DNSSEC Debugger - move.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 08:18:19 UTC

Analyzing DNSSEC problems for move.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 35883 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to i.root-servers.net for move.mil/A
	Received 755 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 755 octets ;; HEADER SECTION ;; id = 40955 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . NnzQQ8qqzf7qUNOQjeXNvqqfJapDQz/OXmz30BlpfPI5XvZ0TU9ZIEfwDLmsety3mJ5KUI96kcv7 hLpW/19SiSNCIZuAXkPeHoJRoJ2PN7LNRddqdQCdPA+tfp4Th6Akn4gOZgyaaUToVcVJ4qh9FwX4 uwyapqakGmKAy3qC24TEFrOLMNmZRynDdgdJ5cGJ3XtZ6Mdu0K+I4F6HDI7tjlECPtyYRCHUQ/SJ aPq88FRhBvGX9z0MchX1R7XyBra/MMmJ88HySxVVG/78/bidf8OVbcjb1OXjPz6o4yWl+riZ6TvA m0TsX1yboHYR3gMpLHpurVY6ENnaEz5aOEvjTA== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 750 octets ;; HEADER SECTION ;; id = 57091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . NnzQQ8qqzf7qUNOQjeXNvqqfJapDQz/OXmz30BlpfPI5XvZ0TU9ZIEfwDLmsety3mJ5KUI96kcv7 hLpW/19SiSNCIZuAXkPeHoJRoJ2PN7LNRddqdQCdPA+tfp4Th6Akn4gOZgyaaUToVcVJ4qh9FwX4 uwyapqakGmKAy3qC24TEFrOLMNmZRynDdgdJ5cGJ3XtZ6Mdu0K+I4F6HDI7tjlECPtyYRCHUQ/SJ aPq88FRhBvGX9z0MchX1R7XyBra/MMmJ88HySxVVG/78/bidf8OVbcjb1OXjPz6o4yWl+riZ6TvA m0TsX1yboHYR3gMpLHpurVY6ENnaEz5aOEvjTA== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to j.root-servers.net for mil/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 7921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . NnzQQ8qqzf7qUNOQjeXNvqqfJapDQz/OXmz30BlpfPI5XvZ0TU9ZIEfwDLmsety3mJ5KUI96kcv7 hLpW/19SiSNCIZuAXkPeHoJRoJ2PN7LNRddqdQCdPA+tfp4Th6Akn4gOZgyaaUToVcVJ4qh9FwX4 uwyapqakGmKAy3qC24TEFrOLMNmZRynDdgdJ5cGJ3XtZ6Mdu0K+I4F6HDI7tjlECPtyYRCHUQ/SJ aPq88FRhBvGX9z0MchX1R7XyBra/MMmJ88HySxVVG/78/bidf8OVbcjb1OXjPz6o4yWl+riZ6TvA m0TsX1yboHYR3gMpLHpurVY6ENnaEz5aOEvjTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . NnzQQ8qqzf7qUNOQjeXNvqqfJapDQz/OXmz30BlpfPI5XvZ0TU9ZIEfwDLmsety3mJ5KUI96kcv7 hLpW/19SiSNCIZuAXkPeHoJRoJ2PN7LNRddqdQCdPA+tfp4Th6Akn4gOZgyaaUToVcVJ4qh9FwX4 uwyapqakGmKAy3qC24TEFrOLMNmZRynDdgdJ5cGJ3XtZ6Mdu0K+I4F6HDI7tjlECPtyYRCHUQ/SJ aPq88FRhBvGX9z0MchX1R7XyBra/MMmJ88HySxVVG/78/bidf8OVbcjb1OXjPz6o4yWl+riZ6TvA m0TsX1yboHYR3gMpLHpurVY6ENnaEz5aOEvjTA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 1061 octets ;; HEADER SECTION ;; id = 32643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKGgOyd9pwnzlCcPNBga7Re4GsHv3y/x4uTR8vVKtKrbBRq7ITQJ5lgU1R8dYD3rpMQY6sO Q6itUxFk+MYgVAbfJ/Fi5alaYnv0jtkU+J/lPd3KRX/M7fIAmz3Cmp0IKhpQAdeXG0/j3TSA1jTS x3GlajBxLhTZ+C6dfGCELb9D ) ; keytag 22014 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcpNTrDTZXzIwH8H8eWAH9VERqrrfTgjS1YY/2rOKalo+cf15BbY4qUOgbCSi6dCRsVl4KKo Jz62gslsu8HxfpU97PxByI5BfqqIO0C8a3YAmk2a1eZn52owCLqCC8HoX7aYUcXCbpCNGLZ4oNdN Nxa/5j36ptc9H21V8Ulq2BSV ) ; keytag 50931 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260423230013 20260416230013 45019 mil. VhIgS1k1wf+4eGLfFXAvyp8WRU/ORitOv/vzwkSoyJzAdIt0z8d4imo+z+i+s8pAY8ObOoR+ndZc sDD7t7i3NaE/5Qqw7e1rybc5B0CwJxTwrSPpuQkbuFOwzBRabYGzMSH5cWMesFW9xgfk2ioVFCr8 V8XrO1Jhm3Zmj4PwivT1GYSHQ+N3+MROi9pz0+LMuzVfNYsh1Q53ywnN7ZNtogJ2vvnKqCQnfkh+ Y2n1aqsgW9l47JpD7o70AjqkyMxGpcRU96Yd6L4NCNL/14aw5GqsbDy6lpt+6lUD8ePNugBbnD0/ s8qh5QuWYBEzxNYH963e35HtdAasIvPz3xJNEA== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260423230013 20260416230013 50931 mil. CoSeJgjWxyDdA7aIiocwATvJ63T8jask/b1ds3hgAVh/xPrIQhGuTIJ4bS97KlZ/WKFQ0DgT1Vhs qxxhe6wg/790oO23i3m6ddsNcqlN9u0xJGGfbRYEiWVLHyEoo+YQQhTZxmH9Bs5VVXTiqKu+sH32 ViFK+gv6ryrrc9TS74c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKGgOyd9pwnzlCcPNBga7Re4GsHv3y/x4uTR8vVKtKrbBRq7ITQJ5lgU1R8dYD3rpMQY6sO Q6itUxFk+MYgVAbfJ/Fi5alaYnv0jtkU+J/lPd3KRX/M7fIAmz3Cmp0IKhpQAdeXG0/j3TSA1jTS x3GlajBxLhTZ+C6dfGCELb9D ) ; keytag 22014`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcpNTrDTZXzIwH8H8eWAH9VERqrrfTgjS1YY/2rOKalo+cf15BbY4qUOgbCSi6dCRsVl4KKo Jz62gslsu8HxfpU97PxByI5BfqqIO0C8a3YAmk2a1eZn52owCLqCC8HoX7aYUcXCbpCNGLZ4oNdN Nxa/5j36ptc9H21V8Ulq2BSV ) ; keytag 50931`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260423230013 20260416230013 45019 mil. VhIgS1k1wf+4eGLfFXAvyp8WRU/ORitOv/vzwkSoyJzAdIt0z8d4imo+z+i+s8pAY8ObOoR+ndZc sDD7t7i3NaE/5Qqw7e1rybc5B0CwJxTwrSPpuQkbuFOwzBRabYGzMSH5cWMesFW9xgfk2ioVFCr8 V8XrO1Jhm3Zmj4PwivT1GYSHQ+N3+MROi9pz0+LMuzVfNYsh1Q53ywnN7ZNtogJ2vvnKqCQnfkh+ Y2n1aqsgW9l47JpD7o70AjqkyMxGpcRU96Yd6L4NCNL/14aw5GqsbDy6lpt+6lUD8ePNugBbnD0/ s8qh5QuWYBEzxNYH963e35HtdAasIvPz3xJNEA== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260423230013 20260416230013 50931 mil. CoSeJgjWxyDdA7aIiocwATvJ63T8jask/b1ds3hgAVh/xPrIQhGuTIJ4bS97KlZ/WKFQ0DgT1Vhs qxxhe6wg/790oO23i3m6ddsNcqlN9u0xJGGfbRYEiWVLHyEoo+YQQhTZxmH9Bs5VVXTiqKu+sH32 ViFK+gv6ryrrc9TS74c= )`
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	RRSIG=50931 and DNSKEY=50931 verifies the DNSKEY RRset
	DNSKEY=22014 is now in the chain-of-trust
	DNSKEY=50931 is now in the chain-of-trust
	Query to pac1.nipr.mil for move.mil/A
	Received 678 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 678 octets ;; HEADER SECTION ;; id = 7802 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 10800 IN DS ( 7959 13 2 417ad50fc6f00ffa5152e1653255bc6e740ec7a611976836078408e40fb239e5 ) MOVE.MIL. 10800 IN DS 7959 13 1 66445be3b45f08366d7025c0008907318298f1cb MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260423230013 20260416230013 50931 mil. Y21GTKY+CRn3dmawWXu6+lI7Z47kRRGAXAMXwLPwGwvhhuL4GXtK6VLq6rRv8LskorHg/U5tv6DV y2qlglPqpY4c7h3bcPdbVAvHsa9DXvB3yXju6FugwnJOcknPhp3VuPgfAD8zjXfpnWzlNUOuVeE0 1yEG/La5l+7OykrLrjY= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to pac1.nipr.mil for move.mil/DNSKEY
	Received 678 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 678 octets ;; HEADER SECTION ;; id = 22616 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 10800 IN DS ( 7959 13 2 417ad50fc6f00ffa5152e1653255bc6e740ec7a611976836078408e40fb239e5 ) MOVE.MIL. 10800 IN DS 7959 13 1 66445be3b45f08366d7025c0008907318298f1cb MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260423230013 20260416230013 50931 mil. Y21GTKY+CRn3dmawWXu6+lI7Z47kRRGAXAMXwLPwGwvhhuL4GXtK6VLq6rRv8LskorHg/U5tv6DV y2qlglPqpY4c7h3bcPdbVAvHsa9DXvB3yXju6FugwnJOcknPhp3VuPgfAD8zjXfpnWzlNUOuVeE0 1yEG/La5l+7OykrLrjY= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone move.mil

move.mil

	Checking DS between mil and move.mil
	Query to con1.nipr.mil for move.mil/DS
	Received 292 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 292 octets ;; HEADER SECTION ;; id = 11315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DS ;; ANSWER SECTION (3 records) MOVE.MIL. 10800 IN DS 7959 13 1 66445be3b45f08366d7025c0008907318298f1cb MOVE.MIL. 10800 IN DS ( 7959 13 2 417ad50fc6f00ffa5152e1653255bc6e740ec7a611976836078408e40fb239e5 ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260423230013 20260416230013 50931 mil. Y21GTKY+CRn3dmawWXu6+lI7Z47kRRGAXAMXwLPwGwvhhuL4GXtK6VLq6rRv8LskorHg/U5tv6DV y2qlglPqpY4c7h3bcPdbVAvHsa9DXvB3yXju6FugwnJOcknPhp3VuPgfAD8zjXfpnWzlNUOuVeE0 1yEG/La5l+7OykrLrjY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for move.mil in the mil zone
	DS=7959/SHA-1 uses a deprecated digest algorithm
	DS=7959/SHA-1 has algorithm ECDSAP256SHA256
	DS=7959/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260423230013 20260416230013 50931 mil. Y21GTKY+CRn3dmawWXu6+lI7Z47kRRGAXAMXwLPwGwvhhuL4GXtK6VLq6rRv8LskorHg/U5tv6DV y2qlglPqpY4c7h3bcPdbVAvHsa9DXvB3yXju6FugwnJOcknPhp3VuPgfAD8zjXfpnWzlNUOuVeE0 1yEG/La5l+7OykrLrjY= )`
	RRSIG=50931 and DNSKEY=50931 verifies the DS RRset
	DS=7959/SHA-1 is now in the chain-of-trust
	`MOVE.MIL. 10800 IN DS 7959 13 1 66445be3b45f08366d7025c0008907318298f1cb`
	`MOVE.MIL. 10800 IN DS ( 7959 13 2 417ad50fc6f00ffa5152e1653255bc6e740ec7a611976836078408e40fb239e5 )`
	Query to DNS5.NIPR.MIL for move.mil/DNSKEY
	Received 301 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 301 octets ;; HEADER SECTION ;; id = 13196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (3 records) move.mil. 50252 IN DNSKEY ( 256 3 13 J8+0g2oy8yQ72inBGqg/iX9OfN5E/tACnTmQwpKPhwjnK11la/ixFOE4bAeOvRDid3kzBJAl/K5A JEKWfnCwGg== ) ; keytag 36188 move.mil. 50252 IN DNSKEY ( 257 3 13 dKONzXchB0vNdgSpN+27T3N4oXzCvzYXWc75cFpQRPi/EuIYTgBVkPefOOUPPb5A7d4H9E1iTMuW zqEVdQRU0g== ) ; keytag 7959 move.mil. 50252 IN RRSIG ( DNSKEY 13 2 86400 20260422130205 20260415124950 7959 move.mil. jAg7kKvMOyaGEwdApHQoc6NIUtmCrW/sTpTbTC1xFAU7tH1LDlTh5SomR/oC37lByXBw6V3Hvf/Z dLOoaX4prg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for move.mil
	`move.mil. 50252 IN DNSKEY ( 256 3 13 J8+0g2oy8yQ72inBGqg/iX9OfN5E/tACnTmQwpKPhwjnK11la/ixFOE4bAeOvRDid3kzBJAl/K5A JEKWfnCwGg== ) ; keytag 36188`
	`move.mil. 50252 IN DNSKEY ( 257 3 13 dKONzXchB0vNdgSpN+27T3N4oXzCvzYXWc75cFpQRPi/EuIYTgBVkPefOOUPPb5A7d4H9E1iTMuW zqEVdQRU0g== ) ; keytag 7959`
	DNSKEY=7959/SEP is now in the chain-of-trust
	DS=7959/SHA-1 verifies DNSKEY=7959/SEP
	DS=7959/SHA-256 verifies DNSKEY=7959/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`move.mil. 50252 IN RRSIG ( DNSKEY 13 2 86400 20260422130205 20260415124950 7959 move.mil. jAg7kKvMOyaGEwdApHQoc6NIUtmCrW/sTpTbTC1xFAU7tH1LDlTh5SomR/oC37lByXBw6V3Hvf/Z dLOoaX4prg== )`
	RRSIG=7959 and DNSKEY=7959/SEP verifies the DNSKEY RRset
	DNSKEY=36188 is now in the chain-of-trust
	Query to DNS3.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 371 octets ;; HEADER SECTION ;; id = 49797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3555 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3555 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) move.mil. 2894 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 2894 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS1.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 45399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 5924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 8532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS2.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 65249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 202 octets ;; HEADER SECTION ;; id = 34998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 2894 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== )`
	RRSIG=36188 and DNSKEY=36188 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3555 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== )`
	RRSIG=36188 and DNSKEY=36188 verifies the SOA RRset

move.mil

	Query to DNS4.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 371 octets ;; HEADER SECTION ;; id = 53282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3355 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3355 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) move.mil. 3355 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3355 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS4.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3355 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== )`
	RRSIG=36188 and DNSKEY=36188 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3355 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== )`
	RRSIG=36188 and DNSKEY=36188 verifies the SOA RRset

move.mil

	Query to DNS5.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 371 octets ;; HEADER SECTION ;; id = 19668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3555 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3555 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) move.mil. 2894 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 2894 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS5.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 2894 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== )`
	RRSIG=36188 and DNSKEY=36188 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3555 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== )`
	RRSIG=36188 and DNSKEY=36188 verifies the SOA RRset

move.mil

	Query to DNS2.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 371 octets ;; HEADER SECTION ;; id = 38555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3211 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3211 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) move.mil. 2029 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 2029 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS2.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 2029 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== )`
	RRSIG=36188 and DNSKEY=36188 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3211 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== )`
	RRSIG=36188 and DNSKEY=36188 verifies the SOA RRset

move.mil

	Query to DNS6.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 371 octets ;; HEADER SECTION ;; id = 58235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3211 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3211 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) move.mil. 2029 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 2029 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS6.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 2029 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== )`
	RRSIG=36188 and DNSKEY=36188 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3211 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== )`
	RRSIG=36188 and DNSKEY=36188 verifies the SOA RRset

move.mil

	Query to DNS1.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 371 octets ;; HEADER SECTION ;; id = 58149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3555 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 3231 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3555 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== ) move.mil. 2894 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 2894 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS1.NIPR.MIL for move.mil/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 2894 IN RRSIG ( NSEC 13 2 3600 20260421203440 20260414203348 36188 move.mil. FOhItc/xXvWtjSpbC9s+GGbNN7IuU5TFqhUfYeUYbxBu4KWVv1xurT19ILbuefpzbLdjUA6+97Tk bxb2PZ8OZg== )`
	RRSIG=36188 and DNSKEY=36188 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3555 IN RRSIG ( SOA 13 2 86400 20260424030750 20260417020750 36188 move.mil. AxUvORGsqtNbBz6vT3A3V8zxn8+YcLpYA68doir+wFgxKRw06Une70GhWeKmZbxPjZCe7IsMOxG8 CQU6+TnShA== )`
	RRSIG=36188 and DNSKEY=36188 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test move.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: