DNSSEC Debugger - move.mil

Domain Name:

Time: 2024-07-27 04:29:10 UTC

Analyzing DNSSEC problems for move.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 864 octets ;; HEADER SECTION ;; id = 65258 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to k.root-servers.net for move.mil/A
	Received 755 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 755 octets ;; HEADER SECTION ;; id = 64877 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 750 octets ;; HEADER SECTION ;; id = 63278 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to a.root-servers.net for mil/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 46631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to eur1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 1061 octets ;; HEADER SECTION ;; id = 15565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= )`
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=54036 and DNSKEY=54036 verifies the DNSKEY RRset
	DNSKEY=54036 is now in the chain-of-trust
	DNSKEY=21018 is now in the chain-of-trust
	Query to con1.nipr.mil for move.mil/A
	Received 762 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 762 octets ;; HEADER SECTION ;; id = 62437 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN DS ( 15830 13 2 7a26ce4767ff1cc8e8d3532105270118a8ea61313e1e38bc2eecfa6123bb1df3 ) MOVE.MIL. 10800 IN DS 15830 13 1 98e52e597a5dbbf757367e52751956b2efba7f7f MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. NbdDPbjBGPex4lLEy0TXr6mZEWsiFkR3+qM/1tOrT/ohglPnnkNZQ+WU2IpLTaorYe5gIS2ihj1R htREdUIZSlCpLL2mfZl088tLTwRKRpCPdz08+g6H9f5KMSp2Vqyzin8oUuMNB2+AP394ezDg9fu7 HqdVDeBcVji+x17pvuI= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to pac1.nipr.mil for move.mil/DNSKEY
	Received 762 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 762 octets ;; HEADER SECTION ;; id = 40907 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 10800 IN DS 15830 13 1 98e52e597a5dbbf757367e52751956b2efba7f7f MOVE.MIL. 10800 IN DS ( 15830 13 2 7a26ce4767ff1cc8e8d3532105270118a8ea61313e1e38bc2eecfa6123bb1df3 ) MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. NbdDPbjBGPex4lLEy0TXr6mZEWsiFkR3+qM/1tOrT/ohglPnnkNZQ+WU2IpLTaorYe5gIS2ihj1R htREdUIZSlCpLL2mfZl088tLTwRKRpCPdz08+g6H9f5KMSp2Vqyzin8oUuMNB2+AP394ezDg9fu7 HqdVDeBcVji+x17pvuI= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone move.mil

move.mil

	Checking DS between mil and move.mil
	Query to con2.nipr.mil for move.mil/DS
	Received 376 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 376 octets ;; HEADER SECTION ;; id = 15086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DS ;; ANSWER SECTION (5 records) MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN DS ( 15830 13 2 7a26ce4767ff1cc8e8d3532105270118a8ea61313e1e38bc2eecfa6123bb1df3 ) MOVE.MIL. 10800 IN DS 15830 13 1 98e52e597a5dbbf757367e52751956b2efba7f7f MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. NbdDPbjBGPex4lLEy0TXr6mZEWsiFkR3+qM/1tOrT/ohglPnnkNZQ+WU2IpLTaorYe5gIS2ihj1R htREdUIZSlCpLL2mfZl088tLTwRKRpCPdz08+g6H9f5KMSp2Vqyzin8oUuMNB2+AP394ezDg9fu7 HqdVDeBcVji+x17pvuI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for move.mil in the mil zone
	DS=43792/SHA-1 uses a deprecated digest algorithm
	DS=15830/SHA-1 uses a deprecated digest algorithm
	DS=43792/SHA-1 has algorithm ECDSAP256SHA256
	DS=15830/SHA-256 has algorithm ECDSAP256SHA256
	DS=15830/SHA-1 has algorithm ECDSAP256SHA256
	DS=43792/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. NbdDPbjBGPex4lLEy0TXr6mZEWsiFkR3+qM/1tOrT/ohglPnnkNZQ+WU2IpLTaorYe5gIS2ihj1R htREdUIZSlCpLL2mfZl088tLTwRKRpCPdz08+g6H9f5KMSp2Vqyzin8oUuMNB2+AP394ezDg9fu7 HqdVDeBcVji+x17pvuI= )`
	RRSIG=54036 and DNSKEY=54036 verifies the DS RRset
	DS=43792/SHA-1 is now in the chain-of-trust
	DS=15830/SHA-256 is now in the chain-of-trust
	`MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83`
	`MOVE.MIL. 10800 IN DS ( 15830 13 2 7a26ce4767ff1cc8e8d3532105270118a8ea61313e1e38bc2eecfa6123bb1df3 )`
	`MOVE.MIL. 10800 IN DS 15830 13 1 98e52e597a5dbbf757367e52751956b2efba7f7f`
	`MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c )`
	Query to DNS2.NIPR.MIL for move.mil/DNSKEY
	Received 485 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 485 octets ;; HEADER SECTION ;; id = 13456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (5 records) move.mil. 40815 IN DNSKEY ( 256 3 13 F7bOe9V08ePTqpRE2tXjplGsmaMNLZ0DG3k/ARudN/mY84dbtAyuZ4DDanOuzC61MoN3kZq/tSf9 AGAPoCYS/g== ) ; Key ID = 28994 move.mil. 40815 IN DNSKEY ( 257 3 13 b6JHLnvRuKHkEWxAgjrVEg6ADL7LDqcUzyrq2FxbNnZdm+kwzx7o89J/akiRwib70DdS6nhByd0e rlwNvCI8KQ== ) ; Key ID = 15830 move.mil. 40815 IN DNSKEY ( 257 3 13 aWdn68uYuxKG01bQBwKwDTWValtDIPPe01+6tOaAzdxE+TutgkBgfXrnnEXY4V6xN6RfCtNl2EuK ZT/i6ZP4jQ== ) ; Key ID = 43792 move.mil. 40815 IN RRSIG ( DNSKEY 13 2 86400 20240731235959 20240724230000 28994 move.mil. qhQMDC/lDerHTKyeK571J/KmrW7Vpm6nTprnjZf7IMfj2a/WQODD2m5bhM4MevyR/EHR7Cdx+2mG 82ffAltJfw== ) move.mil. 40815 IN RRSIG ( DNSKEY 13 2 86400 20240731235959 20240724230000 43792 move.mil. rlpAl4r8Rd5uaW/CWDuJUKTIx+kpymXlKR4Ij71RSN/1MDw5MWyxYMOxtsBF0Q2+Gs9wq8j/tLls 6+UhyfXx7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for move.mil
	`move.mil. 40815 IN DNSKEY ( 256 3 13 F7bOe9V08ePTqpRE2tXjplGsmaMNLZ0DG3k/ARudN/mY84dbtAyuZ4DDanOuzC61MoN3kZq/tSf9 AGAPoCYS/g== ) ; Key ID = 28994`
	`move.mil. 40815 IN DNSKEY ( 257 3 13 b6JHLnvRuKHkEWxAgjrVEg6ADL7LDqcUzyrq2FxbNnZdm+kwzx7o89J/akiRwib70DdS6nhByd0e rlwNvCI8KQ== ) ; Key ID = 15830`
	`move.mil. 40815 IN DNSKEY ( 257 3 13 aWdn68uYuxKG01bQBwKwDTWValtDIPPe01+6tOaAzdxE+TutgkBgfXrnnEXY4V6xN6RfCtNl2EuK ZT/i6ZP4jQ== ) ; Key ID = 43792`
	DNSKEY=15830/SEP is now in the chain-of-trust
	DS=15830/SHA-256 verifies DNSKEY=15830/SEP
	DS=15830/SHA-1 verifies DNSKEY=15830/SEP
	DNSKEY=43792/SEP is now in the chain-of-trust
	DS=43792/SHA-1 verifies DNSKEY=43792/SEP
	DS=43792/SHA-256 verifies DNSKEY=43792/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`move.mil. 40815 IN RRSIG ( DNSKEY 13 2 86400 20240731235959 20240724230000 28994 move.mil. qhQMDC/lDerHTKyeK571J/KmrW7Vpm6nTprnjZf7IMfj2a/WQODD2m5bhM4MevyR/EHR7Cdx+2mG 82ffAltJfw== )`
	`move.mil. 40815 IN RRSIG ( DNSKEY 13 2 86400 20240731235959 20240724230000 43792 move.mil. rlpAl4r8Rd5uaW/CWDuJUKTIx+kpymXlKR4Ij71RSN/1MDw5MWyxYMOxtsBF0Q2+Gs9wq8j/tLls 6+UhyfXx7Q== )`
	RRSIG=28994 and DNSKEY=28994 verifies the DNSKEY RRset
	RRSIG=43792 and DNSKEY=43792/SEP verifies the DNSKEY RRset
	DNSKEY=28994 is now in the chain-of-trust
	Query to DNS5.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 405 octets ;; HEADER SECTION ;; id = 46289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3520 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3520 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3520 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3520 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS3.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 4547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 26392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 14235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 48651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 43593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 405 octets ;; HEADER SECTION ;; id = 60341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3519 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3519 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3519 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3519 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3519 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== )`
	RRSIG=28994 and DNSKEY=28994 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3520 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== )`
	RRSIG=28994 and DNSKEY=28994 verifies the SOA RRset

move.mil

	Query to DNS6.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 405 octets ;; HEADER SECTION ;; id = 45749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3364 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3341 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS6.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 405 octets ;; HEADER SECTION ;; id = 46076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3364 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3341 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== )`
	RRSIG=28994 and DNSKEY=28994 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== )`
	RRSIG=28994 and DNSKEY=28994 verifies the SOA RRset

move.mil

	Query to DNS2.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 405 octets ;; HEADER SECTION ;; id = 41387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3364 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3341 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS2.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 405 octets ;; HEADER SECTION ;; id = 65460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3364 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3341 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== )`
	RRSIG=28994 and DNSKEY=28994 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== )`
	RRSIG=28994 and DNSKEY=28994 verifies the SOA RRset

move.mil

	Query to DNS1.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 405 octets ;; HEADER SECTION ;; id = 63704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3364 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3341 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS1.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 405 octets ;; HEADER SECTION ;; id = 3585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3364 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3341 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3341 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== )`
	RRSIG=28994 and DNSKEY=28994 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3364 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== )`
	RRSIG=28994 and DNSKEY=28994 verifies the SOA RRset

move.mil

	Query to DNS4.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 405 octets ;; HEADER SECTION ;; id = 24035 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3381 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3381 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3381 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3381 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS4.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 405 octets ;; HEADER SECTION ;; id = 59258 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3381 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3381 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3381 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3381 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3381 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== )`
	RRSIG=28994 and DNSKEY=28994 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3381 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== )`
	RRSIG=28994 and DNSKEY=28994 verifies the SOA RRset

move.mil

	Query to DNS3.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 405 octets ;; HEADER SECTION ;; id = 40747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3518 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3518 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3518 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3518 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS3.NIPR.MIL for move.mil/A
	Received 405 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 405 octets ;; HEADER SECTION ;; id = 47737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3518 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1140 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3518 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== ) move.mil. 3518 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534 ) move.mil. 3518 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3518 IN RRSIG ( NSEC 13 2 3600 20240802180913 20240726173329 28994 move.mil. izfBlmqOabaQF+dZdcHjsfOYuRv4IfkZOQf3z9V/3h11dnJ+ZLCcgR+KV1kD+pTwipUTcyqomSLU NLEPDpUh6Q== )`
	RRSIG=28994 and DNSKEY=28994 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3518 IN RRSIG ( SOA 13 2 86400 20240802183329 20240726173329 28994 move.mil. 9yWHRy2D5+HodFfCFhKddhMN2oqAS246qLzFTrbyQGTCg11yXlb3IEIYo0cbdH/BRebSV93iWlR0 BTY5DoP2AQ== )`
	RRSIG=28994 and DNSKEY=28994 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test move.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: