DNSSEC Analyzer - nicbr.mil

Domain Name:

Time: 2023-09-24 18:13:13 UTC, NTP stratum 4

Analyzing DNSSEC problems for nicbr.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1139 octets) ;; HEADER SECTION ;; id = 30236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to m.root-servers.net for nicbr.mil/A
	Received 807 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (807 octets) ;; HEADER SECTION ;; id = 19256 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to k.root-servers.net for mil/DNSKEY
	Received 798 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (798 octets) ;; HEADER SECTION ;; id = 64243 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to e.root-servers.net for mil/DS
	Received 415 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (415 octets) ;; HEADER SECTION ;; id = 33665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for mil in the . zone
	DS=62470/SHA-256 has algorithm RSASHA256
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=62470/SHA-256 is now in the chain-of-trust
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to pac1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (1628 octets) ;; HEADER SECTION ;; id = 7346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to con1.nipr.mil for nicbr.mil/A
	Received 407 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (407 octets) ;; HEADER SECTION ;; id = 24940 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NICBR.MIL. 21600 IN NS NS03.ARMY.MIL. NICBR.MIL. 21600 IN NS NS01.ARMY.MIL. NICBR.MIL. 21600 IN NS NS02.ARMY.MIL. NICBR.MIL. 10800 IN DS 11116 8 1 e6295014de2b65a7064301d2bfcdf1ab635b4263 NICBR.MIL. 10800 IN DS ( 11116 8 2 67cd9e8002531ad0e37fa1c4dabff2853e904845be4945fa7866146670fd8428 ) NICBR.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. bcLgHZfg3btNVTLLWoequnXIp/CHLJ+EsTTO4bJdxONw5IakQSax64x5Cex5mWjvHZ24I1ZP7vNZ c5kDAIfCcTwHlwILuUcee/gl+NIFOU0VPUfosoEp8Lq7dsSrja+bzsS6qb2HFDkIPW8+3Ap7cEPQ 0Mkc2rQn3hTEgMJfudg= ) ;; ADDITIONAL SECTION (4 records) NS03.ARMY.MIL. 21600 IN A 130.114.200.6 NS02.ARMY.MIL. 21600 IN A 192.82.113.7 NS01.ARMY.MIL. 21600 IN A 140.153.43.44 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pac2.nipr.mil for nicbr.mil/DNSKEY
	Received 407 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (407 octets) ;; HEADER SECTION ;; id = 65195 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NICBR.MIL. 21600 IN NS NS03.ARMY.MIL. NICBR.MIL. 21600 IN NS NS01.ARMY.MIL. NICBR.MIL. 21600 IN NS NS02.ARMY.MIL. NICBR.MIL. 10800 IN DS ( 11116 8 2 67cd9e8002531ad0e37fa1c4dabff2853e904845be4945fa7866146670fd8428 ) NICBR.MIL. 10800 IN DS 11116 8 1 e6295014de2b65a7064301d2bfcdf1ab635b4263 NICBR.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. bcLgHZfg3btNVTLLWoequnXIp/CHLJ+EsTTO4bJdxONw5IakQSax64x5Cex5mWjvHZ24I1ZP7vNZ c5kDAIfCcTwHlwILuUcee/gl+NIFOU0VPUfosoEp8Lq7dsSrja+bzsS6qb2HFDkIPW8+3Ap7cEPQ 0Mkc2rQn3hTEgMJfudg= ) ;; ADDITIONAL SECTION (4 records) NS03.ARMY.MIL. 21600 IN A 130.114.200.6 NS02.ARMY.MIL. 21600 IN A 192.82.113.7 NS01.ARMY.MIL. 21600 IN A 140.153.43.44 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nicbr.mil

nicbr.mil

	Checking DS between mil and nicbr.mil
	Query to pac1.nipr.mil for nicbr.mil/DS
	Received 294 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (294 octets) ;; HEADER SECTION ;; id = 26996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN DS ;; ANSWER SECTION (3 records) NICBR.MIL. 10800 IN DS 11116 8 1 e6295014de2b65a7064301d2bfcdf1ab635b4263 NICBR.MIL. 10800 IN DS ( 11116 8 2 67cd9e8002531ad0e37fa1c4dabff2853e904845be4945fa7866146670fd8428 ) NICBR.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. bcLgHZfg3btNVTLLWoequnXIp/CHLJ+EsTTO4bJdxONw5IakQSax64x5Cex5mWjvHZ24I1ZP7vNZ c5kDAIfCcTwHlwILuUcee/gl+NIFOU0VPUfosoEp8Lq7dsSrja+bzsS6qb2HFDkIPW8+3Ap7cEPQ 0Mkc2rQn3hTEgMJfudg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nicbr.mil in the mil zone
	DS=11116/SHA-1 has algorithm RSASHA256
	DS=11116/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NICBR.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. bcLgHZfg3btNVTLLWoequnXIp/CHLJ+EsTTO4bJdxONw5IakQSax64x5Cex5mWjvHZ24I1ZP7vNZ c5kDAIfCcTwHlwILuUcee/gl+NIFOU0VPUfosoEp8Lq7dsSrja+bzsS6qb2HFDkIPW8+3Ap7cEPQ 0Mkc2rQn3hTEgMJfudg= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=11116/SHA-1 is now in the chain-of-trust
	`NICBR.MIL. 10800 IN DS 11116 8 1 e6295014de2b65a7064301d2bfcdf1ab635b4263`
	`NICBR.MIL. 10800 IN DS ( 11116 8 2 67cd9e8002531ad0e37fa1c4dabff2853e904845be4945fa7866146670fd8428 )`
	Query to NS02.ARMY.MIL for nicbr.mil/DNSKEY
	Received 2309 bytes from 192.82.113.7
	;; Response received from 192.82.113.7 (2309 octets) ;; HEADER SECTION ;; id = 17069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN DNSKEY ;; ANSWER SECTION (8 records) nicbr.mil. 172410 IN DNSKEY ( 257 3 8 AwEAAa8WpFklGbAcsrUH3V3ws4JH3RPRSO6ZycFhO2aBf9umh1H5RNm956lmj9mB2ckys1JTLTxh TsvxSAk7hgEH2IItSy5FMYlFMAeEsmipw6Si3L1DpTyg1RmzI1YbViat/ozVPE/iDlTuL2xlt4ZP EME32ew8AXjNfOf6WBOYtMftqqtMFzkZifDhOQr71sL+JRoy1wxdvhEqa+Tn+q7EE5tdHh1F7taX thMlm5bismcUM5oJqzfq8xGE/YZ0Hxzes7spzuvgincj1o3BTBjBfIzDb6ZC+gS88YMbQADHFjop 9s3jYRA7RVAv9H8Y4wf5rEN3tJz1HdOiv1/nYrlH+CU= ) ; Key ID = 11116 nicbr.mil. 172410 IN DNSKEY ( 256 3 8 AwEAAZh+mK5h/I5a7PrIVHdAx1oq/9EpVJn5X6ItoigoF5SExXbYhhc/gZU/SXv8cKR8loCK2AYK j19DDtrOxJsOPVR2lBtXzO2r5ikVsikcG6exa6fRyV0QSmoUkC2Opt+lrtLIRu7h6ChyyFZ+37gd sZCIGnVBglx0u4bp7rnLOclJBFPgclxIC5J8Ydw/EfOKNJJsfcYvvNTt3NX8L5Eu5KuVAOvWTXku cknVmkrB7YSAYwfWc7e/8snVDqld+rgcHnwWEvCxPiyX85NgWKcTNTbUwe4uKpruz0mgUGWNQ148 5s88uobxQDOMWB9kou1ulKxqzfQKsHrWK/IS1hha4u8= ) ; Key ID = 54996 nicbr.mil. 172410 IN DNSKEY ( 257 3 8 AwEAAeRGA+40EYv0vogp4nDk+KA6MHPnYO7hIsueSTHyNfNpMw7GtA1MIMXbFyrTSQ5eIhc7UYG8 kANsldDOmvk1iXzD5KSgBiRuq/y9fjhXKgfSNuad5VS/YT65iYwcr2sfXkLkvTyui+mfQpkK0a9/ wI21sLQLUAHNf2+0pJd1Uq7UNVcFhy2afRf+Q74qFaCBRcKzse9ze/7v5FMQ/qF6dV97BJdKceYO 5UnLiO0kib+saPvGtswBiAVjLzTnJoUq1qbKMsnvKAdl9Z2VPj9yR/15WxzwLWI6/FQ/0Zr+p1ty 5hBmVwOnx7ilpuvqwX874nuHZ4PZeWeFmISRb0NmvJ8= ) ; Key ID = 30124 nicbr.mil. 172410 IN DNSKEY ( 256 3 8 AwEAAdiltSBS0n3QpuUksRimNc2GQlIPNPih9wvWO72WdEOHFiVjRNoyhv+1M/p6Lf6YjUx0rPGC vvCaA8nUi9N/GUOL2iMk5tZJaYqsIgMLGLSHVSv8hzavH0L36MIpDq46d1bv5E6RKv2QJdAVMmJ8 YlZBygurqpWnTLz+B43MDCC0TvmEphSNfj4E20Z6/KM/kL3ChVkdX9GJwcEBp3gSV4u9UG49gP+m J9MQFBDjcnUB1gVum1qROCaKZtebr4IueLb/eeGDNkJRXqNJLCqiPOIMJZiyBExFD3RURrNPGy3C /jkjSnqWZuNxn2kLmKfwsXMkdiiEKJMkWswGMl+GsuM= ) ; Key ID = 18261 nicbr.mil. 172410 IN DNSKEY ( 256 3 8 AwEAAfbWH0bLIOy2tbga2i4653O8/n26NYn1FyqlrtEQ1C3EXFmE3+sjjpfLK7RmierSaTN7H0cq 0bsa9NOP1zgtJwOwHCeNOeL+pOF/Q0FkKdSa1/CY9a6qXYXuWaPe5f2+/HWLgoNVWgKiL38MZDAX RHPwWm7rg2kAnc8dDq27k6uNTEvxe3nOvDAZ5WLJ8Uo4X5vZwoPGETe6eiuS6kiqR8eE9hXrqiHt oK+p3n9ryyjyzen0iCatHeFsV3pxKCRdHpNv8eGjqOJc2h+UYWYHX791ES36TqmNe35k2T+UF+b2 YNwfO0u8jyXMHVxcLlKR/QpeTfupJ6uo5iZqt+p0tS0= ) ; Key ID = 9753 nicbr.mil. 172410 IN RRSIG ( DNSKEY 8 2 172800 20230928095041 20230924092808 9753 nicbr.mil. 6FCL+i9N9sQLes06iRt3hD2W/bitGJSh76P1bYagknI+TUj8sCd7z4l4+MQCz4Op9ndATo3TY6Mn ByjmYqHChrwEvsCFftXJ7uNeTcR7U+Jp5VnR/xIGzvqgtG0sYd9BszpHeghR3XxKVqIZ9E43OW/F AueDeOzrni+1Pp8kKLerXlLLJrJaahfAAcU7IGBLSGrVg/h+K0y6ZS0XtoUKLT37yT+0YBENvHpe /puwZpOxf8U0fe8gaNGYXVosPjObx7jS0Zji4MXKIoip4XJFZ5H0Jk2TRHv4s/h3cpexmm1tiPaI I7XAOxXI1XX7yH+0Hen9AxTmygL9sAJcHyFsrw== ) nicbr.mil. 172410 IN RRSIG ( DNSKEY 8 2 172800 20230928095041 20230924092808 11116 nicbr.mil. pRPnxp/yW/FCqvVJfVsNiOviD8QU7yULVIYXgoDknEZO0MuibnjlBXHE2ecA5dZv0CELJX8RvRHf Dy0Sc6YXKvAf6MMmdufUG6/HVsQ8kJ9R3U+zYbvZQDyzVToLSLuoY4RWWxY9N82CvE5CsjmOy3jl +RTPP9aXBgPSZKjYWb1q0uIF1zworjK7h1yfkLfu/SvDez/PcDjPHZZrCXMCy0JN10MWihA1yX2z MDZfBU/W3D7Cs+sNJ1TcllaLpu61A4ZG0ZJTZT8WhcbOb7jBCmssmxn54A9Sum7uVjvtT2+ar3ip gOYNIqz4+kFttdnttn7T/t6fIHgRrSODoOajDg== ) nicbr.mil. 172410 IN RRSIG ( DNSKEY 8 2 172800 20230928095041 20230924092808 30124 nicbr.mil. ouXhkhyayqd2PGmxj19G+EU6bcoI9Ahod7G7Nrzz3/lDPToDQt+VzG2eLpTb/m4HMdAKVCHe+ITW f+7Y/vonG+2XlHaqkpW1/l/KOAp07MVL7pY77s/C6TdkoKKTRhdRHr7TRxU401KDNWyTTjUT7BNw m48D1lMMIsuqN7Q4LkSqE5btJy0E3hhuUHorUlRTlQzlfCKoixSmK6pW7BprktCx4TvGHyudPz41 dhJ/XywHSIvQMtuuPOmWKgOFyqs8UlWpDmVwhvbo665hEab3mJF5eDzd5ZNYKrIdWLYp+aMmTPh8 pMGLhgYy0XKwd2yY4MziLcAhhK911fjnjhaT0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for nicbr.mil
	`nicbr.mil. 172410 IN DNSKEY ( 257 3 8 AwEAAa8WpFklGbAcsrUH3V3ws4JH3RPRSO6ZycFhO2aBf9umh1H5RNm956lmj9mB2ckys1JTLTxh TsvxSAk7hgEH2IItSy5FMYlFMAeEsmipw6Si3L1DpTyg1RmzI1YbViat/ozVPE/iDlTuL2xlt4ZP EME32ew8AXjNfOf6WBOYtMftqqtMFzkZifDhOQr71sL+JRoy1wxdvhEqa+Tn+q7EE5tdHh1F7taX thMlm5bismcUM5oJqzfq8xGE/YZ0Hxzes7spzuvgincj1o3BTBjBfIzDb6ZC+gS88YMbQADHFjop 9s3jYRA7RVAv9H8Y4wf5rEN3tJz1HdOiv1/nYrlH+CU= ) ; Key ID = 11116`
	`nicbr.mil. 172410 IN DNSKEY ( 256 3 8 AwEAAZh+mK5h/I5a7PrIVHdAx1oq/9EpVJn5X6ItoigoF5SExXbYhhc/gZU/SXv8cKR8loCK2AYK j19DDtrOxJsOPVR2lBtXzO2r5ikVsikcG6exa6fRyV0QSmoUkC2Opt+lrtLIRu7h6ChyyFZ+37gd sZCIGnVBglx0u4bp7rnLOclJBFPgclxIC5J8Ydw/EfOKNJJsfcYvvNTt3NX8L5Eu5KuVAOvWTXku cknVmkrB7YSAYwfWc7e/8snVDqld+rgcHnwWEvCxPiyX85NgWKcTNTbUwe4uKpruz0mgUGWNQ148 5s88uobxQDOMWB9kou1ulKxqzfQKsHrWK/IS1hha4u8= ) ; Key ID = 54996`
	`nicbr.mil. 172410 IN DNSKEY ( 257 3 8 AwEAAeRGA+40EYv0vogp4nDk+KA6MHPnYO7hIsueSTHyNfNpMw7GtA1MIMXbFyrTSQ5eIhc7UYG8 kANsldDOmvk1iXzD5KSgBiRuq/y9fjhXKgfSNuad5VS/YT65iYwcr2sfXkLkvTyui+mfQpkK0a9/ wI21sLQLUAHNf2+0pJd1Uq7UNVcFhy2afRf+Q74qFaCBRcKzse9ze/7v5FMQ/qF6dV97BJdKceYO 5UnLiO0kib+saPvGtswBiAVjLzTnJoUq1qbKMsnvKAdl9Z2VPj9yR/15WxzwLWI6/FQ/0Zr+p1ty 5hBmVwOnx7ilpuvqwX874nuHZ4PZeWeFmISRb0NmvJ8= ) ; Key ID = 30124`
	`nicbr.mil. 172410 IN DNSKEY ( 256 3 8 AwEAAdiltSBS0n3QpuUksRimNc2GQlIPNPih9wvWO72WdEOHFiVjRNoyhv+1M/p6Lf6YjUx0rPGC vvCaA8nUi9N/GUOL2iMk5tZJaYqsIgMLGLSHVSv8hzavH0L36MIpDq46d1bv5E6RKv2QJdAVMmJ8 YlZBygurqpWnTLz+B43MDCC0TvmEphSNfj4E20Z6/KM/kL3ChVkdX9GJwcEBp3gSV4u9UG49gP+m J9MQFBDjcnUB1gVum1qROCaKZtebr4IueLb/eeGDNkJRXqNJLCqiPOIMJZiyBExFD3RURrNPGy3C /jkjSnqWZuNxn2kLmKfwsXMkdiiEKJMkWswGMl+GsuM= ) ; Key ID = 18261`
	`nicbr.mil. 172410 IN DNSKEY ( 256 3 8 AwEAAfbWH0bLIOy2tbga2i4653O8/n26NYn1FyqlrtEQ1C3EXFmE3+sjjpfLK7RmierSaTN7H0cq 0bsa9NOP1zgtJwOwHCeNOeL+pOF/Q0FkKdSa1/CY9a6qXYXuWaPe5f2+/HWLgoNVWgKiL38MZDAX RHPwWm7rg2kAnc8dDq27k6uNTEvxe3nOvDAZ5WLJ8Uo4X5vZwoPGETe6eiuS6kiqR8eE9hXrqiHt oK+p3n9ryyjyzen0iCatHeFsV3pxKCRdHpNv8eGjqOJc2h+UYWYHX791ES36TqmNe35k2T+UF+b2 YNwfO0u8jyXMHVxcLlKR/QpeTfupJ6uo5iZqt+p0tS0= ) ; Key ID = 9753`
	DNSKEY=11116/SEP is now in the chain-of-trust
	DS=11116/SHA-1 verifies DNSKEY=11116/SEP
	DS=11116/SHA-256 verifies DNSKEY=11116/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`nicbr.mil. 172410 IN RRSIG ( DNSKEY 8 2 172800 20230928095041 20230924092808 9753 nicbr.mil. 6FCL+i9N9sQLes06iRt3hD2W/bitGJSh76P1bYagknI+TUj8sCd7z4l4+MQCz4Op9ndATo3TY6Mn ByjmYqHChrwEvsCFftXJ7uNeTcR7U+Jp5VnR/xIGzvqgtG0sYd9BszpHeghR3XxKVqIZ9E43OW/F AueDeOzrni+1Pp8kKLerXlLLJrJaahfAAcU7IGBLSGrVg/h+K0y6ZS0XtoUKLT37yT+0YBENvHpe /puwZpOxf8U0fe8gaNGYXVosPjObx7jS0Zji4MXKIoip4XJFZ5H0Jk2TRHv4s/h3cpexmm1tiPaI I7XAOxXI1XX7yH+0Hen9AxTmygL9sAJcHyFsrw== )`
	`nicbr.mil. 172410 IN RRSIG ( DNSKEY 8 2 172800 20230928095041 20230924092808 11116 nicbr.mil. pRPnxp/yW/FCqvVJfVsNiOviD8QU7yULVIYXgoDknEZO0MuibnjlBXHE2ecA5dZv0CELJX8RvRHf Dy0Sc6YXKvAf6MMmdufUG6/HVsQ8kJ9R3U+zYbvZQDyzVToLSLuoY4RWWxY9N82CvE5CsjmOy3jl +RTPP9aXBgPSZKjYWb1q0uIF1zworjK7h1yfkLfu/SvDez/PcDjPHZZrCXMCy0JN10MWihA1yX2z MDZfBU/W3D7Cs+sNJ1TcllaLpu61A4ZG0ZJTZT8WhcbOb7jBCmssmxn54A9Sum7uVjvtT2+ar3ip gOYNIqz4+kFttdnttn7T/t6fIHgRrSODoOajDg== )`
	`nicbr.mil. 172410 IN RRSIG ( DNSKEY 8 2 172800 20230928095041 20230924092808 30124 nicbr.mil. ouXhkhyayqd2PGmxj19G+EU6bcoI9Ahod7G7Nrzz3/lDPToDQt+VzG2eLpTb/m4HMdAKVCHe+ITW f+7Y/vonG+2XlHaqkpW1/l/KOAp07MVL7pY77s/C6TdkoKKTRhdRHr7TRxU401KDNWyTTjUT7BNw m48D1lMMIsuqN7Q4LkSqE5btJy0E3hhuUHorUlRTlQzlfCKoixSmK6pW7BprktCx4TvGHyudPz41 dhJ/XywHSIvQMtuuPOmWKgOFyqs8UlWpDmVwhvbo665hEab3mJF5eDzd5ZNYKrIdWLYp+aMmTPh8 pMGLhgYy0XKwd2yY4MziLcAhhK911fjnjhaT0g== )`
	RRSIG=9753 and DNSKEY=9753 verifies the DNSKEY RRset
	RRSIG=11116 and DNSKEY=11116/SEP verifies the DNSKEY RRset
	RRSIG=30124 and DNSKEY=30124/SEP verifies the DNSKEY RRset
	DNSKEY=54996 is now in the chain-of-trust
	DNSKEY=30124/SEP is now in the chain-of-trust
	DNSKEY=18261 is now in the chain-of-trust
	DNSKEY=9753 is now in the chain-of-trust
	Query to NS02.ARMY.MIL for nicbr.mil/A
	Received 800 bytes from 192.82.113.7
	;; Response received from 192.82.113.7 (800 octets) ;; HEADER SECTION ;; id = 62380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nicbr.mil. 300 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 300 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230928095041 20230924092808 9753 nicbr.mil. u+DSQBk+bkZ/LX9Jb+tTeLZE8Ei3cipJjxvRBtP2j6GkVikzxbzdtHItSoHDg11ubzBoiW+eHK9J PhizVGrqCRgvIt2WKwqPAjwRgSA9LisOk1GVc5ebSRzf7U5erGRoBncxOlQhi4suiH76wKpZwb6D fkrwJQWNcrZ4/i8y82v/5pIL1/tRUSl80AoiUKMAbE/Nj6TU3Sctb5usCa76rgUjkjSjguoq+oey wia6DeJQeHZhD85GF54QroUmS/V1nc/HassU44AI13EtHdJxG6nuvtUNq8dzg4iNh/p638KdSAGq PUe/NdhLAF1dBtCWgjpENZEwxp3iPi+MlQ2E8Q== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 300 IN NSEC3 ( 1 0 10 8c hlqldk3pvchh05rumv7jv2pv38q9j8qg NS SOA RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS02.ARMY.MIL is authoritative for nicbr.mil
	Found RRSIG signed by nicbr.mil zone
	Query to NS01.ARMY.MIL for nicbr.mil/SOA
	Received 422 bytes from 140.153.43.44
	;; Response received from 140.153.43.44 (422 octets) ;; HEADER SECTION ;; id = 18936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN SOA ;; ANSWER SECTION (2 records) nicbr.mil. 3600 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 3600 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS03.ARMY.MIL for nicbr.mil/SOA
	Received 422 bytes from 130.114.200.6
	;; Response received from 130.114.200.6 (422 octets) ;; HEADER SECTION ;; id = 62627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN SOA ;; ANSWER SECTION (2 records) nicbr.mil. 3600 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 3600 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS02.ARMY.MIL for nicbr.mil/A
	Received 800 bytes from 192.82.113.7
	;; Response received from 192.82.113.7 (800 octets) ;; HEADER SECTION ;; id = 13341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nicbr.mil. 300 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 300 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 300 IN NSEC3 ( 1 0 10 8c hlqldk3pvchh05rumv7jv2pv38q9j8qg NS SOA RRSIG DNSKEY NSEC3PARAM ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 300 IN RRSIG ( NSEC3 8 3 300 20230928095041 20230924092808 9753 nicbr.mil. u+DSQBk+bkZ/LX9Jb+tTeLZE8Ei3cipJjxvRBtP2j6GkVikzxbzdtHItSoHDg11ubzBoiW+eHK9J PhizVGrqCRgvIt2WKwqPAjwRgSA9LisOk1GVc5ebSRzf7U5erGRoBncxOlQhi4suiH76wKpZwb6D fkrwJQWNcrZ4/i8y82v/5pIL1/tRUSl80AoiUKMAbE/Nj6TU3Sctb5usCa76rgUjkjSjguoq+oey wia6DeJQeHZhD85GF54QroUmS/V1nc/HassU44AI13EtHdJxG6nuvtUNq8dzg4iNh/p638KdSAGq PUe/NdhLAF1dBtCWgjpENZEwxp3iPi+MlQ2E8Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nicbr.mil. 300 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== )`
	RRSIG=9753 and DNSKEY=9753 verifies the SOA RRset

nicbr.mil

	Query to NS01.ARMY.MIL for nicbr.mil/A
	Received 800 bytes from 140.153.43.44
	;; Response received from 140.153.43.44 (800 octets) ;; HEADER SECTION ;; id = 346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nicbr.mil. 60 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 60 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 60 IN RRSIG ( NSEC3 8 3 300 20230928095041 20230924092808 9753 nicbr.mil. u+DSQBk+bkZ/LX9Jb+tTeLZE8Ei3cipJjxvRBtP2j6GkVikzxbzdtHItSoHDg11ubzBoiW+eHK9J PhizVGrqCRgvIt2WKwqPAjwRgSA9LisOk1GVc5ebSRzf7U5erGRoBncxOlQhi4suiH76wKpZwb6D fkrwJQWNcrZ4/i8y82v/5pIL1/tRUSl80AoiUKMAbE/Nj6TU3Sctb5usCa76rgUjkjSjguoq+oey wia6DeJQeHZhD85GF54QroUmS/V1nc/HassU44AI13EtHdJxG6nuvtUNq8dzg4iNh/p638KdSAGq PUe/NdhLAF1dBtCWgjpENZEwxp3iPi+MlQ2E8Q== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 60 IN NSEC3 ( 1 0 10 8c hlqldk3pvchh05rumv7jv2pv38q9j8qg NS SOA RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01.ARMY.MIL is authoritative for nicbr.mil
	Found RRSIG signed by nicbr.mil zone
	Query to NS01.ARMY.MIL for nicbr.mil/A
	Received 800 bytes from 140.153.43.44
	;; Response received from 140.153.43.44 (800 octets) ;; HEADER SECTION ;; id = 17043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nicbr.mil. 60 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 60 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 60 IN NSEC3 ( 1 0 10 8c hlqldk3pvchh05rumv7jv2pv38q9j8qg NS SOA RRSIG DNSKEY NSEC3PARAM ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 60 IN RRSIG ( NSEC3 8 3 300 20230928095041 20230924092808 9753 nicbr.mil. u+DSQBk+bkZ/LX9Jb+tTeLZE8Ei3cipJjxvRBtP2j6GkVikzxbzdtHItSoHDg11ubzBoiW+eHK9J PhizVGrqCRgvIt2WKwqPAjwRgSA9LisOk1GVc5ebSRzf7U5erGRoBncxOlQhi4suiH76wKpZwb6D fkrwJQWNcrZ4/i8y82v/5pIL1/tRUSl80AoiUKMAbE/Nj6TU3Sctb5usCa76rgUjkjSjguoq+oey wia6DeJQeHZhD85GF54QroUmS/V1nc/HassU44AI13EtHdJxG6nuvtUNq8dzg4iNh/p638KdSAGq PUe/NdhLAF1dBtCWgjpENZEwxp3iPi+MlQ2E8Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nicbr.mil. 60 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== )`
	RRSIG=9753 and DNSKEY=9753 verifies the SOA RRset

nicbr.mil

	Query to NS03.ARMY.MIL for nicbr.mil/A
	Received 800 bytes from 130.114.200.6
	;; Response received from 130.114.200.6 (800 octets) ;; HEADER SECTION ;; id = 23675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nicbr.mil. 299 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 299 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 299 IN NSEC3 ( 1 0 10 8c hlqldk3pvchh05rumv7jv2pv38q9j8qg NS SOA RRSIG DNSKEY NSEC3PARAM ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230928095041 20230924092808 9753 nicbr.mil. u+DSQBk+bkZ/LX9Jb+tTeLZE8Ei3cipJjxvRBtP2j6GkVikzxbzdtHItSoHDg11ubzBoiW+eHK9J PhizVGrqCRgvIt2WKwqPAjwRgSA9LisOk1GVc5ebSRzf7U5erGRoBncxOlQhi4suiH76wKpZwb6D fkrwJQWNcrZ4/i8y82v/5pIL1/tRUSl80AoiUKMAbE/Nj6TU3Sctb5usCa76rgUjkjSjguoq+oey wia6DeJQeHZhD85GF54QroUmS/V1nc/HassU44AI13EtHdJxG6nuvtUNq8dzg4iNh/p638KdSAGq PUe/NdhLAF1dBtCWgjpENZEwxp3iPi+MlQ2E8Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS03.ARMY.MIL is authoritative for nicbr.mil
	Found RRSIG signed by nicbr.mil zone
	Query to NS03.ARMY.MIL for nicbr.mil/A
	Received 800 bytes from 130.114.200.6
	;; Response received from 130.114.200.6 (800 octets) ;; HEADER SECTION ;; id = 14789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nicbr.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nicbr.mil. 299 IN SOA ( ns01.army.mil. usarmy\.huachuca\.netcom\.mesg\.epdns-global.army.mil. 1010524 ;serial 900 ;refresh 90 ;retry 2419200 ;expire 300 ;minimum ) nicbr.mil. 299 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 299 IN NSEC3 ( 1 0 10 8c hlqldk3pvchh05rumv7jv2pv38q9j8qg NS SOA RRSIG DNSKEY NSEC3PARAM ) U15FT60ALSGSUE2P7Q4RCDVFA0NOS1KI.nicbr.mil. 299 IN RRSIG ( NSEC3 8 3 300 20230928095041 20230924092808 9753 nicbr.mil. u+DSQBk+bkZ/LX9Jb+tTeLZE8Ei3cipJjxvRBtP2j6GkVikzxbzdtHItSoHDg11ubzBoiW+eHK9J PhizVGrqCRgvIt2WKwqPAjwRgSA9LisOk1GVc5ebSRzf7U5erGRoBncxOlQhi4suiH76wKpZwb6D fkrwJQWNcrZ4/i8y82v/5pIL1/tRUSl80AoiUKMAbE/Nj6TU3Sctb5usCa76rgUjkjSjguoq+oey wia6DeJQeHZhD85GF54QroUmS/V1nc/HassU44AI13EtHdJxG6nuvtUNq8dzg4iNh/p638KdSAGq PUe/NdhLAF1dBtCWgjpENZEwxp3iPi+MlQ2E8Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nicbr.mil. 299 IN RRSIG ( SOA 8 2 3600 20230928102808 20230924092808 9753 nicbr.mil. 6t7MPXd490LL2vF2Yxxodj542B83LCLhnwq29bxQcnimchZyt/NwlFLHz+88KFqDxYRryYdVEbo0 RrmKgch7H+UevTbnQ03ucKrPc5Kd/70D2+gXPR/0n8jiePvrxoCEUeQcB7N6jsamJMyTLwNqV61S a6rVq8HS6OX74fxkdE8bokkvl09Hi2MGif2WLZMpgDZTtdu8KaeONUzZBh0CT42AHgFyG1BbVndL Nnwjd1X2qb2J6nQoE8Oi22ZLknQj0HLs7MRb3e72XV9Z8r4jF0Yrl4XmnWn4YRoLurSFG6Jli7fR XsQtnU3cBFxug/ygB2SVHzIgjo/65/bLAjDhiw== )`
	RRSIG=9753 and DNSKEY=9753 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nicbr.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: