DNSSEC Debugger - move.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-05 16:46:32 UTC

Analyzing DNSSEC problems for move.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 43842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to e.root-servers.net for move.mil/A
	Received 755 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 755 octets ;; HEADER SECTION ;; id = 38505 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . XBqFkFSHCpmAw32/075N3CZ/x36PZSBRBz29yrWnj7yY0qP6LPF94K0GsHhcnrPNIPtVgDTEJsrr wkMZgpd+ZaUOGa/2zzJyENjTaUCpOO5HM8jVZNFbMcAyW6pzl6/yNcxR7rIkSyk9n1FX+1/FbsdA nvvgQEbvv1wyEP6WC84fg/Vhitsejpcg4BC96mNIA43gDqr4JGyYTza2ZkPmNmXVnaPmuLJM6Zx6 57H+2VndBUyTcLzwPt/AiBBHI2SMcePyW7UnBDX04FMoW59WcIOhHCibt+Jgk8n0Gqa9vGzqfxhs U+ds5om6p4QNcs96qbeZF32CuXHaNwVZTq8LXg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 750 octets ;; HEADER SECTION ;; id = 62026 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . XBqFkFSHCpmAw32/075N3CZ/x36PZSBRBz29yrWnj7yY0qP6LPF94K0GsHhcnrPNIPtVgDTEJsrr wkMZgpd+ZaUOGa/2zzJyENjTaUCpOO5HM8jVZNFbMcAyW6pzl6/yNcxR7rIkSyk9n1FX+1/FbsdA nvvgQEbvv1wyEP6WC84fg/Vhitsejpcg4BC96mNIA43gDqr4JGyYTza2ZkPmNmXVnaPmuLJM6Zx6 57H+2VndBUyTcLzwPt/AiBBHI2SMcePyW7UnBDX04FMoW59WcIOhHCibt+Jgk8n0Gqa9vGzqfxhs U+ds5om6p4QNcs96qbeZF32CuXHaNwVZTq8LXg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to e.root-servers.net for mil/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 59714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . XBqFkFSHCpmAw32/075N3CZ/x36PZSBRBz29yrWnj7yY0qP6LPF94K0GsHhcnrPNIPtVgDTEJsrr wkMZgpd+ZaUOGa/2zzJyENjTaUCpOO5HM8jVZNFbMcAyW6pzl6/yNcxR7rIkSyk9n1FX+1/FbsdA nvvgQEbvv1wyEP6WC84fg/Vhitsejpcg4BC96mNIA43gDqr4JGyYTza2ZkPmNmXVnaPmuLJM6Zx6 57H+2VndBUyTcLzwPt/AiBBHI2SMcePyW7UnBDX04FMoW59WcIOhHCibt+Jgk8n0Gqa9vGzqfxhs U+ds5om6p4QNcs96qbeZF32CuXHaNwVZTq8LXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . XBqFkFSHCpmAw32/075N3CZ/x36PZSBRBz29yrWnj7yY0qP6LPF94K0GsHhcnrPNIPtVgDTEJsrr wkMZgpd+ZaUOGa/2zzJyENjTaUCpOO5HM8jVZNFbMcAyW6pzl6/yNcxR7rIkSyk9n1FX+1/FbsdA nvvgQEbvv1wyEP6WC84fg/Vhitsejpcg4BC96mNIA43gDqr4JGyYTza2ZkPmNmXVnaPmuLJM6Zx6 57H+2VndBUyTcLzwPt/AiBBHI2SMcePyW7UnBDX04FMoW59WcIOhHCibt+Jgk8n0Gqa9vGzqfxhs U+ds5om6p4QNcs96qbeZF32CuXHaNwVZTq8LXg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 1061 octets ;; HEADER SECTION ;; id = 22751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAab0bkxnAYNimczCeSDeJL+InkvWOvWkcYIyx35PoPCnM1SNa1UZb+uO/5VV6pYmYcbemSfD 8GYe7Tut3sB81bfXxAG6dFqi7q+sYBYmh4hbuz9trMcjHpYssq4A1moh6Es2RlPn87ItcgXCXZe0 5QUnZA+4nmcPrnDidyLxxa5T ) ; keytag 14353 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcEMW8K0eDPtpTHdJZKCYoJBDP6dZ/36UQAys/fhK7917q4Bp9TGHJZ6e2sT9kdG7e/hjp29 v5pGRvkg81xNI4py9q+DJVzZsEU8pQazKGkDg6njo1DOFgdzrhYOlAQBU7vVKToXBees/Qds/Mzm L4IsQXUBIp07aIGnAudEAVtd ) ; keytag 49074 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260911230114 20260904230114 14353 mil. ohU8lfjBvXEygpscE/UjEoLh+n0y9QxVb4qnLOr5Rfe7F/XNsEijj9mitjS4drMc5vgcUTErAgr3 Slzg/uTqyRpTqe+sPXvB7AoYcZKNrb/YOFWnDja2yDB4bkCtJDMaLqJCgVKDuOhZbh2LE5RbNtKg pR1sQaAqIWi/HeMePiA= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260911230114 20260904230114 45019 mil. PdhBzcYOKWqOuMR9DS0Pk8EIac1n1I0vCgRBExXK9Y7k3bye3sMUV1fWtlKZrhHcb1HcUfT1q7c6 1bS4CLVxbx0zYHbGN2p1UY5JC/6FKRIBV7lBxhW891ir8z7K0qq9PMXJx8RTblPBGoJVTsiUY+eX f3kXBkoVmLHZ1M+JFfPwZq281yJW2tryuG+ybqOnxBqCm0qkwkVf/qvUB5bhFxIzJAte89ap7UuD c4Hq2gfsTJL6LtbbXLrX4FtSvZAwoNI6CYSFw6jBMj/3yUSoNuNZDA3wiB3Foc7mYXAS/HlDrWz8 2aMVGotwRy2k7JnlX+PpdseN51KUNTVDi65RWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAab0bkxnAYNimczCeSDeJL+InkvWOvWkcYIyx35PoPCnM1SNa1UZb+uO/5VV6pYmYcbemSfD 8GYe7Tut3sB81bfXxAG6dFqi7q+sYBYmh4hbuz9trMcjHpYssq4A1moh6Es2RlPn87ItcgXCXZe0 5QUnZA+4nmcPrnDidyLxxa5T ) ; keytag 14353`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcEMW8K0eDPtpTHdJZKCYoJBDP6dZ/36UQAys/fhK7917q4Bp9TGHJZ6e2sT9kdG7e/hjp29 v5pGRvkg81xNI4py9q+DJVzZsEU8pQazKGkDg6njo1DOFgdzrhYOlAQBU7vVKToXBees/Qds/Mzm L4IsQXUBIp07aIGnAudEAVtd ) ; keytag 49074`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260911230114 20260904230114 14353 mil. ohU8lfjBvXEygpscE/UjEoLh+n0y9QxVb4qnLOr5Rfe7F/XNsEijj9mitjS4drMc5vgcUTErAgr3 Slzg/uTqyRpTqe+sPXvB7AoYcZKNrb/YOFWnDja2yDB4bkCtJDMaLqJCgVKDuOhZbh2LE5RbNtKg pR1sQaAqIWi/HeMePiA= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260911230114 20260904230114 45019 mil. PdhBzcYOKWqOuMR9DS0Pk8EIac1n1I0vCgRBExXK9Y7k3bye3sMUV1fWtlKZrhHcb1HcUfT1q7c6 1bS4CLVxbx0zYHbGN2p1UY5JC/6FKRIBV7lBxhW891ir8z7K0qq9PMXJx8RTblPBGoJVTsiUY+eX f3kXBkoVmLHZ1M+JFfPwZq281yJW2tryuG+ybqOnxBqCm0qkwkVf/qvUB5bhFxIzJAte89ap7UuD c4Hq2gfsTJL6LtbbXLrX4FtSvZAwoNI6CYSFw6jBMj/3yUSoNuNZDA3wiB3Foc7mYXAS/HlDrWz8 2aMVGotwRy2k7JnlX+PpdseN51KUNTVDi65RWw== )`
	RRSIG=14353 and DNSKEY=14353 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=14353 is now in the chain-of-trust
	DNSKEY=49074 is now in the chain-of-trust
	Query to eur2.nipr.mil for move.mil/A
	Received 675 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 675 octets ;; HEADER SECTION ;; id = 20062 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 10800 IN DS 42383 13 1 08b50a448d875ea879b559420e2b7fbd97c354fb MOVE.MIL. 10800 IN DS ( 42383 13 2 7657a8e4d7b5f97872c6988abd2d65a02b66d7cdc4b7fcdc9d8fc86017f12dcf ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260911230114 20260904230114 14353 mil. TdJPOQ90fCVYRbKz+Rn/oOZYqwmbptlITWFdPuxms2WxjglqHRNHOKMQGq5NlpjcSKEQ7qJ7F+qD +9uBdGB5f7abeTuO1LnbFnHnltLZN2u0+0sn8SuAjSe9JoJSFJ0/gIBbuhA0dx9TeauqYNeaUzKu hUn7myOukKzOl1blFT0= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to pac1.nipr.mil for move.mil/DNSKEY
	Received 675 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 675 octets ;; HEADER SECTION ;; id = 56176 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 10800 IN DS 42383 13 1 08b50a448d875ea879b559420e2b7fbd97c354fb MOVE.MIL. 10800 IN DS ( 42383 13 2 7657a8e4d7b5f97872c6988abd2d65a02b66d7cdc4b7fcdc9d8fc86017f12dcf ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260911230114 20260904230114 14353 mil. TdJPOQ90fCVYRbKz+Rn/oOZYqwmbptlITWFdPuxms2WxjglqHRNHOKMQGq5NlpjcSKEQ7qJ7F+qD +9uBdGB5f7abeTuO1LnbFnHnltLZN2u0+0sn8SuAjSe9JoJSFJ0/gIBbuhA0dx9TeauqYNeaUzKu hUn7myOukKzOl1blFT0= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone move.mil

move.mil

	Checking DS between mil and move.mil
	Query to eur1.nipr.mil for move.mil/DS
	Received 292 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 292 octets ;; HEADER SECTION ;; id = 61859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DS ;; ANSWER SECTION (3 records) MOVE.MIL. 10800 IN DS 42383 13 1 08b50a448d875ea879b559420e2b7fbd97c354fb MOVE.MIL. 10800 IN DS ( 42383 13 2 7657a8e4d7b5f97872c6988abd2d65a02b66d7cdc4b7fcdc9d8fc86017f12dcf ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260911230114 20260904230114 14353 mil. TdJPOQ90fCVYRbKz+Rn/oOZYqwmbptlITWFdPuxms2WxjglqHRNHOKMQGq5NlpjcSKEQ7qJ7F+qD +9uBdGB5f7abeTuO1LnbFnHnltLZN2u0+0sn8SuAjSe9JoJSFJ0/gIBbuhA0dx9TeauqYNeaUzKu hUn7myOukKzOl1blFT0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for move.mil in the mil zone
	DS=42383/SHA-1 uses a deprecated digest algorithm
	DS=42383/SHA-1 has algorithm ECDSAP256SHA256
	DS=42383/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260911230114 20260904230114 14353 mil. TdJPOQ90fCVYRbKz+Rn/oOZYqwmbptlITWFdPuxms2WxjglqHRNHOKMQGq5NlpjcSKEQ7qJ7F+qD +9uBdGB5f7abeTuO1LnbFnHnltLZN2u0+0sn8SuAjSe9JoJSFJ0/gIBbuhA0dx9TeauqYNeaUzKu hUn7myOukKzOl1blFT0= )`
	RRSIG=14353 and DNSKEY=14353 verifies the DS RRset
	DS=42383/SHA-1 is now in the chain-of-trust
	`MOVE.MIL. 10800 IN DS 42383 13 1 08b50a448d875ea879b559420e2b7fbd97c354fb`
	`MOVE.MIL. 10800 IN DS ( 42383 13 2 7657a8e4d7b5f97872c6988abd2d65a02b66d7cdc4b7fcdc9d8fc86017f12dcf )`
	Query to DNS2.NIPR.MIL for move.mil/DNSKEY
	Received 301 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 301 octets ;; HEADER SECTION ;; id = 45157 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (3 records) move.mil. 63681 IN DNSKEY ( 256 3 13 IBSyLzblGZBwFyima4sAxGvn8wHvw538ubEYEYGMDSqEHTVKPwxZY/9O7JGTen8/fNUxvwl+t8bY +lZl3SHSvA== ) ; keytag 6273 move.mil. 63681 IN DNSKEY ( 257 3 13 TH+Kyx4wi9CsUAOuyojJvqy++QO8mRYK9+Hefi5gu+ywPbXmzTtLPpFP9Zl8WVilMOOeqcRP3NQv +7NbY/0QTw== ) ; keytag 42383 move.mil. 63681 IN RRSIG ( DNSKEY 13 2 86400 20260911110226 20260904104801 42383 move.mil. dx8JI224lkdK+Urdem7hmAb4ySE5l4B9MO75WDHAlua6sWzWTkhhgOpXyd2Sb2gETiwvZJi4zzpt VC8E5Q0L2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for move.mil
	`move.mil. 63681 IN DNSKEY ( 256 3 13 IBSyLzblGZBwFyima4sAxGvn8wHvw538ubEYEYGMDSqEHTVKPwxZY/9O7JGTen8/fNUxvwl+t8bY +lZl3SHSvA== ) ; keytag 6273`
	`move.mil. 63681 IN DNSKEY ( 257 3 13 TH+Kyx4wi9CsUAOuyojJvqy++QO8mRYK9+Hefi5gu+ywPbXmzTtLPpFP9Zl8WVilMOOeqcRP3NQv +7NbY/0QTw== ) ; keytag 42383`
	DNSKEY=42383/SEP is now in the chain-of-trust
	DS=42383/SHA-1 verifies DNSKEY=42383/SEP
	DS=42383/SHA-256 verifies DNSKEY=42383/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`move.mil. 63681 IN RRSIG ( DNSKEY 13 2 86400 20260911110226 20260904104801 42383 move.mil. dx8JI224lkdK+Urdem7hmAb4ySE5l4B9MO75WDHAlua6sWzWTkhhgOpXyd2Sb2gETiwvZJi4zzpt VC8E5Q0L2w== )`
	RRSIG=42383 and DNSKEY=42383/SEP verifies the DNSKEY RRset
	DNSKEY=6273 is now in the chain-of-trust
	Query to DNS3.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 371 octets ;; HEADER SECTION ;; id = 62211 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3587 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3822 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3587 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== ) move.mil. 3587 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3587 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS2.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 22330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3822 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 39406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3822 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 24996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3822 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 53291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86244 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3821 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86244 IN RRSIG ( SOA 13 2 86400 20260912153330 20260905143330 6273 move.mil. ufBCh/R2Q2CmWt4Gfz1QUl3JXl4UawkBx7ntdzb4ovjgjrmzXYK9brDRQiNANzZ86nEEn3Glb1V0 U+uC1SQwGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL serial (3821) differs from DNS2.NIPR.MIL serial (3822)
	Query to DNS5.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 202 octets ;; HEADER SECTION ;; id = 62494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86244 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3821 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86244 IN RRSIG ( SOA 13 2 86400 20260912153330 20260905143330 6273 move.mil. ufBCh/R2Q2CmWt4Gfz1QUl3JXl4UawkBx7ntdzb4ovjgjrmzXYK9brDRQiNANzZ86nEEn3Glb1V0 U+uC1SQwGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL serial (3821) differs from DNS2.NIPR.MIL serial (3822)
	Query to DNS3.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3587 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== )`
	RRSIG=6273 and DNSKEY=6273 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3587 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== )`
	RRSIG=6273 and DNSKEY=6273 verifies the SOA RRset

move.mil

	Query to DNS2.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 371 octets ;; HEADER SECTION ;; id = 110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3381 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3821 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3381 IN RRSIG ( SOA 13 2 86400 20260912153330 20260905143330 6273 move.mil. ufBCh/R2Q2CmWt4Gfz1QUl3JXl4UawkBx7ntdzb4ovjgjrmzXYK9brDRQiNANzZ86nEEn3Glb1V0 U+uC1SQwGA== ) move.mil. 3350 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3350 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS2.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3350 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== )`
	RRSIG=6273 and DNSKEY=6273 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3381 IN RRSIG ( SOA 13 2 86400 20260912153330 20260905143330 6273 move.mil. ufBCh/R2Q2CmWt4Gfz1QUl3JXl4UawkBx7ntdzb4ovjgjrmzXYK9brDRQiNANzZ86nEEn3Glb1V0 U+uC1SQwGA== )`
	RRSIG=6273 and DNSKEY=6273 verifies the SOA RRset

move.mil

	Query to DNS1.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 371 octets ;; HEADER SECTION ;; id = 54369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3586 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3822 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3586 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== ) move.mil. 3586 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3586 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS1.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3586 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== )`
	RRSIG=6273 and DNSKEY=6273 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3586 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== )`
	RRSIG=6273 and DNSKEY=6273 verifies the SOA RRset

move.mil

	Query to DNS5.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 371 octets ;; HEADER SECTION ;; id = 43939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3586 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3822 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3586 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== ) move.mil. 3586 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3586 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS5.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3586 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== )`
	RRSIG=6273 and DNSKEY=6273 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3586 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== )`
	RRSIG=6273 and DNSKEY=6273 verifies the SOA RRset

move.mil

	Query to DNS4.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 371 octets ;; HEADER SECTION ;; id = 42461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3586 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3822 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3586 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== ) move.mil. 3586 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3586 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS4.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3586 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== )`
	RRSIG=6273 and DNSKEY=6273 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3586 IN RRSIG ( SOA 13 2 86400 20260912164553 20260905154553 6273 move.mil. +0qVpallOvx2GruKjjWp62XhBYNPj1LPBGeSM7ASWzb6l1xCA57DlCGsR99O+3TvBNhMf19WOoc4 Stn1gN8Hgw== )`
	RRSIG=6273 and DNSKEY=6273 verifies the SOA RRset

move.mil

	Query to DNS6.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 371 octets ;; HEADER SECTION ;; id = 5754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3381 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3821 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3381 IN RRSIG ( SOA 13 2 86400 20260912153330 20260905143330 6273 move.mil. ufBCh/R2Q2CmWt4Gfz1QUl3JXl4UawkBx7ntdzb4ovjgjrmzXYK9brDRQiNANzZ86nEEn3Glb1V0 U+uC1SQwGA== ) move.mil. 3350 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3350 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS6.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3350 IN RRSIG ( NSEC 13 2 3600 20260908151415 20260901143803 6273 move.mil. V98MLVt4EAxKshUa893HNgFJoS8j8Wd080P31kc8cOtMqeTFmjW4xctzEQC4/J4E+hJbJnz7uNnk DwlIuGlUDQ== )`
	RRSIG=6273 and DNSKEY=6273 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3381 IN RRSIG ( SOA 13 2 86400 20260912153330 20260905143330 6273 move.mil. ufBCh/R2Q2CmWt4Gfz1QUl3JXl4UawkBx7ntdzb4ovjgjrmzXYK9brDRQiNANzZ86nEEn3Glb1V0 U+uC1SQwGA== )`
	RRSIG=6273 and DNSKEY=6273 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test move.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: