DNSSEC Analyzer - southcom.mil

Domain Name:

Time: 2023-09-24 18:24:41 UTC, NTP stratum 4

Analyzing DNSSEC problems for southcom.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (1141 octets) ;; HEADER SECTION ;; id = 17822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to b.root-servers.net for southcom.mil/A
	Received 807 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (807 octets) ;; HEADER SECTION ;; id = 54588 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to e.root-servers.net for mil/DNSKEY
	Received 798 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (798 octets) ;; HEADER SECTION ;; id = 21003 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to k.root-servers.net for mil/DS
	Received 415 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (415 octets) ;; HEADER SECTION ;; id = 43026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=62470/SHA-256 has algorithm RSASHA256
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=62470/SHA-256 is now in the chain-of-trust
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (1628 octets) ;; HEADER SECTION ;; id = 48410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to eur1.nipr.mil for southcom.mil/A
	Received 382 bytes from 199.252.154.234
	;; Response received from 199.252.154.234 (382 octets) ;; HEADER SECTION ;; id = 36744 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SOUTHCOM.MIL. 21600 IN NS EHUIBDNS02.SOUTHCOM.MIL. SOUTHCOM.MIL. 21600 IN NS ESUIBDNS01.SOUTHCOM.MIL. SOUTHCOM.MIL. 10800 IN DS ( 60496 8 2 be78515f3a8467796c644ba5586d9649070262c56ede62c2ce7092e369b49e2d ) SOUTHCOM.MIL. 10800 IN DS ( 60496 8 1 b435cf4aef3c9811916fc994700aea991a052516 ) SOUTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mEqSSY1MsvC7pO03R5O7/ZJqKox3Y185GeabMO8RH1oCGAOVEfMcGD9EEE706wsyM8RTWJDrXay4 5lLkbhG2Hk1OnpFYQg++HBGkcnfx+MbatVemmY7f31ru7bD1b9yFeSOR38CTDUrxnxBnese0PKRY sToJaLU+8DMmkYElixw= ) ;; ADDITIONAL SECTION (3 records) ESUIBDNS01.SOUTHCOM.MIL. 21600 IN A 130.22.177.211 EHUIBDNS02.SOUTHCOM.MIL. 21600 IN A 130.22.36.4 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pac2.nipr.mil for southcom.mil/DNSKEY
	Received 382 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (382 octets) ;; HEADER SECTION ;; id = 10353 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SOUTHCOM.MIL. 21600 IN NS ESUIBDNS01.SOUTHCOM.MIL. SOUTHCOM.MIL. 21600 IN NS EHUIBDNS02.SOUTHCOM.MIL. SOUTHCOM.MIL. 10800 IN DS ( 60496 8 1 b435cf4aef3c9811916fc994700aea991a052516 ) SOUTHCOM.MIL. 10800 IN DS ( 60496 8 2 be78515f3a8467796c644ba5586d9649070262c56ede62c2ce7092e369b49e2d ) SOUTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mEqSSY1MsvC7pO03R5O7/ZJqKox3Y185GeabMO8RH1oCGAOVEfMcGD9EEE706wsyM8RTWJDrXay4 5lLkbhG2Hk1OnpFYQg++HBGkcnfx+MbatVemmY7f31ru7bD1b9yFeSOR38CTDUrxnxBnese0PKRY sToJaLU+8DMmkYElixw= ) ;; ADDITIONAL SECTION (3 records) ESUIBDNS01.SOUTHCOM.MIL. 21600 IN A 130.22.177.211 EHUIBDNS02.SOUTHCOM.MIL. 21600 IN A 130.22.36.4 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone southcom.mil

southcom.mil

	Checking DS between mil and southcom.mil
	Query to pac2.nipr.mil for southcom.mil/DS
	Received 300 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (300 octets) ;; HEADER SECTION ;; id = 44768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN DS ;; ANSWER SECTION (3 records) SOUTHCOM.MIL. 10800 IN DS ( 60496 8 1 b435cf4aef3c9811916fc994700aea991a052516 ) SOUTHCOM.MIL. 10800 IN DS ( 60496 8 2 be78515f3a8467796c644ba5586d9649070262c56ede62c2ce7092e369b49e2d ) SOUTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mEqSSY1MsvC7pO03R5O7/ZJqKox3Y185GeabMO8RH1oCGAOVEfMcGD9EEE706wsyM8RTWJDrXay4 5lLkbhG2Hk1OnpFYQg++HBGkcnfx+MbatVemmY7f31ru7bD1b9yFeSOR38CTDUrxnxBnese0PKRY sToJaLU+8DMmkYElixw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for southcom.mil in the mil zone
	DS=60496/SHA-1 has algorithm RSASHA256
	DS=60496/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SOUTHCOM.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. mEqSSY1MsvC7pO03R5O7/ZJqKox3Y185GeabMO8RH1oCGAOVEfMcGD9EEE706wsyM8RTWJDrXay4 5lLkbhG2Hk1OnpFYQg++HBGkcnfx+MbatVemmY7f31ru7bD1b9yFeSOR38CTDUrxnxBnese0PKRY sToJaLU+8DMmkYElixw= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=60496/SHA-1 is now in the chain-of-trust
	`SOUTHCOM.MIL. 10800 IN DS ( 60496 8 1 b435cf4aef3c9811916fc994700aea991a052516 )`
	`SOUTHCOM.MIL. 10800 IN DS ( 60496 8 2 be78515f3a8467796c644ba5586d9649070262c56ede62c2ce7092e369b49e2d )`
	Query to ESUIBDNS01.SOUTHCOM.MIL for southcom.mil/DNSKEY
	Received 1769 bytes from 130.22.177.211
	;; Response received from 130.22.177.211 (1769 octets) ;; HEADER SECTION ;; id = 53331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN DNSKEY ;; ANSWER SECTION (6 records) southcom.mil. 247465 IN DNSKEY ( 256 3 8 AwEAAcx99+hY/4zpzBFqMze23UuzrRbQ/XlCEbLkaovgtFMfdC/+jQQoQ4E9md5p2VPdWBYIBQeY I25pwqh1OfEmYOO3oX1kggjHkXujtYjogN77Jzp7WDqh402k+pdylwc8ckTvStBR1TSmjuuwQErh z1w6D4PUmuKsyxkCxQEBoNJdPvLjJp+HAwS0QBXHxPDesiIoBsnpz8gEsVjD7S7tIslYRDxHK1+j xYMCXabqFusP+EWwYPPK0cPaC2TrI1OGF9wyKcEhgph6ZpCRihvFYppDOz/6gWfcvuGfFJlNp2EX d0L3vJ6EbBfT9H2fz0c6RYzBbBPLEO7YZtsOeRPYaY0= ) ; Key ID = 31383 southcom.mil. 247465 IN DNSKEY ( 257 3 8 AwEAAeljwqdsFnH91q7gC2t9Jz/GOWjLLLSaNa7GQvuRVGTZ+7/PBq5sfdxYlkHSUKj6a/E1XGoZ gmjyEaJR5B5T09sIUKrd4lrLweEgDNUZ9PNoqQx6o0+dyylpVsduIlR2yP1ipdLqvlIfbAgGuisg zkMB2/lFaA4+EMulO6TBnfXfjxy7OlyGHyUqf6Oap4VredCpg0Voy59ufimtqsS8t2b9r4yW1CnJ tviNWCnoc5wCsDYPglYkNRN3kjdZ3T3ZBebJQcqd8HufHQdcwSqJ/a8QLONNyX+3C6guVPyKOKbO yjYllpx1ehNk7inbGjtgg3fT9Dy1AkuFKttPfwCKSdc= ) ; Key ID = 60496 southcom.mil. 247465 IN DNSKEY ( 256 3 8 AwEAAb/4SwyIFAZmmh+t8bxfUDqNJ3dpEa724yLdnTvH0DbIZiTciy1mU75c16OcZcsBuASOiLVU Fvcsb3Qtw6fYPg95A/uXyZ0cyW1DsqzRG/jWkqlPs/xi1K5NM+Yyt/c1wK4Zr3Zv9dR+qBJxS4xq Ln0YFERPbOtVIequmsS6uBWYWgmAdWkBfJ39ZaKZ3NEQFzz4rWA8oqUzbUBJ+aSVTAMhRm7w2c2R fLNSXrJTBkycgPtLLdCQk5wgn28EmIen2S5nKd7LjyZaZCQr68PuN21HluVozIzMW0houjY+xhG2 L7SSmUD3Sz40uXsPcpZJ5usKPbqr42tAfjBmXHhghyM= ) ; Key ID = 34905 southcom.mil. 247465 IN RRSIG ( DNSKEY 8 2 302400 20230930203319 20230923193319 31383 southcom.mil. unveQ0gxSYvfq0a2FR1OZuDRS2s7S/3ODMYZf9Nu3OAlFFvUbYxJYtDlitBB7fmwGb3RoFqTr70d U+OQ5stmpuEybfX7l0yPs/1It4N8U7bVc6zX5io0GaMaqi0hoYJSgRWHWVLzq3hVN6o7IW/EGVC7 PNAmVR9OWLTvLquqoMG2D6wpGlsCnA0rfNasgIPi3/PXhUQb0r+U5KLzJjUOz3wAbbVnBHCxouw+ Rztyij/TRWM5sQJuIyefHcS/VuenAa+dByfFN5WVkD0fmukKL2uBTs0ufsTUhcWiOV4jDexSqK8X Vo1sYTcYkSLytdP0SJxvtDfXLAO1+Eh/Fa9rXw== ) southcom.mil. 247465 IN RRSIG ( DNSKEY 8 2 302400 20230930203319 20230923193319 34905 southcom.mil. bARRrjJr0BzihgDyNXhY41HZ0iGiaQH0wROo5eYaEr7T/rRsX2wd7FDhWqxt5xFi01Zk1U6YDtT6 77KvF91hzGWzjDal2hfcnGalbkR/6eh5VN3X31FF1NSZ6/Xi79N/TunAJwMstpjiMBceN0JJlNU+ 4zEfajCcz7hgDVX+/6MzkEtzaX9gqHbE/Yy4tnBDLXgdux9mxx1tUCpcFq91tFUwXmcnOeYEwPDI jqzZwXlbArh/yYT7UmcRCxZtROXQ6zgKhMtFtfvPEEbJmyrHjqmGAS8q6XBXP3InUBIET2htstUa cZkD758xAx0HjCnhPvGDFASB5ODLds9CT4TQwA== ) southcom.mil. 247465 IN RRSIG ( DNSKEY 8 2 302400 20230930203319 20230923193319 60496 southcom.mil. dTgD2/p7ONCwVSym1znwWiaQ2TiEVaugM7pVJHCKPLdpfvTgHhbYcYJv9VVCks7iSi2Bcy4lDDrl 8AIIHrWBN+RvBA6fgTKj+awHcVfLvHtnu81TJrjJuk8QQ77nFEPfNRTXIo8nQuuRiNyTLmDQXjel q7Mp0rXXGOX8CvOhxs9YT9zWTecVB/1wj1wFXd2TXz6Z0uGAqpxK76BHLjqes3A3lVcBp5FtRuFo FhHq2+Syc/s5zOVjNsCzVTQBZHRiuRe877nRNMZN9ooUInPtZffH4vObJz5CMHuVRQ00l6PoBNru H3fCmbG5hDxJ1eUtHvI42ahNSFSIzjs4mGmAjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for southcom.mil
	`southcom.mil. 247465 IN DNSKEY ( 256 3 8 AwEAAcx99+hY/4zpzBFqMze23UuzrRbQ/XlCEbLkaovgtFMfdC/+jQQoQ4E9md5p2VPdWBYIBQeY I25pwqh1OfEmYOO3oX1kggjHkXujtYjogN77Jzp7WDqh402k+pdylwc8ckTvStBR1TSmjuuwQErh z1w6D4PUmuKsyxkCxQEBoNJdPvLjJp+HAwS0QBXHxPDesiIoBsnpz8gEsVjD7S7tIslYRDxHK1+j xYMCXabqFusP+EWwYPPK0cPaC2TrI1OGF9wyKcEhgph6ZpCRihvFYppDOz/6gWfcvuGfFJlNp2EX d0L3vJ6EbBfT9H2fz0c6RYzBbBPLEO7YZtsOeRPYaY0= ) ; Key ID = 31383`
	`southcom.mil. 247465 IN DNSKEY ( 257 3 8 AwEAAeljwqdsFnH91q7gC2t9Jz/GOWjLLLSaNa7GQvuRVGTZ+7/PBq5sfdxYlkHSUKj6a/E1XGoZ gmjyEaJR5B5T09sIUKrd4lrLweEgDNUZ9PNoqQx6o0+dyylpVsduIlR2yP1ipdLqvlIfbAgGuisg zkMB2/lFaA4+EMulO6TBnfXfjxy7OlyGHyUqf6Oap4VredCpg0Voy59ufimtqsS8t2b9r4yW1CnJ tviNWCnoc5wCsDYPglYkNRN3kjdZ3T3ZBebJQcqd8HufHQdcwSqJ/a8QLONNyX+3C6guVPyKOKbO yjYllpx1ehNk7inbGjtgg3fT9Dy1AkuFKttPfwCKSdc= ) ; Key ID = 60496`
	`southcom.mil. 247465 IN DNSKEY ( 256 3 8 AwEAAb/4SwyIFAZmmh+t8bxfUDqNJ3dpEa724yLdnTvH0DbIZiTciy1mU75c16OcZcsBuASOiLVU Fvcsb3Qtw6fYPg95A/uXyZ0cyW1DsqzRG/jWkqlPs/xi1K5NM+Yyt/c1wK4Zr3Zv9dR+qBJxS4xq Ln0YFERPbOtVIequmsS6uBWYWgmAdWkBfJ39ZaKZ3NEQFzz4rWA8oqUzbUBJ+aSVTAMhRm7w2c2R fLNSXrJTBkycgPtLLdCQk5wgn28EmIen2S5nKd7LjyZaZCQr68PuN21HluVozIzMW0houjY+xhG2 L7SSmUD3Sz40uXsPcpZJ5usKPbqr42tAfjBmXHhghyM= ) ; Key ID = 34905`
	DNSKEY=60496/SEP is now in the chain-of-trust
	DS=60496/SHA-1 verifies DNSKEY=60496/SEP
	DS=60496/SHA-256 verifies DNSKEY=60496/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`southcom.mil. 247465 IN RRSIG ( DNSKEY 8 2 302400 20230930203319 20230923193319 31383 southcom.mil. unveQ0gxSYvfq0a2FR1OZuDRS2s7S/3ODMYZf9Nu3OAlFFvUbYxJYtDlitBB7fmwGb3RoFqTr70d U+OQ5stmpuEybfX7l0yPs/1It4N8U7bVc6zX5io0GaMaqi0hoYJSgRWHWVLzq3hVN6o7IW/EGVC7 PNAmVR9OWLTvLquqoMG2D6wpGlsCnA0rfNasgIPi3/PXhUQb0r+U5KLzJjUOz3wAbbVnBHCxouw+ Rztyij/TRWM5sQJuIyefHcS/VuenAa+dByfFN5WVkD0fmukKL2uBTs0ufsTUhcWiOV4jDexSqK8X Vo1sYTcYkSLytdP0SJxvtDfXLAO1+Eh/Fa9rXw== )`
	`southcom.mil. 247465 IN RRSIG ( DNSKEY 8 2 302400 20230930203319 20230923193319 34905 southcom.mil. bARRrjJr0BzihgDyNXhY41HZ0iGiaQH0wROo5eYaEr7T/rRsX2wd7FDhWqxt5xFi01Zk1U6YDtT6 77KvF91hzGWzjDal2hfcnGalbkR/6eh5VN3X31FF1NSZ6/Xi79N/TunAJwMstpjiMBceN0JJlNU+ 4zEfajCcz7hgDVX+/6MzkEtzaX9gqHbE/Yy4tnBDLXgdux9mxx1tUCpcFq91tFUwXmcnOeYEwPDI jqzZwXlbArh/yYT7UmcRCxZtROXQ6zgKhMtFtfvPEEbJmyrHjqmGAS8q6XBXP3InUBIET2htstUa cZkD758xAx0HjCnhPvGDFASB5ODLds9CT4TQwA== )`
	`southcom.mil. 247465 IN RRSIG ( DNSKEY 8 2 302400 20230930203319 20230923193319 60496 southcom.mil. dTgD2/p7ONCwVSym1znwWiaQ2TiEVaugM7pVJHCKPLdpfvTgHhbYcYJv9VVCks7iSi2Bcy4lDDrl 8AIIHrWBN+RvBA6fgTKj+awHcVfLvHtnu81TJrjJuk8QQ77nFEPfNRTXIo8nQuuRiNyTLmDQXjel q7Mp0rXXGOX8CvOhxs9YT9zWTecVB/1wj1wFXd2TXz6Z0uGAqpxK76BHLjqes3A3lVcBp5FtRuFo FhHq2+Syc/s5zOVjNsCzVTQBZHRiuRe877nRNMZN9ooUInPtZffH4vObJz5CMHuVRQ00l6PoBNru H3fCmbG5hDxJ1eUtHvI42ahNSFSIzjs4mGmAjA== )`
	RRSIG=31383 and DNSKEY=31383 verifies the DNSKEY RRset
	RRSIG=34905 and DNSKEY=34905 verifies the DNSKEY RRset
	RRSIG=60496 and DNSKEY=60496/SEP verifies the DNSKEY RRset
	DNSKEY=31383 is now in the chain-of-trust
	DNSKEY=34905 is now in the chain-of-trust
	Query to EHUIBDNS02.SOUTHCOM.MIL for southcom.mil/A
	Received 1429 bytes from 130.22.36.4
	;; Response received from 130.22.36.4 (1429 octets) ;; HEADER SECTION ;; id = 57118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) southcom.mil. 1788 IN SOA ( ehuibdns02.southcom.mil. southcom\.miami\.7-sig-cmd\.mbx\.omb-nec-southcom-netmgt.mail.mil. 2015092633 ;serial 18000 ;refresh 1800 ;retry 10800 ;expire 1800 ;minimum ) southcom.mil. 1788 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 31383 southcom.mil. eXJ5SZwZzWmUjroTk3x1wVh8OZDdv7R/UkNkVAvAYS4jMMmJOgiJmmk/B0SgZZVI4I7qc8mEhrhc pdEOlqTe0cwP0boBbFJcK15FK4W67GpxpunKUXEO45h2GtP2yt1+19qB3NSliSAXiLn4kZEexQ3P 1NSDef0ra0NuS5El5kdYZJ8GvbA6EPVZrcidoH7lrZN+YoVFcGU5NU0YfQ85i3+8E6GHJ50MhPWR iTNwCF8We4IJQtfSPxljVyrgs/s69TIqofaij31t18AJK+jRioMKCjFVQc8Mm2werfPJi5SSQerr c+iK4f2UgRagtWzTGHNuRuqhJ2AEc7tWbBqE7w== ) southcom.mil. 1788 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 34905 southcom.mil. fHo9RPpgXBn7NE4VXk0Tgw+9YcnX8kKZYEZaoDgSK41obPWdPsvTpu3nqmRRh/Tsow/Vl76lPDaB Lt+8QPB0mrwZICEMheDGHEG4RvKz2t6/NxmMfbcSeTyS2hCBoweSi8eWI0iY6z5mcugTVd4SW+v0 dYrJ/iFsLhjlb+KtiMeAZ3FgFdmwBeaG9R1L7bfPocQjp1DKBcCLOT6BykN3pfy2d602Z/5nqQFP 0aWzkBdm9vjOuQSGlMsW5PgDFPhu+SLkDXQADkrFHHIc1TAl1pNx3w0vAc5lWkiYcifaFl7r0D+f aSpq8nS9Kv1RL22paCAVqLp2vP43IA11OOzzEQ== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1765 IN NSEC3 ( 1 0 10 3ad9c4 1b90n5qs2jqits2si0hrhhstgs9qp9rg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1765 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 31383 southcom.mil. MEqESP4vV/ypOSgdflKh6sj+3yBtPzTOm2KRS/yC2X4cUdnhdI85MUqWbVJyb6olYxAWdQYbANfA TiqCZ3yI/doZvgArTxmLK/OsQ8yRj2K5u1gTxjjoLj53QgpPoGKHh8B+JZRk6zF8bMI5aRigtqZM hVHH5aUrWRUvwVnCyoUyzt5ada7k8sB5fMCYnrwjzasNf/41181k8Z6g/oz7wVekU7zkkdMKz7j4 JaUKgBDTo2jvGcZArPjK8cfq3JjnyaJj7l9G/0Yb45CuxzGx17Af3Nq6XoRTx4Hm2QwD4q+ewgva 2IgLCr2A6w+qVEsKQ5QBtQkWQZ8CL+Td7Rx9EA== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1765 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 34905 southcom.mil. BOQObOE2nKW/NpjqhU51LnP5u2wZq1B3sudpE4fG3DMEieYwEVmPvTI14M2kGxfhXelurTFjnj+h lm8eymIsi5Gt2BNmVXHq/L/y9gybH8i/cDDQGi0MXvEgikRmuyJJonAvrOR6Jo9bkxdIjElTb5DX I4vw4ybcNBo14nlNpMaeLC0StwUNukiyvmm66JJXvWPnX7wtc7DefuouTUU8nQo6owsAglAYJh+F +KMR7XQVvOh+VggxeYxutI/YwTZbxj4w+e6XCnOT0tESLbUJws5LLScewuJU0wc1nUQof6H/N+fU K/7bcp7LJXQLxiCibf74IyI2waqShmEeEFsr3g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EHUIBDNS02.SOUTHCOM.MIL is authoritative for southcom.mil
	Found RRSIG signed by southcom.mil zone
	Query to ESUIBDNS01.SOUTHCOM.MIL for southcom.mil/SOA
	Received 746 bytes from 130.22.177.211
	;; Response received from 130.22.177.211 (746 octets) ;; HEADER SECTION ;; id = 59772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN SOA ;; ANSWER SECTION (3 records) southcom.mil. 3600 IN SOA ( ehuibdns02.southcom.mil. southcom\.miami\.7-sig-cmd\.mbx\.omb-nec-southcom-netmgt.mail.mil. 2015092633 ;serial 18000 ;refresh 1800 ;retry 10800 ;expire 1800 ;minimum ) southcom.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 31383 southcom.mil. eXJ5SZwZzWmUjroTk3x1wVh8OZDdv7R/UkNkVAvAYS4jMMmJOgiJmmk/B0SgZZVI4I7qc8mEhrhc pdEOlqTe0cwP0boBbFJcK15FK4W67GpxpunKUXEO45h2GtP2yt1+19qB3NSliSAXiLn4kZEexQ3P 1NSDef0ra0NuS5El5kdYZJ8GvbA6EPVZrcidoH7lrZN+YoVFcGU5NU0YfQ85i3+8E6GHJ50MhPWR iTNwCF8We4IJQtfSPxljVyrgs/s69TIqofaij31t18AJK+jRioMKCjFVQc8Mm2werfPJi5SSQerr c+iK4f2UgRagtWzTGHNuRuqhJ2AEc7tWbBqE7w== ) southcom.mil. 3600 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 34905 southcom.mil. fHo9RPpgXBn7NE4VXk0Tgw+9YcnX8kKZYEZaoDgSK41obPWdPsvTpu3nqmRRh/Tsow/Vl76lPDaB Lt+8QPB0mrwZICEMheDGHEG4RvKz2t6/NxmMfbcSeTyS2hCBoweSi8eWI0iY6z5mcugTVd4SW+v0 dYrJ/iFsLhjlb+KtiMeAZ3FgFdmwBeaG9R1L7bfPocQjp1DKBcCLOT6BykN3pfy2d602Z/5nqQFP 0aWzkBdm9vjOuQSGlMsW5PgDFPhu+SLkDXQADkrFHHIc1TAl1pNx3w0vAc5lWkiYcifaFl7r0D+f aSpq8nS9Kv1RL22paCAVqLp2vP43IA11OOzzEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to EHUIBDNS02.SOUTHCOM.MIL for southcom.mil/A
	Received 1429 bytes from 130.22.36.4
	;; Response received from 130.22.36.4 (1429 octets) ;; HEADER SECTION ;; id = 52824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) southcom.mil. 1787 IN SOA ( ehuibdns02.southcom.mil. southcom\.miami\.7-sig-cmd\.mbx\.omb-nec-southcom-netmgt.mail.mil. 2015092633 ;serial 18000 ;refresh 1800 ;retry 10800 ;expire 1800 ;minimum ) southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 31383 southcom.mil. eXJ5SZwZzWmUjroTk3x1wVh8OZDdv7R/UkNkVAvAYS4jMMmJOgiJmmk/B0SgZZVI4I7qc8mEhrhc pdEOlqTe0cwP0boBbFJcK15FK4W67GpxpunKUXEO45h2GtP2yt1+19qB3NSliSAXiLn4kZEexQ3P 1NSDef0ra0NuS5El5kdYZJ8GvbA6EPVZrcidoH7lrZN+YoVFcGU5NU0YfQ85i3+8E6GHJ50MhPWR iTNwCF8We4IJQtfSPxljVyrgs/s69TIqofaij31t18AJK+jRioMKCjFVQc8Mm2werfPJi5SSQerr c+iK4f2UgRagtWzTGHNuRuqhJ2AEc7tWbBqE7w== ) southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 34905 southcom.mil. fHo9RPpgXBn7NE4VXk0Tgw+9YcnX8kKZYEZaoDgSK41obPWdPsvTpu3nqmRRh/Tsow/Vl76lPDaB Lt+8QPB0mrwZICEMheDGHEG4RvKz2t6/NxmMfbcSeTyS2hCBoweSi8eWI0iY6z5mcugTVd4SW+v0 dYrJ/iFsLhjlb+KtiMeAZ3FgFdmwBeaG9R1L7bfPocQjp1DKBcCLOT6BykN3pfy2d602Z/5nqQFP 0aWzkBdm9vjOuQSGlMsW5PgDFPhu+SLkDXQADkrFHHIc1TAl1pNx3w0vAc5lWkiYcifaFl7r0D+f aSpq8nS9Kv1RL22paCAVqLp2vP43IA11OOzzEQ== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN NSEC3 ( 1 0 10 3ad9c4 1b90n5qs2jqits2si0hrhhstgs9qp9rg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 31383 southcom.mil. MEqESP4vV/ypOSgdflKh6sj+3yBtPzTOm2KRS/yC2X4cUdnhdI85MUqWbVJyb6olYxAWdQYbANfA TiqCZ3yI/doZvgArTxmLK/OsQ8yRj2K5u1gTxjjoLj53QgpPoGKHh8B+JZRk6zF8bMI5aRigtqZM hVHH5aUrWRUvwVnCyoUyzt5ada7k8sB5fMCYnrwjzasNf/41181k8Z6g/oz7wVekU7zkkdMKz7j4 JaUKgBDTo2jvGcZArPjK8cfq3JjnyaJj7l9G/0Yb45CuxzGx17Af3Nq6XoRTx4Hm2QwD4q+ewgva 2IgLCr2A6w+qVEsKQ5QBtQkWQZ8CL+Td7Rx9EA== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 34905 southcom.mil. BOQObOE2nKW/NpjqhU51LnP5u2wZq1B3sudpE4fG3DMEieYwEVmPvTI14M2kGxfhXelurTFjnj+h lm8eymIsi5Gt2BNmVXHq/L/y9gybH8i/cDDQGi0MXvEgikRmuyJJonAvrOR6Jo9bkxdIjElTb5DX I4vw4ybcNBo14nlNpMaeLC0StwUNukiyvmm66JJXvWPnX7wtc7DefuouTUU8nQo6owsAglAYJh+F +KMR7XQVvOh+VggxeYxutI/YwTZbxj4w+e6XCnOT0tESLbUJws5LLScewuJU0wc1nUQof6H/N+fU K/7bcp7LJXQLxiCibf74IyI2waqShmEeEFsr3g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`southcom.mil. 1788 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 31383 southcom.mil. eXJ5SZwZzWmUjroTk3x1wVh8OZDdv7R/UkNkVAvAYS4jMMmJOgiJmmk/B0SgZZVI4I7qc8mEhrhc pdEOlqTe0cwP0boBbFJcK15FK4W67GpxpunKUXEO45h2GtP2yt1+19qB3NSliSAXiLn4kZEexQ3P 1NSDef0ra0NuS5El5kdYZJ8GvbA6EPVZrcidoH7lrZN+YoVFcGU5NU0YfQ85i3+8E6GHJ50MhPWR iTNwCF8We4IJQtfSPxljVyrgs/s69TIqofaij31t18AJK+jRioMKCjFVQc8Mm2werfPJi5SSQerr c+iK4f2UgRagtWzTGHNuRuqhJ2AEc7tWbBqE7w== )`
	`southcom.mil. 1788 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 34905 southcom.mil. fHo9RPpgXBn7NE4VXk0Tgw+9YcnX8kKZYEZaoDgSK41obPWdPsvTpu3nqmRRh/Tsow/Vl76lPDaB Lt+8QPB0mrwZICEMheDGHEG4RvKz2t6/NxmMfbcSeTyS2hCBoweSi8eWI0iY6z5mcugTVd4SW+v0 dYrJ/iFsLhjlb+KtiMeAZ3FgFdmwBeaG9R1L7bfPocQjp1DKBcCLOT6BykN3pfy2d602Z/5nqQFP 0aWzkBdm9vjOuQSGlMsW5PgDFPhu+SLkDXQADkrFHHIc1TAl1pNx3w0vAc5lWkiYcifaFl7r0D+f aSpq8nS9Kv1RL22paCAVqLp2vP43IA11OOzzEQ== )`
	RRSIG=31383 and DNSKEY=31383 verifies the SOA RRset
	RRSIG=34905 and DNSKEY=34905 verifies the SOA RRset

southcom.mil

	Query to ESUIBDNS01.SOUTHCOM.MIL for southcom.mil/A
	Received 1429 bytes from 130.22.177.211
	;; Response received from 130.22.177.211 (1429 octets) ;; HEADER SECTION ;; id = 18898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) southcom.mil. 1787 IN SOA ( ehuibdns02.southcom.mil. southcom\.miami\.7-sig-cmd\.mbx\.omb-nec-southcom-netmgt.mail.mil. 2015092633 ;serial 18000 ;refresh 1800 ;retry 10800 ;expire 1800 ;minimum ) southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 31383 southcom.mil. eXJ5SZwZzWmUjroTk3x1wVh8OZDdv7R/UkNkVAvAYS4jMMmJOgiJmmk/B0SgZZVI4I7qc8mEhrhc pdEOlqTe0cwP0boBbFJcK15FK4W67GpxpunKUXEO45h2GtP2yt1+19qB3NSliSAXiLn4kZEexQ3P 1NSDef0ra0NuS5El5kdYZJ8GvbA6EPVZrcidoH7lrZN+YoVFcGU5NU0YfQ85i3+8E6GHJ50MhPWR iTNwCF8We4IJQtfSPxljVyrgs/s69TIqofaij31t18AJK+jRioMKCjFVQc8Mm2werfPJi5SSQerr c+iK4f2UgRagtWzTGHNuRuqhJ2AEc7tWbBqE7w== ) southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 34905 southcom.mil. fHo9RPpgXBn7NE4VXk0Tgw+9YcnX8kKZYEZaoDgSK41obPWdPsvTpu3nqmRRh/Tsow/Vl76lPDaB Lt+8QPB0mrwZICEMheDGHEG4RvKz2t6/NxmMfbcSeTyS2hCBoweSi8eWI0iY6z5mcugTVd4SW+v0 dYrJ/iFsLhjlb+KtiMeAZ3FgFdmwBeaG9R1L7bfPocQjp1DKBcCLOT6BykN3pfy2d602Z/5nqQFP 0aWzkBdm9vjOuQSGlMsW5PgDFPhu+SLkDXQADkrFHHIc1TAl1pNx3w0vAc5lWkiYcifaFl7r0D+f aSpq8nS9Kv1RL22paCAVqLp2vP43IA11OOzzEQ== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN NSEC3 ( 1 0 10 3ad9c4 1b90n5qs2jqits2si0hrhhstgs9qp9rg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 31383 southcom.mil. MEqESP4vV/ypOSgdflKh6sj+3yBtPzTOm2KRS/yC2X4cUdnhdI85MUqWbVJyb6olYxAWdQYbANfA TiqCZ3yI/doZvgArTxmLK/OsQ8yRj2K5u1gTxjjoLj53QgpPoGKHh8B+JZRk6zF8bMI5aRigtqZM hVHH5aUrWRUvwVnCyoUyzt5ada7k8sB5fMCYnrwjzasNf/41181k8Z6g/oz7wVekU7zkkdMKz7j4 JaUKgBDTo2jvGcZArPjK8cfq3JjnyaJj7l9G/0Yb45CuxzGx17Af3Nq6XoRTx4Hm2QwD4q+ewgva 2IgLCr2A6w+qVEsKQ5QBtQkWQZ8CL+Td7Rx9EA== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 34905 southcom.mil. BOQObOE2nKW/NpjqhU51LnP5u2wZq1B3sudpE4fG3DMEieYwEVmPvTI14M2kGxfhXelurTFjnj+h lm8eymIsi5Gt2BNmVXHq/L/y9gybH8i/cDDQGi0MXvEgikRmuyJJonAvrOR6Jo9bkxdIjElTb5DX I4vw4ybcNBo14nlNpMaeLC0StwUNukiyvmm66JJXvWPnX7wtc7DefuouTUU8nQo6owsAglAYJh+F +KMR7XQVvOh+VggxeYxutI/YwTZbxj4w+e6XCnOT0tESLbUJws5LLScewuJU0wc1nUQof6H/N+fU K/7bcp7LJXQLxiCibf74IyI2waqShmEeEFsr3g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ESUIBDNS01.SOUTHCOM.MIL is authoritative for southcom.mil
	Found RRSIG signed by southcom.mil zone
	Query to ESUIBDNS01.SOUTHCOM.MIL for southcom.mil/A
	Received 1429 bytes from 130.22.177.211
	;; Response received from 130.22.177.211 (1429 octets) ;; HEADER SECTION ;; id = 14729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; southcom.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) southcom.mil. 1787 IN SOA ( ehuibdns02.southcom.mil. southcom\.miami\.7-sig-cmd\.mbx\.omb-nec-southcom-netmgt.mail.mil. 2015092633 ;serial 18000 ;refresh 1800 ;retry 10800 ;expire 1800 ;minimum ) southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 31383 southcom.mil. eXJ5SZwZzWmUjroTk3x1wVh8OZDdv7R/UkNkVAvAYS4jMMmJOgiJmmk/B0SgZZVI4I7qc8mEhrhc pdEOlqTe0cwP0boBbFJcK15FK4W67GpxpunKUXEO45h2GtP2yt1+19qB3NSliSAXiLn4kZEexQ3P 1NSDef0ra0NuS5El5kdYZJ8GvbA6EPVZrcidoH7lrZN+YoVFcGU5NU0YfQ85i3+8E6GHJ50MhPWR iTNwCF8We4IJQtfSPxljVyrgs/s69TIqofaij31t18AJK+jRioMKCjFVQc8Mm2werfPJi5SSQerr c+iK4f2UgRagtWzTGHNuRuqhJ2AEc7tWbBqE7w== ) southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 34905 southcom.mil. fHo9RPpgXBn7NE4VXk0Tgw+9YcnX8kKZYEZaoDgSK41obPWdPsvTpu3nqmRRh/Tsow/Vl76lPDaB Lt+8QPB0mrwZICEMheDGHEG4RvKz2t6/NxmMfbcSeTyS2hCBoweSi8eWI0iY6z5mcugTVd4SW+v0 dYrJ/iFsLhjlb+KtiMeAZ3FgFdmwBeaG9R1L7bfPocQjp1DKBcCLOT6BykN3pfy2d602Z/5nqQFP 0aWzkBdm9vjOuQSGlMsW5PgDFPhu+SLkDXQADkrFHHIc1TAl1pNx3w0vAc5lWkiYcifaFl7r0D+f aSpq8nS9Kv1RL22paCAVqLp2vP43IA11OOzzEQ== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN NSEC3 ( 1 0 10 3ad9c4 1b90n5qs2jqits2si0hrhhstgs9qp9rg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 31383 southcom.mil. MEqESP4vV/ypOSgdflKh6sj+3yBtPzTOm2KRS/yC2X4cUdnhdI85MUqWbVJyb6olYxAWdQYbANfA TiqCZ3yI/doZvgArTxmLK/OsQ8yRj2K5u1gTxjjoLj53QgpPoGKHh8B+JZRk6zF8bMI5aRigtqZM hVHH5aUrWRUvwVnCyoUyzt5ada7k8sB5fMCYnrwjzasNf/41181k8Z6g/oz7wVekU7zkkdMKz7j4 JaUKgBDTo2jvGcZArPjK8cfq3JjnyaJj7l9G/0Yb45CuxzGx17Af3Nq6XoRTx4Hm2QwD4q+ewgva 2IgLCr2A6w+qVEsKQ5QBtQkWQZ8CL+Td7Rx9EA== ) 19AMDF9Q4NTP1263OVHGRM72EJS78KBI.southcom.mil. 1764 IN RRSIG ( NSEC3 8 3 1800 20230930203318 20230923193318 34905 southcom.mil. BOQObOE2nKW/NpjqhU51LnP5u2wZq1B3sudpE4fG3DMEieYwEVmPvTI14M2kGxfhXelurTFjnj+h lm8eymIsi5Gt2BNmVXHq/L/y9gybH8i/cDDQGi0MXvEgikRmuyJJonAvrOR6Jo9bkxdIjElTb5DX I4vw4ybcNBo14nlNpMaeLC0StwUNukiyvmm66JJXvWPnX7wtc7DefuouTUU8nQo6owsAglAYJh+F +KMR7XQVvOh+VggxeYxutI/YwTZbxj4w+e6XCnOT0tESLbUJws5LLScewuJU0wc1nUQof6H/N+fU K/7bcp7LJXQLxiCibf74IyI2waqShmEeEFsr3g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 31383 southcom.mil. eXJ5SZwZzWmUjroTk3x1wVh8OZDdv7R/UkNkVAvAYS4jMMmJOgiJmmk/B0SgZZVI4I7qc8mEhrhc pdEOlqTe0cwP0boBbFJcK15FK4W67GpxpunKUXEO45h2GtP2yt1+19qB3NSliSAXiLn4kZEexQ3P 1NSDef0ra0NuS5El5kdYZJ8GvbA6EPVZrcidoH7lrZN+YoVFcGU5NU0YfQ85i3+8E6GHJ50MhPWR iTNwCF8We4IJQtfSPxljVyrgs/s69TIqofaij31t18AJK+jRioMKCjFVQc8Mm2werfPJi5SSQerr c+iK4f2UgRagtWzTGHNuRuqhJ2AEc7tWbBqE7w== )`
	`southcom.mil. 1787 IN RRSIG ( SOA 8 2 3600 20231001165538 20230924155538 34905 southcom.mil. fHo9RPpgXBn7NE4VXk0Tgw+9YcnX8kKZYEZaoDgSK41obPWdPsvTpu3nqmRRh/Tsow/Vl76lPDaB Lt+8QPB0mrwZICEMheDGHEG4RvKz2t6/NxmMfbcSeTyS2hCBoweSi8eWI0iY6z5mcugTVd4SW+v0 dYrJ/iFsLhjlb+KtiMeAZ3FgFdmwBeaG9R1L7bfPocQjp1DKBcCLOT6BykN3pfy2d602Z/5nqQFP 0aWzkBdm9vjOuQSGlMsW5PgDFPhu+SLkDXQADkrFHHIc1TAl1pNx3w0vAc5lWkiYcifaFl7r0D+f aSpq8nS9Kv1RL22paCAVqLp2vP43IA11OOzzEQ== )`
	RRSIG=31383 and DNSKEY=31383 verifies the SOA RRset
	RRSIG=34905 and DNSKEY=34905 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test southcom.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: