DNSSEC Analyzer - marines.mil

Domain Name:

Time: 2023-09-24 17:09:16 UTC, NTP stratum 4

Analyzing DNSSEC problems for marines.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (1139 octets) ;; HEADER SECTION ;; id = 49081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to l.root-servers.net for marines.mil/A
	Received 806 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (806 octets) ;; HEADER SECTION ;; id = 45934 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for mil/DNSKEY
	Received 801 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (801 octets) ;; HEADER SECTION ;; id = 50460 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to b.root-servers.net for mil/DS
	Received 415 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (415 octets) ;; HEADER SECTION ;; id = 46018 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to pac2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (1628 octets) ;; HEADER SECTION ;; id = 10370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=44065 is now in the chain-of-trust
	DNSKEY=14098 is now in the chain-of-trust
	Query to con1.nipr.mil for marines.mil/A
	Received 462 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (462 octets) ;; HEADER SECTION ;; id = 29117 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) MARINES.MIL. 21600 IN NS NS1-EAST.USMC.MIL. MARINES.MIL. 21600 IN NS NS2-EAST.USMC.MIL. MARINES.MIL. 21600 IN NS NS1-WEST.USMC.MIL. MARINES.MIL. 21600 IN NS NS2-WEST.USMC.MIL. MARINES.MIL. 10800 IN DS 16192 8 1 2161b90a96aebb9b7a1b3b8b1e6f226b4a3e1779 MARINES.MIL. 10800 IN DS ( 16192 8 2 b168e38bcdce47ed63ba743902d5a69792fde7eb42dc40450217b9f27be98d19 ) MARINES.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. cvX2V1ajkXzf1fjkRLEW3b/1HJzl9KRVxCgUMDdUOMlkmP90HnJOs24Oj8QUv95/3bdJTzFsJCzy 4zialvBrY7XwU7LknjripQhDwi39or6YH06KeCY8X1iuhFrBnwfdxS1JD4icRRJAccYXW0KLKEqS +r954TRmwJcAC/JZuBs= ) ;; ADDITIONAL SECTION (5 records) NS2-WEST.USMC.MIL. 21600 IN A 214.43.141.54 NS2-EAST.USMC.MIL. 21600 IN A 214.43.140.54 NS1-WEST.USMC.MIL. 21600 IN A 214.43.141.53 NS1-EAST.USMC.MIL. 21600 IN A 214.43.140.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pac2.nipr.mil for marines.mil/DNSKEY
	Received 462 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (462 octets) ;; HEADER SECTION ;; id = 41199 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) MARINES.MIL. 21600 IN NS NS2-WEST.USMC.MIL. MARINES.MIL. 21600 IN NS NS2-EAST.USMC.MIL. MARINES.MIL. 21600 IN NS NS1-EAST.USMC.MIL. MARINES.MIL. 21600 IN NS NS1-WEST.USMC.MIL. MARINES.MIL. 10800 IN DS 16192 8 1 2161b90a96aebb9b7a1b3b8b1e6f226b4a3e1779 MARINES.MIL. 10800 IN DS ( 16192 8 2 b168e38bcdce47ed63ba743902d5a69792fde7eb42dc40450217b9f27be98d19 ) MARINES.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. cvX2V1ajkXzf1fjkRLEW3b/1HJzl9KRVxCgUMDdUOMlkmP90HnJOs24Oj8QUv95/3bdJTzFsJCzy 4zialvBrY7XwU7LknjripQhDwi39or6YH06KeCY8X1iuhFrBnwfdxS1JD4icRRJAccYXW0KLKEqS +r954TRmwJcAC/JZuBs= ) ;; ADDITIONAL SECTION (5 records) NS2-WEST.USMC.MIL. 21600 IN A 214.43.141.54 NS2-EAST.USMC.MIL. 21600 IN A 214.43.140.54 NS1-WEST.USMC.MIL. 21600 IN A 214.43.141.53 NS1-EAST.USMC.MIL. 21600 IN A 214.43.140.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone marines.mil

marines.mil

	Checking DS between mil and marines.mil
	Query to pac2.nipr.mil for marines.mil/DS
	Received 298 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (298 octets) ;; HEADER SECTION ;; id = 52297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN DS ;; ANSWER SECTION (3 records) MARINES.MIL. 10800 IN DS ( 16192 8 2 b168e38bcdce47ed63ba743902d5a69792fde7eb42dc40450217b9f27be98d19 ) MARINES.MIL. 10800 IN DS 16192 8 1 2161b90a96aebb9b7a1b3b8b1e6f226b4a3e1779 MARINES.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. cvX2V1ajkXzf1fjkRLEW3b/1HJzl9KRVxCgUMDdUOMlkmP90HnJOs24Oj8QUv95/3bdJTzFsJCzy 4zialvBrY7XwU7LknjripQhDwi39or6YH06KeCY8X1iuhFrBnwfdxS1JD4icRRJAccYXW0KLKEqS +r954TRmwJcAC/JZuBs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for marines.mil in the mil zone
	DS=16192/SHA-256 has algorithm RSASHA256
	DS=16192/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`MARINES.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. cvX2V1ajkXzf1fjkRLEW3b/1HJzl9KRVxCgUMDdUOMlkmP90HnJOs24Oj8QUv95/3bdJTzFsJCzy 4zialvBrY7XwU7LknjripQhDwi39or6YH06KeCY8X1iuhFrBnwfdxS1JD4icRRJAccYXW0KLKEqS +r954TRmwJcAC/JZuBs= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=16192/SHA-256 is now in the chain-of-trust
	`MARINES.MIL. 10800 IN DS ( 16192 8 2 b168e38bcdce47ed63ba743902d5a69792fde7eb42dc40450217b9f27be98d19 )`
	`MARINES.MIL. 10800 IN DS 16192 8 1 2161b90a96aebb9b7a1b3b8b1e6f226b4a3e1779`
	Query to NS2-EAST.USMC.MIL for marines.mil/DNSKEY
	Received 1742 bytes from 214.43.140.54
	;; Response received from 214.43.140.54 (1742 octets) ;; HEADER SECTION ;; id = 2920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN DNSKEY ;; ANSWER SECTION (6 records) marines.mil. 154135 IN DNSKEY ( 256 3 8 AwEAAdg3tOW4AsRG2tbYj1Zl4/tNGmAqin13Urr+dB40fJP1Qd0j9/YzN2WA42U5OrWFve9IEFDV BWua/jJ+GeTbKq3vdmTG4gtrRX6UQ+nTbbelrwgIVa8NStPc7wXzQptfZsRagyMwOiQjZlmFx5r2 4uh05GcJgZ8k3jH3acbJA1/+s0wLaTor+VbRHbyvIga0pFFzhA8tnvAXIaCpiuJfQt2QKjZcaQAW SBnNUnRzoe34OsTXQdAeuEtdSEzqMExSJ45WOoqLtryuc2RCrrAcSglYiEJwlaPX7ZXgl/o6yB2p 7cSrgGJe59rD6NctFNIPW8ZiSAyFXS4Wtef6AQxZTB0= ) ; Key ID = 61344 marines.mil. 154135 IN DNSKEY ( 257 3 8 AwEAAcla/q57U3/vIYVTK7mGGC9Al7pOWDpPaI3kTr1XU33BfAJoiR1DP9MU1UrcM7znC6f3l9QY a1Voxgw16xuoaVBhXxrQY7ROlWm+It6zJ9r7GchC3bVRS/ack/6/tKFLalPhlB3Y8vk2B3acBJuF 8v0QgRtR5v9wiWdKOxcBfy63eIfgGdsm7976oFjsaP1FEVoouOr2vDa9YH0FQXOgklRr3DqHJ7Bc Etawy3agH1rAIQbRBq90E/yDzPQN7Eb0/CKZbqrYgoo2fNdiQI0SszvyNUKIGCsE4bZBdu7LcV7C 9I5Ftg7BICGdli3ry1jnwp7FAUZnFogxPYZLYy3B2VM= ) ; Key ID = 16192 marines.mil. 154135 IN DNSKEY ( 256 3 8 AwEAAbNFhyyII1IdGB1LB2qVbj4IyF3ONMVGvpUMngeEylvMVVQGkuGos4UQ5Bw8NES3CVmgC2Gy GqHghIbLgunJN7703OB3kIlSvNR/SJ/NifBdXjpoU5T3+9LjPNVYH2yYGfUw2591ahb8PiTlr+E0 orX6AIEd/xtncLJWMy5YiZ7TEMQ8B0IC0K3i/aL9Z2IaDE7998SRUq/9d9Wby2IcV3ivW2KfYJ8v 2sYlJDuWjSsDaqH7UIhvilBI/asBQGwnojXQ5Q6ebSjmSWIta72on7KZDK3AxLae6sxlmleVWLeK EL6Xez/zvaaOORu2Vholpg4kIyWmBdt15uPsR7xBDwU= ) ; Key ID = 45213 marines.mil. 154135 IN DNSKEY ( 256 3 8 AwEAAbXGf4P4wEMtzH1F2Wd/fsfq6vONqR6eXHuC2TgQySV3ewdNVK+rliOpLFUrUh/ZsPF2rp2p evy/ONgaRYJbxZQn74WH8gYQwHJTJPftnrU1GB/YS4MOSVdyLfzaT74D82k+BkQfHBFaB2YXGgSo 2trGwi76H6vB4oIAjA8lmTXa/bJPb9Acz6OKCNLNyRrBj4OTVBCXWwoiX28nr4/fkz1WLZEoTqBK TL6wzR4TKOUUdZ0QKzUct5ds/IlJGkSpgH9vVWqP/h61MW6OpCF4asFzGhdYWy0rmMg8FdPxry5T NZQlz17+m0swwmwzNp5MYBRKsGsYTA1OsD0eZc7+zFk= ) ; Key ID = 21978 marines.mil. 154135 IN RRSIG ( DNSKEY 8 2 172800 20230927153609 20230923143631 16192 marines.mil. b9Dly9wnTw9atATAvxI8yuqK7+W/YGqPf70rGrzJxSIIL/0hrXHnJUDObLlD5IfBtVMEHR5ttI3q q9yNxACtTNDGSX6MDosrDvFvZd5LHqgTcZOeArmiLcHTJfLpg4EPc+I//rqZr7peNS+nEmGTqyye 6Ytjxx/EVFazKEG6ZROYOY2vLcbHNU1KyAtdWW5Q/d84BDp1N7+V8VVCexe9H1UeQ396cNF20V8Y f5Av1iCOL8k8qizHIWXdOqzD4mPJye8sh0NnPIObr61UMH2iuCmiq9+5GRIEHyVdbn4CthtKqOUF 8mPhs9U2AMF4JT3hgRlKwF3iYYn6XdLHrm3o5g== ) marines.mil. 154135 IN RRSIG ( DNSKEY 8 2 172800 20230927153609 20230923143631 61344 marines.mil. tocbFMYalQ1nzoSo+TSttA965qoTekDgsQ5ck0/UwOBLxzodmlgkra57O3Flu8rrjBIJDCTTnxSY 0UiwJ50A2pdRjsns7SY75uMnXLV8pczDhvvpRyF6s6hBelZGhyccRc1SINHk3xldFIwdZvIzLkQs bDdnpPZ32UfLZ/nUNTJ7cVUJFWHdqXClUqgQeV6PCrrmDHQJ7DDzeWxA/K0ohWNB4f3ohKvQnpZ5 ZAEvTrQY1vh9AVwgKessQWo3np67wjomzwMitAGuEbwNbN5cVvO/QMONgBSZkbz7ZwXHhhSqgplb u09gMtgrCck2AaewBgtOfwh3RZF5ylBrIMO5vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for marines.mil
	`marines.mil. 154135 IN DNSKEY ( 256 3 8 AwEAAdg3tOW4AsRG2tbYj1Zl4/tNGmAqin13Urr+dB40fJP1Qd0j9/YzN2WA42U5OrWFve9IEFDV BWua/jJ+GeTbKq3vdmTG4gtrRX6UQ+nTbbelrwgIVa8NStPc7wXzQptfZsRagyMwOiQjZlmFx5r2 4uh05GcJgZ8k3jH3acbJA1/+s0wLaTor+VbRHbyvIga0pFFzhA8tnvAXIaCpiuJfQt2QKjZcaQAW SBnNUnRzoe34OsTXQdAeuEtdSEzqMExSJ45WOoqLtryuc2RCrrAcSglYiEJwlaPX7ZXgl/o6yB2p 7cSrgGJe59rD6NctFNIPW8ZiSAyFXS4Wtef6AQxZTB0= ) ; Key ID = 61344`
	`marines.mil. 154135 IN DNSKEY ( 257 3 8 AwEAAcla/q57U3/vIYVTK7mGGC9Al7pOWDpPaI3kTr1XU33BfAJoiR1DP9MU1UrcM7znC6f3l9QY a1Voxgw16xuoaVBhXxrQY7ROlWm+It6zJ9r7GchC3bVRS/ack/6/tKFLalPhlB3Y8vk2B3acBJuF 8v0QgRtR5v9wiWdKOxcBfy63eIfgGdsm7976oFjsaP1FEVoouOr2vDa9YH0FQXOgklRr3DqHJ7Bc Etawy3agH1rAIQbRBq90E/yDzPQN7Eb0/CKZbqrYgoo2fNdiQI0SszvyNUKIGCsE4bZBdu7LcV7C 9I5Ftg7BICGdli3ry1jnwp7FAUZnFogxPYZLYy3B2VM= ) ; Key ID = 16192`
	`marines.mil. 154135 IN DNSKEY ( 256 3 8 AwEAAbNFhyyII1IdGB1LB2qVbj4IyF3ONMVGvpUMngeEylvMVVQGkuGos4UQ5Bw8NES3CVmgC2Gy GqHghIbLgunJN7703OB3kIlSvNR/SJ/NifBdXjpoU5T3+9LjPNVYH2yYGfUw2591ahb8PiTlr+E0 orX6AIEd/xtncLJWMy5YiZ7TEMQ8B0IC0K3i/aL9Z2IaDE7998SRUq/9d9Wby2IcV3ivW2KfYJ8v 2sYlJDuWjSsDaqH7UIhvilBI/asBQGwnojXQ5Q6ebSjmSWIta72on7KZDK3AxLae6sxlmleVWLeK EL6Xez/zvaaOORu2Vholpg4kIyWmBdt15uPsR7xBDwU= ) ; Key ID = 45213`
	`marines.mil. 154135 IN DNSKEY ( 256 3 8 AwEAAbXGf4P4wEMtzH1F2Wd/fsfq6vONqR6eXHuC2TgQySV3ewdNVK+rliOpLFUrUh/ZsPF2rp2p evy/ONgaRYJbxZQn74WH8gYQwHJTJPftnrU1GB/YS4MOSVdyLfzaT74D82k+BkQfHBFaB2YXGgSo 2trGwi76H6vB4oIAjA8lmTXa/bJPb9Acz6OKCNLNyRrBj4OTVBCXWwoiX28nr4/fkz1WLZEoTqBK TL6wzR4TKOUUdZ0QKzUct5ds/IlJGkSpgH9vVWqP/h61MW6OpCF4asFzGhdYWy0rmMg8FdPxry5T NZQlz17+m0swwmwzNp5MYBRKsGsYTA1OsD0eZc7+zFk= ) ; Key ID = 21978`
	DNSKEY=16192/SEP is now in the chain-of-trust
	DS=16192/SHA-256 verifies DNSKEY=16192/SEP
	DS=16192/SHA-1 verifies DNSKEY=16192/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`marines.mil. 154135 IN RRSIG ( DNSKEY 8 2 172800 20230927153609 20230923143631 16192 marines.mil. b9Dly9wnTw9atATAvxI8yuqK7+W/YGqPf70rGrzJxSIIL/0hrXHnJUDObLlD5IfBtVMEHR5ttI3q q9yNxACtTNDGSX6MDosrDvFvZd5LHqgTcZOeArmiLcHTJfLpg4EPc+I//rqZr7peNS+nEmGTqyye 6Ytjxx/EVFazKEG6ZROYOY2vLcbHNU1KyAtdWW5Q/d84BDp1N7+V8VVCexe9H1UeQ396cNF20V8Y f5Av1iCOL8k8qizHIWXdOqzD4mPJye8sh0NnPIObr61UMH2iuCmiq9+5GRIEHyVdbn4CthtKqOUF 8mPhs9U2AMF4JT3hgRlKwF3iYYn6XdLHrm3o5g== )`
	`marines.mil. 154135 IN RRSIG ( DNSKEY 8 2 172800 20230927153609 20230923143631 61344 marines.mil. tocbFMYalQ1nzoSo+TSttA965qoTekDgsQ5ck0/UwOBLxzodmlgkra57O3Flu8rrjBIJDCTTnxSY 0UiwJ50A2pdRjsns7SY75uMnXLV8pczDhvvpRyF6s6hBelZGhyccRc1SINHk3xldFIwdZvIzLkQs bDdnpPZ32UfLZ/nUNTJ7cVUJFWHdqXClUqgQeV6PCrrmDHQJ7DDzeWxA/K0ohWNB4f3ohKvQnpZ5 ZAEvTrQY1vh9AVwgKessQWo3np67wjomzwMitAGuEbwNbN5cVvO/QMONgBSZkbz7ZwXHhhSqgplb u09gMtgrCck2AaewBgtOfwh3RZF5ylBrIMO5vA== )`
	RRSIG=16192 and DNSKEY=16192/SEP verifies the DNSKEY RRset
	RRSIG=61344 and DNSKEY=61344 verifies the DNSKEY RRset
	DNSKEY=61344 is now in the chain-of-trust
	DNSKEY=45213 is now in the chain-of-trust
	DNSKEY=21978 is now in the chain-of-trust
	Query to NS2-EAST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.140.54
	;; Response received from 214.43.140.54 (791 octets) ;; HEADER SECTION ;; id = 7318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 899 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 899 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 848 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 848 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS2-EAST.USMC.MIL is authoritative for marines.mil
	Found RRSIG signed by marines.mil zone
	Query to NS1-EAST.USMC.MIL for marines.mil/SOA
	Received 406 bytes from 214.43.140.53
	;; Response received from 214.43.140.53 (406 octets) ;; HEADER SECTION ;; id = 5187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN SOA ;; ANSWER SECTION (2 records) marines.mil. 3204 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 3204 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS1-WEST.USMC.MIL for marines.mil/SOA
	Received 406 bytes from 214.43.141.53
	;; Response received from 214.43.141.53 (406 octets) ;; HEADER SECTION ;; id = 55059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN SOA ;; ANSWER SECTION (2 records) marines.mil. 3600 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 3600 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS2-WEST.USMC.MIL for marines.mil/SOA
	Received 406 bytes from 214.43.141.54
	;; Response received from 214.43.141.54 (406 octets) ;; HEADER SECTION ;; id = 55224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN SOA ;; ANSWER SECTION (2 records) marines.mil. 3599 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 3599 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS2-EAST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.140.54
	;; Response received from 214.43.140.54 (791 octets) ;; HEADER SECTION ;; id = 2395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 898 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 898 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 847 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 847 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`marines.mil. 899 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== )`
	RRSIG=61344 and DNSKEY=61344 verifies the SOA RRset

marines.mil

	Query to NS1-WEST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.141.53
	;; Response received from 214.43.141.53 (791 octets) ;; HEADER SECTION ;; id = 2864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 894 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 894 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS1-WEST.USMC.MIL is authoritative for marines.mil
	Found RRSIG signed by marines.mil zone
	Query to NS1-WEST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.141.53
	;; Response received from 214.43.141.53 (791 octets) ;; HEADER SECTION ;; id = 49691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 894 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 894 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`marines.mil. 894 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== )`
	RRSIG=61344 and DNSKEY=61344 verifies the SOA RRset

marines.mil

	Query to NS1-EAST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.140.53
	;; Response received from 214.43.140.53 (791 octets) ;; HEADER SECTION ;; id = 64303 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 898 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 898 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 847 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 847 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS1-EAST.USMC.MIL is authoritative for marines.mil
	Found RRSIG signed by marines.mil zone
	Query to NS1-EAST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.140.53
	;; Response received from 214.43.140.53 (791 octets) ;; HEADER SECTION ;; id = 9785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 898 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 898 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 847 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 847 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`marines.mil. 898 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== )`
	RRSIG=61344 and DNSKEY=61344 verifies the SOA RRset

marines.mil

	Query to NS2-WEST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.141.54
	;; Response received from 214.43.141.54 (791 octets) ;; HEADER SECTION ;; id = 61741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 894 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 894 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS2-WEST.USMC.MIL is authoritative for marines.mil
	Found RRSIG signed by marines.mil zone
	Query to NS2-WEST.USMC.MIL for marines.mil/A
	Received 791 bytes from 214.43.141.54
	;; Response received from 214.43.141.54 (791 octets) ;; HEADER SECTION ;; id = 21283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; marines.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) marines.mil. 894 IN SOA ( ns1-east.usmc.mil. mccog_nic_admins.usmc.mil. 2022119927 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 900 ;minimum ) marines.mil. 894 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN NSEC3 ( 1 0 10 aa56fa 150r9i0p8oiv6jhr8aus9j01v8oo77kb NS SOA RRSIG DNSKEY NSEC3PARAM CAA ) 0SIVFKJIV790RU68LL4117PCIP428UCV.marines.mil. 765 IN RRSIG ( NSEC3 8 3 900 20230928145024 20230924140244 61344 marines.mil. zf0NIMgOnAYGJt5CyGtOZw0XZS/Ez2HVw9zcbZQs+EFSsT5Cn0wNOwtQll9uXOLsCJSW7J84j41m fcq1E3BSN4viFXife1j6OJTDAjdj0hENFLFvYfw3QbAmKfKDFuBMDirDqadxcyKPeTJJoNNdAzgm nTgaBIRMaKG7IQrpuLG2vXENJ8bKklXLhGMW3RL5IQhST/TmCxSL6ziIgHfMV2QoF5EeMXEq8xAM 20Ig09f3f+Pfjs2ngnlPreoNG28Ddx1QAElLd/FP1fSwPYmjMfVDWPK3m2SG2KakcBjZonAP+S5c XV4P8L1AT7C8EXDnKS7IITA8BbS/W/ONbzFd+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`marines.mil. 894 IN RRSIG ( SOA 8 2 3600 20230928165642 20230924155642 61344 marines.mil. yE+4WeBGbnl7mlu5vnFix5UMzN1N9n39ChaWxGljSyauiQmDQE9fQEsx418xJpN9xejItk/GyO4b 1lrH7RuZys0s3pEOuqAmp7X85QUJnEbGx6OuWV6rLoGtTEucduWp7sElwBVaZijF5qqUTrhLfCBe +1HyXrlAWSGYv3KPWE+B5cVU/J88v0/KTNJuot4/nYM6IpErhrs+7rveAeImarSFKviJL/811N7H KuridL3Xpa/XTa37h3TrMTgPso+Rkh83qjXgB6zRwTCF7xGfHCRgM/R1v9pu7EFcXO5Z9TyLw3RG vOWvtd53JL6mh6Sp7Cf8NzJHOdmrVL1s6YbPjw== )`
	RRSIG=61344 and DNSKEY=61344 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test marines.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: