DNSSEC Analyzer - northcom.mil

Domain Name:

Time: 2023-09-24 17:25:14 UTC, NTP stratum 4

Analyzing DNSSEC problems for northcom.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (1139 octets) ;; HEADER SECTION ;; id = 49795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to h.root-servers.net for northcom.mil/A
	Received 807 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (807 octets) ;; HEADER SECTION ;; id = 9147 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for mil/DNSKEY
	Received 798 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (798 octets) ;; HEADER SECTION ;; id = 31689 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 415 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (415 octets) ;; HEADER SECTION ;; id = 44935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (1628 octets) ;; HEADER SECTION ;; id = 5620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=44065 is now in the chain-of-trust
	DNSKEY=14098 is now in the chain-of-trust
	Query to con1.nipr.mil for northcom.mil/A
	Received 449 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (449 octets) ;; HEADER SECTION ;; id = 43307 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) NORTHCOM.MIL. 21600 IN NS CMDNSH02.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS NCND.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS NCND2.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS CMDNSH01.NORTHCOM.MIL. NORTHCOM.MIL. 10800 IN DS ( 61714 8 1 6122bd279371d58ea615961cdbf32fe923bfec37 ) NORTHCOM.MIL. 10800 IN DS ( 61714 8 2 20f2ca4492be3bbdc144031eebf13f1f3874396c3bad74a05480bf97e46c34a7 ) NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. QXnKNRuMe8D8tm3fiZHQX9VbF0fX4Sh2WXzfL2Yxy1pc60mHXruFkP5p0dEoNGR6YqC82U88hM5j yGtXqKGOi7Xp1gy5lo49ii8M76p3r2MjemZiLTn3aY8ooZqMCcSRvmDA6jBmM4fsZD664ijcAXgB A9MXtAGcsOiVhiaocHE= ) ;; ADDITIONAL SECTION (5 records) CMDNSH02.NORTHCOM.MIL. 21600 IN A 164.236.160.20 CMDNSH01.NORTHCOM.MIL. 21600 IN A 164.236.160.19 NCND2.NORTHCOM.MIL. 21600 IN A 164.236.0.19 NCND.NORTHCOM.MIL. 21600 IN A 164.236.0.20 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to eur2.nipr.mil for northcom.mil/DNSKEY
	Received 449 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (449 octets) ;; HEADER SECTION ;; id = 40246 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) NORTHCOM.MIL. 21600 IN NS CMDNSH02.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS CMDNSH01.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS NCND.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS NCND2.NORTHCOM.MIL. NORTHCOM.MIL. 10800 IN DS ( 61714 8 1 6122bd279371d58ea615961cdbf32fe923bfec37 ) NORTHCOM.MIL. 10800 IN DS ( 61714 8 2 20f2ca4492be3bbdc144031eebf13f1f3874396c3bad74a05480bf97e46c34a7 ) NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. QXnKNRuMe8D8tm3fiZHQX9VbF0fX4Sh2WXzfL2Yxy1pc60mHXruFkP5p0dEoNGR6YqC82U88hM5j yGtXqKGOi7Xp1gy5lo49ii8M76p3r2MjemZiLTn3aY8ooZqMCcSRvmDA6jBmM4fsZD664ijcAXgB A9MXtAGcsOiVhiaocHE= ) ;; ADDITIONAL SECTION (5 records) CMDNSH02.NORTHCOM.MIL. 21600 IN A 164.236.160.20 CMDNSH01.NORTHCOM.MIL. 21600 IN A 164.236.160.19 NCND2.NORTHCOM.MIL. 21600 IN A 164.236.0.19 NCND.NORTHCOM.MIL. 21600 IN A 164.236.0.20 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone northcom.mil

northcom.mil

	Checking DS between mil and northcom.mil
	Query to con1.nipr.mil for northcom.mil/DS
	Received 300 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (300 octets) ;; HEADER SECTION ;; id = 7657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN DS ;; ANSWER SECTION (3 records) NORTHCOM.MIL. 10800 IN DS ( 61714 8 1 6122bd279371d58ea615961cdbf32fe923bfec37 ) NORTHCOM.MIL. 10800 IN DS ( 61714 8 2 20f2ca4492be3bbdc144031eebf13f1f3874396c3bad74a05480bf97e46c34a7 ) NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. QXnKNRuMe8D8tm3fiZHQX9VbF0fX4Sh2WXzfL2Yxy1pc60mHXruFkP5p0dEoNGR6YqC82U88hM5j yGtXqKGOi7Xp1gy5lo49ii8M76p3r2MjemZiLTn3aY8ooZqMCcSRvmDA6jBmM4fsZD664ijcAXgB A9MXtAGcsOiVhiaocHE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for northcom.mil in the mil zone
	DS=61714/SHA-1 has algorithm RSASHA256
	DS=61714/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. QXnKNRuMe8D8tm3fiZHQX9VbF0fX4Sh2WXzfL2Yxy1pc60mHXruFkP5p0dEoNGR6YqC82U88hM5j yGtXqKGOi7Xp1gy5lo49ii8M76p3r2MjemZiLTn3aY8ooZqMCcSRvmDA6jBmM4fsZD664ijcAXgB A9MXtAGcsOiVhiaocHE= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=61714/SHA-1 is now in the chain-of-trust
	`NORTHCOM.MIL. 10800 IN DS ( 61714 8 1 6122bd279371d58ea615961cdbf32fe923bfec37 )`
	`NORTHCOM.MIL. 10800 IN DS ( 61714 8 2 20f2ca4492be3bbdc144031eebf13f1f3874396c3bad74a05480bf97e46c34a7 )`
	Query to NCND.NORTHCOM.MIL for northcom.mil/DNSKEY
	Received 1193 bytes from 164.236.0.20
	;; Response received from 164.236.0.20 (1193 octets) ;; HEADER SECTION ;; id = 3317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN DNSKEY ;; ANSWER SECTION (4 records) northcom.mil. 1603 IN DNSKEY ( 257 3 8 AwEAAZvPH+D1AKZf/McNTuiZK9X989rzmGtP5S/p0Qsr2aojvxSbYGrn5t3nG+TwKuNjYUFQFmTd iry/7yQLY8H/96fOH3astPjcQZuWsRGjTEI+zn8QYvHaUI/YBLCTL/jOnQUmhenBfcbjr+2ikIW2 5bRRwnegmL6EhI/rtZ73yPjF7k07sh9sosSt9Nrl4vpJLytF2xSMcaTiHkvp9fF37c67/zM2AkHq 5aXuRk/GdpqudCSCbIQWJ0Usp2B5KwhhBOa6Hv9TGhY3hHOcL1JenubZSblS+fo07n1/66Zs/YLS 6IzxwO/+xPHLx7a2Kwoi2gEFUn7QrE53u2UMUpxnGaE= ) ; Key ID = 61714 northcom.mil. 1603 IN DNSKEY ( 256 3 8 AwEAAaa0Qa7YXT89zgAfkJte+NoPqKWr8OYmpNSbbQkqoULEgcUaQD3TuSiasjUkp6z+Pu+6ojxx n/YSPGTOTi5ic5sG0gGn2o0PluPnD+RRqUlxeNEsbBK2zZoJsu88EDY6kaCVXE1wNvIXfGrHpnrp cBtR5HrS0eYNdP6UBO0NtPxSrQ4OBmBG5Mdc4I5h3DPHbs0Tr7F/Is/FjEx6cryUeMJS6FhfrESC H1IBINvgGK+JVLJcfSDmS//9p7dhMHonQ3pc76v8Fr2k/VFXg367z/1V2c+9SnZLV9RmbSqgMZ5M ralikeTogLuZd52Z0XJ9U4OE6OaOptZoXcZuBh/ynPU= ) ; Key ID = 15621 northcom.mil. 1603 IN RRSIG ( DNSKEY 8 2 3600 20230927063705 20230924053705 15621 northcom.mil. jUnyE8wBiobYwBcrDY8bHGmtjZ+1G/muu38Rwl0CEBJWP0pXCCoPagS2LLwYeY7qVsUJsxl0+86b TzJaw7wNC2hqBcnExRga3y0BwQTg9NeikNvqyvLKssCcayLCMVJJV940DmfIZuCa9178jf9uKtNv sfsVGIJHNn8hm8dLflntRsyNyogz4X3kz7Fjv7ikv+u7oUGnjHhUfAOdkKAm0iChV2mBJw+dDIxb ccS1y9DqtawQkQ7XyhUtTQueVaRkoNFX7BAnKbp4nc48jmEt426E3JWTkIY+mYXJpcHl4OnX7eq7 4RETWCTAuNZD+Ki+XLp0houtjd+HS0XakONR3Q== ) northcom.mil. 1603 IN RRSIG ( DNSKEY 8 2 3600 20230929041903 20230922031903 61714 northcom.mil. ar/uk9hZnjlGDXkXl6wcs+oSXT20TRsjvVYIH7SOCFRRUWvYoEdyYk+9kzcEkUfRCquTZs/eFdZj WrM2P2Bo5klHbFZEAGV9oBWg4+/OIW2+OVNDEAYRibDOawz07IVs1Gk885L7RUPUHhHJ4/5SaC13 1HDYpJ6P8oVCNMEkiLgCBAEREGyIfM+UtUNGmTL+WUDSD/f9E86ZXDPigMAs6PvyJ2drJoCYKys9 mwfhAaP0lKqGADfpTZ8RWYACSILnmM8Dqbu8Uk8ZRF3al5kkY4zFnh/OQmZo09XtwVK3gQeoJj5o 3aZZMm1HSj2vbkmjXGsTvf/sJ/9Ol1sSHeT2KQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for northcom.mil
	`northcom.mil. 1603 IN DNSKEY ( 257 3 8 AwEAAZvPH+D1AKZf/McNTuiZK9X989rzmGtP5S/p0Qsr2aojvxSbYGrn5t3nG+TwKuNjYUFQFmTd iry/7yQLY8H/96fOH3astPjcQZuWsRGjTEI+zn8QYvHaUI/YBLCTL/jOnQUmhenBfcbjr+2ikIW2 5bRRwnegmL6EhI/rtZ73yPjF7k07sh9sosSt9Nrl4vpJLytF2xSMcaTiHkvp9fF37c67/zM2AkHq 5aXuRk/GdpqudCSCbIQWJ0Usp2B5KwhhBOa6Hv9TGhY3hHOcL1JenubZSblS+fo07n1/66Zs/YLS 6IzxwO/+xPHLx7a2Kwoi2gEFUn7QrE53u2UMUpxnGaE= ) ; Key ID = 61714`
	`northcom.mil. 1603 IN DNSKEY ( 256 3 8 AwEAAaa0Qa7YXT89zgAfkJte+NoPqKWr8OYmpNSbbQkqoULEgcUaQD3TuSiasjUkp6z+Pu+6ojxx n/YSPGTOTi5ic5sG0gGn2o0PluPnD+RRqUlxeNEsbBK2zZoJsu88EDY6kaCVXE1wNvIXfGrHpnrp cBtR5HrS0eYNdP6UBO0NtPxSrQ4OBmBG5Mdc4I5h3DPHbs0Tr7F/Is/FjEx6cryUeMJS6FhfrESC H1IBINvgGK+JVLJcfSDmS//9p7dhMHonQ3pc76v8Fr2k/VFXg367z/1V2c+9SnZLV9RmbSqgMZ5M ralikeTogLuZd52Z0XJ9U4OE6OaOptZoXcZuBh/ynPU= ) ; Key ID = 15621`
	DNSKEY=61714/SEP is now in the chain-of-trust
	DS=61714/SHA-1 verifies DNSKEY=61714/SEP
	DS=61714/SHA-256 verifies DNSKEY=61714/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`northcom.mil. 1603 IN RRSIG ( DNSKEY 8 2 3600 20230927063705 20230924053705 15621 northcom.mil. jUnyE8wBiobYwBcrDY8bHGmtjZ+1G/muu38Rwl0CEBJWP0pXCCoPagS2LLwYeY7qVsUJsxl0+86b TzJaw7wNC2hqBcnExRga3y0BwQTg9NeikNvqyvLKssCcayLCMVJJV940DmfIZuCa9178jf9uKtNv sfsVGIJHNn8hm8dLflntRsyNyogz4X3kz7Fjv7ikv+u7oUGnjHhUfAOdkKAm0iChV2mBJw+dDIxb ccS1y9DqtawQkQ7XyhUtTQueVaRkoNFX7BAnKbp4nc48jmEt426E3JWTkIY+mYXJpcHl4OnX7eq7 4RETWCTAuNZD+Ki+XLp0houtjd+HS0XakONR3Q== )`
	`northcom.mil. 1603 IN RRSIG ( DNSKEY 8 2 3600 20230929041903 20230922031903 61714 northcom.mil. ar/uk9hZnjlGDXkXl6wcs+oSXT20TRsjvVYIH7SOCFRRUWvYoEdyYk+9kzcEkUfRCquTZs/eFdZj WrM2P2Bo5klHbFZEAGV9oBWg4+/OIW2+OVNDEAYRibDOawz07IVs1Gk885L7RUPUHhHJ4/5SaC13 1HDYpJ6P8oVCNMEkiLgCBAEREGyIfM+UtUNGmTL+WUDSD/f9E86ZXDPigMAs6PvyJ2drJoCYKys9 mwfhAaP0lKqGADfpTZ8RWYACSILnmM8Dqbu8Uk8ZRF3al5kkY4zFnh/OQmZo09XtwVK3gQeoJj5o 3aZZMm1HSj2vbkmjXGsTvf/sJ/9Ol1sSHeT2KQ== )`
	RRSIG=15621 and DNSKEY=15621 verifies the DNSKEY RRset
	RRSIG=61714 and DNSKEY=61714/SEP verifies the DNSKEY RRset
	DNSKEY=15621 is now in the chain-of-trust
	Query to NCND.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.0.20
	;; Response received from 164.236.0.20 (810 octets) ;; HEADER SECTION ;; id = 5577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20230927101245 20230924091245 15621 northcom.mil. Pa71x7rb9GxcUsNtF+5aW1hIzkJxdkQIloJtC00Khy0R854q1aKRESuCXdo8DnAhvnm/n8VLcegl 53B6t0z9mvChBvLdWMr26ZT360laNjR9SLubeh8ghO89L5ifG50O4fzAzoYNazoO4NJJF11oAwFf o/fahLIHkgesBliPTnf6fzqBiovQU862UXKgaPsrA0OMU33Xj2+56u6NoYhAw+T+WukBwraEkmYL iP1deHthvRrHWNIs2Z7xKO93NXR2xV/ZInB/kWLX4ZaxV/ZyCN2JnuRCuzonYGFs4JIOsdTBBA9g mX1b2K1qQjf6GEpEriY3fVNtqsGmoCdiywc/0w== ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN NSEC3 ( 1 0 1 59d1e656a4a243fe 062t4e2et26ttnqsgta53qdadet40r2q NS SOA RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NCND.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to CMDNSH01.NORTHCOM.MIL for northcom.mil/SOA
	Received 422 bytes from 164.236.160.19
	;; Response received from 164.236.160.19 (422 octets) ;; HEADER SECTION ;; id = 35209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN SOA ;; ANSWER SECTION (2 records) northcom.mil. 500 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20230927025118 20230924015118 15621 northcom.mil. ogvXZ2x7X9PSEFcxqI6GxK01OQmeD9jd26kjiZLRHo/EifXirEnJapzTBkMo4AEH+lODdKFDo4Pd r4EsJoTs1VVRern5DwtpOJ8KoSnr7y3NqCTo6KQKxFJUS23FA5gi+D8Zqx/jtEBGw9GrKZ2gp3S3 eqNe93smrr3deymD2zIjZO78Glmljr25G6Mw03O/kDOU99vhS8Df9K2tFyjkm3MxZkfEfcUXTZ5N /WjoILBZPzpLevXkXpqVXtXwZbVo0pztLVjFApTLj97KDPo6/AwJBVoz159v8SApug5GXnEHCCZP KUrbwBwCVdC5cvNLWoLyXMaJMqquUN9HdtClyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NCND2.NORTHCOM.MIL for northcom.mil/SOA
	Received 422 bytes from 164.236.0.19
	;; Response received from 164.236.0.19 (422 octets) ;; HEADER SECTION ;; id = 52561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN SOA ;; ANSWER SECTION (2 records) northcom.mil. 500 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20230927150353 20230924140353 15621 northcom.mil. I92dx+X70OSNCmWdECxPW9+Mq4I/Dc3mN8TFHXSu8t12wEloGsCpFG9US1IgXfhafyxLqr2JRZuc iafJCIkW/kwKCGYbZZAA+H5STue5A8Z6HGvq3ffOr754YsKfOxf4kp3KaxV6IpXUXlJcrdeW4Xf3 Lm/svWGmroSs7ToTNCtzoFd2I+fHUvlycviut6zK/Kkxz0es8xzVxfSOZSGaqXzzWUmq3rUXdKI8 l7VBXN+Fi5vH+ragQs51o1CXlycj8lUHKcdj7UFnA3iG1eFNrYrfltxQr0jY/k69VmlH+u3yeq5t iI+wflXJEftrm4aY3woF55HJl29hRHZ3zUp8ig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to CMDNSH02.NORTHCOM.MIL for northcom.mil/SOA
	Received 422 bytes from 164.236.160.20
	;; Response received from 164.236.160.20 (422 octets) ;; HEADER SECTION ;; id = 8380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN SOA ;; ANSWER SECTION (2 records) northcom.mil. 500 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20230927150353 20230924140353 15621 northcom.mil. I92dx+X70OSNCmWdECxPW9+Mq4I/Dc3mN8TFHXSu8t12wEloGsCpFG9US1IgXfhafyxLqr2JRZuc iafJCIkW/kwKCGYbZZAA+H5STue5A8Z6HGvq3ffOr754YsKfOxf4kp3KaxV6IpXUXlJcrdeW4Xf3 Lm/svWGmroSs7ToTNCtzoFd2I+fHUvlycviut6zK/Kkxz0es8xzVxfSOZSGaqXzzWUmq3rUXdKI8 l7VBXN+Fi5vH+ragQs51o1CXlycj8lUHKcdj7UFnA3iG1eFNrYrfltxQr0jY/k69VmlH+u3yeq5t iI+wflXJEftrm4aY3woF55HJl29hRHZ3zUp8ig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NCND.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.0.20
	;; Response received from 164.236.0.20 (810 octets) ;; HEADER SECTION ;; id = 15338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN NSEC3 ( 1 0 1 59d1e656a4a243fe 062t4e2et26ttnqsgta53qdadet40r2q NS SOA RRSIG DNSKEY NSEC3PARAM ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20230927101245 20230924091245 15621 northcom.mil. Pa71x7rb9GxcUsNtF+5aW1hIzkJxdkQIloJtC00Khy0R854q1aKRESuCXdo8DnAhvnm/n8VLcegl 53B6t0z9mvChBvLdWMr26ZT360laNjR9SLubeh8ghO89L5ifG50O4fzAzoYNazoO4NJJF11oAwFf o/fahLIHkgesBliPTnf6fzqBiovQU862UXKgaPsrA0OMU33Xj2+56u6NoYhAw+T+WukBwraEkmYL iP1deHthvRrHWNIs2Z7xKO93NXR2xV/ZInB/kWLX4ZaxV/ZyCN2JnuRCuzonYGFs4JIOsdTBBA9g mX1b2K1qQjf6GEpEriY3fVNtqsGmoCdiywc/0w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== )`
	RRSIG=15621 and DNSKEY=15621 verifies the SOA RRset

northcom.mil

	Query to CMDNSH02.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.160.20
	;; Response received from 164.236.160.20 (810 octets) ;; HEADER SECTION ;; id = 58568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN NSEC3 ( 1 0 1 59d1e656a4a243fe 062t4e2et26ttnqsgta53qdadet40r2q NS SOA RRSIG DNSKEY NSEC3PARAM ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20230927101245 20230924091245 15621 northcom.mil. Pa71x7rb9GxcUsNtF+5aW1hIzkJxdkQIloJtC00Khy0R854q1aKRESuCXdo8DnAhvnm/n8VLcegl 53B6t0z9mvChBvLdWMr26ZT360laNjR9SLubeh8ghO89L5ifG50O4fzAzoYNazoO4NJJF11oAwFf o/fahLIHkgesBliPTnf6fzqBiovQU862UXKgaPsrA0OMU33Xj2+56u6NoYhAw+T+WukBwraEkmYL iP1deHthvRrHWNIs2Z7xKO93NXR2xV/ZInB/kWLX4ZaxV/ZyCN2JnuRCuzonYGFs4JIOsdTBBA9g mX1b2K1qQjf6GEpEriY3fVNtqsGmoCdiywc/0w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CMDNSH02.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to CMDNSH02.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.160.20
	;; Response received from 164.236.160.20 (810 octets) ;; HEADER SECTION ;; id = 23112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN NSEC3 ( 1 0 1 59d1e656a4a243fe 062t4e2et26ttnqsgta53qdadet40r2q NS SOA RRSIG DNSKEY NSEC3PARAM ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20230927101245 20230924091245 15621 northcom.mil. Pa71x7rb9GxcUsNtF+5aW1hIzkJxdkQIloJtC00Khy0R854q1aKRESuCXdo8DnAhvnm/n8VLcegl 53B6t0z9mvChBvLdWMr26ZT360laNjR9SLubeh8ghO89L5ifG50O4fzAzoYNazoO4NJJF11oAwFf o/fahLIHkgesBliPTnf6fzqBiovQU862UXKgaPsrA0OMU33Xj2+56u6NoYhAw+T+WukBwraEkmYL iP1deHthvRrHWNIs2Z7xKO93NXR2xV/ZInB/kWLX4ZaxV/ZyCN2JnuRCuzonYGFs4JIOsdTBBA9g mX1b2K1qQjf6GEpEriY3fVNtqsGmoCdiywc/0w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== )`
	RRSIG=15621 and DNSKEY=15621 verifies the SOA RRset

northcom.mil

	Query to CMDNSH01.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.160.19
	;; Response received from 164.236.160.19 (810 octets) ;; HEADER SECTION ;; id = 14573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030205 20230924020205 15621 northcom.mil. dKXvT3xnNDpqZvd2WStFTv/BECgSZ2aEHylEt1DH8yAE5gquK3w+ifPsBEV0VSKpGR+51C7cAYeK dxNznGd9RSTW7pEhSGVlIHR2xsg6y5eNF6K6eWNypb+F3k8cY4boB5OnMGUvxSNOqQ3yWZU0xAPv 3gNsqPsOb4GJuJK6DkS+aCAyWSvG70JaYpOY2UXC0Iiryy9ETcXTKv6ZZ2umdQKaTDQ1vY5bhIii dAsPvh2/9Uaa+FsXJp6EBehBUjkxHdufZGUwy1Yw3bgq8tlbcffJZyW1iSebwCNgednAmI+Y7/Vi FYA7DebfMpyn4wIz2XZtzH0Qg7WolxMhc62XkQ== ) fujbb1pn882pb57a810k4l8dubdlbmbb.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20230927072535 20230924062535 15621 northcom.mil. d9LLDdst4jta/qYl94HViJA+aWAUfDrSpM0W6DN1ou6LJNDmuP6f9qzExrSwivBBx83mrOcSm/6h 4IqnUTK4DnTY6KfeMBUmEtewg3dyoBXQXyrD5sp6S83h9yhOlxJ79WiraFxejFwI8jBaOC9ItGDC I2TlRIKVusiW5U+xyBwzDKMb1Boi/i6oNmuEWuTzGgtRe9YzenpUjvV9j6iRDzl5V3TiCthr6sUe +Zuv8HbS5buMDJFjbiRmYGqOOaz8+CK3ozM62K3j7xDIPoItKWHKaMB/Z5pQ9BwxTkmtns6ubpPo ECvxrpj5SkV11utWtULnzg79+jC2YBhNln17EA== ) fujbb1pn882pb57a810k4l8dubdlbmbb.northcom.mil. 60 IN NSEC3 ( 1 0 1 50c5ea646381918f fujbb1pn882pb57a810k4l8dubdlbmbc NS SOA RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CMDNSH01.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to CMDNSH01.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.160.19
	;; Response received from 164.236.160.19 (810 octets) ;; HEADER SECTION ;; id = 18052 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 59 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20230927030205 20230924020205 15621 northcom.mil. dKXvT3xnNDpqZvd2WStFTv/BECgSZ2aEHylEt1DH8yAE5gquK3w+ifPsBEV0VSKpGR+51C7cAYeK dxNznGd9RSTW7pEhSGVlIHR2xsg6y5eNF6K6eWNypb+F3k8cY4boB5OnMGUvxSNOqQ3yWZU0xAPv 3gNsqPsOb4GJuJK6DkS+aCAyWSvG70JaYpOY2UXC0Iiryy9ETcXTKv6ZZ2umdQKaTDQ1vY5bhIii dAsPvh2/9Uaa+FsXJp6EBehBUjkxHdufZGUwy1Yw3bgq8tlbcffJZyW1iSebwCNgednAmI+Y7/Vi FYA7DebfMpyn4wIz2XZtzH0Qg7WolxMhc62XkQ== ) fujbb1pn882pb57a810k4l8dubdlbmbb.northcom.mil. 59 IN NSEC3 ( 1 0 1 50c5ea646381918f fujbb1pn882pb57a810k4l8dubdlbmbc NS SOA RRSIG DNSKEY NSEC3PARAM ) fujbb1pn882pb57a810k4l8dubdlbmbb.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20230927072535 20230924062535 15621 northcom.mil. d9LLDdst4jta/qYl94HViJA+aWAUfDrSpM0W6DN1ou6LJNDmuP6f9qzExrSwivBBx83mrOcSm/6h 4IqnUTK4DnTY6KfeMBUmEtewg3dyoBXQXyrD5sp6S83h9yhOlxJ79WiraFxejFwI8jBaOC9ItGDC I2TlRIKVusiW5U+xyBwzDKMb1Boi/i6oNmuEWuTzGgtRe9YzenpUjvV9j6iRDzl5V3TiCthr6sUe +Zuv8HbS5buMDJFjbiRmYGqOOaz8+CK3ozM62K3j7xDIPoItKWHKaMB/Z5pQ9BwxTkmtns6ubpPo ECvxrpj5SkV11utWtULnzg79+jC2YBhNln17EA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20230927030205 20230924020205 15621 northcom.mil. dKXvT3xnNDpqZvd2WStFTv/BECgSZ2aEHylEt1DH8yAE5gquK3w+ifPsBEV0VSKpGR+51C7cAYeK dxNznGd9RSTW7pEhSGVlIHR2xsg6y5eNF6K6eWNypb+F3k8cY4boB5OnMGUvxSNOqQ3yWZU0xAPv 3gNsqPsOb4GJuJK6DkS+aCAyWSvG70JaYpOY2UXC0Iiryy9ETcXTKv6ZZ2umdQKaTDQ1vY5bhIii dAsPvh2/9Uaa+FsXJp6EBehBUjkxHdufZGUwy1Yw3bgq8tlbcffJZyW1iSebwCNgednAmI+Y7/Vi FYA7DebfMpyn4wIz2XZtzH0Qg7WolxMhc62XkQ== )`
	RRSIG=15621 and DNSKEY=15621 verifies the SOA RRset

northcom.mil

	Query to NCND2.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.0.19
	;; Response received from 164.236.0.19 (810 octets) ;; HEADER SECTION ;; id = 9151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 59 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 59 IN NSEC3 ( 1 0 1 59d1e656a4a243fe 062t4e2et26ttnqsgta53qdadet40r2q NS SOA RRSIG DNSKEY NSEC3PARAM ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20230927101245 20230924091245 15621 northcom.mil. Pa71x7rb9GxcUsNtF+5aW1hIzkJxdkQIloJtC00Khy0R854q1aKRESuCXdo8DnAhvnm/n8VLcegl 53B6t0z9mvChBvLdWMr26ZT360laNjR9SLubeh8ghO89L5ifG50O4fzAzoYNazoO4NJJF11oAwFf o/fahLIHkgesBliPTnf6fzqBiovQU862UXKgaPsrA0OMU33Xj2+56u6NoYhAw+T+WukBwraEkmYL iP1deHthvRrHWNIs2Z7xKO93NXR2xV/ZInB/kWLX4ZaxV/ZyCN2JnuRCuzonYGFs4JIOsdTBBA9g mX1b2K1qQjf6GEpEriY3fVNtqsGmoCdiywc/0w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NCND2.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to NCND2.NORTHCOM.MIL for northcom.mil/A
	Received 810 bytes from 164.236.0.19
	;; Response received from 164.236.0.19 (810 octets) ;; HEADER SECTION ;; id = 33947 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) northcom.mil. 59 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2023072708 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 59 IN NSEC3 ( 1 0 1 59d1e656a4a243fe 062t4e2et26ttnqsgta53qdadet40r2q NS SOA RRSIG DNSKEY NSEC3PARAM ) 062t4e2et26ttnqsgta53qdadet40r2p.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20230927101245 20230924091245 15621 northcom.mil. Pa71x7rb9GxcUsNtF+5aW1hIzkJxdkQIloJtC00Khy0R854q1aKRESuCXdo8DnAhvnm/n8VLcegl 53B6t0z9mvChBvLdWMr26ZT360laNjR9SLubeh8ghO89L5ifG50O4fzAzoYNazoO4NJJF11oAwFf o/fahLIHkgesBliPTnf6fzqBiovQU862UXKgaPsrA0OMU33Xj2+56u6NoYhAw+T+WukBwraEkmYL iP1deHthvRrHWNIs2Z7xKO93NXR2xV/ZInB/kWLX4ZaxV/ZyCN2JnuRCuzonYGFs4JIOsdTBBA9g mX1b2K1qQjf6GEpEriY3fVNtqsGmoCdiywc/0w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20230927030204 20230924020204 15621 northcom.mil. RIRZdiPhVSgzNgP+F59pMweBRwFojXUCqVB/HKR3AMoepJURYnMpsQrpRROS9UfP0jQSxxOc3gGk whY6CNhizg/DbYbApSWff8Kse0lps+gZedNsJIvy9glpCv9Dy7J/Q/xOnjyuYEzy3ZXe/r6xlzkP CmiH7lK43dBhQqVqm9byafLAaNW3hj0g3nXyECcYsqxRYLgtVHd/xLeSfKaa4IyeXCnEd8HeksJS LDXJy2A8/fg85zkhrbDak/27ph09WKKfN8Nvp5kXDqNs/gNQ8XXARVEB2186F8q4FzU6Np97oP+q 3zrLnyaQ7s2+4c0bZLnvcMci6PMG0xN1J/7Arw== )`
	RRSIG=15621 and DNSKEY=15621 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test northcom.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: