DNSSEC Analyzer

Domain Name:

Time: 2023-09-24 17:09:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for osd.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (1139 octets) ;; HEADER SECTION ;; id = 32906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to c.root-servers.net for osd.mil/A
	Received 805 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (805 octets) ;; HEADER SECTION ;; id = 44921 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.root-servers.net for mil/DNSKEY
	Received 801 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (801 octets) ;; HEADER SECTION ;; id = 53371 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 415 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (415 octets) ;; HEADER SECTION ;; id = 37937 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to pac2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (1628 octets) ;; HEADER SECTION ;; id = 60949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=44065 is now in the chain-of-trust
	DNSKEY=14098 is now in the chain-of-trust
	Query to con2.nipr.mil for osd.mil/A
	Received 431 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (431 octets) ;; HEADER SECTION ;; id = 5231 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) OSD.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. OSD.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. OSD.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. OSD.MIL. 10800 IN DS ( 49051 8 2 b45a208772ac3524cb2dad36952cfeaf39bf78aa5de2b00e7ed141583af3ef27 ) OSD.MIL. 10800 IN DS 49051 8 1 c36e95b43f6ce7bcc3eb4bac8fad994dfaefec5e OSD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. GD6eKVrp5pcRJwjNH3fcEn0FLz3P0YIBVAQlp5D6Eud9I44g3qBBGt5TpTUGAV7OiVpJBOHBJelJ 4WKy8zok45QIia8Zm0m80IBgSywEJjt9jV7jfJcRtLAvzTB7AFsQiNEzoQPUV/NTXa9CLae6taeY 4FHdOV4W61F2Z9/vxRU= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to con2.nipr.mil for osd.mil/DNSKEY
	Received 431 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (431 octets) ;; HEADER SECTION ;; id = 22390 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) OSD.MIL. 21600 IN NS DNS-PUB-F3-U.PENTAGON.MIL. OSD.MIL. 21600 IN NS DNS-PUB-F1-U.PENTAGON.MIL. OSD.MIL. 21600 IN NS DNS-PUB-F2-U.PENTAGON.MIL. OSD.MIL. 10800 IN DS 49051 8 1 c36e95b43f6ce7bcc3eb4bac8fad994dfaefec5e OSD.MIL. 10800 IN DS ( 49051 8 2 b45a208772ac3524cb2dad36952cfeaf39bf78aa5de2b00e7ed141583af3ef27 ) OSD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. GD6eKVrp5pcRJwjNH3fcEn0FLz3P0YIBVAQlp5D6Eud9I44g3qBBGt5TpTUGAV7OiVpJBOHBJelJ 4WKy8zok45QIia8Zm0m80IBgSywEJjt9jV7jfJcRtLAvzTB7AFsQiNEzoQPUV/NTXa9CLae6taeY 4FHdOV4W61F2Z9/vxRU= ) ;; ADDITIONAL SECTION (4 records) DNS-PUB-F3-U.PENTAGON.MIL. 21600 IN A 199.252.47.75 DNS-PUB-F2-U.PENTAGON.MIL. 21600 IN A 214.14.133.11 DNS-PUB-F1-U.PENTAGON.MIL. 21600 IN A 199.252.47.11 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone osd.mil

osd.mil

	Checking DS between mil and osd.mil
	Query to eur2.nipr.mil for osd.mil/DS
	Received 290 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (290 octets) ;; HEADER SECTION ;; id = 44885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN DS ;; ANSWER SECTION (3 records) OSD.MIL. 10800 IN DS 49051 8 1 c36e95b43f6ce7bcc3eb4bac8fad994dfaefec5e OSD.MIL. 10800 IN DS ( 49051 8 2 b45a208772ac3524cb2dad36952cfeaf39bf78aa5de2b00e7ed141583af3ef27 ) OSD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. GD6eKVrp5pcRJwjNH3fcEn0FLz3P0YIBVAQlp5D6Eud9I44g3qBBGt5TpTUGAV7OiVpJBOHBJelJ 4WKy8zok45QIia8Zm0m80IBgSywEJjt9jV7jfJcRtLAvzTB7AFsQiNEzoQPUV/NTXa9CLae6taeY 4FHdOV4W61F2Z9/vxRU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for osd.mil in the mil zone
	DS=49051/SHA-1 has algorithm RSASHA256
	DS=49051/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`OSD.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. GD6eKVrp5pcRJwjNH3fcEn0FLz3P0YIBVAQlp5D6Eud9I44g3qBBGt5TpTUGAV7OiVpJBOHBJelJ 4WKy8zok45QIia8Zm0m80IBgSywEJjt9jV7jfJcRtLAvzTB7AFsQiNEzoQPUV/NTXa9CLae6taeY 4FHdOV4W61F2Z9/vxRU= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=49051/SHA-1 is now in the chain-of-trust
	`OSD.MIL. 10800 IN DS 49051 8 1 c36e95b43f6ce7bcc3eb4bac8fad994dfaefec5e`
	`OSD.MIL. 10800 IN DS ( 49051 8 2 b45a208772ac3524cb2dad36952cfeaf39bf78aa5de2b00e7ed141583af3ef27 )`
	Query to DNS-PUB-F1-U.PENTAGON.MIL for osd.mil/DNSKEY
	Received 1808 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (1808 octets) ;; HEADER SECTION ;; id = 55677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN DNSKEY ;; ANSWER SECTION (8 records) osd.mil. 454871 IN DNSKEY ( 257 3 8 AwEAAb1/+zWwhGDOeA+L5MpwuyozWB/4U39Q46pdSvR9vSljuWFsidJvy9/zXAM+6dcZC/AcFIy1 W761vFWefRcE1g9sDxAQgfr4ma9FqMM0A752nQTAbeZuMrMaps5mp/1gDnMelpQd6fofc0o4ppy7 zJ+FbO2q1yFcVpMRkUpmw9MaL1zMzZ/TwTSscsC/hET07AE3WV1ofcrxRwGH426TTMahyyXpx69Q zkvR3Wz6YGnhvx0thRzpEWr8Cnc5jne+tm/RUHha1HSKgeWNhbObsGt9/uGZR+S6tqvuQ5QGW6mX 6YVu1P6Vual5hGc77PavwKCBoXlTE/iLyjdV7SIEZjM= ) ; Key ID = 49051 osd.mil. 454871 IN DNSKEY ( 256 3 8 AwEAAdWaXLrq1XW5kpQChknqNhpGC4owiDPnBEVPgoiKFqhe/l8Zf/6rVsGvbZGeBFb1+sz3LjXd uQJG7FYuWwA/5T2S/ERwTSIijhJoyE3ELxf4vf7yzzlQzvxEs0+hfPw/FfHmj5cM/t5QLncWI/yw /zaNGGjqiDIA6SlrxZyfaZLl ) ; Key ID = 49686 osd.mil. 454871 IN DNSKEY ( 256 3 8 AwEAAaYvlt/Oos/MSSK6WYQ5z9fLaxTcJY4ZdTBpg6y71G+eHo49fejPg9IJ9pvEM7iLmWPrnQM/ ENGa051js38ADbBCLwAQV/kUOzcDtXy1klLqRFNaRm/twupUzS6H4rDm+FMqSo0u6jOduiXuSmIh CcLSJThA+8AsxDWnKsiSSSWP ) ; Key ID = 24039 osd.mil. 454871 IN DNSKEY ( 257 3 8 AwEAAe1dKpH9yaA/QdK76PUUr8fjohawr5a5MJHQPH0B9DkZn05XCl/SMvuDINQoS7AsqxOU5mjE 3ITcGdlWwBOIjJpeQGFwNtZjh+TIBtwGXx0SEBVnjooQFU9795HGx37CvClBISrkmFj3CxD+AUEw uRiuD1SjI4kz5cIXzHk+QsZ9DcUD9QXd3d0Jf8DeIHGl4e4LDB3EhcXbEd/XRwIRPCNmIhdX9c0C 4XW7xqadd9/9l8UVVKzDoDigIPWUhWCRaqz1ksw5PydT7WrfKn1BdrGlIo6POhVvsHVOjGViZ+h8 7LFEfbsR7zANMO6OSiXlzqEsyYvj4ySjN6992JWZoe8= ) ; Key ID = 1342 osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 1342 osd.mil. BAKkXU5xsKCy5lsmnH3/AsLq0nzfU2jDLwZgUduuvAUT6G36+SHlFek47oXNVvyrIWhGkeK39y55 iF756NCMwDmxucIxPWk47wBjhNqcmXWiS10AVrYAyjIuavRJpO9CX3F2J0rlI6nnGUH62se7RArL cFzQabdHG8n4dxX2nFdVNj4eUw/zoqO8heTMUcmmtS75fY02MBKdkROXf1rAr9wJQWqJqD3LWZHC Z3mrmpeYUUUXkH9vxQSdbmiybGtZPCDw47n0tVL2njFFrNb999dFjMHp8HZiGHA3LmeDtYP1ZFIH U4bwnJh6P041FvjvHFQNqZ2jGCzcIrqoxnPWEg== ) osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 24039 osd.mil. OBsgiAXRH/14wbj5wRUN2yWtnQvDMIPV0hzqTdfik3wDUqNVWuw7qBPaI3tayBnJKD1xo7jKsUzL 2Iw8QFhcwUGm3A9GsF/6Eu9cH3XKCEXvku9UnSACRZQSCVh9Tgb7iDopybKG8RVw9e742hcqvY6k hX/2SrGZC0QDpEgkIEk= ) osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 49051 osd.mil. XYogJhBHlgDzAEQ1IHtBKsLDTukqd9lbQYvz+NdFmfK0ZDvMpdZ7bXtIUf7hr6gjFicTkrDWxaOk OHg1704n4tcFC5n/jM2yShQKEKhGee0U3uQYXLzHNwA1ZQfUP36Za4q5YBgNuDgC2ePGFzxd0pL8 mFkbizKGmiDNzAHZ03Gba/X8GPyiaIp3G7laDr1JZs8p8x4kdKEaYGTVZYzDbnmpwPOaMju9QOnu xOe03tbKMOdslkINazFUjixc4j3Y3Mhd4uaY3L33bTbm561iOyD/gsbg6t+bA6bInAVaTzMvUZTX DnzRWSP05fyZ71YK5lp/TOsr2k0CVyrdQK4J9g== ) osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 49686 osd.mil. z5qDx4HKPAH4/7shs/2UNVEqyBucCa2NnjUHZ4pwYt0Yao0+jVdMCF+NGq1X3ly4yi+C/5pRfSvA OhFwZl7hIJ0t1c29cjpPm9c3YuJgXWfEvIUDwhdneSNevnBnxMw0jF9RFuMbx3qIBUtfgQ5HT4wx l2TdXrWBhGpXsrMIhVY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for osd.mil
	`osd.mil. 454871 IN DNSKEY ( 257 3 8 AwEAAb1/+zWwhGDOeA+L5MpwuyozWB/4U39Q46pdSvR9vSljuWFsidJvy9/zXAM+6dcZC/AcFIy1 W761vFWefRcE1g9sDxAQgfr4ma9FqMM0A752nQTAbeZuMrMaps5mp/1gDnMelpQd6fofc0o4ppy7 zJ+FbO2q1yFcVpMRkUpmw9MaL1zMzZ/TwTSscsC/hET07AE3WV1ofcrxRwGH426TTMahyyXpx69Q zkvR3Wz6YGnhvx0thRzpEWr8Cnc5jne+tm/RUHha1HSKgeWNhbObsGt9/uGZR+S6tqvuQ5QGW6mX 6YVu1P6Vual5hGc77PavwKCBoXlTE/iLyjdV7SIEZjM= ) ; Key ID = 49051`
	`osd.mil. 454871 IN DNSKEY ( 256 3 8 AwEAAdWaXLrq1XW5kpQChknqNhpGC4owiDPnBEVPgoiKFqhe/l8Zf/6rVsGvbZGeBFb1+sz3LjXd uQJG7FYuWwA/5T2S/ERwTSIijhJoyE3ELxf4vf7yzzlQzvxEs0+hfPw/FfHmj5cM/t5QLncWI/yw /zaNGGjqiDIA6SlrxZyfaZLl ) ; Key ID = 49686`
	`osd.mil. 454871 IN DNSKEY ( 256 3 8 AwEAAaYvlt/Oos/MSSK6WYQ5z9fLaxTcJY4ZdTBpg6y71G+eHo49fejPg9IJ9pvEM7iLmWPrnQM/ ENGa051js38ADbBCLwAQV/kUOzcDtXy1klLqRFNaRm/twupUzS6H4rDm+FMqSo0u6jOduiXuSmIh CcLSJThA+8AsxDWnKsiSSSWP ) ; Key ID = 24039`
	`osd.mil. 454871 IN DNSKEY ( 257 3 8 AwEAAe1dKpH9yaA/QdK76PUUr8fjohawr5a5MJHQPH0B9DkZn05XCl/SMvuDINQoS7AsqxOU5mjE 3ITcGdlWwBOIjJpeQGFwNtZjh+TIBtwGXx0SEBVnjooQFU9795HGx37CvClBISrkmFj3CxD+AUEw uRiuD1SjI4kz5cIXzHk+QsZ9DcUD9QXd3d0Jf8DeIHGl4e4LDB3EhcXbEd/XRwIRPCNmIhdX9c0C 4XW7xqadd9/9l8UVVKzDoDigIPWUhWCRaqz1ksw5PydT7WrfKn1BdrGlIo6POhVvsHVOjGViZ+h8 7LFEfbsR7zANMO6OSiXlzqEsyYvj4ySjN6992JWZoe8= ) ; Key ID = 1342`
	DNSKEY=49051/SEP is now in the chain-of-trust
	DS=49051/SHA-1 verifies DNSKEY=49051/SEP
	DS=49051/SHA-256 verifies DNSKEY=49051/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 1342 osd.mil. BAKkXU5xsKCy5lsmnH3/AsLq0nzfU2jDLwZgUduuvAUT6G36+SHlFek47oXNVvyrIWhGkeK39y55 iF756NCMwDmxucIxPWk47wBjhNqcmXWiS10AVrYAyjIuavRJpO9CX3F2J0rlI6nnGUH62se7RArL cFzQabdHG8n4dxX2nFdVNj4eUw/zoqO8heTMUcmmtS75fY02MBKdkROXf1rAr9wJQWqJqD3LWZHC Z3mrmpeYUUUXkH9vxQSdbmiybGtZPCDw47n0tVL2njFFrNb999dFjMHp8HZiGHA3LmeDtYP1ZFIH U4bwnJh6P041FvjvHFQNqZ2jGCzcIrqoxnPWEg== )`
	`osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 24039 osd.mil. OBsgiAXRH/14wbj5wRUN2yWtnQvDMIPV0hzqTdfik3wDUqNVWuw7qBPaI3tayBnJKD1xo7jKsUzL 2Iw8QFhcwUGm3A9GsF/6Eu9cH3XKCEXvku9UnSACRZQSCVh9Tgb7iDopybKG8RVw9e742hcqvY6k hX/2SrGZC0QDpEgkIEk= )`
	`osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 49051 osd.mil. XYogJhBHlgDzAEQ1IHtBKsLDTukqd9lbQYvz+NdFmfK0ZDvMpdZ7bXtIUf7hr6gjFicTkrDWxaOk OHg1704n4tcFC5n/jM2yShQKEKhGee0U3uQYXLzHNwA1ZQfUP36Za4q5YBgNuDgC2ePGFzxd0pL8 mFkbizKGmiDNzAHZ03Gba/X8GPyiaIp3G7laDr1JZs8p8x4kdKEaYGTVZYzDbnmpwPOaMju9QOnu xOe03tbKMOdslkINazFUjixc4j3Y3Mhd4uaY3L33bTbm561iOyD/gsbg6t+bA6bInAVaTzMvUZTX DnzRWSP05fyZ71YK5lp/TOsr2k0CVyrdQK4J9g== )`
	`osd.mil. 454871 IN RRSIG ( DNSKEY 8 2 1296000 20231016080013 20230916073423 49686 osd.mil. z5qDx4HKPAH4/7shs/2UNVEqyBucCa2NnjUHZ4pwYt0Yao0+jVdMCF+NGq1X3ly4yi+C/5pRfSvA OhFwZl7hIJ0t1c29cjpPm9c3YuJgXWfEvIUDwhdneSNevnBnxMw0jF9RFuMbx3qIBUtfgQ5HT4wx l2TdXrWBhGpXsrMIhVY= )`
	RRSIG=1342 and DNSKEY=1342/SEP verifies the DNSKEY RRset
	RRSIG=24039 and DNSKEY=24039 verifies the DNSKEY RRset
	RRSIG=49051 and DNSKEY=49051/SEP verifies the DNSKEY RRset
	RRSIG=49686 and DNSKEY=49686 verifies the DNSKEY RRset
	DNSKEY=49686 is now in the chain-of-trust
	DNSKEY=24039 is now in the chain-of-trust
	DNSKEY=1342/SEP is now in the chain-of-trust
	Query to DNS-PUB-F3-U.PENTAGON.MIL for osd.mil/A
	Received 519 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (519 octets) ;; HEADER SECTION ;; id = 6797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) osd.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306266 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN NSEC3 ( 1 0 10 2b83 3ftom5prssstbnht3mmgt5ef41jk6vuh NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 24039 osd.mil. WkRhHsuFbmrAyoJHD7yzPLX0Ck9kw9rihSszCdLnyfJTpj4IkGad8eK9uHxaq+0UxOcuTV6CUCQ5 3Q8EXA4Qn7GRDt5RHea+AA6MVP4SsSsklCb4/xAGwgJl00lbqXRixGO7KRq/rXvB0PQD/MGGfUVE iXh6wheFuW5fQYjMxVI= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 49686 osd.mil. F2jK/ve7szZ54W7BdVSSlDXjezYQCVlKL+vkIxbmk3SHf28+yOzGEobjGsbUEKxmALPh+tXq5Ad1 NGPSx86TbdtRiUwINCgQouoW2/dxBKG+0EYUsPpy38hElDVFkxxtBdaB1t36qtG4XCcrVjj89TVn p2WUlI0Zb2mNOMFvcwo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F3-U.PENTAGON.MIL is authoritative for osd.mil
	Query to DNS-PUB-F2-U.PENTAGON.MIL for osd.mil/SOA
	Received 437 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (437 octets) ;; HEADER SECTION ;; id = 5207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN SOA ;; ANSWER SECTION (3 records) osd.mil. 24981 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306261 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) osd.mil. 24981 IN RRSIG ( SOA 8 2 43200 20231024114634 20230924104634 24039 osd.mil. OEnTfT7o2zEu6adLJPkknorjBhIjBxdjV1OpSDHnHpFvsB3arBrorohWGeFH6qNEtEZabGFYhNEL gPD6smERiqQ9UAGBYiy6d2ReWZdQbUksqXpnN7ZQi5eUzuXxjvp/kpFQTHelDwgsjQzZ4fjwEX2+ tsLpH76xIH7PAZJM+gU= ) osd.mil. 24981 IN RRSIG ( SOA 8 2 43200 20231024114634 20230924104634 49686 osd.mil. tp1NJGtraZ3kQjC5xEyRKv4+kPO4RxcV561E5bPg75Nb+6mPt/f+9TM+U3a7oExCgaGUUx13dQuG Vz3o58itRODRFVCreYUUxUo121GLz4QXFUmccE897029RnFPI3kEj561Prm2A8YNIIVMO3g9ww98 BzGwcc2+TsFm58/7sV0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS-PUB-F1-U.PENTAGON.MIL for osd.mil/SOA
	Received 437 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (437 octets) ;; HEADER SECTION ;; id = 4490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN SOA ;; ANSWER SECTION (3 records) osd.mil. 24994 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306261 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) osd.mil. 24994 IN RRSIG ( SOA 8 2 43200 20231024114634 20230924104634 24039 osd.mil. OEnTfT7o2zEu6adLJPkknorjBhIjBxdjV1OpSDHnHpFvsB3arBrorohWGeFH6qNEtEZabGFYhNEL gPD6smERiqQ9UAGBYiy6d2ReWZdQbUksqXpnN7ZQi5eUzuXxjvp/kpFQTHelDwgsjQzZ4fjwEX2+ tsLpH76xIH7PAZJM+gU= ) osd.mil. 24994 IN RRSIG ( SOA 8 2 43200 20231024114634 20230924104634 49686 osd.mil. tp1NJGtraZ3kQjC5xEyRKv4+kPO4RxcV561E5bPg75Nb+6mPt/f+9TM+U3a7oExCgaGUUx13dQuG Vz3o58itRODRFVCreYUUxUo121GLz4QXFUmccE897029RnFPI3kEj561Prm2A8YNIIVMO3g9ww98 BzGwcc2+TsFm58/7sV0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS-PUB-F3-U.PENTAGON.MIL for osd.mil/A
	Received 853 bytes from 199.252.47.75
	;; Response received from 199.252.47.75 (853 octets) ;; HEADER SECTION ;; id = 50188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) osd.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306266 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 24039 osd.mil. FCoSLpx5x7bwbuvqEB/v3xELDI9bp2kbwIFEi//5bwqPkYJneHpV9sVL8exRZS56D5FDc0Nis+Ej LEA2lRkxW5ev3kC3T/EFFEx0QOwvA3t44kMWWeTFweMIttL6gY0UiCJq5IIl337/ESzM5WW0Fn2G lr8l3v2ljqxS+s2WjE8= ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 49686 osd.mil. t6dUSav2RqRd6d+v6WA2QZyW+LFjtUyMktmvrlzNcf8U/95pxZcJDzBNbTxdGgw3s485R7o18NyV VQyVemsOoJzA6mJDLSzS5ON0wCq21V5UB0dtUNHb3Y+eKmYwiQftxiVZ0i2Ict9k4IRyVLyt+y86 n1dRixcZOn3q+5fO4tY= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN NSEC3 ( 1 0 10 2b83 3ftom5prssstbnht3mmgt5ef41jk6vuh NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 24039 osd.mil. WkRhHsuFbmrAyoJHD7yzPLX0Ck9kw9rihSszCdLnyfJTpj4IkGad8eK9uHxaq+0UxOcuTV6CUCQ5 3Q8EXA4Qn7GRDt5RHea+AA6MVP4SsSsklCb4/xAGwgJl00lbqXRixGO7KRq/rXvB0PQD/MGGfUVE iXh6wheFuW5fQYjMxVI= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 49686 osd.mil. F2jK/ve7szZ54W7BdVSSlDXjezYQCVlKL+vkIxbmk3SHf28+yOzGEobjGsbUEKxmALPh+tXq5Ad1 NGPSx86TbdtRiUwINCgQouoW2/dxBKG+0EYUsPpy38hElDVFkxxtBdaB1t36qtG4XCcrVjj89TVn p2WUlI0Zb2mNOMFvcwo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	No RRSIGs found

osd.mil

	Query to DNS-PUB-F1-U.PENTAGON.MIL for osd.mil/A
	Received 853 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (853 octets) ;; HEADER SECTION ;; id = 24435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) osd.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306266 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 24039 osd.mil. FCoSLpx5x7bwbuvqEB/v3xELDI9bp2kbwIFEi//5bwqPkYJneHpV9sVL8exRZS56D5FDc0Nis+Ej LEA2lRkxW5ev3kC3T/EFFEx0QOwvA3t44kMWWeTFweMIttL6gY0UiCJq5IIl337/ESzM5WW0Fn2G lr8l3v2ljqxS+s2WjE8= ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 49686 osd.mil. t6dUSav2RqRd6d+v6WA2QZyW+LFjtUyMktmvrlzNcf8U/95pxZcJDzBNbTxdGgw3s485R7o18NyV VQyVemsOoJzA6mJDLSzS5ON0wCq21V5UB0dtUNHb3Y+eKmYwiQftxiVZ0i2Ict9k4IRyVLyt+y86 n1dRixcZOn3q+5fO4tY= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN NSEC3 ( 1 0 10 2b83 3ftom5prssstbnht3mmgt5ef41jk6vuh NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 24039 osd.mil. WkRhHsuFbmrAyoJHD7yzPLX0Ck9kw9rihSszCdLnyfJTpj4IkGad8eK9uHxaq+0UxOcuTV6CUCQ5 3Q8EXA4Qn7GRDt5RHea+AA6MVP4SsSsklCb4/xAGwgJl00lbqXRixGO7KRq/rXvB0PQD/MGGfUVE iXh6wheFuW5fQYjMxVI= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 49686 osd.mil. F2jK/ve7szZ54W7BdVSSlDXjezYQCVlKL+vkIxbmk3SHf28+yOzGEobjGsbUEKxmALPh+tXq5Ad1 NGPSx86TbdtRiUwINCgQouoW2/dxBKG+0EYUsPpy38hElDVFkxxtBdaB1t36qtG4XCcrVjj89TVn p2WUlI0Zb2mNOMFvcwo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F1-U.PENTAGON.MIL is authoritative for osd.mil
	Found RRSIG signed by osd.mil zone
	Query to DNS-PUB-F1-U.PENTAGON.MIL for osd.mil/A
	Received 853 bytes from 199.252.47.11
	;; Response received from 199.252.47.11 (853 octets) ;; HEADER SECTION ;; id = 13546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) osd.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306266 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 24039 osd.mil. FCoSLpx5x7bwbuvqEB/v3xELDI9bp2kbwIFEi//5bwqPkYJneHpV9sVL8exRZS56D5FDc0Nis+Ej LEA2lRkxW5ev3kC3T/EFFEx0QOwvA3t44kMWWeTFweMIttL6gY0UiCJq5IIl337/ESzM5WW0Fn2G lr8l3v2ljqxS+s2WjE8= ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 49686 osd.mil. t6dUSav2RqRd6d+v6WA2QZyW+LFjtUyMktmvrlzNcf8U/95pxZcJDzBNbTxdGgw3s485R7o18NyV VQyVemsOoJzA6mJDLSzS5ON0wCq21V5UB0dtUNHb3Y+eKmYwiQftxiVZ0i2Ict9k4IRyVLyt+y86 n1dRixcZOn3q+5fO4tY= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN NSEC3 ( 1 0 10 2b83 3ftom5prssstbnht3mmgt5ef41jk6vuh NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 24039 osd.mil. WkRhHsuFbmrAyoJHD7yzPLX0Ck9kw9rihSszCdLnyfJTpj4IkGad8eK9uHxaq+0UxOcuTV6CUCQ5 3Q8EXA4Qn7GRDt5RHea+AA6MVP4SsSsklCb4/xAGwgJl00lbqXRixGO7KRq/rXvB0PQD/MGGfUVE iXh6wheFuW5fQYjMxVI= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3595 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 49686 osd.mil. F2jK/ve7szZ54W7BdVSSlDXjezYQCVlKL+vkIxbmk3SHf28+yOzGEobjGsbUEKxmALPh+tXq5Ad1 NGPSx86TbdtRiUwINCgQouoW2/dxBKG+0EYUsPpy38hElDVFkxxtBdaB1t36qtG4XCcrVjj89TVn p2WUlI0Zb2mNOMFvcwo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 24039 osd.mil. FCoSLpx5x7bwbuvqEB/v3xELDI9bp2kbwIFEi//5bwqPkYJneHpV9sVL8exRZS56D5FDc0Nis+Ej LEA2lRkxW5ev3kC3T/EFFEx0QOwvA3t44kMWWeTFweMIttL6gY0UiCJq5IIl337/ESzM5WW0Fn2G lr8l3v2ljqxS+s2WjE8= )`
	`osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 49686 osd.mil. t6dUSav2RqRd6d+v6WA2QZyW+LFjtUyMktmvrlzNcf8U/95pxZcJDzBNbTxdGgw3s485R7o18NyV VQyVemsOoJzA6mJDLSzS5ON0wCq21V5UB0dtUNHb3Y+eKmYwiQftxiVZ0i2Ict9k4IRyVLyt+y86 n1dRixcZOn3q+5fO4tY= )`
	RRSIG=24039 and DNSKEY=24039 verifies the SOA RRset
	RRSIG=49686 and DNSKEY=49686 verifies the SOA RRset

osd.mil

	Query to DNS-PUB-F2-U.PENTAGON.MIL for osd.mil/A
	Received 853 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (853 octets) ;; HEADER SECTION ;; id = 56948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) osd.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306266 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 24039 osd.mil. FCoSLpx5x7bwbuvqEB/v3xELDI9bp2kbwIFEi//5bwqPkYJneHpV9sVL8exRZS56D5FDc0Nis+Ej LEA2lRkxW5ev3kC3T/EFFEx0QOwvA3t44kMWWeTFweMIttL6gY0UiCJq5IIl337/ESzM5WW0Fn2G lr8l3v2ljqxS+s2WjE8= ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 49686 osd.mil. t6dUSav2RqRd6d+v6WA2QZyW+LFjtUyMktmvrlzNcf8U/95pxZcJDzBNbTxdGgw3s485R7o18NyV VQyVemsOoJzA6mJDLSzS5ON0wCq21V5UB0dtUNHb3Y+eKmYwiQftxiVZ0i2Ict9k4IRyVLyt+y86 n1dRixcZOn3q+5fO4tY= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3593 IN NSEC3 ( 1 0 10 2b83 3ftom5prssstbnht3mmgt5ef41jk6vuh NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3593 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 24039 osd.mil. WkRhHsuFbmrAyoJHD7yzPLX0Ck9kw9rihSszCdLnyfJTpj4IkGad8eK9uHxaq+0UxOcuTV6CUCQ5 3Q8EXA4Qn7GRDt5RHea+AA6MVP4SsSsklCb4/xAGwgJl00lbqXRixGO7KRq/rXvB0PQD/MGGfUVE iXh6wheFuW5fQYjMxVI= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3593 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 49686 osd.mil. F2jK/ve7szZ54W7BdVSSlDXjezYQCVlKL+vkIxbmk3SHf28+yOzGEobjGsbUEKxmALPh+tXq5Ad1 NGPSx86TbdtRiUwINCgQouoW2/dxBKG+0EYUsPpy38hElDVFkxxtBdaB1t36qtG4XCcrVjj89TVn p2WUlI0Zb2mNOMFvcwo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS-PUB-F2-U.PENTAGON.MIL is authoritative for osd.mil
	Found RRSIG signed by osd.mil zone
	Query to DNS-PUB-F2-U.PENTAGON.MIL for osd.mil/A
	Received 853 bytes from 214.14.133.11
	;; Response received from 214.14.133.11 (853 octets) ;; HEADER SECTION ;; id = 35949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; osd.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) osd.mil. 3600 IN SOA ( dns-mas-a1-t.pentagon.mil. sysadmin.pentagon.mil. 2006306266 ;serial 900 ;refresh 90 ;retry 2592000 ;expire 3600 ;minimum ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 24039 osd.mil. FCoSLpx5x7bwbuvqEB/v3xELDI9bp2kbwIFEi//5bwqPkYJneHpV9sVL8exRZS56D5FDc0Nis+Ej LEA2lRkxW5ev3kC3T/EFFEx0QOwvA3t44kMWWeTFweMIttL6gY0UiCJq5IIl337/ESzM5WW0Fn2G lr8l3v2ljqxS+s2WjE8= ) osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 49686 osd.mil. t6dUSav2RqRd6d+v6WA2QZyW+LFjtUyMktmvrlzNcf8U/95pxZcJDzBNbTxdGgw3s485R7o18NyV VQyVemsOoJzA6mJDLSzS5ON0wCq21V5UB0dtUNHb3Y+eKmYwiQftxiVZ0i2Ict9k4IRyVLyt+y86 n1dRixcZOn3q+5fO4tY= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3593 IN NSEC3 ( 1 0 10 2b83 3ftom5prssstbnht3mmgt5ef41jk6vuh NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3593 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 24039 osd.mil. WkRhHsuFbmrAyoJHD7yzPLX0Ck9kw9rihSszCdLnyfJTpj4IkGad8eK9uHxaq+0UxOcuTV6CUCQ5 3Q8EXA4Qn7GRDt5RHea+AA6MVP4SsSsklCb4/xAGwgJl00lbqXRixGO7KRq/rXvB0PQD/MGGfUVE iXh6wheFuW5fQYjMxVI= ) 3EL9GB1TF3PQ7HA0HOK58G86985B0IHO.osd.mil. 3593 IN RRSIG ( NSEC3 8 3 3600 20231024070950 20230924065452 49686 osd.mil. F2jK/ve7szZ54W7BdVSSlDXjezYQCVlKL+vkIxbmk3SHf28+yOzGEobjGsbUEKxmALPh+tXq5Ad1 NGPSx86TbdtRiUwINCgQouoW2/dxBKG+0EYUsPpy38hElDVFkxxtBdaB1t36qtG4XCcrVjj89TVn p2WUlI0Zb2mNOMFvcwo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 24039 osd.mil. FCoSLpx5x7bwbuvqEB/v3xELDI9bp2kbwIFEi//5bwqPkYJneHpV9sVL8exRZS56D5FDc0Nis+Ej LEA2lRkxW5ev3kC3T/EFFEx0QOwvA3t44kMWWeTFweMIttL6gY0UiCJq5IIl337/ESzM5WW0Fn2G lr8l3v2ljqxS+s2WjE8= )`
	`osd.mil. 3600 IN RRSIG ( SOA 8 2 43200 20231024170511 20230924160511 49686 osd.mil. t6dUSav2RqRd6d+v6WA2QZyW+LFjtUyMktmvrlzNcf8U/95pxZcJDzBNbTxdGgw3s485R7o18NyV VQyVemsOoJzA6mJDLSzS5ON0wCq21V5UB0dtUNHb3Y+eKmYwiQftxiVZ0i2Ict9k4IRyVLyt+y86 n1dRixcZOn3q+5fO4tY= )`
	RRSIG=24039 and DNSKEY=24039 verifies the SOA RRset
	RRSIG=49686 and DNSKEY=49686 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test osd.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: