVEbzCg7vSQpVF5Z5CObNR3SB 1bQ2l0oB00RQ0TvQhEK9xrCz1GQHNpU+6oL6uQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-PAC-GW.HEALTH.MIL serial (20401122) differs from NS01-SEC-GW.HEALTH.MIL serial (20401126)
	Query to NS01-SEA-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.216.178
	;; Response received from [214.2.216.178] 353 octets ;; HEADER SECTION ;; id = 2547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 41 IN A 214.10.40.15 health.mil. 41 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	Found 1 RRSIGs over A RRset
	`health.mil. 41 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== )`
	RRSIG=64875 and DNSKEY=64875 verifies the A RRset

health.mil

	Query to NS01-SEC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.209.178
	;; Response received from [214.2.209.178] 353 octets ;; HEADER SECTION ;; id = 64665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 41 IN A 214.10.40.15 health.mil. 41 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-SEC-GW.HEALTH.MIL is authoritative for health.mil
	Found RRSIG signed by health.mil zone
	Query to NS01-SEC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.209.178
	;; Response received from [214.2.209.178] 353 octets ;; HEADER SECTION ;; id = 34618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 41 IN A 214.10.40.15 health.mil. 41 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	Found 1 RRSIGs over A RRset
	`health.mil. 41 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== )`
	RRSIG=64875 and DNSKEY=64875 verifies the A RRset

health.mil

	Query to NS01-NCR-GW.HEALTH.MIL for health.mil/A
	Received 55 bytes from 214.2.208.178
	;; Response received from [214.2.208.178] 55 octets ;; HEADER SECTION ;; id = 25538 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (1 record) health.mil. 56 IN A 214.10.40.15 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-NCR-GW.HEALTH.MIL is authoritative for health.mil
	Query to NS01-NCR-GW.HEALTH.MIL for health.mil/A
	Received 55 bytes from 214.2.208.178
	;; Response received from [214.2.208.178] 55 octets ;; HEADER SECTION ;; id = 60399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (1 record) health.mil. 56 IN A 214.10.40.15 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	No RRSIGs found

health.mil

	Query to NS01-CC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.210.178
	;; Response received from [214.2.210.178] 353 octets ;; HEADER SECTION ;; id = 1519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 40 IN A 214.10.40.15 health.mil. 40 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-CC-GW.HEALTH.MIL is authoritative for health.mil
	Found RRSIG signed by health.mil zone
	Query to NS01-CC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.210.178
	;; Response received from [214.2.210.178] 353 octets ;; HEADER SECTION ;; id = 62320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 40 IN A 214.10.40.15 health.mil. 40 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	Found 1 RRSIGs over A RRset
	`health.mil. 40 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== )`
	RRSIG=64875 and DNSKEY=64875 verifies the A RRset

health.mil

	Query to NS01-WE-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.214.178
	;; Response received from [214.2.214.178] 353 octets ;; HEADER SECTION ;; id = 490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 57 IN A 214.10.40.15 health.mil. 57 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-WE-GW.HEALTH.MIL is authoritative for health.mil
	Found RRSIG signed by health.mil zone
	Query to NS01-WE-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.214.178
	;; Response received from [214.2.214.178] 353 octets ;; HEADER SECTION ;; id = 26456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 57 IN A 214.10.40.15 health.mil. 57 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	Found 1 RRSIGs over A RRset
	`health.mil. 57 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== )`
	RRSIG=64875 and DNSKEY=64875 verifies the A RRset

health.mil

	Query to NS01-NWC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.211.178
	;; Response received from [214.2.211.178] 353 octets ;; HEADER SECTION ;; id = 24873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 40 IN A 214.10.40.15 health.mil. 40 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-NWC-GW.HEALTH.MIL is authoritative for health.mil
	Found RRSIG signed by health.mil zone
	Query to NS01-NWC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.211.178
	;; Response received from [214.2.211.178] 353 octets ;; HEADER SECTION ;; id = 41311 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 40 IN A 214.10.40.15 health.mil. 40 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	Found 1 RRSIGs over A RRset
	`health.mil. 40 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== )`
	RRSIG=64875 and DNSKEY=64875 verifies the A RRset

health.mil

	Query to NS01-EE-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.213.178
	;; Response received from [214.2.213.178] 353 octets ;; HEADER SECTION ;; id = 49827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 40 IN A 214.10.40.15 health.mil. 40 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-EE-GW.HEALTH.MIL is authoritative for health.mil
	Found RRSIG signed by health.mil zone
	Query to NS01-EE-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.213.178
	;; Response received from [214.2.213.178] 353 octets ;; HEADER SECTION ;; id = 63855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 39 IN A 214.10.40.15 health.mil. 39 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	Found 1 RRSIGs over A RRset
	`health.mil. 39 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== )`
	RRSIG=64875 and DNSKEY=64875 verifies the A RRset

health.mil

	Query to NS01-PAC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.215.178
	;; Response received from [214.2.215.178] 353 octets ;; HEADER SECTION ;; id = 47736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 57 IN A 214.10.40.15 health.mil. 57 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-PAC-GW.HEALTH.MIL is authoritative for health.mil
	Found RRSIG signed by health.mil zone
	Query to NS01-PAC-GW.HEALTH.MIL for health.mil/A
	Received 353 bytes from 214.2.215.178
	;; Response received from [214.2.215.178] 353 octets ;; HEADER SECTION ;; id = 60596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; health.mil. IN A ;; ANSWER SECTION (2 records) health.mil. 56 IN A 214.10.40.15 health.mil. 56 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	health.mil A RR has value 214.10.40.15
	Found 1 RRSIGs over A RRset
	`health.mil. 56 IN RRSIG ( A 8 2 60 20251220145307 20251216141101 64875 health.mil. jVJGhh0AbF5GpHwurtKcizFKdlVKFaRsejpvjEjG4O0WYWlETd+4hdbIefPHS8xBwDZo2T7AOlfl 1pdHjSWjnGoAaDv2G+Ik4o/0lrJY/YsK60gQaQ6uBQi2/+iodLPdm+ll9b6Z5mJBBYLmREmWISU2 rF92JQQYSUvihCVSlsFUcnK0vxShf2z/Ra/n2ssbC1vQyhgMKnPuA30Ncuk47MZvXVCzIxKHta0M wuhTdSNEyJZ/0UnInavk1GEaRsDTAzAr/i/wXoQa2janpgzBiSd2eyr8QZQ8U+eaNHOUJ7Wzm/Q5 r8WPIHnsIz0TTiwduy/iC4npDwa4Plz4XVjVEQ== )`
	RRSIG=64875 and DNSKEY=64875 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test health.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: