DNSSEC Analyzer - navy.mil

Domain Name:

Time: 2023-09-24 17:27:47 UTC, NTP stratum 4

Analyzing DNSSEC problems for navy.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 23910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to m.root-servers.net for navy.mil/A
	Received 806 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (806 octets) ;; HEADER SECTION ;; id = 14975 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.root-servers.net for mil/DNSKEY
	Received 801 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (801 octets) ;; HEADER SECTION ;; id = 8205 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to i.root-servers.net for mil/DS
	Received 415 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (415 octets) ;; HEADER SECTION ;; id = 17438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=62470/SHA-256 has algorithm RSASHA256
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=62470/SHA-256 is now in the chain-of-trust
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (1628 octets) ;; HEADER SECTION ;; id = 3508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to pac1.nipr.mil for navy.mil/A
	Received 648 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (648 octets) ;; HEADER SECTION ;; id = 49360 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NAVY.MIL. 21600 IN NS NS.JTFGNO.MIL. NAVY.MIL. 21600 IN NS UPDCIFTR01.CSD.DISA.MIL. NAVY.MIL. 21600 IN NS NS1.CSD.DISA.MIL. NAVY.MIL. 21600 IN NS NS.CYBERCOM.MIL. NAVY.MIL. 21600 IN NS UFORIFTR01.CSD.DISA.MIL. NAVY.MIL. 10800 IN DS ( 37189 8 2 4cbd3634e3d73f33abdc3b1f7f19ce8877274dbadfb98a372e52f0370e36a4ca ) NAVY.MIL. 10800 IN DS 37189 8 1 c0ceeeb2265daae90cd83836d18986c23b724275 NAVY.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mV4FhiZdiJlqvbpH9kXF0zaBOhVKtqCY6DuO7ooaKud0NpdHBBWpA92Bw+LXW/KQkDLN491szA3i ROZijTfcuUcFSFYKvBPm6aJEVuMsfxXVn9GRQemiX+tcZoXE5ujh7omC19C0cWzVjdtwqiw4RSld Lw7nxyvev58H5JrFppM= ) ;; ADDITIONAL SECTION (11 records) UPDCIFTR01.CSD.DISA.MIL. 21600 IN A 215.65.126.180 UFORIFTR01.CSD.DISA.MIL. 21600 IN A 214.23.245.4 NS1.CSD.DISA.MIL. 21600 IN A 152.229.110.235 NS.CYBERCOM.MIL. 21600 IN A 131.77.60.235 NS.JTFGNO.MIL. 21600 IN A 214.3.125.231 UPDCIFTR01.CSD.DISA.MIL. 21600 IN AAAA 2608:4122:0:1012:1001:9012:1400:11 UFORIFTR01.CSD.DISA.MIL. 21600 IN AAAA 2608:c182::1001:9012:1600:11 NS1.CSD.DISA.MIL. 21600 IN AAAA 2608:125:0:1811:1001:9012:f00:21 NS.CYBERCOM.MIL. 21600 IN AAAA 2608:102:0:182d:1001:9012:c00:21 NS.JTFGNO.MIL. 21600 IN AAAA 2608:145:0:180b:1001:9012:d00:21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to eur1.nipr.mil for navy.mil/DNSKEY
	Received 648 bytes from 199.252.154.234
	;; Response received from 199.252.154.234 (648 octets) ;; HEADER SECTION ;; id = 13864 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NAVY.MIL. 21600 IN NS UFORIFTR01.CSD.DISA.MIL. NAVY.MIL. 21600 IN NS NS1.CSD.DISA.MIL. NAVY.MIL. 21600 IN NS NS.CYBERCOM.MIL. NAVY.MIL. 21600 IN NS UPDCIFTR01.CSD.DISA.MIL. NAVY.MIL. 21600 IN NS NS.JTFGNO.MIL. NAVY.MIL. 10800 IN DS ( 37189 8 2 4cbd3634e3d73f33abdc3b1f7f19ce8877274dbadfb98a372e52f0370e36a4ca ) NAVY.MIL. 10800 IN DS 37189 8 1 c0ceeeb2265daae90cd83836d18986c23b724275 NAVY.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mV4FhiZdiJlqvbpH9kXF0zaBOhVKtqCY6DuO7ooaKud0NpdHBBWpA92Bw+LXW/KQkDLN491szA3i ROZijTfcuUcFSFYKvBPm6aJEVuMsfxXVn9GRQemiX+tcZoXE5ujh7omC19C0cWzVjdtwqiw4RSld Lw7nxyvev58H5JrFppM= ) ;; ADDITIONAL SECTION (11 records) UPDCIFTR01.CSD.DISA.MIL. 21600 IN A 215.65.126.180 UFORIFTR01.CSD.DISA.MIL. 21600 IN A 214.23.245.4 NS1.CSD.DISA.MIL. 21600 IN A 152.229.110.235 NS.CYBERCOM.MIL. 21600 IN A 131.77.60.235 NS.JTFGNO.MIL. 21600 IN A 214.3.125.231 UPDCIFTR01.CSD.DISA.MIL. 21600 IN AAAA 2608:4122:0:1012:1001:9012:1400:11 UFORIFTR01.CSD.DISA.MIL. 21600 IN AAAA 2608:c182::1001:9012:1600:11 NS1.CSD.DISA.MIL. 21600 IN AAAA 2608:125:0:1811:1001:9012:f00:21 NS.CYBERCOM.MIL. 21600 IN AAAA 2608:102:0:182d:1001:9012:c00:21 NS.JTFGNO.MIL. 21600 IN AAAA 2608:145:0:180b:1001:9012:d00:21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone navy.mil

navy.mil

	Checking DS between mil and navy.mil
	Query to eur1.nipr.mil for navy.mil/DS
	Received 292 bytes from 199.252.154.234
	;; Response received from 199.252.154.234 (292 octets) ;; HEADER SECTION ;; id = 21898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN DS ;; ANSWER SECTION (3 records) NAVY.MIL. 10800 IN DS 37189 8 1 c0ceeeb2265daae90cd83836d18986c23b724275 NAVY.MIL. 10800 IN DS ( 37189 8 2 4cbd3634e3d73f33abdc3b1f7f19ce8877274dbadfb98a372e52f0370e36a4ca ) NAVY.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mV4FhiZdiJlqvbpH9kXF0zaBOhVKtqCY6DuO7ooaKud0NpdHBBWpA92Bw+LXW/KQkDLN491szA3i ROZijTfcuUcFSFYKvBPm6aJEVuMsfxXVn9GRQemiX+tcZoXE5ujh7omC19C0cWzVjdtwqiw4RSld Lw7nxyvev58H5JrFppM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for navy.mil in the mil zone
	DS=37189/SHA-1 has algorithm RSASHA256
	DS=37189/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NAVY.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mV4FhiZdiJlqvbpH9kXF0zaBOhVKtqCY6DuO7ooaKud0NpdHBBWpA92Bw+LXW/KQkDLN491szA3i ROZijTfcuUcFSFYKvBPm6aJEVuMsfxXVn9GRQemiX+tcZoXE5ujh7omC19C0cWzVjdtwqiw4RSld Lw7nxyvev58H5JrFppM= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=37189/SHA-1 is now in the chain-of-trust
	`NAVY.MIL. 10800 IN DS 37189 8 1 c0ceeeb2265daae90cd83836d18986c23b724275`
	`NAVY.MIL. 10800 IN DS ( 37189 8 2 4cbd3634e3d73f33abdc3b1f7f19ce8877274dbadfb98a372e52f0370e36a4ca )`
	Query to NS.CYBERCOM.MIL for navy.mil/DNSKEY
	Received 1497 bytes from 131.77.60.235
	;; Response received from 131.77.60.235 (1497 octets) ;; HEADER SECTION ;; id = 31345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN DNSKEY ;; ANSWER SECTION (6 records) navy.mil. 2148 IN DNSKEY ( 256 3 8 AwEAAcPOhqX131hQnop0nLc/y/wcOKVjTv/fBhIEGatlEkpEIFM2v7gMFH546rfHvBdPN0D+/f6B 6XHYecVxtC2VKO4tqz8ojP+se/QJdfRdoknI/ygoGb431p71FyUVEIvFi5xuQMxZUFpXRO2JnAor +3ouwxgpXaqCfPt1phaosarZ ) ; Key ID = 47718 navy.mil. 2148 IN DNSKEY ( 257 3 8 AwEAAbnSvGTeZItc52LHjMgEXCsY/JkjfPQENH35kXiUzIGsOGKuPHyclZwa6l0g0SVneiQg3tIR MDTWqCt/NspuojbjTPUxzjkSI1CKKmndLOVBZk/EQD9vNyEDMl9LyGPSJ7yhPEor15vHI/O4mMRo SsAmrTVj5ajqAUYP4MVKkoh1AK81ohFlTPVbepY2eBLc4M8Nz2uCsn3P/8NCBUB27TSlqHotakXA wMZFHZElbYveP8q9ohmS+/DD1EVq4QYNBE7fpAybTaHQRX3FSSnlzQsuwkbqwKwqHwsqL0RjN4Lq WZocdLgxMSId4HrP/uv59YJ+6aD1mGEfSVItIhaJlt0= ) ; Key ID = 24196 navy.mil. 2148 IN DNSKEY ( 257 3 8 AwEAAce+M5qxxcFJZ4G0ygICH5U+cujDzS2xnIueSM1zww/rINexUOpJL88L37f8hGqZmb3tqqlu 8mQLiCIeGI9DZsomXjRlkOhlfQew6K3opKZweiR3Bh2c1cpBiY31MUleO+0dKE8zYaVZJuxkObbj CIx0Yh0M1dd5Sd/J86KvNVifc5GLsoUxnBh0T15KM7HB1A+GZzKEBnYpJghd9uBNGn6mR4nVDqQI wWrea02buoAHgghIHpdPVTNlT6Ypp3ib4lI86SE8GHJ1l81n+AwGXl4umbgNF5bbp7M7RDX1lvtb SxmmCmziFt3E/lgcX1V0BRzuli3dRsSp7lzZdYLT/lk= ) ; Key ID = 37189 navy.mil. 2148 IN RRSIG ( DNSKEY 8 2 7200 20231022142147 20230922142147 24196 navy.mil. e1Hh/haLTKUgbY6Fk+TOXSUwq21fyTJPdndVd9ASjA7VgB3FhgZifZkQYHYjaL9D4xL+1AHXkNZl mvi/CvU+uWYNaA60dMOrl2EmLt2tFsIOYD2ZFE0m3k5LeRGgAdArfySYtMT4acb2BmhnqLgdR+7I 38jGgWSw4BC6RYZ03elUWSTXwwgjsxLtBDnpVADAGJowAkrrzoybOksTGZmlQa+ycfEtyLbjgGDD fqPySasMo41CVbYGDzLdNHOpEyn/K5vHLYdoZkL6ABrWuFcClVITtHnXP7GCy5uud8nhMpDT4P/0 AdaaXRXowBoYdUQlk4gOYNomvIvnNkqyw8jvaQ== ) navy.mil. 2148 IN RRSIG ( DNSKEY 8 2 7200 20231022142147 20230922142147 37189 navy.mil. FXXKpVxPO+Y9KOohzrpBm2+/9UaAJ8yzIbkr43AwWQ3kPdDfiTPzIV3hMMwYwO7V5FcInhVCNP0c AGhy0B91yt8r3CMJkw22Lu8YOL0Yr/9pBzuJkWEeMSSrNHBuKeSIVCBswvqIlEcVRxDvaszRsCLJ y2Z9yTN36x4tYeVtl0rFHYscSNdr0cIPL0Jl+GTR54fLUUmcS7B/KC3djb7EMMUKXHXI14036c9T 5lHdsAzP8Rz7yEBBUO8UMs1aT3LHtMglvBkVSnUfJQezfk9EYQZS4kcf4vqXkHD+e/EkYfr2wfcx WbYKEbI6YIkta46jsE2tGsaNi+3yC8TYJ0fyZw== ) navy.mil. 2148 IN RRSIG ( DNSKEY 8 2 7200 20231022142147 20230922142147 47718 navy.mil. vdQNLopVLqPKjcqMz9NmZQ4yDd3fCxjzSJDIAxCtwTsqktT+BkjedmAweSN+06ltpBtDjwXrDIYn uVLD9utc6N2cEuCYXvrd+YWcC98nG/WplacKDVIy83ccCgCGSqL5avpqpWcm01Bqb0jFlHDF61yv PRkOOAd+BljsJQs4+8g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for navy.mil
	`navy.mil. 2148 IN DNSKEY ( 256 3 8 AwEAAcPOhqX131hQnop0nLc/y/wcOKVjTv/fBhIEGatlEkpEIFM2v7gMFH546rfHvBdPN0D+/f6B 6XHYecVxtC2VKO4tqz8ojP+se/QJdfRdoknI/ygoGb431p71FyUVEIvFi5xuQMxZUFpXRO2JnAor +3ouwxgpXaqCfPt1phaosarZ ) ; Key ID = 47718`
	`navy.mil. 2148 IN DNSKEY ( 257 3 8 AwEAAbnSvGTeZItc52LHjMgEXCsY/JkjfPQENH35kXiUzIGsOGKuPHyclZwa6l0g0SVneiQg3tIR MDTWqCt/NspuojbjTPUxzjkSI1CKKmndLOVBZk/EQD9vNyEDMl9LyGPSJ7yhPEor15vHI/O4mMRo SsAmrTVj5ajqAUYP4MVKkoh1AK81ohFlTPVbepY2eBLc4M8Nz2uCsn3P/8NCBUB27TSlqHotakXA wMZFHZElbYveP8q9ohmS+/DD1EVq4QYNBE7fpAybTaHQRX3FSSnlzQsuwkbqwKwqHwsqL0RjN4Lq WZocdLgxMSId4HrP/uv59YJ+6aD1mGEfSVItIhaJlt0= ) ; Key ID = 24196`
	`navy.mil. 2148 IN DNSKEY ( 257 3 8 AwEAAce+M5qxxcFJZ4G0ygICH5U+cujDzS2xnIueSM1zww/rINexUOpJL88L37f8hGqZmb3tqqlu 8mQLiCIeGI9DZsomXjRlkOhlfQew6K3opKZweiR3Bh2c1cpBiY31MUleO+0dKE8zYaVZJuxkObbj CIx0Yh0M1dd5Sd/J86KvNVifc5GLsoUxnBh0T15KM7HB1A+GZzKEBnYpJghd9uBNGn6mR4nVDqQI wWrea02buoAHgghIHpdPVTNlT6Ypp3ib4lI86SE8GHJ1l81n+AwGXl4umbgNF5bbp7M7RDX1lvtb SxmmCmziFt3E/lgcX1V0BRzuli3dRsSp7lzZdYLT/lk= ) ; Key ID = 37189`
	DNSKEY=37189/SEP is now in the chain-of-trust
	DS=37189/SHA-1 verifies DNSKEY=37189/SEP
	DS=37189/SHA-256 verifies DNSKEY=37189/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`navy.mil. 2148 IN RRSIG ( DNSKEY 8 2 7200 20231022142147 20230922142147 24196 navy.mil. e1Hh/haLTKUgbY6Fk+TOXSUwq21fyTJPdndVd9ASjA7VgB3FhgZifZkQYHYjaL9D4xL+1AHXkNZl mvi/CvU+uWYNaA60dMOrl2EmLt2tFsIOYD2ZFE0m3k5LeRGgAdArfySYtMT4acb2BmhnqLgdR+7I 38jGgWSw4BC6RYZ03elUWSTXwwgjsxLtBDnpVADAGJowAkrrzoybOksTGZmlQa+ycfEtyLbjgGDD fqPySasMo41CVbYGDzLdNHOpEyn/K5vHLYdoZkL6ABrWuFcClVITtHnXP7GCy5uud8nhMpDT4P/0 AdaaXRXowBoYdUQlk4gOYNomvIvnNkqyw8jvaQ== )`
	`navy.mil. 2148 IN RRSIG ( DNSKEY 8 2 7200 20231022142147 20230922142147 37189 navy.mil. FXXKpVxPO+Y9KOohzrpBm2+/9UaAJ8yzIbkr43AwWQ3kPdDfiTPzIV3hMMwYwO7V5FcInhVCNP0c AGhy0B91yt8r3CMJkw22Lu8YOL0Yr/9pBzuJkWEeMSSrNHBuKeSIVCBswvqIlEcVRxDvaszRsCLJ y2Z9yTN36x4tYeVtl0rFHYscSNdr0cIPL0Jl+GTR54fLUUmcS7B/KC3djb7EMMUKXHXI14036c9T 5lHdsAzP8Rz7yEBBUO8UMs1aT3LHtMglvBkVSnUfJQezfk9EYQZS4kcf4vqXkHD+e/EkYfr2wfcx WbYKEbI6YIkta46jsE2tGsaNi+3yC8TYJ0fyZw== )`
	`navy.mil. 2148 IN RRSIG ( DNSKEY 8 2 7200 20231022142147 20230922142147 47718 navy.mil. vdQNLopVLqPKjcqMz9NmZQ4yDd3fCxjzSJDIAxCtwTsqktT+BkjedmAweSN+06ltpBtDjwXrDIYn uVLD9utc6N2cEuCYXvrd+YWcC98nG/WplacKDVIy83ccCgCGSqL5avpqpWcm01Bqb0jFlHDF61yv PRkOOAd+BljsJQs4+8g= )`
	RRSIG=24196 and DNSKEY=24196/SEP verifies the DNSKEY RRset
	RRSIG=37189 and DNSKEY=37189/SEP verifies the DNSKEY RRset
	RRSIG=47718 and DNSKEY=47718 verifies the DNSKEY RRset
	DNSKEY=47718 is now in the chain-of-trust
	DNSKEY=24196/SEP is now in the chain-of-trust
	Query to UPDCIFTR01.CSD.DISA.MIL for navy.mil/A
	Received 520 bytes from 215.65.126.180
	;; Response received from 215.65.126.180 (520 octets) ;; HEADER SECTION ;; id = 58738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3599 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3599 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	UPDCIFTR01.CSD.DISA.MIL is authoritative for navy.mil
	Found RRSIG signed by navy.mil zone
	Query to NS1.CSD.DISA.MIL for navy.mil/SOA
	Received 265 bytes from 152.229.110.235
	;; Response received from 152.229.110.235 (265 octets) ;; HEADER SECTION ;; id = 14873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN SOA ;; ANSWER SECTION (2 records) navy.mil. 2695 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 2695 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to UFORIFTR01.CSD.DISA.MIL for navy.mil/SOA
	Received 265 bytes from 214.23.245.4
	;; Response received from 214.23.245.4 (265 octets) ;; HEADER SECTION ;; id = 19643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN SOA ;; ANSWER SECTION (2 records) navy.mil. 2218 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 2218 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS.JTFGNO.MIL for navy.mil/SOA
	Received 265 bytes from 214.3.125.231
	;; Response received from 214.3.125.231 (265 octets) ;; HEADER SECTION ;; id = 35611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN SOA ;; ANSWER SECTION (2 records) navy.mil. 5689 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 5689 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS.CYBERCOM.MIL for navy.mil/SOA
	Received 265 bytes from 131.77.60.235
	;; Response received from 131.77.60.235 (265 octets) ;; HEADER SECTION ;; id = 6525 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN SOA ;; ANSWER SECTION (2 records) navy.mil. 2695 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 2695 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to UPDCIFTR01.CSD.DISA.MIL for navy.mil/A
	Received 520 bytes from 215.65.126.180
	;; Response received from 215.65.126.180 (520 octets) ;; HEADER SECTION ;; id = 60722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3598 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3598 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= )`
	RRSIG=47718 and DNSKEY=47718 verifies the SOA RRset

navy.mil

	Query to NS.JTFGNO.MIL for navy.mil/A
	Received 520 bytes from 214.3.125.231
	;; Response received from 214.3.125.231 (520 octets) ;; HEADER SECTION ;; id = 12450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS.JTFGNO.MIL is authoritative for navy.mil
	Found RRSIG signed by navy.mil zone
	Query to NS.JTFGNO.MIL for navy.mil/A
	Received 520 bytes from 214.3.125.231
	;; Response received from 214.3.125.231 (520 octets) ;; HEADER SECTION ;; id = 16587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= )`
	RRSIG=47718 and DNSKEY=47718 verifies the SOA RRset

navy.mil

	Query to UFORIFTR01.CSD.DISA.MIL for navy.mil/A
	Received 352 bytes from 214.23.245.4
	;; Response received from 214.23.245.4 (352 octets) ;; HEADER SECTION ;; id = 28014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3598 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3598 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	UFORIFTR01.CSD.DISA.MIL is authoritative for navy.mil
	Query to UFORIFTR01.CSD.DISA.MIL for navy.mil/A
	Received 520 bytes from 214.23.245.4
	;; Response received from 214.23.245.4 (520 octets) ;; HEADER SECTION ;; id = 46976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 3600 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 3600 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	No RRSIGs found

navy.mil

	Query to NS1.CSD.DISA.MIL for navy.mil/A
	Received 520 bytes from 152.229.110.235
	;; Response received from 152.229.110.235 (520 octets) ;; HEADER SECTION ;; id = 18666 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS1.CSD.DISA.MIL is authoritative for navy.mil
	Found RRSIG signed by navy.mil zone
	Query to NS1.CSD.DISA.MIL for navy.mil/A
	Received 352 bytes from 152.229.110.235
	;; Response received from 152.229.110.235 (352 octets) ;; HEADER SECTION ;; id = 65471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= )`
	RRSIG=47718 and DNSKEY=47718 verifies the SOA RRset

navy.mil

	Query to NS.CYBERCOM.MIL for navy.mil/A
	Received 520 bytes from 131.77.60.235
	;; Response received from 131.77.60.235 (520 octets) ;; HEADER SECTION ;; id = 18049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS.CYBERCOM.MIL is authoritative for navy.mil
	Found RRSIG signed by navy.mil zone
	Query to NS.CYBERCOM.MIL for navy.mil/A
	Received 520 bytes from 131.77.60.235
	;; Response received from 131.77.60.235 (520 octets) ;; HEADER SECTION ;; id = 51890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; navy.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) navy.mil. 0 IN SOA ( ns1.csd.disa.mil. hostmaster.navy.mil. 2023092200 ;serial 7200 ;refresh 900 ;retry 2419200 ;expire 3600 ;minimum ) navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN NSEC3 ( 1 0 10 32313032434343 2upmqmgu4b0qb3tcbcc2oaauj7e575d5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 2T48IANV2T34F9DI1GGB1HA3NCN77ES6.navy.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20231022142147 20230922142147 47718 navy.mil. bU6qtA8a4Py5TyJwoJXu7vTqt1c98Huk6BPzxa9b9+3Vv0ImyRYD/QUZoOlvgIx9a8cfKW9Fe+Xy HZzre/CqJ2LhdgVBIxICjXJZ0egfgop5TEIKEDNIPkS3KgDk4PMKIh1xWzYrcVAiro/e3MCzjElc JU1BqNNefHsLScQTyNE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`navy.mil. 0 IN RRSIG ( SOA 8 2 7200 20231022142147 20230922142147 47718 navy.mil. LEpPe2hvOC5qFbqJBCNTuU9AZuabDfYYugr8Q6dqwoY/u97fFe6wMhD1JIUAeb7IyyoFcavJd6p6 0dHZs7D4JXIgW1c6k9xPz/HalN3N73VP9emtACFYe7DhgXcPl+OQF/C8FYoEj0xBcVkIyZTFhQwW t2BOmlkOs40No/Q/+5o= )`
	RRSIG=47718 and DNSKEY=47718 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test navy.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: