DNSSEC Debugger - move.mil

Domain Name:

Time: 2025-01-18 09:21:00 UTC

Analyzing DNSSEC problems for move.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 52906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to i.root-servers.net for move.mil/A
	Received 758 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 758 octets ;; HEADER SECTION ;; id = 27076 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . kLD88knRUlLa9J1yhLzntYegG4H77ZRYvzq82d6qhNrPvJ1tqTGB4bnwiFnHc46CNeYYzzsgKfuu PKZbpyyzdHoveR2WDvNu+DcUyBqWDMoC1v1A+BrSzkRssN4tIZfV1TbCvhcd5DtM0gddGrCoqDwH lVCvGKlLwqPSiSGyB0Deb1nDhfbo2AkBtmgC5u4ktRCK6vxKw6F5uC/XLaNA1bXzDDEkIvwgBcu2 w7SqeWODU717LmAfcfL6GQt6jwUoFiLhtDpvY7FeVvDsIPA+qrvakOD7Un1+JZQNUAeVQNLvioGP DRSOGtMzZ6LaL0IupWpd3UZTQtjEE9JORgBKFw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for mil/DNSKEY
	Received 750 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 750 octets ;; HEADER SECTION ;; id = 45378 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . kLD88knRUlLa9J1yhLzntYegG4H77ZRYvzq82d6qhNrPvJ1tqTGB4bnwiFnHc46CNeYYzzsgKfuu PKZbpyyzdHoveR2WDvNu+DcUyBqWDMoC1v1A+BrSzkRssN4tIZfV1TbCvhcd5DtM0gddGrCoqDwH lVCvGKlLwqPSiSGyB0Deb1nDhfbo2AkBtmgC5u4ktRCK6vxKw6F5uC/XLaNA1bXzDDEkIvwgBcu2 w7SqeWODU717LmAfcfL6GQt6jwUoFiLhtDpvY7FeVvDsIPA+qrvakOD7Un1+JZQNUAeVQNLvioGP DRSOGtMzZ6LaL0IupWpd3UZTQtjEE9JORgBKFw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to j.root-servers.net for mil/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 39070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . kLD88knRUlLa9J1yhLzntYegG4H77ZRYvzq82d6qhNrPvJ1tqTGB4bnwiFnHc46CNeYYzzsgKfuu PKZbpyyzdHoveR2WDvNu+DcUyBqWDMoC1v1A+BrSzkRssN4tIZfV1TbCvhcd5DtM0gddGrCoqDwH lVCvGKlLwqPSiSGyB0Deb1nDhfbo2AkBtmgC5u4ktRCK6vxKw6F5uC/XLaNA1bXzDDEkIvwgBcu2 w7SqeWODU717LmAfcfL6GQt6jwUoFiLhtDpvY7FeVvDsIPA+qrvakOD7Un1+JZQNUAeVQNLvioGP DRSOGtMzZ6LaL0IupWpd3UZTQtjEE9JORgBKFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=63500/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20250131050000 20250118040000 26470 . kLD88knRUlLa9J1yhLzntYegG4H77ZRYvzq82d6qhNrPvJ1tqTGB4bnwiFnHc46CNeYYzzsgKfuu PKZbpyyzdHoveR2WDvNu+DcUyBqWDMoC1v1A+BrSzkRssN4tIZfV1TbCvhcd5DtM0gddGrCoqDwH lVCvGKlLwqPSiSGyB0Deb1nDhfbo2AkBtmgC5u4ktRCK6vxKw6F5uC/XLaNA1bXzDDEkIvwgBcu2 w7SqeWODU717LmAfcfL6GQt6jwUoFiLhtDpvY7FeVvDsIPA+qrvakOD7Un1+JZQNUAeVQNLvioGP DRSOGtMzZ6LaL0IupWpd3UZTQtjEE9JORgBKFw== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=63500/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 1061 octets ;; HEADER SECTION ;; id = 63374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaadED7CyYpTGnLy2zLym6UURAuxdBXo+xgyJQwWC5xGT1B9pzvRYGVGN8aHnfyyNqJCOGDK 2D04Z872I7oqI7qYdok9XiWdoisgy9fM2hgh5qXmPwXsV3GJAo6JtWUufbdSlhEXFZ9ykSsfQQgA yF9zj+30GLkIy6KutywnIJTb ) ; keytag 29925 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZWw8E2fLIXHxkoIrLoxhAa+L/Qpg7dumlq2xRn4gsFsfMRZ3FHi8G4WhsGjkco++lkWAu6a MI1hVBBThwouXBNdiKZc/vVLBUVW8hJTLED27TRTqGFoD5EfGmXubKT4s/7wXIflgxWJTT6xSy0C dt+9hvjoQB12YSYgoCmPQSfz ) ; keytag 10729 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250125001423 20250118001423 10729 mil. AO27kVeadVbQecqJkhCz+D5PJVTKEcyaOJ/WYGd9nYsq5i0bnvszskQN3qD9KxAfsm1Gl14whm9o bNvQU4I4dQP+EUu3KNs/qBqmcamUCcqN5rOWHETZk14eOAGpa2ibbtEwGBUcjZENO7zp4RYBMLBG YJgVf9skilshXRmjn2E= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250125001423 20250118001423 63500 mil. huGdfiMesm159my3yOoR5L8ymNd5sfVJGYDHCCfa9QZe/ra23U50s/xY0pciyfZAkV5v+m8ahq6G FupEPMTj2baElfd9Mdhd879QMblijSfF5K8AdJ6s8EVMVjdA6NOwey/mK2RYbwgcW7XyMVJ2fyXK shaTxcFqvkQW8YAKndh+SU2bK+I+ZeTd6Xs62CnLLscm3H5QX6qD3DlIBUHEmPf6Isn0O55cD+gl jM+WbQ4DcDpKd03T5JFiHB1GjeYN4We2+0sMgS9/sESK8h/McGAQsfZlM7Y3tsanhszbHWaxGnaF Jg81rUjplRD9JyJ957cUU5dqzrsdS4kP1WOx2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaadED7CyYpTGnLy2zLym6UURAuxdBXo+xgyJQwWC5xGT1B9pzvRYGVGN8aHnfyyNqJCOGDK 2D04Z872I7oqI7qYdok9XiWdoisgy9fM2hgh5qXmPwXsV3GJAo6JtWUufbdSlhEXFZ9ykSsfQQgA yF9zj+30GLkIy6KutywnIJTb ) ; keytag 29925`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZWw8E2fLIXHxkoIrLoxhAa+L/Qpg7dumlq2xRn4gsFsfMRZ3FHi8G4WhsGjkco++lkWAu6a MI1hVBBThwouXBNdiKZc/vVLBUVW8hJTLED27TRTqGFoD5EfGmXubKT4s/7wXIflgxWJTT6xSy0C dt+9hvjoQB12YSYgoCmPQSfz ) ; keytag 10729`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500`
	DNSKEY=63500/SEP is now in the chain-of-trust
	DS=63500/SHA-256 verifies DNSKEY=63500/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250125001423 20250118001423 10729 mil. AO27kVeadVbQecqJkhCz+D5PJVTKEcyaOJ/WYGd9nYsq5i0bnvszskQN3qD9KxAfsm1Gl14whm9o bNvQU4I4dQP+EUu3KNs/qBqmcamUCcqN5rOWHETZk14eOAGpa2ibbtEwGBUcjZENO7zp4RYBMLBG YJgVf9skilshXRmjn2E= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250125001423 20250118001423 63500 mil. huGdfiMesm159my3yOoR5L8ymNd5sfVJGYDHCCfa9QZe/ra23U50s/xY0pciyfZAkV5v+m8ahq6G FupEPMTj2baElfd9Mdhd879QMblijSfF5K8AdJ6s8EVMVjdA6NOwey/mK2RYbwgcW7XyMVJ2fyXK shaTxcFqvkQW8YAKndh+SU2bK+I+ZeTd6Xs62CnLLscm3H5QX6qD3DlIBUHEmPf6Isn0O55cD+gl jM+WbQ4DcDpKd03T5JFiHB1GjeYN4We2+0sMgS9/sESK8h/McGAQsfZlM7Y3tsanhszbHWaxGnaF Jg81rUjplRD9JyJ957cUU5dqzrsdS4kP1WOx2w== )`
	RRSIG=10729 and DNSKEY=10729 verifies the DNSKEY RRset
	RRSIG=63500 and DNSKEY=63500/SEP verifies the DNSKEY RRset
	DNSKEY=29925 is now in the chain-of-trust
	DNSKEY=10729 is now in the chain-of-trust
	Query to con1.nipr.mil for move.mil/A
	Received 678 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 678 octets ;; HEADER SECTION ;; id = 6331 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250125001423 20250118001423 10729 mil. ZX/s3VZYqePAxwR9q0nej+mQXL/Gs3yLHlzoVasgGMighJ864dt+wbaaAGRLzQ57rCfZ3gRDXoYZ GykMCBo1HJyvIreCaivMjQj++RqcLu+VujsEJ2zIpFZtu/PE+SBbcHQIcevx6etyM8oBC1TQ1gYt 47qb4VklqFZlYJ99c+I= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to eur2.nipr.mil for move.mil/DNSKEY
	Received 678 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 678 octets ;; HEADER SECTION ;; id = 63325 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250125001423 20250118001423 10729 mil. ZX/s3VZYqePAxwR9q0nej+mQXL/Gs3yLHlzoVasgGMighJ864dt+wbaaAGRLzQ57rCfZ3gRDXoYZ GykMCBo1HJyvIreCaivMjQj++RqcLu+VujsEJ2zIpFZtu/PE+SBbcHQIcevx6etyM8oBC1TQ1gYt 47qb4VklqFZlYJ99c+I= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone move.mil

move.mil

	Checking DS between mil and move.mil
	Query to eur2.nipr.mil for move.mil/DS
	Received 292 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 292 octets ;; HEADER SECTION ;; id = 23740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DS ;; ANSWER SECTION (3 records) MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250125001423 20250118001423 10729 mil. ZX/s3VZYqePAxwR9q0nej+mQXL/Gs3yLHlzoVasgGMighJ864dt+wbaaAGRLzQ57rCfZ3gRDXoYZ GykMCBo1HJyvIreCaivMjQj++RqcLu+VujsEJ2zIpFZtu/PE+SBbcHQIcevx6etyM8oBC1TQ1gYt 47qb4VklqFZlYJ99c+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for move.mil in the mil zone
	DS=43792/SHA-1 uses a deprecated digest algorithm
	DS=43792/SHA-256 has algorithm ECDSAP256SHA256
	DS=43792/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250125001423 20250118001423 10729 mil. ZX/s3VZYqePAxwR9q0nej+mQXL/Gs3yLHlzoVasgGMighJ864dt+wbaaAGRLzQ57rCfZ3gRDXoYZ GykMCBo1HJyvIreCaivMjQj++RqcLu+VujsEJ2zIpFZtu/PE+SBbcHQIcevx6etyM8oBC1TQ1gYt 47qb4VklqFZlYJ99c+I= )`
	RRSIG=10729 and DNSKEY=10729 verifies the DS RRset
	DS=43792/SHA-256 is now in the chain-of-trust
	`MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c )`
	`MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83`
	Query to DNS2.NIPR.MIL for move.mil/DNSKEY
	Received 405 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 405 octets ;; HEADER SECTION ;; id = 34243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (4 records) move.mil. 80598 IN DNSKEY ( 257 3 13 aWdn68uYuxKG01bQBwKwDTWValtDIPPe01+6tOaAzdxE+TutgkBgfXrnnEXY4V6xN6RfCtNl2EuK ZT/i6ZP4jQ== ) ; keytag 43792 move.mil. 80598 IN DNSKEY ( 256 3 13 wyGalUDrf8e1bKhow2rL32V0Q9KhGaOpUjDyQRJ5R3zUdB7os68AcyKBkcvZ8jJRM3ZOhg1SDgKT o+0ohu5p8Q== ) ; keytag 4886 move.mil. 80598 IN RRSIG ( DNSKEY 13 2 86400 20250120035334 20250113030608 4886 move.mil. dcyZkYTx0tg8rS/6phIoV+sBIkBynNa7ZD6GYHwlPqr5P53kExiqjykkk4nt1hx3qWUy3mqhbH2I KNmukjt2xw== ) move.mil. 80598 IN RRSIG ( DNSKEY 13 2 86400 20250120035334 20250113030608 43792 move.mil. DqoAlQixhwJhwgcFJThHNaKKyqO7CSD2CgOU+tJguI7+hdt/6JNypDBSjBbfoBXdC+rA4WouGIsJ ETr8Q7G60A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for move.mil
	`move.mil. 80598 IN DNSKEY ( 257 3 13 aWdn68uYuxKG01bQBwKwDTWValtDIPPe01+6tOaAzdxE+TutgkBgfXrnnEXY4V6xN6RfCtNl2EuK ZT/i6ZP4jQ== ) ; keytag 43792`
	`move.mil. 80598 IN DNSKEY ( 256 3 13 wyGalUDrf8e1bKhow2rL32V0Q9KhGaOpUjDyQRJ5R3zUdB7os68AcyKBkcvZ8jJRM3ZOhg1SDgKT o+0ohu5p8Q== ) ; keytag 4886`
	DNSKEY=43792/SEP is now in the chain-of-trust
	DS=43792/SHA-256 verifies DNSKEY=43792/SEP
	DS=43792/SHA-1 verifies DNSKEY=43792/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`move.mil. 80598 IN RRSIG ( DNSKEY 13 2 86400 20250120035334 20250113030608 4886 move.mil. dcyZkYTx0tg8rS/6phIoV+sBIkBynNa7ZD6GYHwlPqr5P53kExiqjykkk4nt1hx3qWUy3mqhbH2I KNmukjt2xw== )`
	`move.mil. 80598 IN RRSIG ( DNSKEY 13 2 86400 20250120035334 20250113030608 43792 move.mil. DqoAlQixhwJhwgcFJThHNaKKyqO7CSD2CgOU+tJguI7+hdt/6JNypDBSjBbfoBXdC+rA4WouGIsJ ETr8Q7G60A== )`
	RRSIG=4886 and DNSKEY=4886 verifies the DNSKEY RRset
	RRSIG=43792 and DNSKEY=43792/SEP verifies the DNSKEY RRset
	DNSKEY=4886 is now in the chain-of-trust
	Query to DNS1.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 371 octets ;; HEADER SECTION ;; id = 23586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3535 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3535 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3535 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3535 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS4.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 8121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 16409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 85502 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 85502 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 35535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 202 octets ;; HEADER SECTION ;; id = 4287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 85502 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 85502 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 9973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86399 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86399 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 371 octets ;; HEADER SECTION ;; id = 51667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== )`
	RRSIG=4886 and DNSKEY=4886 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3535 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== )`
	RRSIG=4886 and DNSKEY=4886 verifies the SOA RRset

move.mil

	Query to DNS6.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 371 octets ;; HEADER SECTION ;; id = 34160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS6.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 371 octets ;; HEADER SECTION ;; id = 29 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== )`
	RRSIG=4886 and DNSKEY=4886 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== )`
	RRSIG=4886 and DNSKEY=4886 verifies the SOA RRset

move.mil

	Query to DNS5.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 371 octets ;; HEADER SECTION ;; id = 51111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS5.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 371 octets ;; HEADER SECTION ;; id = 63813 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== )`
	RRSIG=4886 and DNSKEY=4886 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== )`
	RRSIG=4886 and DNSKEY=4886 verifies the SOA RRset

move.mil

	Query to DNS2.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 371 octets ;; HEADER SECTION ;; id = 34561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS2.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 371 octets ;; HEADER SECTION ;; id = 16578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== )`
	RRSIG=4886 and DNSKEY=4886 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== )`
	RRSIG=4886 and DNSKEY=4886 verifies the SOA RRset

move.mil

	Query to DNS4.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 371 octets ;; HEADER SECTION ;; id = 20637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3357 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3357 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3357 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3357 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS4.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 371 octets ;; HEADER SECTION ;; id = 8957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3357 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3357 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3357 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3357 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3357 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== )`
	RRSIG=4886 and DNSKEY=4886 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3357 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== )`
	RRSIG=4886 and DNSKEY=4886 verifies the SOA RRset

move.mil

	Query to DNS3.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 371 octets ;; HEADER SECTION ;; id = 24359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS3.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 371 octets ;; HEADER SECTION ;; id = 64781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3534 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 1624 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== ) move.mil. 3534 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3534 IN RRSIG ( NSEC 13 2 3600 20250125073935 20250118072713 4886 move.mil. ry75E3GS3gmdlpyPFL69Y+9HDSNOk6TmjB1kzlIRD77pyL1FMDey5O0/Ie3fRYD9PaYhwxfc4Ft2 LC6CnBoZ6g== )`
	RRSIG=4886 and DNSKEY=4886 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3534 IN RRSIG ( SOA 13 2 86400 20250125082713 20250118072713 4886 move.mil. aEtkE2pITWGnAaedTkVnwwD4IRJVZq9RSszhOx8Mw83qVsO1/AcR1sME4dz6QR+n8Z1NKOffDdnf jsZDTx9gMQ== )`
	RRSIG=4886 and DNSKEY=4886 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test move.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: