DNSSEC Analyzer - pacom.mil

Domain Name:

Time: 2023-09-24 16:09:01 UTC, NTP stratum 4

Analyzing DNSSEC problems for pacom.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (1141 octets) ;; HEADER SECTION ;; id = 4036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to k.root-servers.net for pacom.mil/A
	Received 804 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (804 octets) ;; HEADER SECTION ;; id = 52530 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to i.root-servers.net for mil/DNSKEY
	Received 801 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (801 octets) ;; HEADER SECTION ;; id = 49427 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 415 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (415 octets) ;; HEADER SECTION ;; id = 27831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for mil in the . zone
	DS=16801/SHA-256 has algorithm RSASHA256
	DS=62470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=16801/SHA-256 is now in the chain-of-trust
	DS=62470/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (1628 octets) ;; HEADER SECTION ;; id = 56433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to con2.nipr.mil for pacom.mil/A
	Received 453 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (453 octets) ;; HEADER SECTION ;; id = 7451 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PACOM.MIL. 21600 IN NS DNS2.PACOM.MIL. PACOM.MIL. 21600 IN NS DNS1.PACOM.MIL. PACOM.MIL. 21600 IN NS PNOCXNS2.PR.NAVY.MIL. PACOM.MIL. 21600 IN NS PNOCXNS1.PR.NAVY.MIL. PACOM.MIL. 10800 IN DS ( 17174 8 2 0dbdf8970d3973698ddbe11b080c7cf424e1792195b890b4c62aacd3faf2fbf8 ) PACOM.MIL. 10800 IN DS 17174 8 1 ef22eda9192ce5c1fff587d26891e4880adea764 PACOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. joj1LNjie7FvBtrxtJmgKz/Bi9gQqbBHxap6Lq9Vq/F+z4lFaJyTXrlknMO+b4muxdC240lkUc5b Z6nCWB3KEx2kC2q+2pdHqDjAkuakaThIyQwA7ti9Fp5IInS/K0kVOBXtjHWxCUBZpn9Y7y70RBnO xrm1KszHlJrV0aq9p64= ) ;; ADDITIONAL SECTION (5 records) PNOCXNS2.PR.NAVY.MIL. 21600 IN A 205.56.181.107 PNOCXNS1.PR.NAVY.MIL. 21600 IN A 205.56.181.106 DNS2.PACOM.MIL. 21600 IN A 199.211.150.67 DNS1.PACOM.MIL. 21600 IN A 199.211.150.66 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to con2.nipr.mil for pacom.mil/DNSKEY
	Received 453 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (453 octets) ;; HEADER SECTION ;; id = 27648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PACOM.MIL. 21600 IN NS DNS2.PACOM.MIL. PACOM.MIL. 21600 IN NS PNOCXNS2.PR.NAVY.MIL. PACOM.MIL. 21600 IN NS DNS1.PACOM.MIL. PACOM.MIL. 21600 IN NS PNOCXNS1.PR.NAVY.MIL. PACOM.MIL. 10800 IN DS 17174 8 1 ef22eda9192ce5c1fff587d26891e4880adea764 PACOM.MIL. 10800 IN DS ( 17174 8 2 0dbdf8970d3973698ddbe11b080c7cf424e1792195b890b4c62aacd3faf2fbf8 ) PACOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. joj1LNjie7FvBtrxtJmgKz/Bi9gQqbBHxap6Lq9Vq/F+z4lFaJyTXrlknMO+b4muxdC240lkUc5b Z6nCWB3KEx2kC2q+2pdHqDjAkuakaThIyQwA7ti9Fp5IInS/K0kVOBXtjHWxCUBZpn9Y7y70RBnO xrm1KszHlJrV0aq9p64= ) ;; ADDITIONAL SECTION (5 records) PNOCXNS2.PR.NAVY.MIL. 21600 IN A 205.56.181.107 PNOCXNS1.PR.NAVY.MIL. 21600 IN A 205.56.181.106 DNS2.PACOM.MIL. 21600 IN A 199.211.150.67 DNS1.PACOM.MIL. 21600 IN A 199.211.150.66 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pacom.mil

pacom.mil

	Checking DS between mil and pacom.mil
	Query to pac1.nipr.mil for pacom.mil/DS
	Received 294 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (294 octets) ;; HEADER SECTION ;; id = 8719 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN DS ;; ANSWER SECTION (3 records) PACOM.MIL. 10800 IN DS ( 17174 8 2 0dbdf8970d3973698ddbe11b080c7cf424e1792195b890b4c62aacd3faf2fbf8 ) PACOM.MIL. 10800 IN DS 17174 8 1 ef22eda9192ce5c1fff587d26891e4880adea764 PACOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. joj1LNjie7FvBtrxtJmgKz/Bi9gQqbBHxap6Lq9Vq/F+z4lFaJyTXrlknMO+b4muxdC240lkUc5b Z6nCWB3KEx2kC2q+2pdHqDjAkuakaThIyQwA7ti9Fp5IInS/K0kVOBXtjHWxCUBZpn9Y7y70RBnO xrm1KszHlJrV0aq9p64= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for pacom.mil in the mil zone
	DS=17174/SHA-256 has algorithm RSASHA256
	DS=17174/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PACOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. joj1LNjie7FvBtrxtJmgKz/Bi9gQqbBHxap6Lq9Vq/F+z4lFaJyTXrlknMO+b4muxdC240lkUc5b Z6nCWB3KEx2kC2q+2pdHqDjAkuakaThIyQwA7ti9Fp5IInS/K0kVOBXtjHWxCUBZpn9Y7y70RBnO xrm1KszHlJrV0aq9p64= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=17174/SHA-256 is now in the chain-of-trust
	`PACOM.MIL. 10800 IN DS ( 17174 8 2 0dbdf8970d3973698ddbe11b080c7cf424e1792195b890b4c62aacd3faf2fbf8 )`
	`PACOM.MIL. 10800 IN DS 17174 8 1 ef22eda9192ce5c1fff587d26891e4880adea764`
	Query to PNOCXNS2.PR.NAVY.MIL for pacom.mil/DNSKEY
	Received 1736 bytes from 205.56.181.107
	;; Response received from 205.56.181.107 (1736 octets) ;; HEADER SECTION ;; id = 30809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN DNSKEY ;; ANSWER SECTION (6 records) pacom.mil. 1662 IN DNSKEY ( 257 3 8 AwEAAb4mg78ZnYTHWr8uQ5iTTEAwN2sbF8lF7/cuE3Ey2suvVRx+ygnXcBJyr3Mu/wRsmPF9gsmB WFUOLkmwYTPTDsXLmmOjVQVN0K0JOd2QKA5JunTqPmsU/vq6LCFLhyWL2La71Mjx0EZaHc+W6Cyc iIfYo04Y11NTIGFFjdw25G5RABZdxmxFX1A0qRMtCOKEM2Ei9HJ9inNt5O+QAHXwHBt0cliP2NMA QW0ibBOvxpUbNnWQzmBP82ZLpH+xNycDmMt6BpvtNlejW/yfCD9w6Z8nFYAwtkxbxi5a0gMdL2Uu WSL+tIA0+BATuT2ZzP5rHfRsBldKAgkc6VFcUC6Qs7c= ) ; Key ID = 16877 pacom.mil. 1662 IN DNSKEY ( 256 3 8 AwEAAda1sIVpxE87ZaAJPLVm0gkq/eNnMJxNUo8NqcjNSTyRBNSwJVm2JT+UIoYIY+BqLxsRjOBJ aoL9d/TIRDAfUKXWVhJztvkiv4foUjq1TKBCY1Bgeg8F3ZnsfksRZ7G1c8SZKPukIHNagLSAk5ys x/vWpFVJqQAUdxcyWBe6QfQYiTQ5qZShpl2oeMGMoAG+stoBIrr9zGpJQAsJxOtpYCUYS/JHB27i aiUUCIMAPs7YmSrQGGrs4tgnqioY0kDt6INmnD0/xggtPYX1aLRDCrCxPq30H4XQrWlrK7eCC0sg MhgWE56Mx1WxnJiqE4jQIMNY7VvAQAZcXFmqeexaGgU= ) ; Key ID = 44541 pacom.mil. 1662 IN DNSKEY ( 256 3 8 AwEAAbh7RRD09kElw071AJs5WfFgw3uwM7yMhPcspo7ZLe+Z+5/JolTgari74Wp6nqI+jEnmR4R6 rQYv6dVO9THxC1+4EH8biiiOCszY6IzPDC9FWX5Zwafsrg3mV110VkO6jYUMUS0XV4puMCzmYYI3 8Q28CfWwLxt5IoUVw9X/h7mXhYK7Vm/4fO+NKuEFuPJQxSl0d8UZplIMQSyzoqzgg24WyPBUYAcV lKD7w7dWdEyW+ZugGQKNAC6smou0q+kbE9poTJYMisfnyDvJb8Q8v5hDVrVHm3vhHTtCtLYWIa9m 3O1BzDW0/WKAvkIQaBNL05A+LARHuFYCGj0CC+eZvRk= ) ; Key ID = 53763 pacom.mil. 1662 IN DNSKEY ( 257 3 8 AwEAAcT3cwc4JyEr+EaNBD4VNc/HhJ50mCOi9ZvvF/lb7Q7IBoxAlk/e0oq50dzJOUV1TI6cN+/d 4rl/c8g3afMgx3sfSrav/0Yg/cGhJBUkvyex+vOK5peE7LIzgSrkNHlr8t5L88914JiFXIrDzYuQ 7Wo2Ihz2ZT/t6IaAvD94ACQ6BQ9WZADdWLhok2EzCLmbHLfI9LRe2DUG6Ikyd6kkgyWjb9EP2/Y0 +o4zHS3sJZur0pzgZce8L0V/xz+8E0JV7xy0iGdqQ3leRv7MMsxcv7d2/Xp9vVxumKHVwGAiaLcT dV1NKmf+YGQrSZFFodyXuuKrEyM/3ZCtjL3ylPsE1nk= ) ; Key ID = 17174 pacom.mil. 1662 IN RRSIG ( DNSKEY 8 2 3600 20230928180002 20230921180002 17174 pacom.mil. P8Rw3J+YFBBBlmPXaODDJo0G0p+Z+fiVkUt7x3gnxhMfgQKiExt04MhJyD6y2t+wUNuzM7iS8wy8 z1PXkbG+ydTNWghTkzoFjKPZsrmIpDDrx5aq1n76TLAGj1VFmf6qDfahs68X488uj9blPA9fWDEl tF1lgszHGc6sA3h0xxtIlP8KUMojSnaSEMW3g2Gz0Ex41HlhSEmVbvB7VgLwph0N1GzdYtLWH+Ct JYfLXN8KYhURDTm1QtrPODtCYVpTHPk23QV0hzFi8c4wps3RNRpmDx+VvPz4jdh+qWCOB9LICHqe RdyTBDGqKmkWnAh0QThroO1LA/X5vV5HlAMeVg== ) pacom.mil. 1662 IN RRSIG ( DNSKEY 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. lJ7xGzdfMDFOB24pPnCQxWEPaHGeikFcEyZOvdbpiIysANwtyiY+tvrAbaR4Kxw5TAgWWt3ivWia RDQQawFVpDs/WO4+j4/i72QqsENpCjGdCknKwk8MrbrVY8IJ4B6DOQXt742pFThzJHgLZsATaPD3 9CYutD4X2IwIiHWoKwCwEp+uKYIFw++Hze+q/9qxbW+jzaBWv1SSSAJ2e/Lyul37F0GksjI+ubWl y5qkmR49633PaXpnH0kDbVK6Y89sOOaKGrGGxBbn6JTcsR1RMN2gOVLkceV1UHcC66PZP4hlbrrX vK1Gy+wlQ6beLkoMx5EIB+KLJQuC7HNSZP0y0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for pacom.mil
	`pacom.mil. 1662 IN DNSKEY ( 257 3 8 AwEAAb4mg78ZnYTHWr8uQ5iTTEAwN2sbF8lF7/cuE3Ey2suvVRx+ygnXcBJyr3Mu/wRsmPF9gsmB WFUOLkmwYTPTDsXLmmOjVQVN0K0JOd2QKA5JunTqPmsU/vq6LCFLhyWL2La71Mjx0EZaHc+W6Cyc iIfYo04Y11NTIGFFjdw25G5RABZdxmxFX1A0qRMtCOKEM2Ei9HJ9inNt5O+QAHXwHBt0cliP2NMA QW0ibBOvxpUbNnWQzmBP82ZLpH+xNycDmMt6BpvtNlejW/yfCD9w6Z8nFYAwtkxbxi5a0gMdL2Uu WSL+tIA0+BATuT2ZzP5rHfRsBldKAgkc6VFcUC6Qs7c= ) ; Key ID = 16877`
	`pacom.mil. 1662 IN DNSKEY ( 256 3 8 AwEAAda1sIVpxE87ZaAJPLVm0gkq/eNnMJxNUo8NqcjNSTyRBNSwJVm2JT+UIoYIY+BqLxsRjOBJ aoL9d/TIRDAfUKXWVhJztvkiv4foUjq1TKBCY1Bgeg8F3ZnsfksRZ7G1c8SZKPukIHNagLSAk5ys x/vWpFVJqQAUdxcyWBe6QfQYiTQ5qZShpl2oeMGMoAG+stoBIrr9zGpJQAsJxOtpYCUYS/JHB27i aiUUCIMAPs7YmSrQGGrs4tgnqioY0kDt6INmnD0/xggtPYX1aLRDCrCxPq30H4XQrWlrK7eCC0sg MhgWE56Mx1WxnJiqE4jQIMNY7VvAQAZcXFmqeexaGgU= ) ; Key ID = 44541`
	`pacom.mil. 1662 IN DNSKEY ( 256 3 8 AwEAAbh7RRD09kElw071AJs5WfFgw3uwM7yMhPcspo7ZLe+Z+5/JolTgari74Wp6nqI+jEnmR4R6 rQYv6dVO9THxC1+4EH8biiiOCszY6IzPDC9FWX5Zwafsrg3mV110VkO6jYUMUS0XV4puMCzmYYI3 8Q28CfWwLxt5IoUVw9X/h7mXhYK7Vm/4fO+NKuEFuPJQxSl0d8UZplIMQSyzoqzgg24WyPBUYAcV lKD7w7dWdEyW+ZugGQKNAC6smou0q+kbE9poTJYMisfnyDvJb8Q8v5hDVrVHm3vhHTtCtLYWIa9m 3O1BzDW0/WKAvkIQaBNL05A+LARHuFYCGj0CC+eZvRk= ) ; Key ID = 53763`
	`pacom.mil. 1662 IN DNSKEY ( 257 3 8 AwEAAcT3cwc4JyEr+EaNBD4VNc/HhJ50mCOi9ZvvF/lb7Q7IBoxAlk/e0oq50dzJOUV1TI6cN+/d 4rl/c8g3afMgx3sfSrav/0Yg/cGhJBUkvyex+vOK5peE7LIzgSrkNHlr8t5L88914JiFXIrDzYuQ 7Wo2Ihz2ZT/t6IaAvD94ACQ6BQ9WZADdWLhok2EzCLmbHLfI9LRe2DUG6Ikyd6kkgyWjb9EP2/Y0 +o4zHS3sJZur0pzgZce8L0V/xz+8E0JV7xy0iGdqQ3leRv7MMsxcv7d2/Xp9vVxumKHVwGAiaLcT dV1NKmf+YGQrSZFFodyXuuKrEyM/3ZCtjL3ylPsE1nk= ) ; Key ID = 17174`
	DNSKEY=17174/SEP is now in the chain-of-trust
	DS=17174/SHA-256 verifies DNSKEY=17174/SEP
	DS=17174/SHA-1 verifies DNSKEY=17174/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`pacom.mil. 1662 IN RRSIG ( DNSKEY 8 2 3600 20230928180002 20230921180002 17174 pacom.mil. P8Rw3J+YFBBBlmPXaODDJo0G0p+Z+fiVkUt7x3gnxhMfgQKiExt04MhJyD6y2t+wUNuzM7iS8wy8 z1PXkbG+ydTNWghTkzoFjKPZsrmIpDDrx5aq1n76TLAGj1VFmf6qDfahs68X488uj9blPA9fWDEl tF1lgszHGc6sA3h0xxtIlP8KUMojSnaSEMW3g2Gz0Ex41HlhSEmVbvB7VgLwph0N1GzdYtLWH+Ct JYfLXN8KYhURDTm1QtrPODtCYVpTHPk23QV0hzFi8c4wps3RNRpmDx+VvPz4jdh+qWCOB9LICHqe RdyTBDGqKmkWnAh0QThroO1LA/X5vV5HlAMeVg== )`
	`pacom.mil. 1662 IN RRSIG ( DNSKEY 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. lJ7xGzdfMDFOB24pPnCQxWEPaHGeikFcEyZOvdbpiIysANwtyiY+tvrAbaR4Kxw5TAgWWt3ivWia RDQQawFVpDs/WO4+j4/i72QqsENpCjGdCknKwk8MrbrVY8IJ4B6DOQXt742pFThzJHgLZsATaPD3 9CYutD4X2IwIiHWoKwCwEp+uKYIFw++Hze+q/9qxbW+jzaBWv1SSSAJ2e/Lyul37F0GksjI+ubWl y5qkmR49633PaXpnH0kDbVK6Y89sOOaKGrGGxBbn6JTcsR1RMN2gOVLkceV1UHcC66PZP4hlbrrX vK1Gy+wlQ6beLkoMx5EIB+KLJQuC7HNSZP0y0A== )`
	RRSIG=17174 and DNSKEY=17174/SEP verifies the DNSKEY RRset
	RRSIG=44541 and DNSKEY=44541 verifies the DNSKEY RRset
	DNSKEY=16877/SEP is now in the chain-of-trust
	DNSKEY=44541 is now in the chain-of-trust
	DNSKEY=53763 is now in the chain-of-trust
	Query to DNS2.PACOM.MIL for pacom.mil/A
	Received 481 bytes from 199.211.150.67
	;; Response received from 199.211.150.67 (481 octets) ;; HEADER SECTION ;; id = 54256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) pacom.mil. 0 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3584 IN NSEC3 ( 1 0 10 4ae7a010b7f9017d 6pqiuiijg5nus92uf5tufrlbj0a3pg3q NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3584 IN RRSIG ( NSEC3 8 3 3600 20230928180002 20230921180002 44541 pacom.mil. LQvT2o8h07CRUTXzZDhW6PSWxL8knwSprk9sMDS0xVJ8us/fuo7hJYjtOhwDGzId+aCWU1wRy1K5 e/6c30n2VdX8niOjPbQzstNH+n0GyQhk4OLD/89xe0jb1RmTlGlYEPmBQDKxDOJKdI+6wQjRludb 4L24034TR6zCinBaMzz55N/ALokPho2dATHtiYQA1XhTGFcCZzSIJp19G7/Apsue+7J7yxVrtKKL MePEX1W/nyPRgZslJXFqNfkC8d5zJUanOsGnfPN4fz5BybUxaXzm4tx12SDu3IELkDrXreOC2zum A3B9CxPUKXe70j7sJXFdx0bWuBFshqJOdu4yDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS2.PACOM.MIL is authoritative for pacom.mil
	Query to DNS1.PACOM.MIL for pacom.mil/SOA
	Received 393 bytes from 199.211.150.66
	;; Response received from 199.211.150.66 (393 octets) ;; HEADER SECTION ;; id = 2733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN SOA ;; ANSWER SECTION (2 records) pacom.mil. 3600 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) pacom.mil. 3600 IN RRSIG ( SOA 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. aKl4VIG0/PopQpwVi95x6sTDhu4Wqhvy8M9E0svPRi5MTUE+Qmf+i8M4wIYnCujkYt33XZBcbXbv NEeUOOgnZphbOhQQmSxn8aAllrUUJfI2C8UmVIfg4eqcftFnmrpCZSzEIWbu2Y4xeUzhrzNeXYl5 Tspvv6LBs3B/WCgIswbAhbVmS6eakIzpetRxLtAxe5qz7JCA0msp9VIz2lVQgPHzhf62Az8v17es 1MQVQ7vuGycjzFDfpx7efSD93s2A9Slh8U0naTIP7kEsCargp/f4HeJKJH9C1j7GYrk4eHIcxw/v Vqk+dv7bK/CX50LQm5PGyw44mSdWt8ChiPMNvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to PNOCXNS2.PR.NAVY.MIL for pacom.mil/SOA
	Received 393 bytes from 205.56.181.107
	;; Response received from 205.56.181.107 (393 octets) ;; HEADER SECTION ;; id = 6760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN SOA ;; ANSWER SECTION (2 records) pacom.mil. 2512 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) pacom.mil. 2512 IN RRSIG ( SOA 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. aKl4VIG0/PopQpwVi95x6sTDhu4Wqhvy8M9E0svPRi5MTUE+Qmf+i8M4wIYnCujkYt33XZBcbXbv NEeUOOgnZphbOhQQmSxn8aAllrUUJfI2C8UmVIfg4eqcftFnmrpCZSzEIWbu2Y4xeUzhrzNeXYl5 Tspvv6LBs3B/WCgIswbAhbVmS6eakIzpetRxLtAxe5qz7JCA0msp9VIz2lVQgPHzhf62Az8v17es 1MQVQ7vuGycjzFDfpx7efSD93s2A9Slh8U0naTIP7kEsCargp/f4HeJKJH9C1j7GYrk4eHIcxw/v Vqk+dv7bK/CX50LQm5PGyw44mSdWt8ChiPMNvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to PNOCXNS1.PR.NAVY.MIL for pacom.mil/SOA
	Received 393 bytes from 205.56.181.106
	;; Response received from 205.56.181.106 (393 octets) ;; HEADER SECTION ;; id = 53051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN SOA ;; ANSWER SECTION (2 records) pacom.mil. 3600 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) pacom.mil. 3600 IN RRSIG ( SOA 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. aKl4VIG0/PopQpwVi95x6sTDhu4Wqhvy8M9E0svPRi5MTUE+Qmf+i8M4wIYnCujkYt33XZBcbXbv NEeUOOgnZphbOhQQmSxn8aAllrUUJfI2C8UmVIfg4eqcftFnmrpCZSzEIWbu2Y4xeUzhrzNeXYl5 Tspvv6LBs3B/WCgIswbAhbVmS6eakIzpetRxLtAxe5qz7JCA0msp9VIz2lVQgPHzhf62Az8v17es 1MQVQ7vuGycjzFDfpx7efSD93s2A9Slh8U0naTIP7kEsCargp/f4HeJKJH9C1j7GYrk4eHIcxw/v Vqk+dv7bK/CX50LQm5PGyw44mSdWt8ChiPMNvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to DNS2.PACOM.MIL for pacom.mil/A
	Timeout querying DNS2.PACOM.MIL/199.211.150.67 for pacom.mil/A
	All Queries to DNS2.PACOM.MIL for pacom.mil/A timed out or failed
	NSEC3 validation not implemented yet
	No RRSIGs found

pacom.mil

	Query to PNOCXNS2.PR.NAVY.MIL for pacom.mil/A
	Received 481 bytes from 205.56.181.107
	;; Response received from 205.56.181.107 (481 octets) ;; HEADER SECTION ;; id = 47034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) pacom.mil. 3597 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3575 IN NSEC3 ( 1 0 10 4ae7a010b7f9017d 6pqiuiijg5nus92uf5tufrlbj0a3pg3q NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3575 IN RRSIG ( NSEC3 8 3 3600 20230928180002 20230921180002 44541 pacom.mil. LQvT2o8h07CRUTXzZDhW6PSWxL8knwSprk9sMDS0xVJ8us/fuo7hJYjtOhwDGzId+aCWU1wRy1K5 e/6c30n2VdX8niOjPbQzstNH+n0GyQhk4OLD/89xe0jb1RmTlGlYEPmBQDKxDOJKdI+6wQjRludb 4L24034TR6zCinBaMzz55N/ALokPho2dATHtiYQA1XhTGFcCZzSIJp19G7/Apsue+7J7yxVrtKKL MePEX1W/nyPRgZslJXFqNfkC8d5zJUanOsGnfPN4fz5BybUxaXzm4tx12SDu3IELkDrXreOC2zum A3B9CxPUKXe70j7sJXFdx0bWuBFshqJOdu4yDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PNOCXNS2.PR.NAVY.MIL is authoritative for pacom.mil
	Query to PNOCXNS2.PR.NAVY.MIL for pacom.mil/A
	Received 778 bytes from 205.56.181.107
	;; Response received from 205.56.181.107 (778 octets) ;; HEADER SECTION ;; id = 40372 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pacom.mil. 3600 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) pacom.mil. 3600 IN RRSIG ( SOA 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. aKl4VIG0/PopQpwVi95x6sTDhu4Wqhvy8M9E0svPRi5MTUE+Qmf+i8M4wIYnCujkYt33XZBcbXbv NEeUOOgnZphbOhQQmSxn8aAllrUUJfI2C8UmVIfg4eqcftFnmrpCZSzEIWbu2Y4xeUzhrzNeXYl5 Tspvv6LBs3B/WCgIswbAhbVmS6eakIzpetRxLtAxe5qz7JCA0msp9VIz2lVQgPHzhf62Az8v17es 1MQVQ7vuGycjzFDfpx7efSD93s2A9Slh8U0naTIP7kEsCargp/f4HeJKJH9C1j7GYrk4eHIcxw/v Vqk+dv7bK/CX50LQm5PGyw44mSdWt8ChiPMNvw== ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3600 IN NSEC3 ( 1 0 10 4ae7a010b7f9017d 6pqiuiijg5nus92uf5tufrlbj0a3pg3q NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3600 IN RRSIG ( NSEC3 8 3 3600 20230928180002 20230921180002 44541 pacom.mil. LQvT2o8h07CRUTXzZDhW6PSWxL8knwSprk9sMDS0xVJ8us/fuo7hJYjtOhwDGzId+aCWU1wRy1K5 e/6c30n2VdX8niOjPbQzstNH+n0GyQhk4OLD/89xe0jb1RmTlGlYEPmBQDKxDOJKdI+6wQjRludb 4L24034TR6zCinBaMzz55N/ALokPho2dATHtiYQA1XhTGFcCZzSIJp19G7/Apsue+7J7yxVrtKKL MePEX1W/nyPRgZslJXFqNfkC8d5zJUanOsGnfPN4fz5BybUxaXzm4tx12SDu3IELkDrXreOC2zum A3B9CxPUKXe70j7sJXFdx0bWuBFshqJOdu4yDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	No RRSIGs found

pacom.mil

	Query to PNOCXNS1.PR.NAVY.MIL for pacom.mil/A
	Received 481 bytes from 205.56.181.106
	;; Response received from 205.56.181.106 (481 octets) ;; HEADER SECTION ;; id = 38534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) pacom.mil. 3354 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3575 IN NSEC3 ( 1 0 10 4ae7a010b7f9017d 6pqiuiijg5nus92uf5tufrlbj0a3pg3q NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3575 IN RRSIG ( NSEC3 8 3 3600 20230928180002 20230921180002 44541 pacom.mil. LQvT2o8h07CRUTXzZDhW6PSWxL8knwSprk9sMDS0xVJ8us/fuo7hJYjtOhwDGzId+aCWU1wRy1K5 e/6c30n2VdX8niOjPbQzstNH+n0GyQhk4OLD/89xe0jb1RmTlGlYEPmBQDKxDOJKdI+6wQjRludb 4L24034TR6zCinBaMzz55N/ALokPho2dATHtiYQA1XhTGFcCZzSIJp19G7/Apsue+7J7yxVrtKKL MePEX1W/nyPRgZslJXFqNfkC8d5zJUanOsGnfPN4fz5BybUxaXzm4tx12SDu3IELkDrXreOC2zum A3B9CxPUKXe70j7sJXFdx0bWuBFshqJOdu4yDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PNOCXNS1.PR.NAVY.MIL is authoritative for pacom.mil
	Query to PNOCXNS1.PR.NAVY.MIL for pacom.mil/A
	Received 481 bytes from 205.56.181.106
	;; Response received from 205.56.181.106 (481 octets) ;; HEADER SECTION ;; id = 32090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) pacom.mil. 3354 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3575 IN NSEC3 ( 1 0 10 4ae7a010b7f9017d 6pqiuiijg5nus92uf5tufrlbj0a3pg3q NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3575 IN RRSIG ( NSEC3 8 3 3600 20230928180002 20230921180002 44541 pacom.mil. LQvT2o8h07CRUTXzZDhW6PSWxL8knwSprk9sMDS0xVJ8us/fuo7hJYjtOhwDGzId+aCWU1wRy1K5 e/6c30n2VdX8niOjPbQzstNH+n0GyQhk4OLD/89xe0jb1RmTlGlYEPmBQDKxDOJKdI+6wQjRludb 4L24034TR6zCinBaMzz55N/ALokPho2dATHtiYQA1XhTGFcCZzSIJp19G7/Apsue+7J7yxVrtKKL MePEX1W/nyPRgZslJXFqNfkC8d5zJUanOsGnfPN4fz5BybUxaXzm4tx12SDu3IELkDrXreOC2zum A3B9CxPUKXe70j7sJXFdx0bWuBFshqJOdu4yDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	No RRSIGs found

pacom.mil

	Query to DNS1.PACOM.MIL for pacom.mil/A
	Received 778 bytes from 199.211.150.66
	;; Response received from 199.211.150.66 (778 octets) ;; HEADER SECTION ;; id = 24141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pacom.mil. 58 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) pacom.mil. 58 IN RRSIG ( SOA 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. aKl4VIG0/PopQpwVi95x6sTDhu4Wqhvy8M9E0svPRi5MTUE+Qmf+i8M4wIYnCujkYt33XZBcbXbv NEeUOOgnZphbOhQQmSxn8aAllrUUJfI2C8UmVIfg4eqcftFnmrpCZSzEIWbu2Y4xeUzhrzNeXYl5 Tspvv6LBs3B/WCgIswbAhbVmS6eakIzpetRxLtAxe5qz7JCA0msp9VIz2lVQgPHzhf62Az8v17es 1MQVQ7vuGycjzFDfpx7efSD93s2A9Slh8U0naTIP7kEsCargp/f4HeJKJH9C1j7GYrk4eHIcxw/v Vqk+dv7bK/CX50LQm5PGyw44mSdWt8ChiPMNvw== ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3567 IN NSEC3 ( 1 0 10 4ae7a010b7f9017d 6pqiuiijg5nus92uf5tufrlbj0a3pg3q NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3567 IN RRSIG ( NSEC3 8 3 3600 20230928180002 20230921180002 44541 pacom.mil. LQvT2o8h07CRUTXzZDhW6PSWxL8knwSprk9sMDS0xVJ8us/fuo7hJYjtOhwDGzId+aCWU1wRy1K5 e/6c30n2VdX8niOjPbQzstNH+n0GyQhk4OLD/89xe0jb1RmTlGlYEPmBQDKxDOJKdI+6wQjRludb 4L24034TR6zCinBaMzz55N/ALokPho2dATHtiYQA1XhTGFcCZzSIJp19G7/Apsue+7J7yxVrtKKL MePEX1W/nyPRgZslJXFqNfkC8d5zJUanOsGnfPN4fz5BybUxaXzm4tx12SDu3IELkDrXreOC2zum A3B9CxPUKXe70j7sJXFdx0bWuBFshqJOdu4yDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DNS1.PACOM.MIL is authoritative for pacom.mil
	Found RRSIG signed by pacom.mil zone
	Query to DNS1.PACOM.MIL for pacom.mil/A
	Received 778 bytes from 199.211.150.66
	;; Response received from 199.211.150.66 (778 octets) ;; HEADER SECTION ;; id = 4469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pacom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pacom.mil. 56 IN SOA ( dns1.pacom.mil. joshua.smith.ctr.pacom.mil. 2023092101 ;serial 3600 ;refresh 1800 ;retry 1814400 ;expire 3600 ;minimum ) pacom.mil. 56 IN RRSIG ( SOA 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. aKl4VIG0/PopQpwVi95x6sTDhu4Wqhvy8M9E0svPRi5MTUE+Qmf+i8M4wIYnCujkYt33XZBcbXbv NEeUOOgnZphbOhQQmSxn8aAllrUUJfI2C8UmVIfg4eqcftFnmrpCZSzEIWbu2Y4xeUzhrzNeXYl5 Tspvv6LBs3B/WCgIswbAhbVmS6eakIzpetRxLtAxe5qz7JCA0msp9VIz2lVQgPHzhf62Az8v17es 1MQVQ7vuGycjzFDfpx7efSD93s2A9Slh8U0naTIP7kEsCargp/f4HeJKJH9C1j7GYrk4eHIcxw/v Vqk+dv7bK/CX50LQm5PGyw44mSdWt8ChiPMNvw== ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3565 IN NSEC3 ( 1 0 10 4ae7a010b7f9017d 6pqiuiijg5nus92uf5tufrlbj0a3pg3q NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 6HL8I3ESVFNNLHENKR2KC4A6O262VV86.pacom.mil. 3565 IN RRSIG ( NSEC3 8 3 3600 20230928180002 20230921180002 44541 pacom.mil. LQvT2o8h07CRUTXzZDhW6PSWxL8knwSprk9sMDS0xVJ8us/fuo7hJYjtOhwDGzId+aCWU1wRy1K5 e/6c30n2VdX8niOjPbQzstNH+n0GyQhk4OLD/89xe0jb1RmTlGlYEPmBQDKxDOJKdI+6wQjRludb 4L24034TR6zCinBaMzz55N/ALokPho2dATHtiYQA1XhTGFcCZzSIJp19G7/Apsue+7J7yxVrtKKL MePEX1W/nyPRgZslJXFqNfkC8d5zJUanOsGnfPN4fz5BybUxaXzm4tx12SDu3IELkDrXreOC2zum A3B9CxPUKXe70j7sJXFdx0bWuBFshqJOdu4yDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`pacom.mil. 58 IN RRSIG ( SOA 8 2 3600 20230928180002 20230921180002 44541 pacom.mil. aKl4VIG0/PopQpwVi95x6sTDhu4Wqhvy8M9E0svPRi5MTUE+Qmf+i8M4wIYnCujkYt33XZBcbXbv NEeUOOgnZphbOhQQmSxn8aAllrUUJfI2C8UmVIfg4eqcftFnmrpCZSzEIWbu2Y4xeUzhrzNeXYl5 Tspvv6LBs3B/WCgIswbAhbVmS6eakIzpetRxLtAxe5qz7JCA0msp9VIz2lVQgPHzhf62Az8v17es 1MQVQ7vuGycjzFDfpx7efSD93s2A9Slh8U0naTIP7kEsCargp/f4HeJKJH9C1j7GYrk4eHIcxw/v Vqk+dv7bK/CX50LQm5PGyw44mSdWt8ChiPMNvw== )`
	RRSIG=44541 and DNSKEY=44541 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pacom.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: