DNSSEC Debugger - northcom.mil

Domain Name:

Time: 2024-07-27 02:37:31 UTC

Analyzing DNSSEC problems for northcom.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 61397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to h.root-servers.net for northcom.mil/A
	Received 759 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 759 octets ;; HEADER SECTION ;; id = 26966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 750 octets ;; HEADER SECTION ;; id = 42572 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to a.root-servers.net for mil/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 13907 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . zTK/13cULD1mMDzpt6rEVxEjFKM3GmxuM0Nu/o34EJLnrcEkSd0GpXhobXmuPBjeoimK5Q8jmUtd NRB13OYZEJc+Wwqu691netDxVGf4GHOKbqo5bmMtGN4MP9hfZxvZVJkpZNa7xO4o9moDtnDuatXc LOWdzfEiuzO4rRaPaQwsXtSCZNeL8jM4tl57f3gNfsflGiuANLSQrsa0HChEcUkyPzvovMCEtYPk 1JJQ/aoAItEHmZrC6jEe+kuArA8z4PYyw7ZuDjF3X20tJMvtaBbPscsM+w5htLYGU43GnsCKri1F lfGF5sMLf5Y50neF0swf3wk1q8AhTExzfFfvGw== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to eur1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 1061 octets ;; HEADER SECTION ;; id = 65281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAaTbG91LqZ6DLQLURLmfjcIIDQC3iwAtTd2HaN/i0lRy2f0qjWGXIhsj0g8bUMq5P/sJrtGq Gi2km93HLnQjMFrUmbtWMPzKxmGh6904Gstf6jOo2sdbYdhUuE9zBHPAETE7kWrxL2NqpbWZn+1N varuvfq6X5cFkrhKIMEVFop3 ) ; Key ID = 21018`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAclLm2turo+9A9uDozcJRCRrTApNkHuvomZiisKlGE48fFeoWU9q3JKByhx6i/jeb548IpQx xDsTKXohxkGSP5xQuMjBuVwNeHkXcNf7+pJOrtRk4sHl14ZggGLGVcSgp0E07/iFmyQLRAQD2HBD OfDfW7Dyb6MF9olmtdaHfx+x ) ; Key ID = 54036`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 16801 mil. C+dnmNHGQIjtPNSEdmOWtZ8g0VsnvU8RUwNAnm0o2Fwcb9dxLKMZFJhnvOW2SB0RkVSMyd4RjSjx HUjM4XXsX17kaCIG5G5+5eT/YdFrtSU+o9LYz1poUq7bjJBBrTta90BgU08f4nVoDWI72TYYjBsL JqRdn0AbhAnYd+qBDMWUWyOIYKFcNz5phDPvKA+osssVxaaFUMR2dft6HJXjzhLJX+oKNFuQ1Crd oIfojG6/gqTa3kA93VwoHuokSfbr1AmMTp9Ayh/XvrXNt17b5C6p6qDertC3dvquMDHXSPy940M3 VqRW3xQoTYzDrazsrunSU2n3oDhiI5YVhjdWaQ== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20240802231509 20240726231509 54036 mil. sRTVCT20r5ii6IydFvjtYsvBKR7YbpPNFnre777IGbzckayDJ3VcPCdymLq+44M1oDmikgLaJpnO COquCpTHfSwvxxtUSR6xvqE5Vacr9sCw67toaGx3dTlg+pcL+0xarJXVX9/vQgKKXbqBboSSpUYX QAPwU6GFMVuThPsMHb8= )`
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=54036 and DNSKEY=54036 verifies the DNSKEY RRset
	DNSKEY=21018 is now in the chain-of-trust
	DNSKEY=54036 is now in the chain-of-trust
	Query to pac1.nipr.mil for northcom.mil/A
	Received 449 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 449 octets ;; HEADER SECTION ;; id = 55112 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) NORTHCOM.MIL. 21600 IN NS NCND.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS NCND2.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS CMDNSH01.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS CMDNSH02.NORTHCOM.MIL. NORTHCOM.MIL. 10800 IN DS ( 28489 8 2 7f09dab2e1556827a6323490fb9553cd4af11270c52fcea9d4667cecc0b621f5 ) NORTHCOM.MIL. 10800 IN DS ( 28489 8 1 e35db54a4422c7ad641c567b9d4228a7081b7b70 ) NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. QmB58FAOpwBDi0a6zrjqscyZSc4HgSomOJYGyH4ioBdk7NQdb5IhSDRzc4ktPNNn2ck2b7N9fwNx QQXWMGkvEbQ8XtidjKTJh/kOZuDN0o0h8bqdLJwbKe19V7jz5G2xXjPL55Ape+efZamDSNIdTaBk ThmJhLGjkwD2Y+JHpJs= ) ;; ADDITIONAL SECTION (5 records) CMDNSH02.NORTHCOM.MIL. 21600 IN A 164.236.160.20 CMDNSH01.NORTHCOM.MIL. 21600 IN A 164.236.160.19 NCND2.NORTHCOM.MIL. 21600 IN A 164.236.0.19 NCND.NORTHCOM.MIL. 21600 IN A 164.236.0.20 ;; { "EDNS-VERSION": 0 }
	Query to pac2.nipr.mil for northcom.mil/DNSKEY
	Received 449 bytes from 199.252.155.234
	;; Response received from [199.252.155.234] 449 octets ;; HEADER SECTION ;; id = 48920 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) NORTHCOM.MIL. 21600 IN NS CMDNSH01.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS NCND2.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS NCND.NORTHCOM.MIL. NORTHCOM.MIL. 21600 IN NS CMDNSH02.NORTHCOM.MIL. NORTHCOM.MIL. 10800 IN DS ( 28489 8 1 e35db54a4422c7ad641c567b9d4228a7081b7b70 ) NORTHCOM.MIL. 10800 IN DS ( 28489 8 2 7f09dab2e1556827a6323490fb9553cd4af11270c52fcea9d4667cecc0b621f5 ) NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. QmB58FAOpwBDi0a6zrjqscyZSc4HgSomOJYGyH4ioBdk7NQdb5IhSDRzc4ktPNNn2ck2b7N9fwNx QQXWMGkvEbQ8XtidjKTJh/kOZuDN0o0h8bqdLJwbKe19V7jz5G2xXjPL55Ape+efZamDSNIdTaBk ThmJhLGjkwD2Y+JHpJs= ) ;; ADDITIONAL SECTION (5 records) CMDNSH02.NORTHCOM.MIL. 21600 IN A 164.236.160.20 CMDNSH01.NORTHCOM.MIL. 21600 IN A 164.236.160.19 NCND2.NORTHCOM.MIL. 21600 IN A 164.236.0.19 NCND.NORTHCOM.MIL. 21600 IN A 164.236.0.20 ;; { "EDNS-VERSION": 0 }
	Found child zone northcom.mil

northcom.mil

	Checking DS between mil and northcom.mil
	Query to con1.nipr.mil for northcom.mil/DS
	Received 300 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 300 octets ;; HEADER SECTION ;; id = 55159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN DS ;; ANSWER SECTION (3 records) NORTHCOM.MIL. 10800 IN DS ( 28489 8 1 e35db54a4422c7ad641c567b9d4228a7081b7b70 ) NORTHCOM.MIL. 10800 IN DS ( 28489 8 2 7f09dab2e1556827a6323490fb9553cd4af11270c52fcea9d4667cecc0b621f5 ) NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. QmB58FAOpwBDi0a6zrjqscyZSc4HgSomOJYGyH4ioBdk7NQdb5IhSDRzc4ktPNNn2ck2b7N9fwNx QQXWMGkvEbQ8XtidjKTJh/kOZuDN0o0h8bqdLJwbKe19V7jz5G2xXjPL55Ape+efZamDSNIdTaBk ThmJhLGjkwD2Y+JHpJs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for northcom.mil in the mil zone
	DS=28489/SHA-1 uses a deprecated digest algorithm
	DS=28489/SHA-1 has algorithm RSASHA256
	DS=28489/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NORTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20240802231509 20240726231509 54036 mil. QmB58FAOpwBDi0a6zrjqscyZSc4HgSomOJYGyH4ioBdk7NQdb5IhSDRzc4ktPNNn2ck2b7N9fwNx QQXWMGkvEbQ8XtidjKTJh/kOZuDN0o0h8bqdLJwbKe19V7jz5G2xXjPL55Ape+efZamDSNIdTaBk ThmJhLGjkwD2Y+JHpJs= )`
	RRSIG=54036 and DNSKEY=54036 verifies the DS RRset
	DS=28489/SHA-1 is now in the chain-of-trust
	`NORTHCOM.MIL. 10800 IN DS ( 28489 8 1 e35db54a4422c7ad641c567b9d4228a7081b7b70 )`
	`NORTHCOM.MIL. 10800 IN DS ( 28489 8 2 7f09dab2e1556827a6323490fb9553cd4af11270c52fcea9d4667cecc0b621f5 )`
	Query to NCND.NORTHCOM.MIL for northcom.mil/DNSKEY
	Received 1769 bytes from 164.236.0.20
	;; Response received from [164.236.0.20] 1769 octets ;; HEADER SECTION ;; id = 27518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN DNSKEY ;; ANSWER SECTION (6 records) northcom.mil. 1225 IN DNSKEY ( 256 3 8 AwEAAdSJ+Vn0cbIcQG5qNBodonUTag10ezwh+zmHG3JUooqQJv2+anNNo3Wo/YHe5DC2C0Vx7NKz 078RxJ9l6D0slw1Y0xvMiN4A2z5lKd3hye/8qtaKdGCz2Zi107Z5WtCyZyOoyqEago5EQq84wEVZ h+eBlwUDLut68BFuotVPu2PKDRdfNa8jrDkjVEOjUjIQY5/2LEmV1nwywIsiD8SSu03+xZt0XF9b ojYsMgeyM6bw8WM2TZsGNX+k+shdcgvAwM4ttwFC5EDEHQSEI/A6vl+6JLiBh8Ojn1BgcX81Lb8L A9uUHCc8V4jJCNLUYTyJnsPwShPXU12xJKel90aKB+E= ) ; Key ID = 63441 northcom.mil. 1225 IN DNSKEY ( 257 3 8 AwEAAcGH5MIw4rRdh4KlcuVyQbNSJAzHoMrX91DvSk+mU3EqMe6zAcM9MG+jw6VV9gv0zJ3YeV32 Zh3ZqTphiNBFRDGhIq/atCqm+FWkp39dqV0lk1FV4rAfCwHbL6Vkn9Tan94xugWGs4eyeFi/vJhS dfZsAKRG452MU3wYAuEb/gIlkoNj86eR9avbv0nSxZoRoJ6es1lEUY2BbD3aJQ401DLOvLyBdtPs vFK/atw0m7Y+naQC8ipTQlb+UzqcymX9Wo1JvObkhq39mluQYUEexrQcI75ndll1pliN4O7dqk2B 3Mb8p+z/sA3JHt1r8BoC7fK+HT7mKlPs/80FjCGtWz0= ) ; Key ID = 28489 northcom.mil. 1225 IN DNSKEY ( 256 3 8 AwEAAb0rUOwMCrlwGB3mg8JNrfSINbkq7zM8CfNFRSxlfoonqgTx9W6tgvwosuSu53PEUalhDF97 OBi+GDeQiF5Fiz/3xmN08M5ujzw3oCouvuigE+zR+MjiGc+Svq23H4nbyE7CVk4bP76MDQyHDH9H MXyMYSc1M56tNGFQqoh8NCFpsozJxl/tUXMaCt/FLeECtnYau8DP/P3wK/XA9TJYj21YYid3ogW2 fcNvUaZQKux1h7+FXWB7a5mSwL2VVMvuL29m8H7StkmPt+yZxdwydshmEFxAlcuToEBrXHSR76/8 bLZrJkacKh0xsb3sakMH8AA3WBso0H1sfq2Cwta9BJs= ) ; Key ID = 50076 northcom.mil. 1225 IN RRSIG ( DNSKEY 8 2 3600 20240729035122 20240726025122 50076 northcom.mil. b+sUM/3o5C3dGOxb38eXjl8BJC1e3L9aRC0RErA76iZ29sfDyvyKmv9HQpPK6OiCRXZhnjhR2RNt l2ZiKCS4kFM1nw2nnFx0nzvKZgsULqG8GpDztTxb+HzkGgD8spETbN3B5dCM/N/5mD+BaFJQ5g2w 83OWa02pLb308d5DQ7NtEjaLvx4J2dlYXfEbKs/fub/9F6gGfSUqNrwXTFcOSKMyWh7uPiQM57N1 BfVd8QegdBoQTNIEubgNwWT8txz7ugLyi42nCe5IBaSqP3SV+UtVmPRJ1lDEvGfoGymjrCwmVvnw UaYaT7Z36eh1bqcBNVSBnbrttyC/dJxF6fHhfg== ) northcom.mil. 1225 IN RRSIG ( DNSKEY 8 2 3600 20240729035122 20240726025122 63441 northcom.mil. i8GeyDqY6wJs48pjqUAkT6b51zU8mdr5Y3BHMmKrWkLjddTwavDsO5NyP7biFTCPFpINBNu78eDS bqOnam/cs6tTjB4MjhZI9QIfrk6s7mwfXbZ+oFP4OraHTM4l5QY/XZfi1upKn0C+x5E7A8wS01Xe HP6oIu9CZ0js726POvVcLcUikTNtKv1a1rRBEltwZUrUhPItrGTnvUrpBvoixvX86po95XwDuur2 gbh0jf7x9Cm9LKb/phHSJ7LigSvQPGy9qBDtbaCupyte4g2LI1pf7HXhzjTLsfcrrYnsO6orzYLg pOhYgdB6a5oVA+6gNhsrQ62nq5aQTm7t8sa37g== ) northcom.mil. 1225 IN RRSIG ( DNSKEY 8 2 3600 20240731031932 20240724021932 28489 northcom.mil. crywbujWKEHyOLIeTOsNDjtkI6Crp09H0rjnR/q4hehWJovJ6yXiVBxEk8lJfOuX88ACrmDhoS/L Bc/sO3XNXAInH2l6fogVenu3O7Idu+GEUEhR6Qd35XViJBONvDlBz9UwxqIilj/7QoohQzXLMGgd M/hkFdSG0HW+rVndWVX4B2XNgZixIvu1/ZGPQrXdq+e999hCNXlVEmpwPzRC670Nt+SNRkct7/6c 3p4r4bRjEpFyUwUwk0kXBkevSu7WJhM/WXAVSkdi0pwhyqJBVgpxTz+ZqGonH9+EHiwirdliiCN3 EQAD61PveA9Q16fhEwSd1gJH2CV7NJBxvr9RGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for northcom.mil
	`northcom.mil. 1225 IN DNSKEY ( 256 3 8 AwEAAdSJ+Vn0cbIcQG5qNBodonUTag10ezwh+zmHG3JUooqQJv2+anNNo3Wo/YHe5DC2C0Vx7NKz 078RxJ9l6D0slw1Y0xvMiN4A2z5lKd3hye/8qtaKdGCz2Zi107Z5WtCyZyOoyqEago5EQq84wEVZ h+eBlwUDLut68BFuotVPu2PKDRdfNa8jrDkjVEOjUjIQY5/2LEmV1nwywIsiD8SSu03+xZt0XF9b ojYsMgeyM6bw8WM2TZsGNX+k+shdcgvAwM4ttwFC5EDEHQSEI/A6vl+6JLiBh8Ojn1BgcX81Lb8L A9uUHCc8V4jJCNLUYTyJnsPwShPXU12xJKel90aKB+E= ) ; Key ID = 63441`
	`northcom.mil. 1225 IN DNSKEY ( 257 3 8 AwEAAcGH5MIw4rRdh4KlcuVyQbNSJAzHoMrX91DvSk+mU3EqMe6zAcM9MG+jw6VV9gv0zJ3YeV32 Zh3ZqTphiNBFRDGhIq/atCqm+FWkp39dqV0lk1FV4rAfCwHbL6Vkn9Tan94xugWGs4eyeFi/vJhS dfZsAKRG452MU3wYAuEb/gIlkoNj86eR9avbv0nSxZoRoJ6es1lEUY2BbD3aJQ401DLOvLyBdtPs vFK/atw0m7Y+naQC8ipTQlb+UzqcymX9Wo1JvObkhq39mluQYUEexrQcI75ndll1pliN4O7dqk2B 3Mb8p+z/sA3JHt1r8BoC7fK+HT7mKlPs/80FjCGtWz0= ) ; Key ID = 28489`
	`northcom.mil. 1225 IN DNSKEY ( 256 3 8 AwEAAb0rUOwMCrlwGB3mg8JNrfSINbkq7zM8CfNFRSxlfoonqgTx9W6tgvwosuSu53PEUalhDF97 OBi+GDeQiF5Fiz/3xmN08M5ujzw3oCouvuigE+zR+MjiGc+Svq23H4nbyE7CVk4bP76MDQyHDH9H MXyMYSc1M56tNGFQqoh8NCFpsozJxl/tUXMaCt/FLeECtnYau8DP/P3wK/XA9TJYj21YYid3ogW2 fcNvUaZQKux1h7+FXWB7a5mSwL2VVMvuL29m8H7StkmPt+yZxdwydshmEFxAlcuToEBrXHSR76/8 bLZrJkacKh0xsb3sakMH8AA3WBso0H1sfq2Cwta9BJs= ) ; Key ID = 50076`
	DNSKEY=28489/SEP is now in the chain-of-trust
	DS=28489/SHA-1 verifies DNSKEY=28489/SEP
	DS=28489/SHA-256 verifies DNSKEY=28489/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`northcom.mil. 1225 IN RRSIG ( DNSKEY 8 2 3600 20240729035122 20240726025122 50076 northcom.mil. b+sUM/3o5C3dGOxb38eXjl8BJC1e3L9aRC0RErA76iZ29sfDyvyKmv9HQpPK6OiCRXZhnjhR2RNt l2ZiKCS4kFM1nw2nnFx0nzvKZgsULqG8GpDztTxb+HzkGgD8spETbN3B5dCM/N/5mD+BaFJQ5g2w 83OWa02pLb308d5DQ7NtEjaLvx4J2dlYXfEbKs/fub/9F6gGfSUqNrwXTFcOSKMyWh7uPiQM57N1 BfVd8QegdBoQTNIEubgNwWT8txz7ugLyi42nCe5IBaSqP3SV+UtVmPRJ1lDEvGfoGymjrCwmVvnw UaYaT7Z36eh1bqcBNVSBnbrttyC/dJxF6fHhfg== )`
	`northcom.mil. 1225 IN RRSIG ( DNSKEY 8 2 3600 20240729035122 20240726025122 63441 northcom.mil. i8GeyDqY6wJs48pjqUAkT6b51zU8mdr5Y3BHMmKrWkLjddTwavDsO5NyP7biFTCPFpINBNu78eDS bqOnam/cs6tTjB4MjhZI9QIfrk6s7mwfXbZ+oFP4OraHTM4l5QY/XZfi1upKn0C+x5E7A8wS01Xe HP6oIu9CZ0js726POvVcLcUikTNtKv1a1rRBEltwZUrUhPItrGTnvUrpBvoixvX86po95XwDuur2 gbh0jf7x9Cm9LKb/phHSJ7LigSvQPGy9qBDtbaCupyte4g2LI1pf7HXhzjTLsfcrrYnsO6orzYLg pOhYgdB6a5oVA+6gNhsrQ62nq5aQTm7t8sa37g== )`
	`northcom.mil. 1225 IN RRSIG ( DNSKEY 8 2 3600 20240731031932 20240724021932 28489 northcom.mil. crywbujWKEHyOLIeTOsNDjtkI6Crp09H0rjnR/q4hehWJovJ6yXiVBxEk8lJfOuX88ACrmDhoS/L Bc/sO3XNXAInH2l6fogVenu3O7Idu+GEUEhR6Qd35XViJBONvDlBz9UwxqIilj/7QoohQzXLMGgd M/hkFdSG0HW+rVndWVX4B2XNgZixIvu1/ZGPQrXdq+e999hCNXlVEmpwPzRC670Nt+SNRkct7/6c 3p4r4bRjEpFyUwUwk0kXBkevSu7WJhM/WXAVSkdi0pwhyqJBVgpxTz+ZqGonH9+EHiwirdliiCN3 EQAD61PveA9Q16fhEwSd1gJH2CV7NJBxvr9RGw== )`
	RRSIG=50076 and DNSKEY=50076 verifies the DNSKEY RRset
	RRSIG=63441 and DNSKEY=63441 verifies the DNSKEY RRset
	RRSIG=28489 and DNSKEY=28489/SEP verifies the DNSKEY RRset
	DNSKEY=63441 is now in the chain-of-trust
	DNSKEY=50076 is now in the chain-of-trust
	Query to NCND.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.0.20
	;; Response received from [164.236.0.20] 1410 octets ;; HEADER SECTION ;; id = 48091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030310 20240726020310 63441 northcom.mil. ekWJIoAEeu2naGgDLhSAqGHZRQfK1AgNtYboGHZVNipQuSbTc3Pry6wCQ/8Sfo/ej4DpiA6z7vIk QnHlWTx2dKhrVMPQEdyjz13pcVC2zaOCyyVfT+ElXy+S+oZczAJ/Jr91Xbt7fZZAqjnA+5lWJqu2 hD4LNxM64SttkUebDXMrFvaue+4IuMdybCAJQhn1XGwdZMBbvMMMUwdAyMbZbaZhWlspHcjShTcU jpL+Fo0EAdcFYy3IMh0WbzRm1ZA6n0RD26IIeRinoeSGLijbHM0VYuZy6EePY84UEgTY21SL2RVH YRgrxWiqvpIvrwiY2MQIvP+WQMHlcIkPOzb9UA== ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030106 20240726020106 50076 northcom.mil. Sc/YXkJLBMdBTLl5KuGehEXziklc+z333JwpKilW4L1D6o1JOjdrBWqZWGArAOVqENnaOvZW3VVM +3ITkHZHXQvo3msQl0+B5RvNEIgT/xH3+yo5VDUnOjqu551mx9Afneew7hUoHKnaVBtAM/z/1lFJ 17cR7R1qUC9CM015k/SZ4SrjUPkJ2Aag8jsxkcLGXbOdKR6smgkTqJmmF1adcSI7QvfrIEshZMqh 0T0hQR8MUX6ykI6NERzLToCtZKUfrsmxmbaj3DyqPNjYpYwM1z0+SJNJnWsejP7aku9cHxgghyxZ GpD2oLUByKjjvNArmmI6qQRzAjI4GCZdvyQLeA== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 63441 northcom.mil. G95urgMtqs+GqzNvlqvm3mXAQsBTC419yaMTVtQr1kPEvB3RGY6H5mZ2je2nH0Al8YV6OynwCzxi PpcNe+1CduuqST2vRnVenkAUvYh4AQ37Dew9m/jqisaGm94JluvrqYHHTmvQJcuiVO8HLlsUYNk8 KTUaTQkBjdPnVd22NFJZQULnG3yPdmWSx7+Y/CHeYWiu+fAbseChaYQmVYShKAIpyVVixX+eMbW6 8XXi/MVLV2bzX6JWkR9X3IgaFs0OmSOySd27GmsxKHMJBzrIeQmQs8Cn7IMv/qGoiWMdIlbSqXC6 jG8+l8CTV5qYwIW9Tx+rd187xTF5XSA6tMTkhg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 50076 northcom.mil. Z1XZe5O6M+W5g8GJ5jAb+lFDzbPiMNnRSMRkSvOYbqvs3Sq6uwkCv84rtyxZJk6KDhnlCVMysxtN runiJh56pygUgr0um6M4HoRbduSpkVMqRhAJoyWbYe0u+xfZhQGOa7n2B4MK8+50wsEejH3g5qMW nQ0HwmykcmxbiyM9vruf3IkYZfXTDlhiKOlsJASlLNXo7Up3f2gM5IZdB0dNhtbR8mDyk1N/+8Im HqDuEmdLMajSq/7bzT3U1CHldiREtzSRQpu3XJ+S1w+hYJfu7QkAn/Jt9AvMSMQwXasRvhoqJm20 rppGrkp9xJ10jztGWmhyPUN8VjGNNLA2oLPP3w== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN NSEC3 ( 1 0 1 713fa392606ace43 b8ton7l0821a7mon3hrinqddeasa9dab NS SOA RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NCND.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to NCND2.NORTHCOM.MIL for northcom.mil/SOA
	Received 722 bytes from 164.236.0.19
	;; Response received from [164.236.0.19] 722 octets ;; HEADER SECTION ;; id = 18341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN SOA ;; ANSWER SECTION (3 records) northcom.mil. 500 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20240729133754 20240726123754 50076 northcom.mil. jimZm7h7Q7Qe2BVFDcSBBmLGVNGfus1oZ2FpEqMHjrhG2SBaycpmOrpGFCYUhhO/e+oKW2/24JRj WVwsfja9ymxsWoUkuMArSI3AWKhKJPuKFHYt1H/iOIcXRa/EJl+XzhzDUdh0PGtsiPlblNB/Mcbw 8jtBVbU34EL8n1iSyaTmJpbxPlIbVrzS/RQGXzq3QqvnmfGhE4TzT6VfwD/OoSDV6J+b/0Xhn/Pu 9I3fIdFhWCBn77oz3+j4Zl6kr8AY0VbQtl/7Bny0jj2acPi5cAAz6hv9RrYHwMola3oq00R2b5QV X/NGwmrSJZ6IpERvD3ECNnfSvT4WpFKA+yFn4g== ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20240729133754 20240726123754 63441 northcom.mil. V+BQldo+0Ui+NIgw2kUSuJf3wsDqH2lnWcMDeOHTWW7yYJjJ1VUNdbqZCM+TnsYaK+SL9AVcfTIP lvvGAfqzZIvQlAlf99GVJKT97l2nGDHdIXxnJ7yOJv0EZeh3hrYsxwVo428kBBc9Mme5ymgX/7gg kh2MiYPzYUd2/FVaChUOZVtazbeglrHqEaXopeah7SNBhqJJ0g0qp8fEH8cVUCZ8Ah5+sqnN9ogs H1T+y1MZgBoQ6MtazA4bdPbI6NLuqoaodKhw0C7NtJD8L1NG0r1BLZwfK8DH9CPTxMCZde4DGRPk XjLXvCxnsig8lbpYdwp9itLJmem1Oj47lIFBCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to CMDNSH02.NORTHCOM.MIL for northcom.mil/SOA
	Received 722 bytes from 164.236.160.20
	;; Response received from [164.236.160.20] 722 octets ;; HEADER SECTION ;; id = 14763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN SOA ;; ANSWER SECTION (3 records) northcom.mil. 500 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20240729133754 20240726123754 50076 northcom.mil. jimZm7h7Q7Qe2BVFDcSBBmLGVNGfus1oZ2FpEqMHjrhG2SBaycpmOrpGFCYUhhO/e+oKW2/24JRj WVwsfja9ymxsWoUkuMArSI3AWKhKJPuKFHYt1H/iOIcXRa/EJl+XzhzDUdh0PGtsiPlblNB/Mcbw 8jtBVbU34EL8n1iSyaTmJpbxPlIbVrzS/RQGXzq3QqvnmfGhE4TzT6VfwD/OoSDV6J+b/0Xhn/Pu 9I3fIdFhWCBn77oz3+j4Zl6kr8AY0VbQtl/7Bny0jj2acPi5cAAz6hv9RrYHwMola3oq00R2b5QV X/NGwmrSJZ6IpERvD3ECNnfSvT4WpFKA+yFn4g== ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20240729133754 20240726123754 63441 northcom.mil. V+BQldo+0Ui+NIgw2kUSuJf3wsDqH2lnWcMDeOHTWW7yYJjJ1VUNdbqZCM+TnsYaK+SL9AVcfTIP lvvGAfqzZIvQlAlf99GVJKT97l2nGDHdIXxnJ7yOJv0EZeh3hrYsxwVo428kBBc9Mme5ymgX/7gg kh2MiYPzYUd2/FVaChUOZVtazbeglrHqEaXopeah7SNBhqJJ0g0qp8fEH8cVUCZ8Ah5+sqnN9ogs H1T+y1MZgBoQ6MtazA4bdPbI6NLuqoaodKhw0C7NtJD8L1NG0r1BLZwfK8DH9CPTxMCZde4DGRPk XjLXvCxnsig8lbpYdwp9itLJmem1Oj47lIFBCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to CMDNSH01.NORTHCOM.MIL for northcom.mil/SOA
	Received 722 bytes from 164.236.160.19
	;; Response received from [164.236.160.19] 722 octets ;; HEADER SECTION ;; id = 186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN SOA ;; ANSWER SECTION (3 records) northcom.mil. 500 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20240729051557 20240726041557 50076 northcom.mil. kLSIISdqDoBdz+M02FKmaakglRaegokMQFXw+9OocZs1K1aU6Hcb0qAyzSZXA7Wj2iIme4d8Klj1 DjOxNu2JM3e9AvD0I0VbecCZD+tQ4tb3wj39k7odDz3E2qXeeTnTjCzEBcECtXlhfU/xYM+/Rg9t u3e8D5qboPSdl9giizVEnYhK536Zz4xFHUm6dkAhVFi89F5RkXk3+SrTeejq5Ro2tFJcgisOjtZd 2HHDuo28QL7XoWhr8fJVLHU95oV57IC3WIIcky6YDa2VRsUFP6qe8bbbRIzq6sIXdIb3+Fn3X5jr fO6oXGGVCWavvE+KiBui7Csa2lW8v8yhH1uJ1Q== ) northcom.mil. 500 IN RRSIG ( SOA 8 2 500 20240729051557 20240726041557 63441 northcom.mil. bFYtghT2pjahh8luzojq+FRyFIPvJDjxD0KbCWf26sYkuH5PfoOKN62eQwquuFzz8lsRVkeaVpuc d6pcHmXYs2ysb9v6Rs3EJiQ3bQKlkfG/ZA5DprjzaB3Ge62njhCSKU/gRwSr90c/MW7XN6bLBt52 mJH3JXZv7sSiIe2ehaZISOUTbw20CMlZ1jDvDiZMv2fBhZrvrUifFebiyujfcG9/RsS9f2Cox7zr XFmre97gWYAgCg7EKh916/o6U9wwhTr6VCcoSfSGVFeOv6CTEj2QDrvvmbC5iV6TsCcegwxXTzJE FAT0RSBAQZJ6GagcBVAiVgBLtXJFCTLJM65U1A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NCND.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.0.20
	;; Response received from [164.236.0.20] 1410 octets ;; HEADER SECTION ;; id = 44017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030310 20240726020310 63441 northcom.mil. ekWJIoAEeu2naGgDLhSAqGHZRQfK1AgNtYboGHZVNipQuSbTc3Pry6wCQ/8Sfo/ej4DpiA6z7vIk QnHlWTx2dKhrVMPQEdyjz13pcVC2zaOCyyVfT+ElXy+S+oZczAJ/Jr91Xbt7fZZAqjnA+5lWJqu2 hD4LNxM64SttkUebDXMrFvaue+4IuMdybCAJQhn1XGwdZMBbvMMMUwdAyMbZbaZhWlspHcjShTcU jpL+Fo0EAdcFYy3IMh0WbzRm1ZA6n0RD26IIeRinoeSGLijbHM0VYuZy6EePY84UEgTY21SL2RVH YRgrxWiqvpIvrwiY2MQIvP+WQMHlcIkPOzb9UA== ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030106 20240726020106 50076 northcom.mil. Sc/YXkJLBMdBTLl5KuGehEXziklc+z333JwpKilW4L1D6o1JOjdrBWqZWGArAOVqENnaOvZW3VVM +3ITkHZHXQvo3msQl0+B5RvNEIgT/xH3+yo5VDUnOjqu551mx9Afneew7hUoHKnaVBtAM/z/1lFJ 17cR7R1qUC9CM015k/SZ4SrjUPkJ2Aag8jsxkcLGXbOdKR6smgkTqJmmF1adcSI7QvfrIEshZMqh 0T0hQR8MUX6ykI6NERzLToCtZKUfrsmxmbaj3DyqPNjYpYwM1z0+SJNJnWsejP7aku9cHxgghyxZ GpD2oLUByKjjvNArmmI6qQRzAjI4GCZdvyQLeA== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN NSEC3 ( 1 0 1 713fa392606ace43 b8ton7l0821a7mon3hrinqddeasa9dab NS SOA RRSIG DNSKEY NSEC3PARAM ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 63441 northcom.mil. G95urgMtqs+GqzNvlqvm3mXAQsBTC419yaMTVtQr1kPEvB3RGY6H5mZ2je2nH0Al8YV6OynwCzxi PpcNe+1CduuqST2vRnVenkAUvYh4AQ37Dew9m/jqisaGm94JluvrqYHHTmvQJcuiVO8HLlsUYNk8 KTUaTQkBjdPnVd22NFJZQULnG3yPdmWSx7+Y/CHeYWiu+fAbseChaYQmVYShKAIpyVVixX+eMbW6 8XXi/MVLV2bzX6JWkR9X3IgaFs0OmSOySd27GmsxKHMJBzrIeQmQs8Cn7IMv/qGoiWMdIlbSqXC6 jG8+l8CTV5qYwIW9Tx+rd187xTF5XSA6tMTkhg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 50076 northcom.mil. Z1XZe5O6M+W5g8GJ5jAb+lFDzbPiMNnRSMRkSvOYbqvs3Sq6uwkCv84rtyxZJk6KDhnlCVMysxtN runiJh56pygUgr0um6M4HoRbduSpkVMqRhAJoyWbYe0u+xfZhQGOa7n2B4MK8+50wsEejH3g5qMW nQ0HwmykcmxbiyM9vruf3IkYZfXTDlhiKOlsJASlLNXo7Up3f2gM5IZdB0dNhtbR8mDyk1N/+8Im HqDuEmdLMajSq/7bzT3U1CHldiREtzSRQpu3XJ+S1w+hYJfu7QkAn/Jt9AvMSMQwXasRvhoqJm20 rppGrkp9xJ10jztGWmhyPUN8VjGNNLA2oLPP3w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030310 20240726020310 63441 northcom.mil. ekWJIoAEeu2naGgDLhSAqGHZRQfK1AgNtYboGHZVNipQuSbTc3Pry6wCQ/8Sfo/ej4DpiA6z7vIk QnHlWTx2dKhrVMPQEdyjz13pcVC2zaOCyyVfT+ElXy+S+oZczAJ/Jr91Xbt7fZZAqjnA+5lWJqu2 hD4LNxM64SttkUebDXMrFvaue+4IuMdybCAJQhn1XGwdZMBbvMMMUwdAyMbZbaZhWlspHcjShTcU jpL+Fo0EAdcFYy3IMh0WbzRm1ZA6n0RD26IIeRinoeSGLijbHM0VYuZy6EePY84UEgTY21SL2RVH YRgrxWiqvpIvrwiY2MQIvP+WQMHlcIkPOzb9UA== )`
	`northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030106 20240726020106 50076 northcom.mil. Sc/YXkJLBMdBTLl5KuGehEXziklc+z333JwpKilW4L1D6o1JOjdrBWqZWGArAOVqENnaOvZW3VVM +3ITkHZHXQvo3msQl0+B5RvNEIgT/xH3+yo5VDUnOjqu551mx9Afneew7hUoHKnaVBtAM/z/1lFJ 17cR7R1qUC9CM015k/SZ4SrjUPkJ2Aag8jsxkcLGXbOdKR6smgkTqJmmF1adcSI7QvfrIEshZMqh 0T0hQR8MUX6ykI6NERzLToCtZKUfrsmxmbaj3DyqPNjYpYwM1z0+SJNJnWsejP7aku9cHxgghyxZ GpD2oLUByKjjvNArmmI6qQRzAjI4GCZdvyQLeA== )`
	RRSIG=63441 and DNSKEY=63441 verifies the SOA RRset
	RRSIG=50076 and DNSKEY=50076 verifies the SOA RRset

northcom.mil

	Query to NCND2.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.0.19
	;; Response received from [164.236.0.19] 1410 octets ;; HEADER SECTION ;; id = 65118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 60 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030310 20240726020310 63441 northcom.mil. ekWJIoAEeu2naGgDLhSAqGHZRQfK1AgNtYboGHZVNipQuSbTc3Pry6wCQ/8Sfo/ej4DpiA6z7vIk QnHlWTx2dKhrVMPQEdyjz13pcVC2zaOCyyVfT+ElXy+S+oZczAJ/Jr91Xbt7fZZAqjnA+5lWJqu2 hD4LNxM64SttkUebDXMrFvaue+4IuMdybCAJQhn1XGwdZMBbvMMMUwdAyMbZbaZhWlspHcjShTcU jpL+Fo0EAdcFYy3IMh0WbzRm1ZA6n0RD26IIeRinoeSGLijbHM0VYuZy6EePY84UEgTY21SL2RVH YRgrxWiqvpIvrwiY2MQIvP+WQMHlcIkPOzb9UA== ) northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030106 20240726020106 50076 northcom.mil. Sc/YXkJLBMdBTLl5KuGehEXziklc+z333JwpKilW4L1D6o1JOjdrBWqZWGArAOVqENnaOvZW3VVM +3ITkHZHXQvo3msQl0+B5RvNEIgT/xH3+yo5VDUnOjqu551mx9Afneew7hUoHKnaVBtAM/z/1lFJ 17cR7R1qUC9CM015k/SZ4SrjUPkJ2Aag8jsxkcLGXbOdKR6smgkTqJmmF1adcSI7QvfrIEshZMqh 0T0hQR8MUX6ykI6NERzLToCtZKUfrsmxmbaj3DyqPNjYpYwM1z0+SJNJnWsejP7aku9cHxgghyxZ GpD2oLUByKjjvNArmmI6qQRzAjI4GCZdvyQLeA== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN NSEC3 ( 1 0 1 713fa392606ace43 b8ton7l0821a7mon3hrinqddeasa9dab NS SOA RRSIG DNSKEY NSEC3PARAM ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 63441 northcom.mil. G95urgMtqs+GqzNvlqvm3mXAQsBTC419yaMTVtQr1kPEvB3RGY6H5mZ2je2nH0Al8YV6OynwCzxi PpcNe+1CduuqST2vRnVenkAUvYh4AQ37Dew9m/jqisaGm94JluvrqYHHTmvQJcuiVO8HLlsUYNk8 KTUaTQkBjdPnVd22NFJZQULnG3yPdmWSx7+Y/CHeYWiu+fAbseChaYQmVYShKAIpyVVixX+eMbW6 8XXi/MVLV2bzX6JWkR9X3IgaFs0OmSOySd27GmsxKHMJBzrIeQmQs8Cn7IMv/qGoiWMdIlbSqXC6 jG8+l8CTV5qYwIW9Tx+rd187xTF5XSA6tMTkhg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 60 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 50076 northcom.mil. Z1XZe5O6M+W5g8GJ5jAb+lFDzbPiMNnRSMRkSvOYbqvs3Sq6uwkCv84rtyxZJk6KDhnlCVMysxtN runiJh56pygUgr0um6M4HoRbduSpkVMqRhAJoyWbYe0u+xfZhQGOa7n2B4MK8+50wsEejH3g5qMW nQ0HwmykcmxbiyM9vruf3IkYZfXTDlhiKOlsJASlLNXo7Up3f2gM5IZdB0dNhtbR8mDyk1N/+8Im HqDuEmdLMajSq/7bzT3U1CHldiREtzSRQpu3XJ+S1w+hYJfu7QkAn/Jt9AvMSMQwXasRvhoqJm20 rppGrkp9xJ10jztGWmhyPUN8VjGNNLA2oLPP3w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NCND2.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to NCND2.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.0.19
	;; Response received from [164.236.0.19] 1410 octets ;; HEADER SECTION ;; id = 12690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 59 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20240729030310 20240726020310 63441 northcom.mil. ekWJIoAEeu2naGgDLhSAqGHZRQfK1AgNtYboGHZVNipQuSbTc3Pry6wCQ/8Sfo/ej4DpiA6z7vIk QnHlWTx2dKhrVMPQEdyjz13pcVC2zaOCyyVfT+ElXy+S+oZczAJ/Jr91Xbt7fZZAqjnA+5lWJqu2 hD4LNxM64SttkUebDXMrFvaue+4IuMdybCAJQhn1XGwdZMBbvMMMUwdAyMbZbaZhWlspHcjShTcU jpL+Fo0EAdcFYy3IMh0WbzRm1ZA6n0RD26IIeRinoeSGLijbHM0VYuZy6EePY84UEgTY21SL2RVH YRgrxWiqvpIvrwiY2MQIvP+WQMHlcIkPOzb9UA== ) northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20240729030106 20240726020106 50076 northcom.mil. Sc/YXkJLBMdBTLl5KuGehEXziklc+z333JwpKilW4L1D6o1JOjdrBWqZWGArAOVqENnaOvZW3VVM +3ITkHZHXQvo3msQl0+B5RvNEIgT/xH3+yo5VDUnOjqu551mx9Afneew7hUoHKnaVBtAM/z/1lFJ 17cR7R1qUC9CM015k/SZ4SrjUPkJ2Aag8jsxkcLGXbOdKR6smgkTqJmmF1adcSI7QvfrIEshZMqh 0T0hQR8MUX6ykI6NERzLToCtZKUfrsmxmbaj3DyqPNjYpYwM1z0+SJNJnWsejP7aku9cHxgghyxZ GpD2oLUByKjjvNArmmI6qQRzAjI4GCZdvyQLeA== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN NSEC3 ( 1 0 1 713fa392606ace43 b8ton7l0821a7mon3hrinqddeasa9dab NS SOA RRSIG DNSKEY NSEC3PARAM ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 63441 northcom.mil. G95urgMtqs+GqzNvlqvm3mXAQsBTC419yaMTVtQr1kPEvB3RGY6H5mZ2je2nH0Al8YV6OynwCzxi PpcNe+1CduuqST2vRnVenkAUvYh4AQ37Dew9m/jqisaGm94JluvrqYHHTmvQJcuiVO8HLlsUYNk8 KTUaTQkBjdPnVd22NFJZQULnG3yPdmWSx7+Y/CHeYWiu+fAbseChaYQmVYShKAIpyVVixX+eMbW6 8XXi/MVLV2bzX6JWkR9X3IgaFs0OmSOySd27GmsxKHMJBzrIeQmQs8Cn7IMv/qGoiWMdIlbSqXC6 jG8+l8CTV5qYwIW9Tx+rd187xTF5XSA6tMTkhg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 50076 northcom.mil. Z1XZe5O6M+W5g8GJ5jAb+lFDzbPiMNnRSMRkSvOYbqvs3Sq6uwkCv84rtyxZJk6KDhnlCVMysxtN runiJh56pygUgr0um6M4HoRbduSpkVMqRhAJoyWbYe0u+xfZhQGOa7n2B4MK8+50wsEejH3g5qMW nQ0HwmykcmxbiyM9vruf3IkYZfXTDlhiKOlsJASlLNXo7Up3f2gM5IZdB0dNhtbR8mDyk1N/+8Im HqDuEmdLMajSq/7bzT3U1CHldiREtzSRQpu3XJ+S1w+hYJfu7QkAn/Jt9AvMSMQwXasRvhoqJm20 rppGrkp9xJ10jztGWmhyPUN8VjGNNLA2oLPP3w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030310 20240726020310 63441 northcom.mil. ekWJIoAEeu2naGgDLhSAqGHZRQfK1AgNtYboGHZVNipQuSbTc3Pry6wCQ/8Sfo/ej4DpiA6z7vIk QnHlWTx2dKhrVMPQEdyjz13pcVC2zaOCyyVfT+ElXy+S+oZczAJ/Jr91Xbt7fZZAqjnA+5lWJqu2 hD4LNxM64SttkUebDXMrFvaue+4IuMdybCAJQhn1XGwdZMBbvMMMUwdAyMbZbaZhWlspHcjShTcU jpL+Fo0EAdcFYy3IMh0WbzRm1ZA6n0RD26IIeRinoeSGLijbHM0VYuZy6EePY84UEgTY21SL2RVH YRgrxWiqvpIvrwiY2MQIvP+WQMHlcIkPOzb9UA== )`
	`northcom.mil. 60 IN RRSIG ( SOA 8 2 60 20240729030106 20240726020106 50076 northcom.mil. Sc/YXkJLBMdBTLl5KuGehEXziklc+z333JwpKilW4L1D6o1JOjdrBWqZWGArAOVqENnaOvZW3VVM +3ITkHZHXQvo3msQl0+B5RvNEIgT/xH3+yo5VDUnOjqu551mx9Afneew7hUoHKnaVBtAM/z/1lFJ 17cR7R1qUC9CM015k/SZ4SrjUPkJ2Aag8jsxkcLGXbOdKR6smgkTqJmmF1adcSI7QvfrIEshZMqh 0T0hQR8MUX6ykI6NERzLToCtZKUfrsmxmbaj3DyqPNjYpYwM1z0+SJNJnWsejP7aku9cHxgghyxZ GpD2oLUByKjjvNArmmI6qQRzAjI4GCZdvyQLeA== )`
	RRSIG=63441 and DNSKEY=63441 verifies the SOA RRset
	RRSIG=50076 and DNSKEY=50076 verifies the SOA RRset

northcom.mil

	Query to CMDNSH01.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.160.19
	;; Response received from [164.236.160.19] 1410 octets ;; HEADER SECTION ;; id = 35714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 59 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20240729030339 20240726020339 63441 northcom.mil. Vi4DFBK3FaAbOcFel06sffYB4DtMoR+P3kpKdmLlILu1A6Iutuh8KGK5MNXBC++SX+49r8F7Tx4x AQFueW//8LqLXA93jOb7fKwuT75OzEHBWWUNB9u9BWiFbgQDRZyQVfTuLvfutXtph2hgEhjnarJQ ATiY0i6ugkjifDLjmn/SR4TLdshgTJi/M2S9C6C7nBf3Hnj8LM7iYFmoh+VdqVoQAvZg78RwIQPv k64pOUC/O/Dc+odLUJ/ha4UIorNmVRy7wK0vsYVJ54zItWOy+/w28A0BJZtKglFHr9x/wh2t5VYh VIzZR0bqwupMSMiSCginQa6x299jaElX0X6HPw== ) northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20240729030103 20240726020103 50076 northcom.mil. MimP0+J2FdRLLntriFHLAhp895hC/n0P30vRI31rYVxVttLG9iTxJXd5kQCQLQbRlHEP74BCx1Fo QdN3sHozRlyR4CRf7507DKjuHm44xYroES/SqUyHn3dEPKlPDzUXC+qm5viHeLX8pS3wSi+MniKD VyWK/0VROPPjMLOUhljcR4wR2JEeh/eEHhzx3BlOdXF4mZB6HgblSSyue/NtmYqBdkcQb/iDobNk RCzfxoyecG/jslVVs9Doc22PBbxQMqhDBFkLlKqtUVOCFG26G9Qp2UtGe6fB3wrnGdxuruOxsfnY x1ieNCk0Q4iwgQ2e8chqoiEl2hzy5Kl55guEkg== ) q2gr2qvrc9cmf8k1t27ke6190s1r0u4q.northcom.mil. 13 IN NSEC3 ( 1 0 1 5b4fa5cdb35dfedd q2gr2qvrc9cmf8k1t27ke6190s1r0u4r NS SOA RRSIG DNSKEY NSEC3PARAM ) q2gr2qvrc9cmf8k1t27ke6190s1r0u4q.northcom.mil. 13 IN RRSIG ( NSEC3 8 3 60 20240729184627 20240726174627 63441 northcom.mil. RC6bFO2vpN4RW1XlEQEwj1iKMua4P71x6BGY7SuSX4ZjgRXpIZ1rI/3CPaAS1S6DXNtPpcO8f/FB e4LDgRq0waG+woHdLGmjdTY8JXi9Y2ELxkn6CkWUzRDIQkVuM1WmOgbcVsnv7TI2SVnt1bi+y9oM jCodXSd35A6DGBNCcI+nUBOUyuQMHx7Xv2cq2kp2jKCfEGCNtqn+8qOBbZEcnWdiSJrbrQzGgt8z rGroTG1lA/1SbirjemkyDO3INPZJA9ZDZDQc6ia+sxRmKIejo04ZmIegGmLGPQ/ZroiQrxcJ13KT GIb9hnc3Bf/fRZyfI1ggss3D8ly30KaokcLmMQ== ) q2gr2qvrc9cmf8k1t27ke6190s1r0u4q.northcom.mil. 13 IN RRSIG ( NSEC3 8 3 60 20240729184627 20240726174627 50076 northcom.mil. tx0Kc4GsPWStRQk++kDXTU2auowZlXGLLQr+nCybRUS4SGdlrHxzjAgiwp6kCruCsBmUKrJJsUa5 dZU25RU4GyTI8h98MWfkAT6rStCctbz23DKINhW0UhQiHtqJox1f0L/qcU6IyRxHqlicdOhII9cI wbeX3Oh4sDDAuyxWpyWthNV0xVLBngkgVM5lRz+vpHBYgNFlb0BNJwC6GuAoHSkOrHtucmpeORi2 35PkmiUmmZgoFQpyhQTr4/ysuD8tpf87hihGKcH33iBC7+T6pdUDjrvLMATa3Emh0PCFaX6LQfBf lBkHcjfLuUGgxSFd62LFeG1FwJ0S0r/625v0Xg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	CMDNSH01.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to CMDNSH01.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.160.19
	;; Response received from [164.236.160.19] 1410 octets ;; HEADER SECTION ;; id = 38750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 28 IN SOA ( NCND.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 28 IN RRSIG ( SOA 8 2 60 20240729030406 20240726020406 63441 northcom.mil. B4tCtdWYFbEVutyj9woG9L2TmIipC552BXoahFg6TMfmu82tzaKnQuQXa3OzF+Vq+DClSlhWSogk UstPCSrLN6llDjRVYJEnvH/7ZYoUUpozjXTlQYTLiVGF8FsqK2rVt3qXJ74mr18520lYWU98y48J +TuP3wO8RnMUE5DTtz52S1GlqXBcj18UXm2dBn/yi8y9b55SMyojAyqcXlMCmaMfvJjNBYrD8uQR skhjsf50hWLj6kXL53OojvKZGfYvOrtK/BmdkwV4ip0atmYmmo1mu3UnEHNAf+DFmlJaf9v/KinN 5Z2h5gfxdJVN+d46NfYJgAG8FoEBqvW4W2Ql9g== ) northcom.mil. 28 IN RRSIG ( SOA 8 2 60 20240729030102 20240726020102 50076 northcom.mil. sXOY+GZUNw7YwywA7Lpwls7m3vAKH3qZVfdO7RvM7GKzVuWyBntGtG7w/IGwhaEmRb+rEd6yPG8y 2RaMZlGeJYMuK+qJjouuLPsYCvb8f6Ng0B59n2QUg9kbXQdXp5LEr9RmDySYEjgNjpCNei5KM6R7 nKDHIlpUAGy0DKK+xKHxRlGrE23Zti00CxuNl4dk6f5eSQ/K+N77G/C7yebP7RzbC8OGL1oGa2MA L9Mu+egVTmpSdlTOX3j7KtygopLgTTU2RjXUUkKI3xPDvsDtHZAuD/ZHuuOY0Q0u1CBV1YGH6Y0N lfcqPq/LxLiwf5a+eoAjrCgQ5JYgu5RwYhhzfA== ) q2gr2qvrc9cmf8k1t27ke6190s1r0u4q.northcom.mil. 13 IN NSEC3 ( 1 0 1 5b4fa5cdb35dfedd q2gr2qvrc9cmf8k1t27ke6190s1r0u4r NS SOA RRSIG DNSKEY NSEC3PARAM ) q2gr2qvrc9cmf8k1t27ke6190s1r0u4q.northcom.mil. 13 IN RRSIG ( NSEC3 8 3 60 20240729184627 20240726174627 63441 northcom.mil. RC6bFO2vpN4RW1XlEQEwj1iKMua4P71x6BGY7SuSX4ZjgRXpIZ1rI/3CPaAS1S6DXNtPpcO8f/FB e4LDgRq0waG+woHdLGmjdTY8JXi9Y2ELxkn6CkWUzRDIQkVuM1WmOgbcVsnv7TI2SVnt1bi+y9oM jCodXSd35A6DGBNCcI+nUBOUyuQMHx7Xv2cq2kp2jKCfEGCNtqn+8qOBbZEcnWdiSJrbrQzGgt8z rGroTG1lA/1SbirjemkyDO3INPZJA9ZDZDQc6ia+sxRmKIejo04ZmIegGmLGPQ/ZroiQrxcJ13KT GIb9hnc3Bf/fRZyfI1ggss3D8ly30KaokcLmMQ== ) q2gr2qvrc9cmf8k1t27ke6190s1r0u4q.northcom.mil. 13 IN RRSIG ( NSEC3 8 3 60 20240729184627 20240726174627 50076 northcom.mil. tx0Kc4GsPWStRQk++kDXTU2auowZlXGLLQr+nCybRUS4SGdlrHxzjAgiwp6kCruCsBmUKrJJsUa5 dZU25RU4GyTI8h98MWfkAT6rStCctbz23DKINhW0UhQiHtqJox1f0L/qcU6IyRxHqlicdOhII9cI wbeX3Oh4sDDAuyxWpyWthNV0xVLBngkgVM5lRz+vpHBYgNFlb0BNJwC6GuAoHSkOrHtucmpeORi2 35PkmiUmmZgoFQpyhQTr4/ysuD8tpf87hihGKcH33iBC7+T6pdUDjrvLMATa3Emh0PCFaX6LQfBf lBkHcjfLuUGgxSFd62LFeG1FwJ0S0r/625v0Xg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20240729030339 20240726020339 63441 northcom.mil. Vi4DFBK3FaAbOcFel06sffYB4DtMoR+P3kpKdmLlILu1A6Iutuh8KGK5MNXBC++SX+49r8F7Tx4x AQFueW//8LqLXA93jOb7fKwuT75OzEHBWWUNB9u9BWiFbgQDRZyQVfTuLvfutXtph2hgEhjnarJQ ATiY0i6ugkjifDLjmn/SR4TLdshgTJi/M2S9C6C7nBf3Hnj8LM7iYFmoh+VdqVoQAvZg78RwIQPv k64pOUC/O/Dc+odLUJ/ha4UIorNmVRy7wK0vsYVJ54zItWOy+/w28A0BJZtKglFHr9x/wh2t5VYh VIzZR0bqwupMSMiSCginQa6x299jaElX0X6HPw== )`
	`northcom.mil. 59 IN RRSIG ( SOA 8 2 60 20240729030103 20240726020103 50076 northcom.mil. MimP0+J2FdRLLntriFHLAhp895hC/n0P30vRI31rYVxVttLG9iTxJXd5kQCQLQbRlHEP74BCx1Fo QdN3sHozRlyR4CRf7507DKjuHm44xYroES/SqUyHn3dEPKlPDzUXC+qm5viHeLX8pS3wSi+MniKD VyWK/0VROPPjMLOUhljcR4wR2JEeh/eEHhzx3BlOdXF4mZB6HgblSSyue/NtmYqBdkcQb/iDobNk RCzfxoyecG/jslVVs9Doc22PBbxQMqhDBFkLlKqtUVOCFG26G9Qp2UtGe6fB3wrnGdxuruOxsfnY x1ieNCk0Q4iwgQ2e8chqoiEl2hzy5Kl55guEkg== )`
	RRSIG=63441 and DNSKEY=63441 verifies the SOA RRset
	RRSIG=50076 and DNSKEY=50076 verifies the SOA RRset

northcom.mil

	Query to CMDNSH02.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.160.20
	;; Response received from [164.236.160.20] 1410 octets ;; HEADER SECTION ;; id = 55109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 30 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 30 IN RRSIG ( SOA 8 2 60 20240729030339 20240726020339 63441 northcom.mil. Vi4DFBK3FaAbOcFel06sffYB4DtMoR+P3kpKdmLlILu1A6Iutuh8KGK5MNXBC++SX+49r8F7Tx4x AQFueW//8LqLXA93jOb7fKwuT75OzEHBWWUNB9u9BWiFbgQDRZyQVfTuLvfutXtph2hgEhjnarJQ ATiY0i6ugkjifDLjmn/SR4TLdshgTJi/M2S9C6C7nBf3Hnj8LM7iYFmoh+VdqVoQAvZg78RwIQPv k64pOUC/O/Dc+odLUJ/ha4UIorNmVRy7wK0vsYVJ54zItWOy+/w28A0BJZtKglFHr9x/wh2t5VYh VIzZR0bqwupMSMiSCginQa6x299jaElX0X6HPw== ) northcom.mil. 30 IN RRSIG ( SOA 8 2 60 20240729030103 20240726020103 50076 northcom.mil. MimP0+J2FdRLLntriFHLAhp895hC/n0P30vRI31rYVxVttLG9iTxJXd5kQCQLQbRlHEP74BCx1Fo QdN3sHozRlyR4CRf7507DKjuHm44xYroES/SqUyHn3dEPKlPDzUXC+qm5viHeLX8pS3wSi+MniKD VyWK/0VROPPjMLOUhljcR4wR2JEeh/eEHhzx3BlOdXF4mZB6HgblSSyue/NtmYqBdkcQb/iDobNk RCzfxoyecG/jslVVs9Doc22PBbxQMqhDBFkLlKqtUVOCFG26G9Qp2UtGe6fB3wrnGdxuruOxsfnY x1ieNCk0Q4iwgQ2e8chqoiEl2hzy5Kl55guEkg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN NSEC3 ( 1 0 1 713fa392606ace43 b8ton7l0821a7mon3hrinqddeasa9dab NS SOA RRSIG DNSKEY NSEC3PARAM ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 63441 northcom.mil. G95urgMtqs+GqzNvlqvm3mXAQsBTC419yaMTVtQr1kPEvB3RGY6H5mZ2je2nH0Al8YV6OynwCzxi PpcNe+1CduuqST2vRnVenkAUvYh4AQ37Dew9m/jqisaGm94JluvrqYHHTmvQJcuiVO8HLlsUYNk8 KTUaTQkBjdPnVd22NFJZQULnG3yPdmWSx7+Y/CHeYWiu+fAbseChaYQmVYShKAIpyVVixX+eMbW6 8XXi/MVLV2bzX6JWkR9X3IgaFs0OmSOySd27GmsxKHMJBzrIeQmQs8Cn7IMv/qGoiWMdIlbSqXC6 jG8+l8CTV5qYwIW9Tx+rd187xTF5XSA6tMTkhg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 50076 northcom.mil. Z1XZe5O6M+W5g8GJ5jAb+lFDzbPiMNnRSMRkSvOYbqvs3Sq6uwkCv84rtyxZJk6KDhnlCVMysxtN runiJh56pygUgr0um6M4HoRbduSpkVMqRhAJoyWbYe0u+xfZhQGOa7n2B4MK8+50wsEejH3g5qMW nQ0HwmykcmxbiyM9vruf3IkYZfXTDlhiKOlsJASlLNXo7Up3f2gM5IZdB0dNhtbR8mDyk1N/+8Im HqDuEmdLMajSq/7bzT3U1CHldiREtzSRQpu3XJ+S1w+hYJfu7QkAn/Jt9AvMSMQwXasRvhoqJm20 rppGrkp9xJ10jztGWmhyPUN8VjGNNLA2oLPP3w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	CMDNSH02.NORTHCOM.MIL is authoritative for northcom.mil
	Found RRSIG signed by northcom.mil zone
	Query to CMDNSH02.NORTHCOM.MIL for northcom.mil/A
	Received 1410 bytes from 164.236.160.20
	;; Response received from [164.236.160.20] 1410 octets ;; HEADER SECTION ;; id = 29668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; northcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) northcom.mil. 30 IN SOA ( ncnd.northcom.mil. n-nc.peterson.n-ncj6.mbx.sysad-omb.mail.mil. 2024061304 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) northcom.mil. 30 IN RRSIG ( SOA 8 2 60 20240729030339 20240726020339 63441 northcom.mil. Vi4DFBK3FaAbOcFel06sffYB4DtMoR+P3kpKdmLlILu1A6Iutuh8KGK5MNXBC++SX+49r8F7Tx4x AQFueW//8LqLXA93jOb7fKwuT75OzEHBWWUNB9u9BWiFbgQDRZyQVfTuLvfutXtph2hgEhjnarJQ ATiY0i6ugkjifDLjmn/SR4TLdshgTJi/M2S9C6C7nBf3Hnj8LM7iYFmoh+VdqVoQAvZg78RwIQPv k64pOUC/O/Dc+odLUJ/ha4UIorNmVRy7wK0vsYVJ54zItWOy+/w28A0BJZtKglFHr9x/wh2t5VYh VIzZR0bqwupMSMiSCginQa6x299jaElX0X6HPw== ) northcom.mil. 30 IN RRSIG ( SOA 8 2 60 20240729030103 20240726020103 50076 northcom.mil. MimP0+J2FdRLLntriFHLAhp895hC/n0P30vRI31rYVxVttLG9iTxJXd5kQCQLQbRlHEP74BCx1Fo QdN3sHozRlyR4CRf7507DKjuHm44xYroES/SqUyHn3dEPKlPDzUXC+qm5viHeLX8pS3wSi+MniKD VyWK/0VROPPjMLOUhljcR4wR2JEeh/eEHhzx3BlOdXF4mZB6HgblSSyue/NtmYqBdkcQb/iDobNk RCzfxoyecG/jslVVs9Doc22PBbxQMqhDBFkLlKqtUVOCFG26G9Qp2UtGe6fB3wrnGdxuruOxsfnY x1ieNCk0Q4iwgQ2e8chqoiEl2hzy5Kl55guEkg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN NSEC3 ( 1 0 1 713fa392606ace43 b8ton7l0821a7mon3hrinqddeasa9dab NS SOA RRSIG DNSKEY NSEC3PARAM ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 63441 northcom.mil. G95urgMtqs+GqzNvlqvm3mXAQsBTC419yaMTVtQr1kPEvB3RGY6H5mZ2je2nH0Al8YV6OynwCzxi PpcNe+1CduuqST2vRnVenkAUvYh4AQ37Dew9m/jqisaGm94JluvrqYHHTmvQJcuiVO8HLlsUYNk8 KTUaTQkBjdPnVd22NFJZQULnG3yPdmWSx7+Y/CHeYWiu+fAbseChaYQmVYShKAIpyVVixX+eMbW6 8XXi/MVLV2bzX6JWkR9X3IgaFs0OmSOySd27GmsxKHMJBzrIeQmQs8Cn7IMv/qGoiWMdIlbSqXC6 jG8+l8CTV5qYwIW9Tx+rd187xTF5XSA6tMTkhg== ) b8ton7l0821a7mon3hrinqddeasa9daa.northcom.mil. 59 IN RRSIG ( NSEC3 8 3 60 20240729181736 20240726171736 50076 northcom.mil. Z1XZe5O6M+W5g8GJ5jAb+lFDzbPiMNnRSMRkSvOYbqvs3Sq6uwkCv84rtyxZJk6KDhnlCVMysxtN runiJh56pygUgr0um6M4HoRbduSpkVMqRhAJoyWbYe0u+xfZhQGOa7n2B4MK8+50wsEejH3g5qMW nQ0HwmykcmxbiyM9vruf3IkYZfXTDlhiKOlsJASlLNXo7Up3f2gM5IZdB0dNhtbR8mDyk1N/+8Im HqDuEmdLMajSq/7bzT3U1CHldiREtzSRQpu3XJ+S1w+hYJfu7QkAn/Jt9AvMSMQwXasRvhoqJm20 rppGrkp9xJ10jztGWmhyPUN8VjGNNLA2oLPP3w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`northcom.mil. 30 IN RRSIG ( SOA 8 2 60 20240729030339 20240726020339 63441 northcom.mil. Vi4DFBK3FaAbOcFel06sffYB4DtMoR+P3kpKdmLlILu1A6Iutuh8KGK5MNXBC++SX+49r8F7Tx4x AQFueW//8LqLXA93jOb7fKwuT75OzEHBWWUNB9u9BWiFbgQDRZyQVfTuLvfutXtph2hgEhjnarJQ ATiY0i6ugkjifDLjmn/SR4TLdshgTJi/M2S9C6C7nBf3Hnj8LM7iYFmoh+VdqVoQAvZg78RwIQPv k64pOUC/O/Dc+odLUJ/ha4UIorNmVRy7wK0vsYVJ54zItWOy+/w28A0BJZtKglFHr9x/wh2t5VYh VIzZR0bqwupMSMiSCginQa6x299jaElX0X6HPw== )`
	`northcom.mil. 30 IN RRSIG ( SOA 8 2 60 20240729030103 20240726020103 50076 northcom.mil. MimP0+J2FdRLLntriFHLAhp895hC/n0P30vRI31rYVxVttLG9iTxJXd5kQCQLQbRlHEP74BCx1Fo QdN3sHozRlyR4CRf7507DKjuHm44xYroES/SqUyHn3dEPKlPDzUXC+qm5viHeLX8pS3wSi+MniKD VyWK/0VROPPjMLOUhljcR4wR2JEeh/eEHhzx3BlOdXF4mZB6HgblSSyue/NtmYqBdkcQb/iDobNk RCzfxoyecG/jslVVs9Doc22PBbxQMqhDBFkLlKqtUVOCFG26G9Qp2UtGe6fB3wrnGdxuruOxsfnY x1ieNCk0Q4iwgQ2e8chqoiEl2hzy5Kl55guEkg== )`
	RRSIG=63441 and DNSKEY=63441 verifies the SOA RRset
	RRSIG=50076 and DNSKEY=50076 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test northcom.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: