DNSSEC Analyzer

Domain Name:

Time: 2023-09-24 17:02:38 UTC, NTP stratum 4

Analyzing DNSSEC problems for jcs.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (1139 octets) ;; HEADER SECTION ;; id = 10755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to j.root-servers.net for jcs.mil/A
	Received 802 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (802 octets) ;; HEADER SECTION ;; id = 11797 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to k.root-servers.net for mil/DNSKEY
	Received 798 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (798 octets) ;; HEADER SECTION ;; id = 8355 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 415 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (415 octets) ;; HEADER SECTION ;; id = 58309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to eur2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (1628 octets) ;; HEADER SECTION ;; id = 14992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to eur2.nipr.mil for jcs.mil/A
	Received 431 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (431 octets) ;; HEADER SECTION ;; id = 49405 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) JCS.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. JCS.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. JCS.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. JCS.MIL. 10800 IN DS 8590 8 1 5af4a2e688f627b816204e4faab5f6d655aae965 JCS.MIL. 10800 IN DS ( 8590 8 2 43049d5b7a9f082278a2d3ed3bb7db61ab416da309e0022c0802e4c12e100036 ) JCS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Jjn/DD5Ut8+OpPSBXdlSmsBlAEXWfdCZjR84Jp2lBgo4W7f/6jts+zDax8MsYYjzFdK6nlX4M0zR /lrJNpWXsC+aYoNg1VWtQTdVeKpWurLGXJOzAD370BhfJMJySmiWDHHHN2fQSHWATWRqO4uFyXTT IvpAum5SbOnk13drR8o= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pac1.nipr.mil for jcs.mil/DNSKEY
	Received 431 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (431 octets) ;; HEADER SECTION ;; id = 27712 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) JCS.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. JCS.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. JCS.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. JCS.MIL. 10800 IN DS ( 8590 8 2 43049d5b7a9f082278a2d3ed3bb7db61ab416da309e0022c0802e4c12e100036 ) JCS.MIL. 10800 IN DS 8590 8 1 5af4a2e688f627b816204e4faab5f6d655aae965 JCS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Jjn/DD5Ut8+OpPSBXdlSmsBlAEXWfdCZjR84Jp2lBgo4W7f/6jts+zDax8MsYYjzFdK6nlX4M0zR /lrJNpWXsC+aYoNg1VWtQTdVeKpWurLGXJOzAD370BhfJMJySmiWDHHHN2fQSHWATWRqO4uFyXTT IvpAum5SbOnk13drR8o= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone jcs.mil

jcs.mil

	Checking DS between mil and jcs.mil
	Query to eur2.nipr.mil for jcs.mil/DS
	Received 290 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (290 octets) ;; HEADER SECTION ;; id = 19044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN DS ;; ANSWER SECTION (3 records) JCS.MIL. 10800 IN DS ( 8590 8 2 43049d5b7a9f082278a2d3ed3bb7db61ab416da309e0022c0802e4c12e100036 ) JCS.MIL. 10800 IN DS 8590 8 1 5af4a2e688f627b816204e4faab5f6d655aae965 JCS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Jjn/DD5Ut8+OpPSBXdlSmsBlAEXWfdCZjR84Jp2lBgo4W7f/6jts+zDax8MsYYjzFdK6nlX4M0zR /lrJNpWXsC+aYoNg1VWtQTdVeKpWurLGXJOzAD370BhfJMJySmiWDHHHN2fQSHWATWRqO4uFyXTT IvpAum5SbOnk13drR8o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for jcs.mil in the mil zone
	DS=8590/SHA-256 has algorithm RSASHA256
	DS=8590/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`JCS.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Jjn/DD5Ut8+OpPSBXdlSmsBlAEXWfdCZjR84Jp2lBgo4W7f/6jts+zDax8MsYYjzFdK6nlX4M0zR /lrJNpWXsC+aYoNg1VWtQTdVeKpWurLGXJOzAD370BhfJMJySmiWDHHHN2fQSHWATWRqO4uFyXTT IvpAum5SbOnk13drR8o= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=8590/SHA-256 is now in the chain-of-trust
	`JCS.MIL. 10800 IN DS ( 8590 8 2 43049d5b7a9f082278a2d3ed3bb7db61ab416da309e0022c0802e4c12e100036 )`
	`JCS.MIL. 10800 IN DS 8590 8 1 5af4a2e688f627b816204e4faab5f6d655aae965`
	Query to DNS-PUB-F1-U.PENTAGON.MIL for jcs.mil/DNSKEY
	Received 1808 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (1808 octets) ;; HEADER SECTION ;; id = 2775 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN DNSKEY ;; ANSWER SECTION (8 records) jcs.mil. 569886 IN DNSKEY ( 257 3 8 AwEAAZfc8mDckvTlCmQ5dgR2eSMN1KYNaSa1IBseBTdOmmkMm1GvsnZ5XD7FEmhYMRI3mP/rsgyS 8St271dcGuH4FCxDMi1+aDB2swKi51GplGc0EVVemgbz1Szv5Ktuo8UtI/hb+1LeeQiZ9NsJziha dDMcPVWWwpDkLvq+EZYtsOQpN6men7zS5KO/dyI9IN4cfmxnOvxL0hsrq/gXhida2UMIl4U1Ggv/ LW86m9ADB8aE0GnOpuQF8j01PTloSesR2qDMVwHRmf+ON4tmNTeJLMRMh796YJXriV19Mq9+otlK oFYzQ7j3eNdVz40T+cc8uAvTJ63Aa/6lZTNjnBAxbU8= ) ; Key ID = 27412 jcs.mil. 569886 IN DNSKEY ( 256 3 8 AwEAAZiMnI3Vot3D7/DkWqvAMUP7c8fCUpTxfTq6CtzXrLbYPrhQNcsvPpGdD2N2vbOqfqv3KFaw 9ZnWAoh09wj10fX4vyi142GU/iNwrVPgXb/gPP/RdJ+soB1CqFO/y3jGgn8Jo4Wyezmlfb6YJBlD YC2oa07/h3B/uXSqTKVHunox ) ; Key ID = 36984 jcs.mil. 569886 IN DNSKEY ( 256 3 8 AwEAAdNcNGaoEws/J8gsgWg9t7WapWZQmJaks7t9JeQXripVaIfcrjRqDF1NHTi+ceFiu+u0SFAE HgRF/AEfNjgqBpFZVHpcSGE3fMd8K010hqTpfTZV9lCBGfitDsQhRQyXgqUDfuf22zAUaOmKyfnt 3czu308LTslN/eSl4zzZQQGd ) ; Key ID = 36285 jcs.mil. 569886 IN DNSKEY ( 257 3 8 AwEAAbVf3/oeVOnoBuXuDqrRpytN+QPQE452QiJjHQJ5/yRGmS4/eC5umrebdoKU3q990s095bKt P/SLGBLidGv10A8/ck7NnHKaAw+5tm/9e0w4SvWfftQJ4WZHaivGAfASadzE/KQSobKBzvE50W/J ndPhR7Epvc6SePYc9Tb3R7/KwceBXlkapYlJJ6kCssfgTrvrL5wySKHBNzpuwI8i1ln8UeL3zU3R tXyMmgwwNfnmJA82z/HkhQFLX60goxdX7nwr6ozlJ9O+68NwwwfgMvDfQBW/iMbCWjodQlzRnut0 VCoJe4IT4AelBItRgaThdKpV876YsmGClsP5prWPJos= ) ; Key ID = 8590 jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 8590 jcs.mil. bGrhcwCnY/CePqnWi4eNYlD0GRtWECIJYedqxjuh3hO92bwT4DLkRDH/GQrRWLCQqTrsmckeLeaT h8vPEEvTccWmSiFuMTIEDXVX1pqt45qb0kmypPVfDd9EsTZ3QVBgR6Ki+g/Pa1zoz37q47xppa0i x2e5v2LXzBLuK3XQirN/EKP//vyIpcjUd3Vrut5FW+7rGyFUR4i2+GzVVKII1BZGj0Gi9HLecDEC Du5Eazzofxw2U+np+S1M9h0dacV48EJ6R/5tzfYPEFWy+RXZjaWm8A1NKZB4wpbHIl2ayDp70J5x pvGunvxa/ldEJRaXrJTjLarwVntLPhS5IjPkVw== ) jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 27412 jcs.mil. HfhfOjJt2BGcg7OQppS8tVXZO4yZvWz8OcucwLlpbOosgRSePVVcAJqxWtd954Bt5n7P48PCuQ7q j6tJjIciZasDk+8mZmsKJ32M4OdEBAV4+1gL/nrkdJYQ1S36q9Hip+Q9tsg+mv8I8OYDlVFqJ4Gt 1h4C2Fen3GxBjNojpvVyK9hz8Anp69CLHRPz3Zfh/anzkKv7g5CV8bWJdmIYF3yfZb/knLz7xsDx zCMslU8213k+3dbbpHCYQURawpPnxvANrHtwuIssPrFIbkS2FHyjvBlVcDgOki9cHWIU2CHwr2E/ Bbhe9NItvPvVOLmzaludXyv1ZdzjfduL9sr6GQ== ) jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 36285 jcs.mil. nJgXQzDrpd3alUngTSiDxxvFjjUvu5DXQ4zNAVF4mURjBA+GZSmYP2TKIXtE3xgqAtWTj5q2mBs3 Jtu/3QF3aUB0FhC5h6D6K4X3Z+mTL2+kcw0VHZl2lpKMthafWmV89nictkI7rbRDMblmetdvsQFC Z6yguswD/oBNLNMetNU= ) jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 36984 jcs.mil. i5yo9WVgiBX+sXxsq0fEslT4bi9mKBTr6YNZ1xvw9XMjDvYUBzNSGttLfGjqhjLoSNq4xqBJZ28N pzNO8S06BKZ6GIOtfm9L23ThpNoA5wIqXSGwsp6j4/5EE6BljDwUaF25HLE123sQ32uF3y7cSXT5 0vx+JXcmhc2Aoh3pLak= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for jcs.mil
	`jcs.mil. 569886 IN DNSKEY ( 257 3 8 AwEAAZfc8mDckvTlCmQ5dgR2eSMN1KYNaSa1IBseBTdOmmkMm1GvsnZ5XD7FEmhYMRI3mP/rsgyS 8St271dcGuH4FCxDMi1+aDB2swKi51GplGc0EVVemgbz1Szv5Ktuo8UtI/hb+1LeeQiZ9NsJziha dDMcPVWWwpDkLvq+EZYtsOQpN6men7zS5KO/dyI9IN4cfmxnOvxL0hsrq/gXhida2UMIl4U1Ggv/ LW86m9ADB8aE0GnOpuQF8j01PTloSesR2qDMVwHRmf+ON4tmNTeJLMRMh796YJXriV19Mq9+otlK oFYzQ7j3eNdVz40T+cc8uAvTJ63Aa/6lZTNjnBAxbU8= ) ; Key ID = 27412`
	`jcs.mil. 569886 IN DNSKEY ( 256 3 8 AwEAAZiMnI3Vot3D7/DkWqvAMUP7c8fCUpTxfTq6CtzXrLbYPrhQNcsvPpGdD2N2vbOqfqv3KFaw 9ZnWAoh09wj10fX4vyi142GU/iNwrVPgXb/gPP/RdJ+soB1CqFO/y3jGgn8Jo4Wyezmlfb6YJBlD YC2oa07/h3B/uXSqTKVHunox ) ; Key ID = 36984`
	`jcs.mil. 569886 IN DNSKEY ( 256 3 8 AwEAAdNcNGaoEws/J8gsgWg9t7WapWZQmJaks7t9JeQXripVaIfcrjRqDF1NHTi+ceFiu+u0SFAE HgRF/AEfNjgqBpFZVHpcSGE3fMd8K010hqTpfTZV9lCBGfitDsQhRQyXgqUDfuf22zAUaOmKyfnt 3czu308LTslN/eSl4zzZQQGd ) ; Key ID = 36285`
	`jcs.mil. 569886 IN DNSKEY ( 257 3 8 AwEAAbVf3/oeVOnoBuXuDqrRpytN+QPQE452QiJjHQJ5/yRGmS4/eC5umrebdoKU3q990s095bKt P/SLGBLidGv10A8/ck7NnHKaAw+5tm/9e0w4SvWfftQJ4WZHaivGAfASadzE/KQSobKBzvE50W/J ndPhR7Epvc6SePYc9Tb3R7/KwceBXlkapYlJJ6kCssfgTrvrL5wySKHBNzpuwI8i1ln8UeL3zU3R tXyMmgwwNfnmJA82z/HkhQFLX60goxdX7nwr6ozlJ9O+68NwwwfgMvDfQBW/iMbCWjodQlzRnut0 VCoJe4IT4AelBItRgaThdKpV876YsmGClsP5prWPJos= ) ; Key ID = 8590`
	DNSKEY=8590/SEP is now in the chain-of-trust
	DS=8590/SHA-256 verifies DNSKEY=8590/SEP
	DS=8590/SHA-1 verifies DNSKEY=8590/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 8590 jcs.mil. bGrhcwCnY/CePqnWi4eNYlD0GRtWECIJYedqxjuh3hO92bwT4DLkRDH/GQrRWLCQqTrsmckeLeaT h8vPEEvTccWmSiFuMTIEDXVX1pqt45qb0kmypPVfDd9EsTZ3QVBgR6Ki+g/Pa1zoz37q47xppa0i x2e5v2LXzBLuK3XQirN/EKP//vyIpcjUd3Vrut5FW+7rGyFUR4i2+GzVVKII1BZGj0Gi9HLecDEC Du5Eazzofxw2U+np+S1M9h0dacV48EJ6R/5tzfYPEFWy+RXZjaWm8A1NKZB4wpbHIl2ayDp70J5x pvGunvxa/ldEJRaXrJTjLarwVntLPhS5IjPkVw== )`
	`jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 27412 jcs.mil. HfhfOjJt2BGcg7OQppS8tVXZO4yZvWz8OcucwLlpbOosgRSePVVcAJqxWtd954Bt5n7P48PCuQ7q j6tJjIciZasDk+8mZmsKJ32M4OdEBAV4+1gL/nrkdJYQ1S36q9Hip+Q9tsg+mv8I8OYDlVFqJ4Gt 1h4C2Fen3GxBjNojpvVyK9hz8Anp69CLHRPz3Zfh/anzkKv7g5CV8bWJdmIYF3yfZb/knLz7xsDx zCMslU8213k+3dbbpHCYQURawpPnxvANrHtwuIssPrFIbkS2FHyjvBlVcDgOki9cHWIU2CHwr2E/ Bbhe9NItvPvVOLmzaludXyv1ZdzjfduL9sr6GQ== )`
	`jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 36285 jcs.mil. nJgXQzDrpd3alUngTSiDxxvFjjUvu5DXQ4zNAVF4mURjBA+GZSmYP2TKIXtE3xgqAtWTj5q2mBs3 Jtu/3QF3aUB0FhC5h6D6K4X3Z+mTL2+kcw0VHZl2lpKMthafWmV89nictkI7rbRDMblmetdvsQFC Z6yguswD/oBNLNMetNU= )`
	`jcs.mil. 569886 IN RRSIG ( DNSKEY 8 2 2592000 20231118082311 20230919073115 36984 jcs.mil. i5yo9WVgiBX+sXxsq0fEslT4bi9mKBTr6YNZ1xvw9XMjDvYUBzNSGttLfGjqhjLoSNq4xqBJZ28N pzNO8S06BKZ6GIOtfm9L23ThpNoA5wIqXSGwsp6j4/5EE6BljDwUaF25HLE123sQ32uF3y7cSXT5 0vx+JXcmhc2Aoh3pLak= )`
	RRSIG=8590 and DNSKEY=8590/SEP verifies the DNSKEY RRset
	RRSIG=27412 and DNSKEY=27412/SEP verifies the DNSKEY RRset
	RRSIG=36285 and DNSKEY=36285 verifies the DNSKEY RRset
	RRSIG=36984 and DNSKEY=36984 verifies the DNSKEY RRset
	DNSKEY=27412/SEP is now in the chain-of-trust
	DNSKEY=36984 is now in the chain-of-trust
	DNSKEY=36285 is now in the chain-of-trust
	Query to DNS-PUB-F1-U.PENTAGON.MIL for jcs.mil/A
	Received 520 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (520 octets) ;; HEADER SECTION ;; id = 50280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jcs.mil. 887 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN NSEC3 ( 1 0 10 72939c 6gdkdpcpiv6cu0hmag81t1r66eso6dpj NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36285 jcs.mil. XtVk26178ay821qijFWuYuz26b22oL+EgOp8WsBGBvxRn7gzwSVtbXLnAPpIVYhysqn3AXUk9/0D 87ss93leodiURLY0VbqTCVLV+2s6d5ih5E2qTQT2tgeKCk5ECz2KPnMnL1NW9wYdZr/SUkaXvajj M75ZDTN9qIaHQkfLSII= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36984 jcs.mil. FYKEJ6/f7SM05LmDf44QGT91aD8BLCIqMLEHtnc0umFDtrGlT9/UcfnjR6WlpsISqBCfg1yGJnCR vGl7PgudvDD/G9dh8nv6NQxiTHt038FoDcZkyv3MFKMOaY8pFKGCHNx6ZPqN/krz5e8nGNydypKe CFR86XjhnVQwJmT5juY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F1-U.PENTAGON.MIL is authoritative for jcs.mil
	Query to DNS-PUB-F3-U.PENTAGON.MIL for jcs.mil/SOA
	Received 437 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (437 octets) ;; HEADER SECTION ;; id = 44961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN SOA ;; ANSWER SECTION (3 records) jcs.mil. 900 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) jcs.mil. 900 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36285 jcs.mil. f/pHjZDAXcAWap3JbpCbmxfd9cWHDCI/DwCI4YBv2jeanCoVwppSQZOt7T6HyDx6sqI8OJUNc4Ep hkePVcgSPU8YK3UZnOTBS8TijgK7Up/t5hyxTVcpiExZJJaA0HW0AYAL2HG6VnxU9Ur+uekddCrq OnSOn4+zzBXfZXE0wBI= ) jcs.mil. 900 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36984 jcs.mil. PgVsgi7Rv26HO1mBgwttOyrsxj7yej7JB8TaEbtdkC7F4sa0Cw1hBH9tKV1KBDVdoCsC5V44RYdF zNbylpikOqQnVPw4G7xIbj7qlpx6JNTjKZTgIF5NRxyFnuzHxdHlVagL+N5Y3wcMHzEac58/02b0 weklsQ0uKXeSESJVraw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS-PUB-F2-U.PENTAGON.MIL for jcs.mil/SOA
	Received 437 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (437 octets) ;; HEADER SECTION ;; id = 49507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN SOA ;; ANSWER SECTION (3 records) jcs.mil. 900 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) jcs.mil. 900 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36285 jcs.mil. f/pHjZDAXcAWap3JbpCbmxfd9cWHDCI/DwCI4YBv2jeanCoVwppSQZOt7T6HyDx6sqI8OJUNc4Ep hkePVcgSPU8YK3UZnOTBS8TijgK7Up/t5hyxTVcpiExZJJaA0HW0AYAL2HG6VnxU9Ur+uekddCrq OnSOn4+zzBXfZXE0wBI= ) jcs.mil. 900 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36984 jcs.mil. PgVsgi7Rv26HO1mBgwttOyrsxj7yej7JB8TaEbtdkC7F4sa0Cw1hBH9tKV1KBDVdoCsC5V44RYdF zNbylpikOqQnVPw4G7xIbj7qlpx6JNTjKZTgIF5NRxyFnuzHxdHlVagL+N5Y3wcMHzEac58/02b0 weklsQ0uKXeSESJVraw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS-PUB-F1-U.PENTAGON.MIL for jcs.mil/A
	Received 520 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (520 octets) ;; HEADER SECTION ;; id = 2709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jcs.mil. 887 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN NSEC3 ( 1 0 10 72939c 6gdkdpcpiv6cu0hmag81t1r66eso6dpj NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36285 jcs.mil. XtVk26178ay821qijFWuYuz26b22oL+EgOp8WsBGBvxRn7gzwSVtbXLnAPpIVYhysqn3AXUk9/0D 87ss93leodiURLY0VbqTCVLV+2s6d5ih5E2qTQT2tgeKCk5ECz2KPnMnL1NW9wYdZr/SUkaXvajj M75ZDTN9qIaHQkfLSII= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36984 jcs.mil. FYKEJ6/f7SM05LmDf44QGT91aD8BLCIqMLEHtnc0umFDtrGlT9/UcfnjR6WlpsISqBCfg1yGJnCR vGl7PgudvDD/G9dh8nv6NQxiTHt038FoDcZkyv3MFKMOaY8pFKGCHNx6ZPqN/krz5e8nGNydypKe CFR86XjhnVQwJmT5juY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	No RRSIGs found

jcs.mil

	Query to DNS-PUB-F2-U.PENTAGON.MIL for jcs.mil/A
	Received 854 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (854 octets) ;; HEADER SECTION ;; id = 51575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jcs.mil. 874 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) jcs.mil. 874 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36285 jcs.mil. f/pHjZDAXcAWap3JbpCbmxfd9cWHDCI/DwCI4YBv2jeanCoVwppSQZOt7T6HyDx6sqI8OJUNc4Ep hkePVcgSPU8YK3UZnOTBS8TijgK7Up/t5hyxTVcpiExZJJaA0HW0AYAL2HG6VnxU9Ur+uekddCrq OnSOn4+zzBXfZXE0wBI= ) jcs.mil. 874 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36984 jcs.mil. PgVsgi7Rv26HO1mBgwttOyrsxj7yej7JB8TaEbtdkC7F4sa0Cw1hBH9tKV1KBDVdoCsC5V44RYdF zNbylpikOqQnVPw4G7xIbj7qlpx6JNTjKZTgIF5NRxyFnuzHxdHlVagL+N5Y3wcMHzEac58/02b0 weklsQ0uKXeSESJVraw= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 874 IN NSEC3 ( 1 0 10 72939c 6gdkdpcpiv6cu0hmag81t1r66eso6dpj NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 874 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36285 jcs.mil. XtVk26178ay821qijFWuYuz26b22oL+EgOp8WsBGBvxRn7gzwSVtbXLnAPpIVYhysqn3AXUk9/0D 87ss93leodiURLY0VbqTCVLV+2s6d5ih5E2qTQT2tgeKCk5ECz2KPnMnL1NW9wYdZr/SUkaXvajj M75ZDTN9qIaHQkfLSII= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 874 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36984 jcs.mil. FYKEJ6/f7SM05LmDf44QGT91aD8BLCIqMLEHtnc0umFDtrGlT9/UcfnjR6WlpsISqBCfg1yGJnCR vGl7PgudvDD/G9dh8nv6NQxiTHt038FoDcZkyv3MFKMOaY8pFKGCHNx6ZPqN/krz5e8nGNydypKe CFR86XjhnVQwJmT5juY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F2-U.PENTAGON.MIL is authoritative for jcs.mil
	Found RRSIG signed by jcs.mil zone
	Query to DNS-PUB-F2-U.PENTAGON.MIL for jcs.mil/A
	Received 854 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (854 octets) ;; HEADER SECTION ;; id = 2021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jcs.mil. 874 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) jcs.mil. 874 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36285 jcs.mil. f/pHjZDAXcAWap3JbpCbmxfd9cWHDCI/DwCI4YBv2jeanCoVwppSQZOt7T6HyDx6sqI8OJUNc4Ep hkePVcgSPU8YK3UZnOTBS8TijgK7Up/t5hyxTVcpiExZJJaA0HW0AYAL2HG6VnxU9Ur+uekddCrq OnSOn4+zzBXfZXE0wBI= ) jcs.mil. 874 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36984 jcs.mil. PgVsgi7Rv26HO1mBgwttOyrsxj7yej7JB8TaEbtdkC7F4sa0Cw1hBH9tKV1KBDVdoCsC5V44RYdF zNbylpikOqQnVPw4G7xIbj7qlpx6JNTjKZTgIF5NRxyFnuzHxdHlVagL+N5Y3wcMHzEac58/02b0 weklsQ0uKXeSESJVraw= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 874 IN NSEC3 ( 1 0 10 72939c 6gdkdpcpiv6cu0hmag81t1r66eso6dpj NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 874 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36285 jcs.mil. XtVk26178ay821qijFWuYuz26b22oL+EgOp8WsBGBvxRn7gzwSVtbXLnAPpIVYhysqn3AXUk9/0D 87ss93leodiURLY0VbqTCVLV+2s6d5ih5E2qTQT2tgeKCk5ECz2KPnMnL1NW9wYdZr/SUkaXvajj M75ZDTN9qIaHQkfLSII= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 874 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36984 jcs.mil. FYKEJ6/f7SM05LmDf44QGT91aD8BLCIqMLEHtnc0umFDtrGlT9/UcfnjR6WlpsISqBCfg1yGJnCR vGl7PgudvDD/G9dh8nv6NQxiTHt038FoDcZkyv3MFKMOaY8pFKGCHNx6ZPqN/krz5e8nGNydypKe CFR86XjhnVQwJmT5juY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`jcs.mil. 874 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36285 jcs.mil. f/pHjZDAXcAWap3JbpCbmxfd9cWHDCI/DwCI4YBv2jeanCoVwppSQZOt7T6HyDx6sqI8OJUNc4Ep hkePVcgSPU8YK3UZnOTBS8TijgK7Up/t5hyxTVcpiExZJJaA0HW0AYAL2HG6VnxU9Ur+uekddCrq OnSOn4+zzBXfZXE0wBI= )`
	`jcs.mil. 874 IN RRSIG ( SOA 8 2 900 20231123044326 20230924034326 36984 jcs.mil. PgVsgi7Rv26HO1mBgwttOyrsxj7yej7JB8TaEbtdkC7F4sa0Cw1hBH9tKV1KBDVdoCsC5V44RYdF zNbylpikOqQnVPw4G7xIbj7qlpx6JNTjKZTgIF5NRxyFnuzHxdHlVagL+N5Y3wcMHzEac58/02b0 weklsQ0uKXeSESJVraw= )`
	RRSIG=36285 and DNSKEY=36285 verifies the SOA RRset
	RRSIG=36984 and DNSKEY=36984 verifies the SOA RRset

jcs.mil

	Query to DNS-PUB-F3-U.PENTAGON.MIL for jcs.mil/A
	Received 520 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (520 octets) ;; HEADER SECTION ;; id = 24179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jcs.mil. 887 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN NSEC3 ( 1 0 10 72939c 6gdkdpcpiv6cu0hmag81t1r66eso6dpj NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36285 jcs.mil. XtVk26178ay821qijFWuYuz26b22oL+EgOp8WsBGBvxRn7gzwSVtbXLnAPpIVYhysqn3AXUk9/0D 87ss93leodiURLY0VbqTCVLV+2s6d5ih5E2qTQT2tgeKCk5ECz2KPnMnL1NW9wYdZr/SUkaXvajj M75ZDTN9qIaHQkfLSII= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36984 jcs.mil. FYKEJ6/f7SM05LmDf44QGT91aD8BLCIqMLEHtnc0umFDtrGlT9/UcfnjR6WlpsISqBCfg1yGJnCR vGl7PgudvDD/G9dh8nv6NQxiTHt038FoDcZkyv3MFKMOaY8pFKGCHNx6ZPqN/krz5e8nGNydypKe CFR86XjhnVQwJmT5juY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F3-U.PENTAGON.MIL is authoritative for jcs.mil
	Query to DNS-PUB-F3-U.PENTAGON.MIL for jcs.mil/A
	Received 520 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (520 octets) ;; HEADER SECTION ;; id = 59994 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcs.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jcs.mil. 887 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2009087860 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 900 ;minimum ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN NSEC3 ( 1 0 10 72939c 6gdkdpcpiv6cu0hmag81t1r66eso6dpj NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36285 jcs.mil. XtVk26178ay821qijFWuYuz26b22oL+EgOp8WsBGBvxRn7gzwSVtbXLnAPpIVYhysqn3AXUk9/0D 87ss93leodiURLY0VbqTCVLV+2s6d5ih5E2qTQT2tgeKCk5ECz2KPnMnL1NW9wYdZr/SUkaXvajj M75ZDTN9qIaHQkfLSII= ) 58ON35A0187ES1JIAT9VVOHJR3PVB0TG.jcs.mil. 875 IN RRSIG ( NSEC3 8 3 900 20231118081256 20230919073114 36984 jcs.mil. FYKEJ6/f7SM05LmDf44QGT91aD8BLCIqMLEHtnc0umFDtrGlT9/UcfnjR6WlpsISqBCfg1yGJnCR vGl7PgudvDD/G9dh8nv6NQxiTHt038FoDcZkyv3MFKMOaY8pFKGCHNx6ZPqN/krz5e8nGNydypKe CFR86XjhnVQwJmT5juY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test jcs.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: