DNSSEC Analyzer - repi.mil

Domain Name:

Time: 2023-09-24 16:12:13 UTC, NTP stratum 4

Analyzing DNSSEC problems for repi.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 56705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to e.root-servers.net for repi.mil/A
	Received 803 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (803 octets) ;; HEADER SECTION ;; id = 57091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for mil/DNSKEY
	Received 798 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (798 octets) ;; HEADER SECTION ;; id = 52789 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to k.root-servers.net for mil/DS
	Received 415 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (415 octets) ;; HEADER SECTION ;; id = 51454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=62470/SHA-256 has algorithm RSASHA256
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=62470/SHA-256 is now in the chain-of-trust
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to eur2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (1628 octets) ;; HEADER SECTION ;; id = 11801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to pac1.nipr.mil for repi.mil/A
	Received 448 bytes from 199.252.180.234
	;; Response received from 199.252.180.234 (448 octets) ;; HEADER SECTION ;; id = 50292 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) REPI.MIL. 21600 IN NS KAUCHER.DMA.MIL. REPI.MIL. 21600 IN NS RUSSELL.DMA.MIL. REPI.MIL. 21600 IN NS BEAST.DMA.MIL. REPI.MIL. 21600 IN NS BEAUTY.DMA.MIL. REPI.MIL. 10800 IN DS 42479 8 1 0df8640e210962d3ef0fd157ab798fa5f6673bc7 REPI.MIL. 10800 IN DS ( 42479 8 2 012ad79455611cf40956de4526601c7ab199530b5117461b40862bdce584c9d1 ) REPI.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EeGinjUbgaUsk5PrB8nE9twgQK9B0XpmQXRXSW1FUX/LoKiOB3Fk5xumWaDN5KdKuRJ43CE00/4d Nhwb8CxoZYYSX5uXh08CQzziiVNUO5WW3/gb1XEGKN38sCbBqV67Nsrf7MunzmedKnzFxJwDcnIS GPJ7LbSRIEJjjSWyvag= ) ;; ADDITIONAL SECTION (5 records) RUSSELL.DMA.MIL. 21600 IN A 155.7.208.112 KAUCHER.DMA.MIL. 21600 IN A 155.7.208.113 BEAUTY.DMA.MIL. 21600 IN A 155.7.145.112 BEAST.DMA.MIL. 21600 IN A 155.7.145.113 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to eur2.nipr.mil for repi.mil/DNSKEY
	Received 448 bytes from 199.252.143.234
	;; Response received from 199.252.143.234 (448 octets) ;; HEADER SECTION ;; id = 40363 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) REPI.MIL. 21600 IN NS BEAUTY.DMA.MIL. REPI.MIL. 21600 IN NS KAUCHER.DMA.MIL. REPI.MIL. 21600 IN NS RUSSELL.DMA.MIL. REPI.MIL. 21600 IN NS BEAST.DMA.MIL. REPI.MIL. 10800 IN DS ( 42479 8 2 012ad79455611cf40956de4526601c7ab199530b5117461b40862bdce584c9d1 ) REPI.MIL. 10800 IN DS 42479 8 1 0df8640e210962d3ef0fd157ab798fa5f6673bc7 REPI.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EeGinjUbgaUsk5PrB8nE9twgQK9B0XpmQXRXSW1FUX/LoKiOB3Fk5xumWaDN5KdKuRJ43CE00/4d Nhwb8CxoZYYSX5uXh08CQzziiVNUO5WW3/gb1XEGKN38sCbBqV67Nsrf7MunzmedKnzFxJwDcnIS GPJ7LbSRIEJjjSWyvag= ) ;; ADDITIONAL SECTION (5 records) RUSSELL.DMA.MIL. 21600 IN A 155.7.208.112 KAUCHER.DMA.MIL. 21600 IN A 155.7.208.113 BEAUTY.DMA.MIL. 21600 IN A 155.7.145.112 BEAST.DMA.MIL. 21600 IN A 155.7.145.113 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone repi.mil

repi.mil

	Checking DS between mil and repi.mil
	Query to pac2.nipr.mil for repi.mil/DS
	Received 292 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (292 octets) ;; HEADER SECTION ;; id = 10100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN DS ;; ANSWER SECTION (3 records) REPI.MIL. 10800 IN DS ( 42479 8 2 012ad79455611cf40956de4526601c7ab199530b5117461b40862bdce584c9d1 ) REPI.MIL. 10800 IN DS 42479 8 1 0df8640e210962d3ef0fd157ab798fa5f6673bc7 REPI.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EeGinjUbgaUsk5PrB8nE9twgQK9B0XpmQXRXSW1FUX/LoKiOB3Fk5xumWaDN5KdKuRJ43CE00/4d Nhwb8CxoZYYSX5uXh08CQzziiVNUO5WW3/gb1XEGKN38sCbBqV67Nsrf7MunzmedKnzFxJwDcnIS GPJ7LbSRIEJjjSWyvag= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for repi.mil in the mil zone
	DS=42479/SHA-256 has algorithm RSASHA256
	DS=42479/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`REPI.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. EeGinjUbgaUsk5PrB8nE9twgQK9B0XpmQXRXSW1FUX/LoKiOB3Fk5xumWaDN5KdKuRJ43CE00/4d Nhwb8CxoZYYSX5uXh08CQzziiVNUO5WW3/gb1XEGKN38sCbBqV67Nsrf7MunzmedKnzFxJwDcnIS GPJ7LbSRIEJjjSWyvag= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=42479/SHA-256 is now in the chain-of-trust
	`REPI.MIL. 10800 IN DS ( 42479 8 2 012ad79455611cf40956de4526601c7ab199530b5117461b40862bdce584c9d1 )`
	`REPI.MIL. 10800 IN DS 42479 8 1 0df8640e210962d3ef0fd157ab798fa5f6673bc7`
	Query to BEAST.DMA.MIL for repi.mil/DNSKEY
	Received 2197 bytes from 155.7.145.113
	;; Response received from 155.7.145.113 (2197 octets) ;; HEADER SECTION ;; id = 48145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN DNSKEY ;; ANSWER SECTION (9 records) repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAcUMX3w3VDsCZQdSHrPe/Y5eXlaSvthmKxI16qOWN/jbfOy3bYCt32e0wag5KpbuE1Nv28Pu to5PDEVPxzJYWwX1O7UavfYRI9vR50NE4hZSQfimZnVpXvxXEuRlzqZzFK6uSKVAjVqJymMRVHul zITcPiUFF6jC5K83VNU7kB77FORLQpdIDrn0d4BnDXpWzBa6kw+udQkLuNEOAtZOfE9f7G39Soo2 /Gs+VpQP067EPjMRwiQdiNLOMX41oc3ICbQN6lwz2E/ydpScn1kht7I3gZ6PpWL1jJr3E2m6pxCP w3WHqqUYQV507s2SdJ6prhrmgh8Sz9wSlA4Ek4grndE= ) ; Key ID = 47434 repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAdajXo0JMs+JW1DyI3uUUEgXVfREgGhJf8uKH3KIfLUva5BVdTGgj75CjQPb8i6Fn9EBQOX2 Vn+6/ptglNwBhnge1+hYO3u8X5n6Tg7UEo5bvXEeSHfLusP1do/qLRohaUt1iu3YhA0cxRn2+m7y NddbAtFjWOfMmdd2Cs5VPEe4y4ZN8LEBMpvQQQCSgaDjfVOmFwcP06a6WVvpavdRj4i2VzPJBg15 DxlFZ3BUF9emashyV6vOZqOVPZ4UyRnQuqpVoNcDNmTjxFyXTIr/nigViecZqIkRPA6F8mHhxsc3 hMGO/kzqyiVOY1V6FdJ52UhZg+b039kcTjmTybwGtjc= ) ; Key ID = 42479 repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAal2AoP/LzRDF/9L+KQ4nOhw59VFmN1JFUaebKYTriAzlztT15LIa+R1PQZbSp1Ul6bnpviT GY2151HWeWV4h+H/sDC6v5/K/4snDGDqI2dst3gJyaVeoik0iBzrvgXSMsxq2w6rMfFcM6AwQx2G 8TL9lyRIxcsp5bg3CRfPxRAIJMRiD+vRKxU/bKHZnkEGjjEAse6YUuT/gI7YE1VzdFXtYXX9+DYg SrXBne8rHWr5ZQQme6lnhVQrhPntQZWQLrtaayZ9UDDQOCW4dz6jbUT9OPHHDH3SU1YcxWZMJrSG jYOuNjQzPLVdI6r4aUTOmI6xn4x3Wd2439QffuX6d4c= ) ; Key ID = 38564 repi.mil. 3600 IN DNSKEY ( 256 3 8 AwEAAauxXVlqPQ0ofzpeHqyRoBWrMDmUQwWPfxUmuD4Ikmhb8A4v8naXAAQ7TWKTLF4X9l+DrlJw 9+uzFpDHX19bIMJELDGZhJdo9XADTDr3Hb0U/YXWvFiUjlj1dPXYS3sZOSUappN7OGOvCVMbwSlJ IzFIu4OnsA3vdzmQf0Rc9jdl ) ; Key ID = 40104 repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAbrHuWxD8vWK5uhw7EUQjZ38WZVUd9kiwElB1fsTL+ON4N/25i1AOuZEKNsiDP+GBdV2iQFk 4om1bzSyxMK3XG7v6Y6Aw7T5ztztRIDxFJbT1sgl2qbO80oeC3BoC0Vjm25dmPpdzZEY/2daORiZ H25+Z9uU5S0ktJ7+CIMwTwH3L8I7qI1V/Surs9YVn79NZ+L/4o+mEQ2vqFE1I0gDD2TlsitoyoZA 5QQyLo65U+pGtp8/GlRmukWcQLn7fsg3ZVboqx6jbkG8QmOx28o+udomp5UX0fGHo3GsXTEaISaD VasWfuBbO3ePry2OOahGqJjJsNutoipvGaEz1ij3tzc= ) ; Key ID = 37076 repi.mil. 3600 IN DNSKEY ( 256 3 8 AwEAAbxKWvOP+vYRBABjWZLoyaMOCA3lS7u7LU8l9uQuq0WiuwfMGBRUaERsH1HA4p2CMPlYc2XB SVKVm8vcM0jFOKsorwQVfSlW3Pg5m7mPWyTYQ8ATdNb5T59Lix3iiW601JPCuKu+rEPUNLUw0wM5 gMR97WxKkQ543w3mr8A+9jBt ) ; Key ID = 44529 repi.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230928053927 20230921043927 37076 repi.mil. i4ZcH4YbNt0gE1CMt4wtY5ZD8wFK8aeZaA5J9aa515ENV9Cy9M14aRxCdDhj9GMouR0DbSOJqS1Q iZyRkSyq2lCiQQfsBDWtvtQYMx6LxV/XuKJjYBO9tUBceh+ydRHy0dy/IgPZwVgoYNmxL+ay935j J0vwJOHHnNJ+cq6GecEq5sZVwTsILnkiK+WRdD1nJAQALqknZrzItgXIkxeFuGhJKMkCfShnNx6L uNGCGTltZ90qKswWsPQbOUXr5zD4sZCcGJQ69QcK8Jm7q1GlQc5m054LjaLt/+c6fFsyVl9ZGmu+ dlRDCMLVb4njp+kui8bEQdk+a3LzMl8qzWX2oA== ) repi.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230928053927 20230921043927 42479 repi.mil. khO1RtDuBIKnKS9txaWKaQO/19eYUyCxEyPERagtTbmMuinBnudJnA2jxU22uTMsfUcm3FAX5v9A 1/6VWUomquoqWb+IbR5w5suv0uJJGu2FKxjwnv63X0b4CsNQqNNJIf4Tg7L1CLjuEkXppMPnFePU qNf04pUQQuhLB3BxY/HTXbVGwM8ickBezqJ7OyQtSRskY9k6ECGGEF0uD5FrrRLRB4RpLPlopg0l LPJkNRzf0tkBleXmMI5AZ9sFAiH11ygl3U96dYDQXhj+QKA+EaWXAnhcybKZMm+qaxZkZbt3jouu LqWVIVl/0sqkmcsdM9QN8SCGu4GRvZgch4yLGw== ) repi.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230928053927 20230921043927 44529 repi.mil. SKVBy3HnJjP6eg0uUAArexhRz9BV/p7nIUxlwf+lNIpbWq9dej2ieH2qKkzkQGViGeGi+CuKS6aq RLGO/M93mx2uAnlJNm9RuW8nXIkFKNxDRSi3VoX5y8Rd393EPbu+9d3D+w0p9wCKJBdp9PevYgsk /nNVYTPu4hsjCqj/xEo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 6 DNSKEY records for repi.mil
	`repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAcUMX3w3VDsCZQdSHrPe/Y5eXlaSvthmKxI16qOWN/jbfOy3bYCt32e0wag5KpbuE1Nv28Pu to5PDEVPxzJYWwX1O7UavfYRI9vR50NE4hZSQfimZnVpXvxXEuRlzqZzFK6uSKVAjVqJymMRVHul zITcPiUFF6jC5K83VNU7kB77FORLQpdIDrn0d4BnDXpWzBa6kw+udQkLuNEOAtZOfE9f7G39Soo2 /Gs+VpQP067EPjMRwiQdiNLOMX41oc3ICbQN6lwz2E/ydpScn1kht7I3gZ6PpWL1jJr3E2m6pxCP w3WHqqUYQV507s2SdJ6prhrmgh8Sz9wSlA4Ek4grndE= ) ; Key ID = 47434`
	`repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAdajXo0JMs+JW1DyI3uUUEgXVfREgGhJf8uKH3KIfLUva5BVdTGgj75CjQPb8i6Fn9EBQOX2 Vn+6/ptglNwBhnge1+hYO3u8X5n6Tg7UEo5bvXEeSHfLusP1do/qLRohaUt1iu3YhA0cxRn2+m7y NddbAtFjWOfMmdd2Cs5VPEe4y4ZN8LEBMpvQQQCSgaDjfVOmFwcP06a6WVvpavdRj4i2VzPJBg15 DxlFZ3BUF9emashyV6vOZqOVPZ4UyRnQuqpVoNcDNmTjxFyXTIr/nigViecZqIkRPA6F8mHhxsc3 hMGO/kzqyiVOY1V6FdJ52UhZg+b039kcTjmTybwGtjc= ) ; Key ID = 42479`
	`repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAal2AoP/LzRDF/9L+KQ4nOhw59VFmN1JFUaebKYTriAzlztT15LIa+R1PQZbSp1Ul6bnpviT GY2151HWeWV4h+H/sDC6v5/K/4snDGDqI2dst3gJyaVeoik0iBzrvgXSMsxq2w6rMfFcM6AwQx2G 8TL9lyRIxcsp5bg3CRfPxRAIJMRiD+vRKxU/bKHZnkEGjjEAse6YUuT/gI7YE1VzdFXtYXX9+DYg SrXBne8rHWr5ZQQme6lnhVQrhPntQZWQLrtaayZ9UDDQOCW4dz6jbUT9OPHHDH3SU1YcxWZMJrSG jYOuNjQzPLVdI6r4aUTOmI6xn4x3Wd2439QffuX6d4c= ) ; Key ID = 38564`
	`repi.mil. 3600 IN DNSKEY ( 256 3 8 AwEAAauxXVlqPQ0ofzpeHqyRoBWrMDmUQwWPfxUmuD4Ikmhb8A4v8naXAAQ7TWKTLF4X9l+DrlJw 9+uzFpDHX19bIMJELDGZhJdo9XADTDr3Hb0U/YXWvFiUjlj1dPXYS3sZOSUappN7OGOvCVMbwSlJ IzFIu4OnsA3vdzmQf0Rc9jdl ) ; Key ID = 40104`
	`repi.mil. 3600 IN DNSKEY ( 257 3 8 AwEAAbrHuWxD8vWK5uhw7EUQjZ38WZVUd9kiwElB1fsTL+ON4N/25i1AOuZEKNsiDP+GBdV2iQFk 4om1bzSyxMK3XG7v6Y6Aw7T5ztztRIDxFJbT1sgl2qbO80oeC3BoC0Vjm25dmPpdzZEY/2daORiZ H25+Z9uU5S0ktJ7+CIMwTwH3L8I7qI1V/Surs9YVn79NZ+L/4o+mEQ2vqFE1I0gDD2TlsitoyoZA 5QQyLo65U+pGtp8/GlRmukWcQLn7fsg3ZVboqx6jbkG8QmOx28o+udomp5UX0fGHo3GsXTEaISaD VasWfuBbO3ePry2OOahGqJjJsNutoipvGaEz1ij3tzc= ) ; Key ID = 37076`
	`repi.mil. 3600 IN DNSKEY ( 256 3 8 AwEAAbxKWvOP+vYRBABjWZLoyaMOCA3lS7u7LU8l9uQuq0WiuwfMGBRUaERsH1HA4p2CMPlYc2XB SVKVm8vcM0jFOKsorwQVfSlW3Pg5m7mPWyTYQ8ATdNb5T59Lix3iiW601JPCuKu+rEPUNLUw0wM5 gMR97WxKkQ543w3mr8A+9jBt ) ; Key ID = 44529`
	DNSKEY=42479/SEP is now in the chain-of-trust
	DS=42479/SHA-256 verifies DNSKEY=42479/SEP
	DS=42479/SHA-1 verifies DNSKEY=42479/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`repi.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230928053927 20230921043927 37076 repi.mil. i4ZcH4YbNt0gE1CMt4wtY5ZD8wFK8aeZaA5J9aa515ENV9Cy9M14aRxCdDhj9GMouR0DbSOJqS1Q iZyRkSyq2lCiQQfsBDWtvtQYMx6LxV/XuKJjYBO9tUBceh+ydRHy0dy/IgPZwVgoYNmxL+ay935j J0vwJOHHnNJ+cq6GecEq5sZVwTsILnkiK+WRdD1nJAQALqknZrzItgXIkxeFuGhJKMkCfShnNx6L uNGCGTltZ90qKswWsPQbOUXr5zD4sZCcGJQ69QcK8Jm7q1GlQc5m054LjaLt/+c6fFsyVl9ZGmu+ dlRDCMLVb4njp+kui8bEQdk+a3LzMl8qzWX2oA== )`
	`repi.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230928053927 20230921043927 42479 repi.mil. khO1RtDuBIKnKS9txaWKaQO/19eYUyCxEyPERagtTbmMuinBnudJnA2jxU22uTMsfUcm3FAX5v9A 1/6VWUomquoqWb+IbR5w5suv0uJJGu2FKxjwnv63X0b4CsNQqNNJIf4Tg7L1CLjuEkXppMPnFePU qNf04pUQQuhLB3BxY/HTXbVGwM8ickBezqJ7OyQtSRskY9k6ECGGEF0uD5FrrRLRB4RpLPlopg0l LPJkNRzf0tkBleXmMI5AZ9sFAiH11ygl3U96dYDQXhj+QKA+EaWXAnhcybKZMm+qaxZkZbt3jouu LqWVIVl/0sqkmcsdM9QN8SCGu4GRvZgch4yLGw== )`
	`repi.mil. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230928053927 20230921043927 44529 repi.mil. SKVBy3HnJjP6eg0uUAArexhRz9BV/p7nIUxlwf+lNIpbWq9dej2ieH2qKkzkQGViGeGi+CuKS6aq RLGO/M93mx2uAnlJNm9RuW8nXIkFKNxDRSi3VoX5y8Rd393EPbu+9d3D+w0p9wCKJBdp9PevYgsk /nNVYTPu4hsjCqj/xEo= )`
	RRSIG=37076 and DNSKEY=37076/SEP verifies the DNSKEY RRset
	RRSIG=42479 and DNSKEY=42479/SEP verifies the DNSKEY RRset
	RRSIG=44529 and DNSKEY=44529 verifies the DNSKEY RRset
	DNSKEY=47434/SEP is now in the chain-of-trust
	DNSKEY=38564/SEP is now in the chain-of-trust
	DNSKEY=40104 is now in the chain-of-trust
	DNSKEY=37076/SEP is now in the chain-of-trust
	DNSKEY=44529 is now in the chain-of-trust
	Query to KAUCHER.DMA.MIL for repi.mil/A
	Received 520 bytes from 155.7.208.113
	;; Response received from 155.7.208.113 (520 octets) ;; HEADER SECTION ;; id = 24272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) repi.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 300 IN RRSIG ( NSEC3 8 3 300 20231001053927 20230921043927 44529 repi.mil. caEAXXPd+DD7cAvZmgQZLTNjgeoTt5VIq0soRblMzY/E534WfHaG1lMSYyPIYDycRkn9jfQhz6lh WH2KUWjwY8/gyt7S5wWkGwK53u1ocWngeZjsnm2uZCwrMDgCeBCZtOsbcVipbUT+pcPiq3YE04lp m0M55fSYfv8SJhE+M5o= ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 300 IN NSEC3 ( 1 0 50 78ca90b72c910359 c0k6pntg1dd3lkis0qp4fejen9uq56pp NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	KAUCHER.DMA.MIL is authoritative for repi.mil
	Found RRSIG signed by repi.mil zone
	Query to BEAUTY.DMA.MIL for repi.mil/SOA
	Received 264 bytes from 155.7.145.112
	;; Response received from 155.7.145.112 (264 octets) ;; HEADER SECTION ;; id = 38284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN SOA ;; ANSWER SECTION (2 records) repi.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to BEAST.DMA.MIL for repi.mil/SOA
	Received 264 bytes from 155.7.145.113
	;; Response received from 155.7.145.113 (264 octets) ;; HEADER SECTION ;; id = 60055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN SOA ;; ANSWER SECTION (2 records) repi.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to RUSSELL.DMA.MIL for repi.mil/SOA
	Received 264 bytes from 155.7.208.112
	;; Response received from 155.7.208.112 (264 octets) ;; HEADER SECTION ;; id = 32233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN SOA ;; ANSWER SECTION (2 records) repi.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to KAUCHER.DMA.MIL for repi.mil/A
	Received 520 bytes from 155.7.208.113
	;; Response received from 155.7.208.113 (520 octets) ;; HEADER SECTION ;; id = 30717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) repi.mil. 299 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 299 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 299 IN NSEC3 ( 1 0 50 78ca90b72c910359 c0k6pntg1dd3lkis0qp4fejen9uq56pp NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 299 IN RRSIG ( NSEC3 8 3 300 20231001053927 20230921043927 44529 repi.mil. caEAXXPd+DD7cAvZmgQZLTNjgeoTt5VIq0soRblMzY/E534WfHaG1lMSYyPIYDycRkn9jfQhz6lh WH2KUWjwY8/gyt7S5wWkGwK53u1ocWngeZjsnm2uZCwrMDgCeBCZtOsbcVipbUT+pcPiq3YE04lp m0M55fSYfv8SJhE+M5o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= )`
	RRSIG=44529 and DNSKEY=44529 verifies the SOA RRset

repi.mil

	Query to BEAST.DMA.MIL for repi.mil/A
	Timeout querying BEAST.DMA.MIL/155.7.145.113 for repi.mil/A
	All Queries to BEAST.DMA.MIL for repi.mil/A timed out or failed
	Query to RUSSELL.DMA.MIL for repi.mil/A
	Received 520 bytes from 155.7.208.112
	;; Response received from 155.7.208.112 (520 octets) ;; HEADER SECTION ;; id = 57530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) repi.mil. 55 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 55 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 55 IN NSEC3 ( 1 0 50 78ca90b72c910359 c0k6pntg1dd3lkis0qp4fejen9uq56pp NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 55 IN RRSIG ( NSEC3 8 3 300 20231001053927 20230921043927 44529 repi.mil. caEAXXPd+DD7cAvZmgQZLTNjgeoTt5VIq0soRblMzY/E534WfHaG1lMSYyPIYDycRkn9jfQhz6lh WH2KUWjwY8/gyt7S5wWkGwK53u1ocWngeZjsnm2uZCwrMDgCeBCZtOsbcVipbUT+pcPiq3YE04lp m0M55fSYfv8SJhE+M5o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	RUSSELL.DMA.MIL is authoritative for repi.mil
	Found RRSIG signed by repi.mil zone
	Query to RUSSELL.DMA.MIL for repi.mil/A
	Timeout querying RUSSELL.DMA.MIL/155.7.208.112 for repi.mil/A
	All Queries to RUSSELL.DMA.MIL for repi.mil/A timed out or failed
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`repi.mil. 55 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= )`
	RRSIG=44529 and DNSKEY=44529 verifies the SOA RRset

repi.mil

	Query to BEAUTY.DMA.MIL for repi.mil/A
	Received 520 bytes from 155.7.145.112
	;; Response received from 155.7.145.112 (520 octets) ;; HEADER SECTION ;; id = 19782 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) repi.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 300 IN RRSIG ( NSEC3 8 3 300 20231001053927 20230921043927 44529 repi.mil. caEAXXPd+DD7cAvZmgQZLTNjgeoTt5VIq0soRblMzY/E534WfHaG1lMSYyPIYDycRkn9jfQhz6lh WH2KUWjwY8/gyt7S5wWkGwK53u1ocWngeZjsnm2uZCwrMDgCeBCZtOsbcVipbUT+pcPiq3YE04lp m0M55fSYfv8SJhE+M5o= ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 300 IN NSEC3 ( 1 0 50 78ca90b72c910359 c0k6pntg1dd3lkis0qp4fejen9uq56pp NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BEAUTY.DMA.MIL is authoritative for repi.mil
	Found RRSIG signed by repi.mil zone
	Query to BEAUTY.DMA.MIL for repi.mil/A
	Received 520 bytes from 155.7.145.112
	;; Response received from 155.7.145.112 (520 octets) ;; HEADER SECTION ;; id = 60533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; repi.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) repi.mil. 300 IN SOA ( shepherd.dma.mil. hostmaster. 1395 ;serial 180 ;refresh 600 ;retry 2592000 ;expire 300 ;minimum ) repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 300 IN NSEC3 ( 1 0 50 78ca90b72c910359 c0k6pntg1dd3lkis0qp4fejen9uq56pp NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 0skohfu7uupjang3qdfabcn19hk4f1tr.repi.mil. 300 IN RRSIG ( NSEC3 8 3 300 20231001053927 20230921043927 44529 repi.mil. caEAXXPd+DD7cAvZmgQZLTNjgeoTt5VIq0soRblMzY/E534WfHaG1lMSYyPIYDycRkn9jfQhz6lh WH2KUWjwY8/gyt7S5wWkGwK53u1ocWngeZjsnm2uZCwrMDgCeBCZtOsbcVipbUT+pcPiq3YE04lp m0M55fSYfv8SJhE+M5o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`repi.mil. 300 IN RRSIG ( SOA 8 2 300 20231001063927 20230921053927 44529 repi.mil. PPZAOQY6MkG8npTiOZ18jrYaC5wUPZKk5Eka/mQ6YyFRlCMPuNuyP1GkGzunWqvocOuCJGnimqPw 1I/TURjpiLiViqsBiyRhiASqbarzTxn2wknRP17FRR/PTi0tcdrTJX7cdTt7Kk01CGu+Le8kijhF HLZQtR5Xcae2U4k78HU= )`
	RRSIG=44529 and DNSKEY=44529 verifies the SOA RRset

repi.mil

No response from repi.mil nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test repi.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: