DNSSEC Debugger - move.mil

Domain Name:

Time: 2025-05-21 13:29:50 UTC

Analyzing DNSSEC problems for move.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 60630 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250611000000 20250521000000 20326 . ki8fK9M8rb/I+LSCC+6ZKil/CLh4jxV//8F/PDAFtzupjzeyCotFHL+Tm6kwL2wEOrZaz0a6rEba ZFhLGP+Z1XV0WJb45V0ajLFhU+IV4VCDVbzlXKQ3isrKymu8U7zrj3d/NoPbZAbxGkMfI56xv6Ev FvRYa9bjnIm0Id94ONqFclrlQTNEL25Nq+tDOH/Ro709M4j0NOcW5Ui6gIlILfsvEma+g+rHVMeJ N7Yu5FpOzaCvajJKdDGf4O3e1BI4UGrvxsLaZZGSUkeUifobG6FrTpewm9vDkU0kHfGKPqZurEuk mXcfCb/jevjBQhGG8HwoAQy4nS6IjWGfCjK3CQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250611000000 20250521000000 20326 . ki8fK9M8rb/I+LSCC+6ZKil/CLh4jxV//8F/PDAFtzupjzeyCotFHL+Tm6kwL2wEOrZaz0a6rEba ZFhLGP+Z1XV0WJb45V0ajLFhU+IV4VCDVbzlXKQ3isrKymu8U7zrj3d/NoPbZAbxGkMfI56xv6Ev FvRYa9bjnIm0Id94ONqFclrlQTNEL25Nq+tDOH/Ro709M4j0NOcW5Ui6gIlILfsvEma+g+rHVMeJ N7Yu5FpOzaCvajJKdDGf4O3e1BI4UGrvxsLaZZGSUkeUifobG6FrTpewm9vDkU0kHfGKPqZurEuk mXcfCb/jevjBQhGG8HwoAQy4nS6IjWGfCjK3CQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to i.root-servers.net for move.mil/A
	Received 758 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 758 octets ;; HEADER SECTION ;; id = 13830 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 750 octets ;; HEADER SECTION ;; id = 15958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 45121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=63500/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . KM/dVHAotw1pZjYQiZ9m9D1avdQBZTzZvXLTZfqXhDvoP8R2gDuYRx2SMxbV4zPJSCq5Gmbvwg4T Bi6pPOUMBTog9pJD0T46BNoUuUJrZZ3GjO0UA8ej6QWUdX+EsunGITPexbERJyTdg2g1DBGoB7ay pxUUqib/TJfoCNd+clCjaKl0vVEy9IOCc7KrUGA+w2fAHaxBB4NcIdUX1MypQvO7PTihvWD7n1n9 uHzmFRePboanSXCkQ2d3N7Up4FBXPDzf1SihQ/IMhHu9VBGS2hJEf285D9FEc/Z40DpXPy86fbr2 R3zJMzUtovkc9TzVPXTz9di3n02eltNaI5zxAQ== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=63500/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 1061 octets ;; HEADER SECTION ;; id = 10125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdMKFuRf2WnTOPuYPW66iQIsPnxjugRBz3F3kK8o9cUPc3IRy6wwxg/XTzJUBJF8irM+QsUj 7iQvPZrWVEcxzLpH/nqE2Buj5ov7Psjdr/TJcHdH8GczQIzMyweUczqpDbyYv2A5dqEscnQU3bBA YnY5UUDg52j9FqXfE+s5KWq9 ) ; keytag 55824 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 55824 mil. fJWWsjnme1ArI3Pr+7h5AYUwZOdqxEtoHrRH3Nn85XKFZdKhzwWoJH5usHnBvRVSz9UJy+EEPmOX 409NrGmyRAPfI6tBblyAydrjbI5gcwslA3QFsk8FH3ozUiOX/RtVs8mpn1tLJtdmliOr2LIWJYcV SzzUl7q8ZcvA/gZqpJc= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 63500 mil. kkKzVIdVBo42zpGO+ud50SGhiCbOtV4zpvfqu1LgZNoBRTxX1cxcSWkPc2Xm5UVogZulZh9XvZmV PBxn1UD4/dLmZdigMoztMGBn0xdJWU4KzCkSTUJOYBtjdeEDYkYZJf8YAwAJIq78Zp4LTAc7W76o hM5TADTVPicAJysBlMwc41yqNPcb0RLXNS0HT6Nt9mknsbfMUXwBQkzQytDD8z100qFODNJiKvaP WuAHbgKU6ibEJ7nMvF6Z8J7aHf6XiaiFmsvRpWlwPVCMXWcd+1ILshnUWrwb3gQMLk7VjZ4IPmF3 teAS65kpfBKluPeSBWCPKeYqBDjaadY1CnoJdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdMKFuRf2WnTOPuYPW66iQIsPnxjugRBz3F3kK8o9cUPc3IRy6wwxg/XTzJUBJF8irM+QsUj 7iQvPZrWVEcxzLpH/nqE2Buj5ov7Psjdr/TJcHdH8GczQIzMyweUczqpDbyYv2A5dqEscnQU3bBA YnY5UUDg52j9FqXfE+s5KWq9 ) ; keytag 55824`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbFY1ta/7QSIvICNEg3PAMiGYuVYwyVIMF3VAwswdjlef+JhCRJ6zLKhehjNh4fVShy1Fypi oScis9X47JCpZwhAveF7vAJPPxOJOR+O0Vyph4Jn/MgnW3Ctk0MBA1oG133MNo2dl8P40gfMK1Ri ZpZrquSew31yUw8LdmQpsvh3 ) ; keytag 14128`
	DNSKEY=63500/SEP is now in the chain-of-trust
	DS=63500/SHA-256 verifies DNSKEY=63500/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 55824 mil. fJWWsjnme1ArI3Pr+7h5AYUwZOdqxEtoHrRH3Nn85XKFZdKhzwWoJH5usHnBvRVSz9UJy+EEPmOX 409NrGmyRAPfI6tBblyAydrjbI5gcwslA3QFsk8FH3ozUiOX/RtVs8mpn1tLJtdmliOr2LIWJYcV SzzUl7q8ZcvA/gZqpJc= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250528111224 20250521111224 63500 mil. kkKzVIdVBo42zpGO+ud50SGhiCbOtV4zpvfqu1LgZNoBRTxX1cxcSWkPc2Xm5UVogZulZh9XvZmV PBxn1UD4/dLmZdigMoztMGBn0xdJWU4KzCkSTUJOYBtjdeEDYkYZJf8YAwAJIq78Zp4LTAc7W76o hM5TADTVPicAJysBlMwc41yqNPcb0RLXNS0HT6Nt9mknsbfMUXwBQkzQytDD8z100qFODNJiKvaP WuAHbgKU6ibEJ7nMvF6Z8J7aHf6XiaiFmsvRpWlwPVCMXWcd+1ILshnUWrwb3gQMLk7VjZ4IPmF3 teAS65kpfBKluPeSBWCPKeYqBDjaadY1CnoJdA== )`
	RRSIG=55824 and DNSKEY=55824 verifies the DNSKEY RRset
	RRSIG=63500 and DNSKEY=63500/SEP verifies the DNSKEY RRset
	DNSKEY=55824 is now in the chain-of-trust
	DNSKEY=14128 is now in the chain-of-trust
	Query to eur1.nipr.mil for move.mil/A
	Received 678 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 678 octets ;; HEADER SECTION ;; id = 15534 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. v3Sl/kiE7Lucgi+w27SI+aV90Ld5Zj9wciPvHQ8UPZ83dxYKLA3NpbjS1pe/1k8yP89/Tsi8eF0w KA8aJ0/6oZALKUFfW65x3LeqhJqn4u1ICi+L9OfcW7tmrXjThhqEO7+FT64RgniEif/fPV50vCpq NSURlzfvUf9ysHNb2Nw= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Query to eur2.nipr.mil for move.mil/DNSKEY
	Error querying eur2.nipr.mil/199.252.143.234 for move.mil/DNSKEY: 'query timed out'
	All Queries to eur2.nipr.mil for move.mil/DNSKEY timed out or failed
	Query to eur1.nipr.mil for move.mil/DNSKEY
	Received 678 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 678 octets ;; HEADER SECTION ;; id = 29948 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) MOVE.MIL. 21600 IN NS DNS4.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS2.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS6.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS1.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS3.NIPR.MIL. MOVE.MIL. 21600 IN NS DNS5.NIPR.MIL. MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. v3Sl/kiE7Lucgi+w27SI+aV90Ld5Zj9wciPvHQ8UPZ83dxYKLA3NpbjS1pe/1k8yP89/Tsi8eF0w KA8aJ0/6oZALKUFfW65x3LeqhJqn4u1ICi+L9OfcW7tmrXjThhqEO7+FT64RgniEif/fPV50vCpq NSURlzfvUf9ysHNb2Nw= ) ;; ADDITIONAL SECTION (13 records) DNS6.NIPR.MIL. 21600 IN A 199.252.155.243 DNS5.NIPR.MIL. 21600 IN A 199.252.180.243 DNS4.NIPR.MIL. 21600 IN A 199.252.143.243 DNS3.NIPR.MIL. 21600 IN A 199.252.154.243 DNS2.NIPR.MIL. 21600 IN A 199.252.162.243 DNS1.NIPR.MIL. 21600 IN A 199.252.157.235 DNS6.NIPR.MIL. 21600 IN AAAA 2608:c144:1:155::243 DNS5.NIPR.MIL. 21600 IN AAAA 2608:c184:1:180::243 DNS4.NIPR.MIL. 21600 IN AAAA 2608:4163:1:143::243 DNS3.NIPR.MIL. 21600 IN AAAA 2608:4122:2:154::243 DNS2.NIPR.MIL. 21600 IN AAAA 2608:120:c:162::243 DNS1.NIPR.MIL. 21600 IN AAAA 2608:140:c:157::235 ;; { "EDNS-VERSION": 0 }
	Found child zone move.mil

move.mil

	Checking DS between mil and move.mil
	Query to eur1.nipr.mil for move.mil/DS
	Received 292 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 292 octets ;; HEADER SECTION ;; id = 5748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DS ;; ANSWER SECTION (3 records) MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83 MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c ) MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. v3Sl/kiE7Lucgi+w27SI+aV90Ld5Zj9wciPvHQ8UPZ83dxYKLA3NpbjS1pe/1k8yP89/Tsi8eF0w KA8aJ0/6oZALKUFfW65x3LeqhJqn4u1ICi+L9OfcW7tmrXjThhqEO7+FT64RgniEif/fPV50vCpq NSURlzfvUf9ysHNb2Nw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for move.mil in the mil zone
	DS=43792/SHA-1 uses a deprecated digest algorithm
	DS=43792/SHA-1 has algorithm ECDSAP256SHA256
	DS=43792/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`MOVE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250528111224 20250521111224 55824 mil. v3Sl/kiE7Lucgi+w27SI+aV90Ld5Zj9wciPvHQ8UPZ83dxYKLA3NpbjS1pe/1k8yP89/Tsi8eF0w KA8aJ0/6oZALKUFfW65x3LeqhJqn4u1ICi+L9OfcW7tmrXjThhqEO7+FT64RgniEif/fPV50vCpq NSURlzfvUf9ysHNb2Nw= )`
	RRSIG=55824 and DNSKEY=55824 verifies the DS RRset
	DS=43792/SHA-1 is now in the chain-of-trust
	`MOVE.MIL. 10800 IN DS 43792 13 1 2e89ca31aa546740763c91cac7131985ddc63c83`
	`MOVE.MIL. 10800 IN DS ( 43792 13 2 12d43c614a45dfd179cd2fae2c5d26c26f4736bd4e0275f3a4b548b6aa2f249c )`
	Query to DNS2.NIPR.MIL for move.mil/DNSKEY
	Received 381 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 381 octets ;; HEADER SECTION ;; id = 57856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN DNSKEY ;; ANSWER SECTION (4 records) move.mil. 71915 IN DNSKEY ( 256 3 13 LQ9jzw76ISDpV6YoHcWgHjjlJkRu1HanXsdw/3V0xeE0a+HGXl7edTDmuRWdqwMpSC8eUSv+aAgZ VLkDMkLb1A== ) ; keytag 6905 move.mil. 71915 IN DNSKEY ( 257 3 13 aWdn68uYuxKG01bQBwKwDTWValtDIPPe01+6tOaAzdxE+TutgkBgfXrnnEXY4V6xN6RfCtNl2EuK ZT/i6ZP4jQ== ) ; keytag 43792 move.mil. 71915 IN DNSKEY ( 256 3 13 T+ytbgyDbZZoDVo1t1SnrpWFdRczR02X9ovZSsZ8JeJo92c64Sp2sHF8MlTeEHpoJ2lcTiU3sqPP 8Sngqytr2Q== ) ; keytag 30009 move.mil. 71915 IN RRSIG ( DNSKEY 13 2 86400 20250527225959 20250520220000 43792 move.mil. Yes077UtZvSyiMtngtzPKY/oefGaVsh6W0hiCxjiTECjqnmZ2rG90CC/pqMikfrXC1LoE9Max4oz 2xpbuMK0kA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for move.mil
	`move.mil. 71915 IN DNSKEY ( 256 3 13 LQ9jzw76ISDpV6YoHcWgHjjlJkRu1HanXsdw/3V0xeE0a+HGXl7edTDmuRWdqwMpSC8eUSv+aAgZ VLkDMkLb1A== ) ; keytag 6905`
	`move.mil. 71915 IN DNSKEY ( 257 3 13 aWdn68uYuxKG01bQBwKwDTWValtDIPPe01+6tOaAzdxE+TutgkBgfXrnnEXY4V6xN6RfCtNl2EuK ZT/i6ZP4jQ== ) ; keytag 43792`
	`move.mil. 71915 IN DNSKEY ( 256 3 13 T+ytbgyDbZZoDVo1t1SnrpWFdRczR02X9ovZSsZ8JeJo92c64Sp2sHF8MlTeEHpoJ2lcTiU3sqPP 8Sngqytr2Q== ) ; keytag 30009`
	DNSKEY=43792/SEP is now in the chain-of-trust
	DS=43792/SHA-1 verifies DNSKEY=43792/SEP
	DS=43792/SHA-256 verifies DNSKEY=43792/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`move.mil. 71915 IN RRSIG ( DNSKEY 13 2 86400 20250527225959 20250520220000 43792 move.mil. Yes077UtZvSyiMtngtzPKY/oefGaVsh6W0hiCxjiTECjqnmZ2rG90CC/pqMikfrXC1LoE9Max4oz 2xpbuMK0kA== )`
	RRSIG=43792 and DNSKEY=43792/SEP verifies the DNSKEY RRset
	DNSKEY=6905 is now in the chain-of-trust
	DNSKEY=30009 is now in the chain-of-trust
	Query to DNS5.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 371 octets ;; HEADER SECTION ;; id = 2858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3436 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3436 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3422 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3422 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS5.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS2.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 202 octets ;; HEADER SECTION ;; id = 8985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS3.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 202 octets ;; HEADER SECTION ;; id = 65178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86219 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86219 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS6.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 202 octets ;; HEADER SECTION ;; id = 17007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS1.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 202 octets ;; HEADER SECTION ;; id = 65133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 69356 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 69356 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS4.NIPR.MIL for move.mil/SOA
	Received 202 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 202 octets ;; HEADER SECTION ;; id = 15949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN SOA ;; ANSWER SECTION (2 records) move.mil. 86400 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 86400 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to DNS5.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.180.243
	;; Response received from [199.252.180.243] 371 octets ;; HEADER SECTION ;; id = 15107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3436 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3436 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3422 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3422 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3422 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3436 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the SOA RRset

move.mil

	Query to DNS1.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 371 octets ;; HEADER SECTION ;; id = 56227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3444 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3444 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3444 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3444 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS1.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS1.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.157.235
	;; Response received from [199.252.157.235] 371 octets ;; HEADER SECTION ;; id = 41162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3444 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3444 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3444 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3444 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3444 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3444 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the SOA RRset

move.mil

	Query to DNS2.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 371 octets ;; HEADER SECTION ;; id = 62659 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3506 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3506 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3506 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3506 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS2.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS2.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.162.243
	;; Response received from [199.252.162.243] 371 octets ;; HEADER SECTION ;; id = 6858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3506 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3506 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3506 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3506 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3506 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3506 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the SOA RRset

move.mil

	Query to DNS6.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 371 octets ;; HEADER SECTION ;; id = 41177 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3506 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3506 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3506 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3506 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS6.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS6.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.155.243
	;; Response received from [199.252.155.243] 371 octets ;; HEADER SECTION ;; id = 63948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3506 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3506 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3506 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3506 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3506 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3506 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the SOA RRset

move.mil

	Query to DNS3.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 371 octets ;; HEADER SECTION ;; id = 11798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3436 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3436 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3422 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3422 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS3.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS3.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.154.243
	;; Response received from [199.252.154.243] 371 octets ;; HEADER SECTION ;; id = 34516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3435 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3435 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3421 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3421 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3421 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3436 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the SOA RRset

move.mil

	Query to DNS4.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 371 octets ;; HEADER SECTION ;; id = 33030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3600 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3600 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) move.mil. 3600 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNS4.NIPR.MIL is authoritative for move.mil
	Found RRSIG signed by move.mil zone
	Query to DNS4.NIPR.MIL for move.mil/A
	Received 371 bytes from 199.252.143.243
	;; Response received from [199.252.143.243] 371 octets ;; HEADER SECTION ;; id = 40179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; move.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) move.mil. 3600 IN SOA ( dns1.nipr.mil. hostmaster@nic.mil. 2023 ;serial 21600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) move.mil. 3600 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== ) move.mil. 3600 IN NSEC ( _ac3883fac1df38cf7a45c70aa406484e.move.mil. NS SOA TXT RRSIG NSEC DNSKEY ) move.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`move.mil. 3600 IN RRSIG ( NSEC 13 2 3600 20250527125459 20250520120459 6905 move.mil. 2KUjy0OGgMNPkpFNRRKSqzf6b6yYJe28f5wV/1Ky0vmNMx6WhNzbIROpvxLoOjbkbYffzVvWJoAm 8SIrOaKhFQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the NSEC RRset
	NSEC proves no records of type A exist for move.mil
	Found 1 RRSIGs over SOA RRset
	`move.mil. 3600 IN RRSIG ( SOA 13 2 86400 20250527230000 20250520220000 6905 move.mil. VYjOC3yIGkQO9dfaw/b7k7wUeJfyTraex+mzVj5pUWguKcGSCv/bWJpPQr60gpuzhXSHqOS8B4xZ D+fQ4jKfBQ== )`
	RRSIG=6905 and DNSKEY=6905 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test move.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: