DNSSEC Analyzer - nationalguard.mil

Domain Name:

Time: 2023-09-24 17:33:19 UTC, NTP stratum 4

Analyzing DNSSEC problems for nationalguard.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 60619 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to a.root-servers.net for nationalguard.mil/A
	Received 812 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (812 octets) ;; HEADER SECTION ;; id = 14227 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for mil/DNSKEY
	Received 798 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (798 octets) ;; HEADER SECTION ;; id = 18895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to m.root-servers.net for mil/DS
	Received 415 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (415 octets) ;; HEADER SECTION ;; id = 25143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (1628 octets) ;; HEADER SECTION ;; id = 6271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to con2.nipr.mil for nationalguard.mil/A
	Received 466 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (466 octets) ;; HEADER SECTION ;; id = 14715 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) NATIONALGUARD.MIL. 21600 IN NS RUSSELL.DMA.MIL. NATIONALGUARD.MIL. 21600 IN NS KAUCHER.DMA.MIL. NATIONALGUARD.MIL. 21600 IN NS BEAST.DMA.MIL. NATIONALGUARD.MIL. 21600 IN NS BEAUTY.DMA.MIL. NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 1 de1d9f0c9c88d69d5cc09b74fd9568a3b17c5ad7 ) NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 2 5973770e46ea4caf2af2ffcec6fa656a76cfb5ac69230babb221df2fc423396a ) NATIONALGUARD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EzVBRhpD5RYPgTa4bKqxLYrJc4keT4QRhc5LZkfnyTQdEY0fyPWbTZMGg3dYdhS7DpMC9PuGd1+P RUgCWZ7bTOlBrmFWnnSfshDvKbcoF0lvkMrbl5aLkoxm/q5kTgBBe178fduhSDDTVVbT8bxiZPPh 9kqbPeVuzinEgWWHPOE= ) ;; ADDITIONAL SECTION (5 records) RUSSELL.DMA.MIL. 21600 IN A 155.7.208.112 KAUCHER.DMA.MIL. 21600 IN A 155.7.208.113 BEAUTY.DMA.MIL. 21600 IN A 155.7.145.112 BEAST.DMA.MIL. 21600 IN A 155.7.145.113 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to eur2.nipr.mil for nationalguard.mil/DNSKEY
	Received 466 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (466 octets) ;; HEADER SECTION ;; id = 37550 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) NATIONALGUARD.MIL. 21600 IN NS RUSSELL.DMA.MIL. NATIONALGUARD.MIL. 21600 IN NS BEAST.DMA.MIL. NATIONALGUARD.MIL. 21600 IN NS BEAUTY.DMA.MIL. NATIONALGUARD.MIL. 21600 IN NS KAUCHER.DMA.MIL. NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 1 de1d9f0c9c88d69d5cc09b74fd9568a3b17c5ad7 ) NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 2 5973770e46ea4caf2af2ffcec6fa656a76cfb5ac69230babb221df2fc423396a ) NATIONALGUARD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EzVBRhpD5RYPgTa4bKqxLYrJc4keT4QRhc5LZkfnyTQdEY0fyPWbTZMGg3dYdhS7DpMC9PuGd1+P RUgCWZ7bTOlBrmFWnnSfshDvKbcoF0lvkMrbl5aLkoxm/q5kTgBBe178fduhSDDTVVbT8bxiZPPh 9kqbPeVuzinEgWWHPOE= ) ;; ADDITIONAL SECTION (5 records) RUSSELL.DMA.MIL. 21600 IN A 155.7.208.112 KAUCHER.DMA.MIL. 21600 IN A 155.7.208.113 BEAUTY.DMA.MIL. 21600 IN A 155.7.145.112 BEAST.DMA.MIL. 21600 IN A 155.7.145.113 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nationalguard.mil

nationalguard.mil

	Checking DS between mil and nationalguard.mil
	Query to eur1.nipr.mil for nationalguard.mil/DS
	Received 310 bytes from 199.252.154.234
	;; Response received from 199.252.154.234 (310 octets) ;; HEADER SECTION ;; id = 30441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN DS ;; ANSWER SECTION (3 records) NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 2 5973770e46ea4caf2af2ffcec6fa656a76cfb5ac69230babb221df2fc423396a ) NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 1 de1d9f0c9c88d69d5cc09b74fd9568a3b17c5ad7 ) NATIONALGUARD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EzVBRhpD5RYPgTa4bKqxLYrJc4keT4QRhc5LZkfnyTQdEY0fyPWbTZMGg3dYdhS7DpMC9PuGd1+P RUgCWZ7bTOlBrmFWnnSfshDvKbcoF0lvkMrbl5aLkoxm/q5kTgBBe178fduhSDDTVVbT8bxiZPPh 9kqbPeVuzinEgWWHPOE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nationalguard.mil in the mil zone
	DS=18691/SHA-256 has algorithm RSASHA256
	DS=18691/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NATIONALGUARD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EzVBRhpD5RYPgTa4bKqxLYrJc4keT4QRhc5LZkfnyTQdEY0fyPWbTZMGg3dYdhS7DpMC9PuGd1+P RUgCWZ7bTOlBrmFWnnSfshDvKbcoF0lvkMrbl5aLkoxm/q5kTgBBe178fduhSDDTVVbT8bxiZPPh 9kqbPeVuzinEgWWHPOE= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=18691/SHA-256 is now in the chain-of-trust
	`NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 2 5973770e46ea4caf2af2ffcec6fa656a76cfb5ac69230babb221df2fc423396a )`
	`NATIONALGUARD.MIL. 10800 IN DS ( 18691 8 1 de1d9f0c9c88d69d5cc09b74fd9568a3b17c5ad7 )`
	Query to BEAST.DMA.MIL for nationalguard.mil/DNSKEY
	Received 3691 bytes from 155.7.145.113
	;; Response received from 155.7.145.113 (3691 octets) ;; HEADER SECTION ;; id = 61352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 15 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN DNSKEY ;; ANSWER SECTION (15 records) nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAcJxDmkiASo6/+YJYodpnQ2Gf9NNvHfrSoFgPQMjCaB+Xk2qdRTerMJ9TVJtg+yefnc5NlXb 645auOWeOUPcGQqvT33Ckawu3DibWNAGF0JK2RDTBb2p8GKAF0oZl7kzw+e/m4xvX3K80kU3SwsB iSY+Ns3/e5nZNhklafqpmCnNl2hDn30hhwfzgIRyeLZJXORxnBtNdYNUd84/KBA3J+gdkcpmYe+n EiEce69l3/Tp+lK+WikRl5ILXafnayMCquz2hhxj/B3rrVn9LxlUAeGj7VL7WYpEiqlzpIi+2KPe /z26MuIJZWo4sMwzPj9sIX15Go/VRUAz1rgz6e0e14s= ) ; Key ID = 55712 nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAapyoXIc/GwWzKURfoHIWxwsmLMTrxrWnOP7oFKnOPbf1Ydd5krBpssqW/dRt5+1n2IEqMy3 tgdm28eq0qTRWWNOKcbGytV6xFs9ck3ruvKBVwZUKdGGZygBdtziLjToSjfYH3apnXFPf2d7/I+w biMkZFqhH/azkgWHHOIZeS0mRnFroaSBxQoaII0nWGgWZJy+IheO9UjjHBfrIaL1IShYjC0TK6k/ RXz5KktjnB/XPrODCD2qETK6o4TUewAyT3P2feCBpyQBvk5hAtG1RyI5yxKTis3ntadNXVUZ+lMV m8GNjOTtOxR6H/85bPNWIIbgnytuB8heymOQKLySiis= ) ; Key ID = 22436 nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAdJNLaOMlWR0gMygwKjpcQUO856MUWCvpf7Ama1fDXMJKRtwTHs0XSOTsIqQa4Y36Irt4LWs QfPlm1OwXWGhu/5nsRiIQZvSjPsYFRUbojeyMMhemghS9nD01q7Q8dYCih5vWimuNRbAFae610zv JvMWtHzHOmrfEkieCNNLuZjwV2sSEaNRsPmER7K9FRy2CPoZRmqGowlWApsi9gUgpacLWRad48d9 3nLZQKF8SJX9ElCwDtUQDHqGcVWE1vUesHWEdsHXLdkaoyq399YptRXaItNFvDOafQcECufZbY8F ggGbPNzCKX1EQdXMUnUNX2vJGLNJ+pisCIdCW/GBcvU= ) ; Key ID = 19744 nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAcLxi+pk/1KcWkptkBJccNCYBRdKcrJaaG1U36ytdaebssBd/aViYy813s9Bnu3mWuXgnVCD KJ3JOC+SbnOKyljieYFHdzofXLxcxTrRVP3Bj+wLByd0iMVFD0IvNZwy6NNVWD+oPvxdKaXCrOnO ssld9fTlRacNJ+SlhHX39M0eFSQhnthNr+H62MKxmR3/7cCw8AVpAtD8sqHVgm6oN7reIpESN7G5 y+F/OCqpPq6bG8FWOZjmchg2rKTbDtn9iNn6VyOyoD00j7vEvvVHDXehQDJRwSATXsCeCX7a12Ex s17Aj/zUzHtk5QhOZtI96ICqfuBtvKGPnydoQqqn9qU= ) ; Key ID = 3407 nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAdfoesONW7PSeKy3CIS9wfv4/yEoiy8w/0gOmjGIwSSmu6FWPSIOT9EkgDRPi7gBxzxbqYr2 x55uy2wrQGmzGscAqW0eNcJRU8JF4Q2eiLAKPYIAlwKYzflEJ81JevUy1i71GGa2jBINX+Fvluxz 8H/57TdNRQiEAMph8kCapIf7h2P7qtoEXeI4QRYbL/I+6m6o2lIATXlMw53AB8yG+/DmPolrfT98 SHIMw0ZO29QKi+esKgkX+EoEhKQYBil1SB99wUBm/6LTx1VkxAlajZJJSY4CGPMC62Y1fQo8w3T7 HjsLxXgFm6ZSJDh67z3P8fHm8Al1+i2FQVE8JLe7CSE= ) ; Key ID = 18691 nationalguard.mil. 1203 IN DNSKEY ( 256 3 8 AwEAAbGSeCgkRzStprc5lq53y+lDAx0vi7X87VSS2FBe7H4DjWIW9hC5BA3t3EZpk4vQgmDQAq/i Ar7iU4x9FJT9q7yfrThUPog8updPqS4vohB2l3Duo/6jy7GgZuuLcdyfuT7oL8lhlVT9pIngNd8l kwkKXEvio8J0PbyiI7K8e2Vt ) ; Key ID = 36034 nationalguard.mil. 1203 IN DNSKEY ( 256 3 8 AwEAAdhLQZekhXpGnZMLnnW2WPWpvmYviYuc2Ca8PqWnTPXfOa/EjT1+19L8Y4Bd/qNwX0ALY5YN XMhhgez8Qf4Bk2HbLS5Hni6YlS2iWy4k1THdh0PoRQoDjpa1Rl0Da7BeqP4nM1hjUypN1QcLe5w6 1LuyPBJoOXeSQBk3UPJd8vnZ ) ; Key ID = 57385 nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAbqgN94RZM8GlYZnAT8I2u/kv/ARU9be3j16gNr1WsXySQR51TpHXiUhTBuFWeAhgj192/GJ uSMgTkCF5R1IWYauVYr4wtFdP03w5tl52UWSNMrTLlHzpiYkxSlMGhvo3+9LMsbpTpkz02tZrRnM /m6APXU82XlC+mklz5bUfMZqKyzF/qY7dkhZM+o16bDUs54atHGX2yMCFA4gEXTpFIQ54FDlTbwT Z1wkC2UI8JYoTUL6S9G+k4e4YWvILFLXqSsf9fWEeDMkF1V+S/JxHkwGebJVvyk2DaJHG1H6mw1u H/ctVw4fJB7G6uUYkxbXc0SrWWb+20qRrMPLups5nIU= ) ; Key ID = 50957 nationalguard.mil. 1203 IN DNSKEY ( 256 3 8 AwEAAcYfwEsQ/7yh3I9YoGeROR41zxIsY2czJlnuGhzwf9TxQ9TmW2Rvl3EpqL47trlweXrrciel wsa5F5LlVlYu9X1qH/Lx37F4O5KgjqxgTrME9UUtNWYsBi70F+f8BzRo+xGNmnRwSyEtZLnve/a+ zVOmxQrf0GMfohzQ1XSxUpYV ) ; Key ID = 5659 nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAdM7xCGBvw/R+Eamojq3140QONlTbG9w6A+PZ1fmCKAlBnNRerwb11eE9bQ+zEPHy6b1+dgG gyKas8qNVFxW7NFRb9xUQPjTimcCFfk+XDWGB8c47/wE4Oda4yRi4TdSnITxt5ykQ+ilFUf+HxEY OwFS6fsH3ZJ21dfFmeA+nf6zM7VqY34XemY6/NL6jhJ7e8THabOA3yA2F1dlzSCk835ST6r5z9fO s8H5ueBgtELchE5n2DDggTn/1upETWkb8bP65Nu+XwoYtF0nEBSwQGeg/GLTWtFDQt67XYBXgIjv BQ0oL0jgso2XzYUNSP3OSJgsW0ky97S4uEtIdilelhk= ) ; Key ID = 13469 nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 5659 nationalguard.mil. QRrl/HaZCM7dTHRN6e/g4kxpjnJ5qxsi/1888vWv5tQ6an+TEjKDRfSxXxAthgqgf9W+JYD2O1Ak PV5tB15PgWLhgvlIHMx9m21qSvtFw4EqwQx4e59/cm0NLFsoDRs8sUNneaV8EIi61KWjDQmLgj+2 m+e/XfUxKJGPKrBfskI= ) nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 18691 nationalguard.mil. c08MxOcbW1mIUaVLnTsARYTvqh1ESJ5jfvoMwIDgjjImQlAfudOiSxKprT3joeBtbtwdGj3hhe/r xvQBqoG7tKmmRaVh9U/4pAy6+NpvJyI1QCbXNFQGYIlKyTASWtVamKBVeZmzbrdFKbh2HerOmPwy 3e3KcgduvFrOKSMnj4VM4MNbU0OAT0y9wpetQhUNQhwFld6GWShVpRBbPZlrGMFGwmW5ayKpsZeT pUJ9fNATfhSakYpRm2ZASPQm9D70r+Umci7knT7IK37bHyr4ElabsrMwXqcjxvtp9z3KOqJFwQjJ v42Pg6blL9RXZWiHDFgycWodLfCckqk3Z0RYjA== ) nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 22436 nationalguard.mil. nXgNZ5pYZnFcgXvUTx6NKLPPFEZwseM1CApCsDcaJNDIw9bS5VBj1KH0jWKM1AGlEiHu0dPWoPbp pTD8SvZZ6UAisJ3kuhPoJRnmXQBg04iPgcsiQQeLqeC7TrWaIsGI6bjE5sWYymmTPUyZQsOwQFYk RkUWcYgO+somPa7UqlU6qGEzwWy12TeoZlqqUEd1X95I8PCP3f9yix5D79JNs8eSLfKvu7L0oyOM ao0wjO1SUiW7GiJU/ZiKMUuKCu2nFCAOlnccEhL++7OzOW7ru8/8m+9yCBCy/4+0BWSefOGJ4uTb C1NX+s3a/HP4pDEOHUovqcaUdgDtaQcgDQ0Vww== ) nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 50957 nationalguard.mil. ieoHkAZtRxSzvlX6xs7ijFJNY7/NH9VTezGjooGlC12gMWSnULQWdzSy4r1dzkrD8iuzfTYREK/Q LrZJM6+NnV98PVG5nzJz/q4iPhj7X9cI5MoAElNC6Ql8PigBejr2Bzd5/nX//2AI9twyzCIlQN9A KJb/V4KbtJInSRDaHS4+Q+jVeXGRiiZj/vwiTBBzGplumjvEhbVGqYu2BlqyPTZRcJd2G8vCRFZE N7lLeUdi+rhwtoKU7lNzHfZfh34s5apBuShYunn4gxlpN2IUsTaHPe6vJLvrsT1CBMRnqDerEYXD yj/0nBfYrVNVmc4Z/XeANxDojNFOWSE4VvF/GA== ) nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 57385 nationalguard.mil. jBe5sE277OBiTT7DRUQq8deI5cYYdyfPVXMzI8xtWr92A643AZ+R+4D3Dh0YmJLzSN4762ZOC8HS RAQxMIO84ao5XntqjuAr578f3t+dmQIl5KbR5IICnFGgtm6UHlHyT3RFv2rKuuHS40eXdUJDhFpW WzZiAmvZB7Hqiy3VzIM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 10 DNSKEY records for nationalguard.mil
	`nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAcJxDmkiASo6/+YJYodpnQ2Gf9NNvHfrSoFgPQMjCaB+Xk2qdRTerMJ9TVJtg+yefnc5NlXb 645auOWeOUPcGQqvT33Ckawu3DibWNAGF0JK2RDTBb2p8GKAF0oZl7kzw+e/m4xvX3K80kU3SwsB iSY+Ns3/e5nZNhklafqpmCnNl2hDn30hhwfzgIRyeLZJXORxnBtNdYNUd84/KBA3J+gdkcpmYe+n EiEce69l3/Tp+lK+WikRl5ILXafnayMCquz2hhxj/B3rrVn9LxlUAeGj7VL7WYpEiqlzpIi+2KPe /z26MuIJZWo4sMwzPj9sIX15Go/VRUAz1rgz6e0e14s= ) ; Key ID = 55712`
	`nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAapyoXIc/GwWzKURfoHIWxwsmLMTrxrWnOP7oFKnOPbf1Ydd5krBpssqW/dRt5+1n2IEqMy3 tgdm28eq0qTRWWNOKcbGytV6xFs9ck3ruvKBVwZUKdGGZygBdtziLjToSjfYH3apnXFPf2d7/I+w biMkZFqhH/azkgWHHOIZeS0mRnFroaSBxQoaII0nWGgWZJy+IheO9UjjHBfrIaL1IShYjC0TK6k/ RXz5KktjnB/XPrODCD2qETK6o4TUewAyT3P2feCBpyQBvk5hAtG1RyI5yxKTis3ntadNXVUZ+lMV m8GNjOTtOxR6H/85bPNWIIbgnytuB8heymOQKLySiis= ) ; Key ID = 22436`
	`nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAdJNLaOMlWR0gMygwKjpcQUO856MUWCvpf7Ama1fDXMJKRtwTHs0XSOTsIqQa4Y36Irt4LWs QfPlm1OwXWGhu/5nsRiIQZvSjPsYFRUbojeyMMhemghS9nD01q7Q8dYCih5vWimuNRbAFae610zv JvMWtHzHOmrfEkieCNNLuZjwV2sSEaNRsPmER7K9FRy2CPoZRmqGowlWApsi9gUgpacLWRad48d9 3nLZQKF8SJX9ElCwDtUQDHqGcVWE1vUesHWEdsHXLdkaoyq399YptRXaItNFvDOafQcECufZbY8F ggGbPNzCKX1EQdXMUnUNX2vJGLNJ+pisCIdCW/GBcvU= ) ; Key ID = 19744`
	`nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAcLxi+pk/1KcWkptkBJccNCYBRdKcrJaaG1U36ytdaebssBd/aViYy813s9Bnu3mWuXgnVCD KJ3JOC+SbnOKyljieYFHdzofXLxcxTrRVP3Bj+wLByd0iMVFD0IvNZwy6NNVWD+oPvxdKaXCrOnO ssld9fTlRacNJ+SlhHX39M0eFSQhnthNr+H62MKxmR3/7cCw8AVpAtD8sqHVgm6oN7reIpESN7G5 y+F/OCqpPq6bG8FWOZjmchg2rKTbDtn9iNn6VyOyoD00j7vEvvVHDXehQDJRwSATXsCeCX7a12Ex s17Aj/zUzHtk5QhOZtI96ICqfuBtvKGPnydoQqqn9qU= ) ; Key ID = 3407`
	`nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAdfoesONW7PSeKy3CIS9wfv4/yEoiy8w/0gOmjGIwSSmu6FWPSIOT9EkgDRPi7gBxzxbqYr2 x55uy2wrQGmzGscAqW0eNcJRU8JF4Q2eiLAKPYIAlwKYzflEJ81JevUy1i71GGa2jBINX+Fvluxz 8H/57TdNRQiEAMph8kCapIf7h2P7qtoEXeI4QRYbL/I+6m6o2lIATXlMw53AB8yG+/DmPolrfT98 SHIMw0ZO29QKi+esKgkX+EoEhKQYBil1SB99wUBm/6LTx1VkxAlajZJJSY4CGPMC62Y1fQo8w3T7 HjsLxXgFm6ZSJDh67z3P8fHm8Al1+i2FQVE8JLe7CSE= ) ; Key ID = 18691`
	`nationalguard.mil. 1203 IN DNSKEY ( 256 3 8 AwEAAbGSeCgkRzStprc5lq53y+lDAx0vi7X87VSS2FBe7H4DjWIW9hC5BA3t3EZpk4vQgmDQAq/i Ar7iU4x9FJT9q7yfrThUPog8updPqS4vohB2l3Duo/6jy7GgZuuLcdyfuT7oL8lhlVT9pIngNd8l kwkKXEvio8J0PbyiI7K8e2Vt ) ; Key ID = 36034`
	`nationalguard.mil. 1203 IN DNSKEY ( 256 3 8 AwEAAdhLQZekhXpGnZMLnnW2WPWpvmYviYuc2Ca8PqWnTPXfOa/EjT1+19L8Y4Bd/qNwX0ALY5YN XMhhgez8Qf4Bk2HbLS5Hni6YlS2iWy4k1THdh0PoRQoDjpa1Rl0Da7BeqP4nM1hjUypN1QcLe5w6 1LuyPBJoOXeSQBk3UPJd8vnZ ) ; Key ID = 57385`
	`nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAbqgN94RZM8GlYZnAT8I2u/kv/ARU9be3j16gNr1WsXySQR51TpHXiUhTBuFWeAhgj192/GJ uSMgTkCF5R1IWYauVYr4wtFdP03w5tl52UWSNMrTLlHzpiYkxSlMGhvo3+9LMsbpTpkz02tZrRnM /m6APXU82XlC+mklz5bUfMZqKyzF/qY7dkhZM+o16bDUs54atHGX2yMCFA4gEXTpFIQ54FDlTbwT Z1wkC2UI8JYoTUL6S9G+k4e4YWvILFLXqSsf9fWEeDMkF1V+S/JxHkwGebJVvyk2DaJHG1H6mw1u H/ctVw4fJB7G6uUYkxbXc0SrWWb+20qRrMPLups5nIU= ) ; Key ID = 50957`
	`nationalguard.mil. 1203 IN DNSKEY ( 256 3 8 AwEAAcYfwEsQ/7yh3I9YoGeROR41zxIsY2czJlnuGhzwf9TxQ9TmW2Rvl3EpqL47trlweXrrciel wsa5F5LlVlYu9X1qH/Lx37F4O5KgjqxgTrME9UUtNWYsBi70F+f8BzRo+xGNmnRwSyEtZLnve/a+ zVOmxQrf0GMfohzQ1XSxUpYV ) ; Key ID = 5659`
	`nationalguard.mil. 1203 IN DNSKEY ( 257 3 8 AwEAAdM7xCGBvw/R+Eamojq3140QONlTbG9w6A+PZ1fmCKAlBnNRerwb11eE9bQ+zEPHy6b1+dgG gyKas8qNVFxW7NFRb9xUQPjTimcCFfk+XDWGB8c47/wE4Oda4yRi4TdSnITxt5ykQ+ilFUf+HxEY OwFS6fsH3ZJ21dfFmeA+nf6zM7VqY34XemY6/NL6jhJ7e8THabOA3yA2F1dlzSCk835ST6r5z9fO s8H5ueBgtELchE5n2DDggTn/1upETWkb8bP65Nu+XwoYtF0nEBSwQGeg/GLTWtFDQt67XYBXgIjv BQ0oL0jgso2XzYUNSP3OSJgsW0ky97S4uEtIdilelhk= ) ; Key ID = 13469`
	DNSKEY=18691/SEP is now in the chain-of-trust
	DS=18691/SHA-256 verifies DNSKEY=18691/SEP
	DS=18691/SHA-1 verifies DNSKEY=18691/SEP
	Found 5 RRSIGs over DNSKEY RRset
	`nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 5659 nationalguard.mil. QRrl/HaZCM7dTHRN6e/g4kxpjnJ5qxsi/1888vWv5tQ6an+TEjKDRfSxXxAthgqgf9W+JYD2O1Ak PV5tB15PgWLhgvlIHMx9m21qSvtFw4EqwQx4e59/cm0NLFsoDRs8sUNneaV8EIi61KWjDQmLgj+2 m+e/XfUxKJGPKrBfskI= )`
	`nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 18691 nationalguard.mil. c08MxOcbW1mIUaVLnTsARYTvqh1ESJ5jfvoMwIDgjjImQlAfudOiSxKprT3joeBtbtwdGj3hhe/r xvQBqoG7tKmmRaVh9U/4pAy6+NpvJyI1QCbXNFQGYIlKyTASWtVamKBVeZmzbrdFKbh2HerOmPwy 3e3KcgduvFrOKSMnj4VM4MNbU0OAT0y9wpetQhUNQhwFld6GWShVpRBbPZlrGMFGwmW5ayKpsZeT pUJ9fNATfhSakYpRm2ZASPQm9D70r+Umci7knT7IK37bHyr4ElabsrMwXqcjxvtp9z3KOqJFwQjJ v42Pg6blL9RXZWiHDFgycWodLfCckqk3Z0RYjA== )`
	`nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 22436 nationalguard.mil. nXgNZ5pYZnFcgXvUTx6NKLPPFEZwseM1CApCsDcaJNDIw9bS5VBj1KH0jWKM1AGlEiHu0dPWoPbp pTD8SvZZ6UAisJ3kuhPoJRnmXQBg04iPgcsiQQeLqeC7TrWaIsGI6bjE5sWYymmTPUyZQsOwQFYk RkUWcYgO+somPa7UqlU6qGEzwWy12TeoZlqqUEd1X95I8PCP3f9yix5D79JNs8eSLfKvu7L0oyOM ao0wjO1SUiW7GiJU/ZiKMUuKCu2nFCAOlnccEhL++7OzOW7ru8/8m+9yCBCy/4+0BWSefOGJ4uTb C1NX+s3a/HP4pDEOHUovqcaUdgDtaQcgDQ0Vww== )`
	`nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 50957 nationalguard.mil. ieoHkAZtRxSzvlX6xs7ijFJNY7/NH9VTezGjooGlC12gMWSnULQWdzSy4r1dzkrD8iuzfTYREK/Q LrZJM6+NnV98PVG5nzJz/q4iPhj7X9cI5MoAElNC6Ql8PigBejr2Bzd5/nX//2AI9twyzCIlQN9A KJb/V4KbtJInSRDaHS4+Q+jVeXGRiiZj/vwiTBBzGplumjvEhbVGqYu2BlqyPTZRcJd2G8vCRFZE N7lLeUdi+rhwtoKU7lNzHfZfh34s5apBuShYunn4gxlpN2IUsTaHPe6vJLvrsT1CBMRnqDerEYXD yj/0nBfYrVNVmc4Z/XeANxDojNFOWSE4VvF/GA== )`
	`nationalguard.mil. 1203 IN RRSIG ( DNSKEY 8 2 3600 20230928160655 20230921150655 57385 nationalguard.mil. jBe5sE277OBiTT7DRUQq8deI5cYYdyfPVXMzI8xtWr92A643AZ+R+4D3Dh0YmJLzSN4762ZOC8HS RAQxMIO84ao5XntqjuAr578f3t+dmQIl5KbR5IICnFGgtm6UHlHyT3RFv2rKuuHS40eXdUJDhFpW WzZiAmvZB7Hqiy3VzIM= )`
	RRSIG=5659 and DNSKEY=5659 verifies the DNSKEY RRset
	RRSIG=18691 and DNSKEY=18691/SEP verifies the DNSKEY RRset
	RRSIG=22436 and DNSKEY=22436/SEP verifies the DNSKEY RRset
	RRSIG=50957 and DNSKEY=50957/SEP verifies the DNSKEY RRset
	RRSIG=57385 and DNSKEY=57385 verifies the DNSKEY RRset
	DNSKEY=55712/SEP is now in the chain-of-trust
	DNSKEY=22436/SEP is now in the chain-of-trust
	DNSKEY=19744/SEP is now in the chain-of-trust
	DNSKEY=3407/SEP is now in the chain-of-trust
	DNSKEY=36034 is now in the chain-of-trust
	DNSKEY=57385 is now in the chain-of-trust
	DNSKEY=50957/SEP is now in the chain-of-trust
	DNSKEY=5659 is now in the chain-of-trust
	DNSKEY=13469/SEP is now in the chain-of-trust
	Query to KAUCHER.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.208.113
	;; Response received from 155.7.208.113 (901 octets) ;; HEADER SECTION ;; id = 29225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 186 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 186 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 186 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 186 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 186 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 186 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	KAUCHER.DMA.MIL is authoritative for nationalguard.mil
	Found RRSIG signed by nationalguard.mil zone
	Query to BEAUTY.DMA.MIL for nationalguard.mil/SOA
	Received 459 bytes from 155.7.145.112
	;; Response received from 155.7.145.112 (459 octets) ;; HEADER SECTION ;; id = 62418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN SOA ;; ANSWER SECTION (3 records) nationalguard.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to BEAST.DMA.MIL for nationalguard.mil/SOA
	Received 459 bytes from 155.7.145.113
	;; Response received from 155.7.145.113 (459 octets) ;; HEADER SECTION ;; id = 1747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN SOA ;; ANSWER SECTION (3 records) nationalguard.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to RUSSELL.DMA.MIL for nationalguard.mil/SOA
	Received 459 bytes from 155.7.208.112
	;; Response received from 155.7.208.112 (459 octets) ;; HEADER SECTION ;; id = 33703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN SOA ;; ANSWER SECTION (3 records) nationalguard.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to KAUCHER.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.208.113
	;; Response received from 155.7.208.113 (901 octets) ;; HEADER SECTION ;; id = 49142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 185 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 185 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 185 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 185 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 185 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 185 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nationalguard.mil. 186 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= )`
	`nationalguard.mil. 186 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= )`
	RRSIG=5659 and DNSKEY=5659 verifies the SOA RRset
	RRSIG=57385 and DNSKEY=57385 verifies the SOA RRset

nationalguard.mil

	Query to BEAST.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.145.113
	;; Response received from 155.7.145.113 (901 octets) ;; HEADER SECTION ;; id = 19817 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BEAST.DMA.MIL is authoritative for nationalguard.mil
	Found RRSIG signed by nationalguard.mil zone
	Query to BEAST.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.145.113
	;; Response received from 155.7.145.113 (901 octets) ;; HEADER SECTION ;; id = 18821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= )`
	`nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= )`
	RRSIG=5659 and DNSKEY=5659 verifies the SOA RRset
	RRSIG=57385 and DNSKEY=57385 verifies the SOA RRset

nationalguard.mil

	Query to BEAUTY.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.145.112
	;; Response received from 155.7.145.112 (901 octets) ;; HEADER SECTION ;; id = 51373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 300 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BEAUTY.DMA.MIL is authoritative for nationalguard.mil
	Found RRSIG signed by nationalguard.mil zone
	Query to BEAUTY.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.145.112
	;; Response received from 155.7.145.112 (901 octets) ;; HEADER SECTION ;; id = 34165 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 299 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= )`
	`nationalguard.mil. 300 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= )`
	RRSIG=5659 and DNSKEY=5659 verifies the SOA RRset
	RRSIG=57385 and DNSKEY=57385 verifies the SOA RRset

nationalguard.mil

	Query to RUSSELL.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.208.112
	;; Response received from 155.7.208.112 (901 octets) ;; HEADER SECTION ;; id = 7020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 299 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	RUSSELL.DMA.MIL is authoritative for nationalguard.mil
	Found RRSIG signed by nationalguard.mil zone
	Query to RUSSELL.DMA.MIL for nationalguard.mil/A
	Received 901 bytes from 155.7.208.112
	;; Response received from 155.7.208.112 (901 octets) ;; HEADER SECTION ;; id = 40101 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nationalguard.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nationalguard.mil. 299 IN SOA ( shepherd.dma.mil. hostmaster. 1322 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= ) nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN NSEC3 ( 1 0 50 314a32ab0ee61dbd id5ej8vee2ap57scrl13po08pvs9e0la NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 5659 nationalguard.mil. ncz1ReZyCmNjpT9T+99LxTo7dNbgeOPZiRD7Gd4pBX8bVY1aQoT/dfIkU5347Yg9o/wmP1IRVTfC q74s73GU9uCmh8tHuJcPXsgODlCLHN2Arq9PdV/FQMnboSeOaWSvaOTiKjbitDxUfkxI7wYQBGfo z4C31iFicNCzUZi2VzQ= ) eb0kg7rgmroak4n6b5rh415it0fjbqgv.nationalguard.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230930063029 20230920053029 57385 nationalguard.mil. WW5rwLrfWqmSbBB2LkDBzlFKToL9sg4cUeBEHYN4YsYptZLm2FW4pXZ34Xt5mG1NOD7WknUKpxvP Xr24a7DMtvgnYTt0ksDSvx2msnen61aLhCykY4LVFBfYtDdjLjNGKfMFOFXz7cpdGikjcJDEnx2J fPXEWz4/cYtyYpd5fhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 5659 nationalguard.mil. iRAywbTmefS3HlcZeqHFqjHXxCwZIbL1y0zbpL4LLYilua06xDO2da73Uof+DXvEH5MPyDLXmulu 7Umi/LtQCQDIcGZYsjR6UjN3wOViH573/sjCpvfb7PoZjtEpB6MCVdF39/AF50MkuE/2iZE6OzsM czDyW+SdMmTQvhG1gBE= )`
	`nationalguard.mil. 299 IN RRSIG ( SOA 8 2 300 20231001160655 20230921150655 57385 nationalguard.mil. zznwqTHUr3zsCi++fg2JxPvt2zulifEvqCbr9DWnT1PUMXo8Pxt+LHFdm8ks4T8wb2LEQPMs+rUE qbO6Ycm8a5fdV91++JXT2R7xbjP4Z5o6u7ZzSOceY4lV4Wd4Ok9U7shNQm1LRqzEnl+p1cWqmNOv /C6Nczw7tzOvty/LAB8= )`
	RRSIG=5659 and DNSKEY=5659 verifies the SOA RRset
	RRSIG=57385 and DNSKEY=57385 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nationalguard.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: