DNSSEC Analyzer - tricare.mil

Domain Name:

Time: 2023-09-24 17:55:06 UTC, NTP stratum 4

Analyzing DNSSEC problems for tricare.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (1141 octets) ;; HEADER SECTION ;; id = 56009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to c.root-servers.net for tricare.mil/A
	Received 809 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (809 octets) ;; HEADER SECTION ;; id = 11267 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to k.root-servers.net for mil/DNSKEY
	Received 801 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (801 octets) ;; HEADER SECTION ;; id = 1478 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone mil

mil

	Checking DS between . and mil
	Query to g.root-servers.net for mil/DS
	Received 415 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (415 octets) ;; HEADER SECTION ;; id = 56076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (3 records) mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 ) mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a ) mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for mil in the . zone
	DS=62470/SHA-256 has algorithm RSASHA256
	DS=16801/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . vAMiIBdOW4Gb1T31xQVJiXw6jF7oBAws23+tUqKzczrQ7xonb3XkrGmPApH5o/yQnFOZ+kNrr/TB F/cZWz2gehFxMe1hX/5RznSif0V1uFbSIMdO3UUGSqpwblucaXhiKqJo1Xnv7bj31KVqCAHjbfyh c0ATyEQ7ZUfCnLedE9bdbZJIPOZ9tLPdLIyBhevBVmeZMCWPTBlabsrIORSsDE45UPHImkevDzmp fT/wHdU66hcqjDjlYdryDHWcktjRTYo86p1HCzuZ/ty9CugguPAVzP2KirVmgyX1uO0OF151M2iJ e7dgvHkNSZ3CCmgjkdu8QOm9djxbIk1vEr8Wpw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=62470/SHA-256 is now in the chain-of-trust
	DS=16801/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 62470 8 2 be1683ce6c223cacb29c51244ab9f7bc2b0ff6096feac8ced63368f9dc5060e7 )`
	`mil. 86400 IN DS ( 16801 8 2 49013e5d5ed406c25c5a3e7f67c756e34c925342a34bd64d7427536c366df99a )`
	Query to pac2.nipr.mil for mil/DNSKEY
	Received 1628 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (1628 octets) ;; HEADER SECTION ;; id = 35232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (7 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZspAcnlbHvuIbNT/qESCFtpCbGqODm2M9SpBWT7WUiDPCUDiLEe8tjaPoD7dgbu4krOjx+E pAbYYB3Gum61THe8CdkvuYhPCt3j0HQgv/aqhXqzN4mkzGp0owXjA3MEyxAc5CHEc33YdqvwihZK MXBxbJE8faDKJsPQDRMFGYVZ ) ; Key ID = 14098`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAfpe+g2DbrDXS9VMdI4TT2VyycBVy3Fz81GuMLa7KlKcvqr49TpyOyYdk2awTyYrSkqVkD+Z qJSD7WWR2GNUJZlA3tsI+WQuu5SYq5RCbuzWRs/oD4n5YhY4T6Zs5xX0AJMDWKD8lKcZvltk2Kfx OcEWY4SCk7rwPcYSRakTFDpvhps6o2kTO4wS3FUviEQ8RilzqP9gqUZguT/P/nWSh/Wnv+bDXQhY y/u4vDbtDpsqNVvMRWD5oFoKwQCsGYGRGCAaLb81/1m4HXRUCqNn7ymjofUISJn/sG05IqxYJ1TR ZWlRJS+t6YhzhOC8Zh87QWt5oiDHKu30zOw6RNrYjfE= ) ; Key ID = 16801`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAcUalcDbe+lICTDM6SFrNVCrnO9OsXjHS1zx9pTBGI4OU18Vafk7ISiPIzLepzhMXo7QkZCo rY3vX/KzZR9OEoBqi1eoFbAH4fsoQYp6viosVAYeNOjSi9C8YEp0n75XzSm/xWYzoZyzH8nXJd+v Pobge+6tSUBq5RIm1lNqDDVtiPNRaQRNa7mCCSInx63L1LURiXz6pE/JGcbUU1ul+9fhXTJPTlE1 dwCFLg4auD2IuWW0j2ji+PBvP3eipeRaSwFoAbfGSlU2cs/i7ArTJqG9X/c1zQ5Op3D9RNNgcTaX ZeeNxjHDXl+kx7YGEoFo5TVfJ25Pal5ZJKbBNvHnaZs= ) ; Key ID = 62470`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKBkdOt5BC91Q57fK7ijtR39SgkdFa2zdUMDBcEtkec4oFZg8Ss8ecXdw4I8I9QOzSHxi0y V5UnzIp4CfIpfFzQX2urzV1t5O1xZaQwenAQsquFae8YkVC3HGVA81lWv+sEzFVIOYVQZpk1qPHj qpFFDu+TjhHOREROLK+0qE7Z ) ; Key ID = 44065`
	DNSKEY=16801/SEP is now in the chain-of-trust
	DS=16801/SHA-256 verifies DNSKEY=16801/SEP
	DNSKEY=62470/SEP is now in the chain-of-trust
	DS=62470/SHA-256 verifies DNSKEY=62470/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 14098 mil. A5j9xw1Zeu+h5OpDs2wU1VE9duof3kua5sfEUA3aJ3n4O0Uhj8kt6Dh72E1ISl5T0cGA6OHrFAo5 F7vE8/n/CyRXMQ9r/NtKNwgZ6qGX1XNdl9rgIdpbfKFAA3aGSvoYs6wp80LvpFytlDPjFClwUArk f4T9IV/FbaW+5aRhIlY= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 16801 mil. rrDFfOyvH5zZsXV2bnW6ysSoICosn6WV/j+kAWwH43hKWURvypF25BtG3dP98D/bTAqBiD/KIlGJ DGbsqemJJcXr6yZhq8TK42xmLvHvjQWXbWoYATjHSMiJDgDvFDpsVOV+gGpxSVZkejo2aQYHJTYD hla79a9uTWd1WMgRZtMY7pfWYargXULnlAWcuEQnK4B6qIqWUueHBKeG2rsMYz8dT0GlTIe2b3Ne Uud4mq9Ok4NdSEMcedHgY2REY1nVXWu098/llcxNFpmd1W2BB6h/UjvU6i8zBfnlBy3GxVvdwbr9 ZpJLzQNIOnYwduosW9vrQE9XeUdcVDjUfpTkEw== )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20230929170243 20230922170243 62470 mil. T3lPjWn1ixg6wPabu4IzSXxiKl7nqrRUlktJOKyzackDlggCT+RHQ9Ao+s+GJAxoKcOSbv01YSU+ 9dXgvHGO0uW8RUipIV+e1S2tcYB3ffIXOMwwGs2zh65C7OiR7cKAOP1rpZZe/lxcjghBmy+iVTB7 nqpslK/nqHzz+lWN+r4HNtLP5Yf9RspzuC2YqWX1tY/2S7r4sdsPDrm15YD6fVRk047/q2eGtgGX B1URsidIIx3NTgGpWD3cQPwbT6QxVXPavTN6LPBMMwRq1svwCAb6Bep6HmkaLa3BZ8hdEEibGohH 1ApdMjh6ajMhK27SZ9aEN+ZezJtWeFKNEHEGlg== )`
	RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
	RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
	RRSIG=62470 and DNSKEY=62470/SEP verifies the DNSKEY RRset
	DNSKEY=14098 is now in the chain-of-trust
	DNSKEY=44065 is now in the chain-of-trust
	Query to pac2.nipr.mil for tricare.mil/A
	Received 683 bytes from 199.252.155.234
	;; Response received from 199.252.155.234 (683 octets) ;; HEADER SECTION ;; id = 60489 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) TRICARE.MIL. 21600 IN NS NS01-CC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-EE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SEA-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-NCR-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SEC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-PAC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-WE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-NWC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SWC-GW.HEALTH.MIL. TRICARE.MIL. 10800 IN DS ( 31471 8 2 2fca4ae007c12a8204cc29aff733ab63f70bf01f68cae8ee418de83d9d88c538 ) TRICARE.MIL. 10800 IN DS 31471 8 1 0a3d53492c8eb70fcbab6dd7e450d957305eb284 TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Dy7rcrnMiSsdBotBnx+p88mFph/m1PxdUVUv+DK+xA4y+lfisusRsREq290haKUgdexmbF7ncSq0 pThpxcprYBIDzFSMkYM8Mjdknp5MHMmGrueBTkCiDGtvHEBWTl9RATKJD9rPzSNEn3XcYwYCC2yM 9EhJE5KIIfu59gEFWCg= ) ;; ADDITIONAL SECTION (10 records) NS01-SWC-GW.HEALTH.MIL. 21600 IN A 214.2.212.178 NS01-SEC-GW.HEALTH.MIL. 21600 IN A 214.2.209.178 NS01-SEA-GW.HEALTH.MIL. 21600 IN A 214.2.216.178 NS01-PAC-GW.HEALTH.MIL. 21600 IN A 214.2.215.178 NS01-NWC-GW.HEALTH.MIL. 21600 IN A 214.2.211.178 NS01-NCR-GW.HEALTH.MIL. 21600 IN A 214.2.208.178 NS01-WE-GW.HEALTH.MIL. 21600 IN A 214.2.214.178 NS01-EE-GW.HEALTH.MIL. 21600 IN A 214.2.213.178 NS01-CC-GW.HEALTH.MIL. 21600 IN A 214.2.210.178 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to con2.nipr.mil for tricare.mil/DNSKEY
	Received 683 bytes from 199.252.162.234
	;; Response received from 199.252.162.234 (683 octets) ;; HEADER SECTION ;; id = 37298 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) TRICARE.MIL. 21600 IN NS NS01-CC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SWC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-PAC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SEA-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-WE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-EE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-NCR-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-NWC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SEC-GW.HEALTH.MIL. TRICARE.MIL. 10800 IN DS 31471 8 1 0a3d53492c8eb70fcbab6dd7e450d957305eb284 TRICARE.MIL. 10800 IN DS ( 31471 8 2 2fca4ae007c12a8204cc29aff733ab63f70bf01f68cae8ee418de83d9d88c538 ) TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Dy7rcrnMiSsdBotBnx+p88mFph/m1PxdUVUv+DK+xA4y+lfisusRsREq290haKUgdexmbF7ncSq0 pThpxcprYBIDzFSMkYM8Mjdknp5MHMmGrueBTkCiDGtvHEBWTl9RATKJD9rPzSNEn3XcYwYCC2yM 9EhJE5KIIfu59gEFWCg= ) ;; ADDITIONAL SECTION (10 records) NS01-SWC-GW.HEALTH.MIL. 21600 IN A 214.2.212.178 NS01-SEC-GW.HEALTH.MIL. 21600 IN A 214.2.209.178 NS01-SEA-GW.HEALTH.MIL. 21600 IN A 214.2.216.178 NS01-PAC-GW.HEALTH.MIL. 21600 IN A 214.2.215.178 NS01-NWC-GW.HEALTH.MIL. 21600 IN A 214.2.211.178 NS01-NCR-GW.HEALTH.MIL. 21600 IN A 214.2.208.178 NS01-WE-GW.HEALTH.MIL. 21600 IN A 214.2.214.178 NS01-EE-GW.HEALTH.MIL. 21600 IN A 214.2.213.178 NS01-CC-GW.HEALTH.MIL. 21600 IN A 214.2.210.178 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone tricare.mil

tricare.mil

	Checking DS between mil and tricare.mil
	Query to con1.nipr.mil for tricare.mil/DS
	Received 298 bytes from 199.252.157.234
	;; Response received from 199.252.157.234 (298 octets) ;; HEADER SECTION ;; id = 36673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN DS ;; ANSWER SECTION (3 records) TRICARE.MIL. 10800 IN DS 31471 8 1 0a3d53492c8eb70fcbab6dd7e450d957305eb284 TRICARE.MIL. 10800 IN DS ( 31471 8 2 2fca4ae007c12a8204cc29aff733ab63f70bf01f68cae8ee418de83d9d88c538 ) TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Dy7rcrnMiSsdBotBnx+p88mFph/m1PxdUVUv+DK+xA4y+lfisusRsREq290haKUgdexmbF7ncSq0 pThpxcprYBIDzFSMkYM8Mjdknp5MHMmGrueBTkCiDGtvHEBWTl9RATKJD9rPzSNEn3XcYwYCC2yM 9EhJE5KIIfu59gEFWCg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for tricare.mil in the mil zone
	DS=31471/SHA-1 has algorithm RSASHA256
	DS=31471/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20230929170243 20230922170243 14098 mil. Dy7rcrnMiSsdBotBnx+p88mFph/m1PxdUVUv+DK+xA4y+lfisusRsREq290haKUgdexmbF7ncSq0 pThpxcprYBIDzFSMkYM8Mjdknp5MHMmGrueBTkCiDGtvHEBWTl9RATKJD9rPzSNEn3XcYwYCC2yM 9EhJE5KIIfu59gEFWCg= )`
	RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
	DS=31471/SHA-1 is now in the chain-of-trust
	`TRICARE.MIL. 10800 IN DS 31471 8 1 0a3d53492c8eb70fcbab6dd7e450d957305eb284`
	`TRICARE.MIL. 10800 IN DS ( 31471 8 2 2fca4ae007c12a8204cc29aff733ab63f70bf01f68cae8ee418de83d9d88c538 )`
	Query to NS01-CC-GW.HEALTH.MIL for tricare.mil/DNSKEY
	Received 2317 bytes from 214.2.210.178
	;; Response received from 214.2.210.178 (2317 octets) ;; HEADER SECTION ;; id = 28042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN DNSKEY ;; ANSWER SECTION (8 records) tricare.mil. 151397 IN DNSKEY ( 256 3 8 AwEAAcJp5vbJDwDpaqU4xz023g1XG9/dXPiXZDTwXVN+uI1BAAAOzhS9eIfgcWZnEYdaNibXq0ve p7WXQVNSEV7OZeoNF4e754Cih2PpV25bUrP4Xfq2kBTvPgR6DT/KBuBEW8hoh9zGKc1z6+9nl5SE 3Maz1X2kla+nZcf6zAKo0psTmTLeLdQUtALkZchuPE+eKaHAwYkCxdLqzwArE2kbjXl/cr5sK9yW u++KXXNmSDzDOhJ8JfSPC17kmgGkyuhdfMQfnjbXvpCdu26y/nAvFwexu3R9eRL+FN3dmx1WD449 Ej011yGPHw429CgFmO4OQekx0oq9eqzYgOuquEzOKLE= ) ; Key ID = 52170 tricare.mil. 151397 IN DNSKEY ( 257 3 8 AwEAAZpI/QPa37+v3FiHJoidcddLgRfH9jRhxSoYHnMil+JF3VUnpJKivOdsdncUlIylfT1HKwVG QxWyfu+FnM1o7WhUG82RkbKmcDncdAx6VHh3TJqI/AzpuQ947lsx6ebFjYV7qm0EdX1CNDc+HiF5 UuY2zv+XxpL0jfmwEef21hXIlGEuRrUmRRl+2sPl9p3eVm1k+4dc295ajbeCPfPZ0jufiOlzwPkq LzdIYMFRq3dah1j+l2nbeszxH7HgmYFgUtzUGLxwsPzcgZivefVpPuRlDX0WyMc5bsO74Yut1IJp Ba78uIw9Rh1xyzNkfFXinMemMN5FvXTaiLBV1STm7Ls= ) ; Key ID = 31471 tricare.mil. 151397 IN DNSKEY ( 256 3 8 AwEAAbsDuWfheO9w+uXD44SwrsTky2xWx8WM1yEAlYp3Qm/qSYnIrKzMidkzJxYtxq46sQHU0mI6 u9W1g86CdnEPLMWiWa3HS4EiINQ5LLa36WpWk1OcYHyW2OZ4JTaZA5N09iRAIJfYk9Y+yxavuy1n vhXjfOEWi2W7D96Mz0fCJ0Zzdn7FUDQ78WPagHnYY0wo6KLTSU+D3b3Ulkv6RmnV3fNs+VnXcxoN +NKPQBPeuBUIyj+D+Rj2vgyh9MBMOqlHmbh1AQVlRm4UxmrTdQZ2mVMcNSjRn+cg7e070ewD6m9E oPLgzlG56WV2yP+V3O6tWsFEuauHxHrqxzrwvx0L/lU= ) ; Key ID = 62640 tricare.mil. 151397 IN DNSKEY ( 256 3 8 AwEAAbcrYg2/w0cAqNdzOMYrjkMIWN4Q03dtra8ekBQmetHNqPOy+cbxy/dZDavn1pSKN9ZoDSoj Xa9g6uoioqHmB7vjySDjr+lo6qsNHpzZ6ukV6MzgTd8bFmRzM6B+F9BN9qQwWFy7I266XDjPvyTh zkKGBv+ACDdld11T/KpxobYcAxjq+nXB9iXzS+IJx/GXWvRiUYO4OjYsbTziYEAaBYIQyYRc9HS3 tsrZR7KGmbMIAu7sJ6pYFxbNI+xLizCM7anSZ1n5AmthPuwFB1bb+Dr4ZwaEXn2L+/I/ZMjPO1jS klVZ3BhTm2BECWHX7E2S9bJMCGoYq5Jevi6ZF9NqWEE= ) ; Key ID = 56295 tricare.mil. 151397 IN DNSKEY ( 257 3 8 AwEAAaEnYBe2n+kHP6uzs7ik9yAt+HYvFRZ+zEmghlfUWvAYi8bOmd8eNMc2A/1p8MlvGIGmBFtW l/kF4lbZWCNyrbn4L9sZsYhCgASnTZmTFNSyJO+01yLOJwSbmQBzhtBkCnb4+/LWTMLBgdiQYVSh zPOUzoC5Sju0T4/F7HXiXmXhmVInObD+IWJ9x/kfN+lBRbLn9CwtJrln1wkjJoxBJpJlEcKsJiE3 IVmyY/SHBbmQNbGW1ieSgkwxjLMz6GpuEjZTnA4xKXB5FTz3zxo+P0HSILSZQaxtgQKGH1SerkR0 ZU5K7Y15YyBxwDTTFmtSCb9274c/G/pk0nyidoOMOYc= ) ; Key ID = 37426 tricare.mil. 151397 IN RRSIG ( DNSKEY 8 2 172800 20230927230239 20230923220827 31471 tricare.mil. bLkBgp4JQ6HoH+E/lQfFaLvMOdmm75NgI1bYaYamfXvgjFTmviP/vyj7S4rIQfSZVe8n9CHFdEWZ +WE2TwlXpuKorqh3XyCVZIxwOrN31xDbEiJrL+aLkvyNgddi5ZAwzAUheXitatUW8Bn9QpGHhQFX PxM/zgSNoG0WNQJL96qu15pa0MDKSI1MBbG376iIKizEQh5VgFMvAxMBYFNL9SPCIz8+EbU/Othu 5++e9jJD2zb+wmc5sV+FwkXcPjP6fxXN1ZKgqxbLUUfNytPUclIiD+fb+QE4xPWDVFy6WtdsvxTZ sgRBIP/oQRr0rf75qut4zjoe7P5Knf43d9lw0Q== ) tricare.mil. 151397 IN RRSIG ( DNSKEY 8 2 172800 20230927230239 20230923220827 37426 tricare.mil. MB2TDSm4NMhTDJd7scCabokWe59JSNj/pmQ8FtRk/1HU6Xj08xUz6tZsBO6Q09r1ZRRZAyZnOaF9 1YhF6OoqrkppJNBkJI/hJ4RC9jxt+4kOZrg/w9u4q9dJRyrdK75jiwA4E3Qi4nOenMqulD4fxUeu hNoFpjdau1G7bUjHHZegvN3bttV0398rZZF54d1m53BuUxRxywUXlIaD3Pa5EHywXcDD7W1UCPz2 7MPzL5HXtV/GCqVg4aeH61IXtID9imFQJ9p/usv0tSXfsbT3d5tItje3/vvfbXerLasxgJUDzJg9 TdRbpi9kL++XqTMibijP1eJGQ7RVofMYXexevA== ) tricare.mil. 151397 IN RRSIG ( DNSKEY 8 2 172800 20230927230239 20230923220827 52170 tricare.mil. uhXR8djoh4u4ddqRxc2zMaBsmXgzORcqbzLKmRIInh2oNl9oVgQCFfzCYEdgfGddJTkJy85Wq5uR yKvE/4fXiggdDaD8gpzk4rfOanErPAsasYJ1r9DNmRz5Bj6F2t0mx0TjX6/wk+NY+a9AM62GiYwd eA+4ynPaQZm4E2AFCcHha5fAOKd/dm4NXvxpPYmNPD4EUDu85QEeHGZl89CvSoJkwszexyW2S6nL 6XL343oQ4JxsiRr4RhgKeERYvGYSUit532SWkiRZyAb1HP9zxFcKDObMWxrjCMwBMjjQ3AORJnsk Wc2Zt4xqjTlL+Y2DrMq9xoShSq8iy7oNBYJKLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for tricare.mil
	`tricare.mil. 151397 IN DNSKEY ( 256 3 8 AwEAAcJp5vbJDwDpaqU4xz023g1XG9/dXPiXZDTwXVN+uI1BAAAOzhS9eIfgcWZnEYdaNibXq0ve p7WXQVNSEV7OZeoNF4e754Cih2PpV25bUrP4Xfq2kBTvPgR6DT/KBuBEW8hoh9zGKc1z6+9nl5SE 3Maz1X2kla+nZcf6zAKo0psTmTLeLdQUtALkZchuPE+eKaHAwYkCxdLqzwArE2kbjXl/cr5sK9yW u++KXXNmSDzDOhJ8JfSPC17kmgGkyuhdfMQfnjbXvpCdu26y/nAvFwexu3R9eRL+FN3dmx1WD449 Ej011yGPHw429CgFmO4OQekx0oq9eqzYgOuquEzOKLE= ) ; Key ID = 52170`
	`tricare.mil. 151397 IN DNSKEY ( 257 3 8 AwEAAZpI/QPa37+v3FiHJoidcddLgRfH9jRhxSoYHnMil+JF3VUnpJKivOdsdncUlIylfT1HKwVG QxWyfu+FnM1o7WhUG82RkbKmcDncdAx6VHh3TJqI/AzpuQ947lsx6ebFjYV7qm0EdX1CNDc+HiF5 UuY2zv+XxpL0jfmwEef21hXIlGEuRrUmRRl+2sPl9p3eVm1k+4dc295ajbeCPfPZ0jufiOlzwPkq LzdIYMFRq3dah1j+l2nbeszxH7HgmYFgUtzUGLxwsPzcgZivefVpPuRlDX0WyMc5bsO74Yut1IJp Ba78uIw9Rh1xyzNkfFXinMemMN5FvXTaiLBV1STm7Ls= ) ; Key ID = 31471`
	`tricare.mil. 151397 IN DNSKEY ( 256 3 8 AwEAAbsDuWfheO9w+uXD44SwrsTky2xWx8WM1yEAlYp3Qm/qSYnIrKzMidkzJxYtxq46sQHU0mI6 u9W1g86CdnEPLMWiWa3HS4EiINQ5LLa36WpWk1OcYHyW2OZ4JTaZA5N09iRAIJfYk9Y+yxavuy1n vhXjfOEWi2W7D96Mz0fCJ0Zzdn7FUDQ78WPagHnYY0wo6KLTSU+D3b3Ulkv6RmnV3fNs+VnXcxoN +NKPQBPeuBUIyj+D+Rj2vgyh9MBMOqlHmbh1AQVlRm4UxmrTdQZ2mVMcNSjRn+cg7e070ewD6m9E oPLgzlG56WV2yP+V3O6tWsFEuauHxHrqxzrwvx0L/lU= ) ; Key ID = 62640`
	`tricare.mil. 151397 IN DNSKEY ( 256 3 8 AwEAAbcrYg2/w0cAqNdzOMYrjkMIWN4Q03dtra8ekBQmetHNqPOy+cbxy/dZDavn1pSKN9ZoDSoj Xa9g6uoioqHmB7vjySDjr+lo6qsNHpzZ6ukV6MzgTd8bFmRzM6B+F9BN9qQwWFy7I266XDjPvyTh zkKGBv+ACDdld11T/KpxobYcAxjq+nXB9iXzS+IJx/GXWvRiUYO4OjYsbTziYEAaBYIQyYRc9HS3 tsrZR7KGmbMIAu7sJ6pYFxbNI+xLizCM7anSZ1n5AmthPuwFB1bb+Dr4ZwaEXn2L+/I/ZMjPO1jS klVZ3BhTm2BECWHX7E2S9bJMCGoYq5Jevi6ZF9NqWEE= ) ; Key ID = 56295`
	`tricare.mil. 151397 IN DNSKEY ( 257 3 8 AwEAAaEnYBe2n+kHP6uzs7ik9yAt+HYvFRZ+zEmghlfUWvAYi8bOmd8eNMc2A/1p8MlvGIGmBFtW l/kF4lbZWCNyrbn4L9sZsYhCgASnTZmTFNSyJO+01yLOJwSbmQBzhtBkCnb4+/LWTMLBgdiQYVSh zPOUzoC5Sju0T4/F7HXiXmXhmVInObD+IWJ9x/kfN+lBRbLn9CwtJrln1wkjJoxBJpJlEcKsJiE3 IVmyY/SHBbmQNbGW1ieSgkwxjLMz6GpuEjZTnA4xKXB5FTz3zxo+P0HSILSZQaxtgQKGH1SerkR0 ZU5K7Y15YyBxwDTTFmtSCb9274c/G/pk0nyidoOMOYc= ) ; Key ID = 37426`
	DNSKEY=31471/SEP is now in the chain-of-trust
	DS=31471/SHA-1 verifies DNSKEY=31471/SEP
	DS=31471/SHA-256 verifies DNSKEY=31471/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`tricare.mil. 151397 IN RRSIG ( DNSKEY 8 2 172800 20230927230239 20230923220827 31471 tricare.mil. bLkBgp4JQ6HoH+E/lQfFaLvMOdmm75NgI1bYaYamfXvgjFTmviP/vyj7S4rIQfSZVe8n9CHFdEWZ +WE2TwlXpuKorqh3XyCVZIxwOrN31xDbEiJrL+aLkvyNgddi5ZAwzAUheXitatUW8Bn9QpGHhQFX PxM/zgSNoG0WNQJL96qu15pa0MDKSI1MBbG376iIKizEQh5VgFMvAxMBYFNL9SPCIz8+EbU/Othu 5++e9jJD2zb+wmc5sV+FwkXcPjP6fxXN1ZKgqxbLUUfNytPUclIiD+fb+QE4xPWDVFy6WtdsvxTZ sgRBIP/oQRr0rf75qut4zjoe7P5Knf43d9lw0Q== )`
	`tricare.mil. 151397 IN RRSIG ( DNSKEY 8 2 172800 20230927230239 20230923220827 37426 tricare.mil. MB2TDSm4NMhTDJd7scCabokWe59JSNj/pmQ8FtRk/1HU6Xj08xUz6tZsBO6Q09r1ZRRZAyZnOaF9 1YhF6OoqrkppJNBkJI/hJ4RC9jxt+4kOZrg/w9u4q9dJRyrdK75jiwA4E3Qi4nOenMqulD4fxUeu hNoFpjdau1G7bUjHHZegvN3bttV0398rZZF54d1m53BuUxRxywUXlIaD3Pa5EHywXcDD7W1UCPz2 7MPzL5HXtV/GCqVg4aeH61IXtID9imFQJ9p/usv0tSXfsbT3d5tItje3/vvfbXerLasxgJUDzJg9 TdRbpi9kL++XqTMibijP1eJGQ7RVofMYXexevA== )`
	`tricare.mil. 151397 IN RRSIG ( DNSKEY 8 2 172800 20230927230239 20230923220827 52170 tricare.mil. uhXR8djoh4u4ddqRxc2zMaBsmXgzORcqbzLKmRIInh2oNl9oVgQCFfzCYEdgfGddJTkJy85Wq5uR yKvE/4fXiggdDaD8gpzk4rfOanErPAsasYJ1r9DNmRz5Bj6F2t0mx0TjX6/wk+NY+a9AM62GiYwd eA+4ynPaQZm4E2AFCcHha5fAOKd/dm4NXvxpPYmNPD4EUDu85QEeHGZl89CvSoJkwszexyW2S6nL 6XL343oQ4JxsiRr4RhgKeERYvGYSUit532SWkiRZyAb1HP9zxFcKDObMWxrjCMwBMjjQ3AORJnsk Wc2Zt4xqjTlL+Y2DrMq9xoShSq8iy7oNBYJKLw== )`
	RRSIG=31471 and DNSKEY=31471/SEP verifies the DNSKEY RRset
	RRSIG=37426 and DNSKEY=37426/SEP verifies the DNSKEY RRset
	RRSIG=52170 and DNSKEY=52170 verifies the DNSKEY RRset
	DNSKEY=52170 is now in the chain-of-trust
	DNSKEY=62640 is now in the chain-of-trust
	DNSKEY=56295 is now in the chain-of-trust
	DNSKEY=37426/SEP is now in the chain-of-trust
	Query to NS01-NWC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.211.178
	;; Response received from 214.2.211.178 (355 octets) ;; HEADER SECTION ;; id = 1872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 300 IN A 214.10.40.16 tricare.mil. 300 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-NWC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-SEC-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.209.178
	;; Response received from 214.2.209.178 (440 octets) ;; HEADER SECTION ;; id = 5377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 900 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 900 IN RRSIG ( SOA 8 2 900 20230928010641 20230924000641 52170 tricare.mil. dLBjx8dqRuimtMs/EPQG3kUHWYfvftu7IYbEiWnPgH+R+0wd37pGBq2cQ98iOs+oO0r6qIgBwdGG SKObRixQ7JBCM1PIOg2/LgMBLgWKsr5heJaMSLYwXfgkJRDg/q80kTaCYp07dH/4+691Vl0w7lDS Ai4uDqvENmzvqCH9/GYjVBWq6yfWexOHV1/Elyj5fLK44cRZQAYtY1pQEeOlZ2gQvPNgzvUHxTB0 bit80JT83QOSdWekCsR5Hz5K+MAnLDOKTDJapBXBccR45Y2xSpQX/WRAY+LBu0ydmHgDbc6YYNyG 30Waejh5utxagbMM4lJDmekox+wCWi/LfqcvNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-NCR-GW.HEALTH.MIL for tricare.mil/SOA
	Received 141 bytes from 214.2.208.178
	;; Response received from 214.2.208.178 (141 octets) ;; HEADER SECTION ;; id = 47039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (1 record) tricare.mil. 749 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-EE-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.213.178
	;; Response received from 214.2.213.178 (440 octets) ;; HEADER SECTION ;; id = 8026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 899 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 899 IN RRSIG ( SOA 8 2 900 20230928010641 20230924000641 52170 tricare.mil. dLBjx8dqRuimtMs/EPQG3kUHWYfvftu7IYbEiWnPgH+R+0wd37pGBq2cQ98iOs+oO0r6qIgBwdGG SKObRixQ7JBCM1PIOg2/LgMBLgWKsr5heJaMSLYwXfgkJRDg/q80kTaCYp07dH/4+691Vl0w7lDS Ai4uDqvENmzvqCH9/GYjVBWq6yfWexOHV1/Elyj5fLK44cRZQAYtY1pQEeOlZ2gQvPNgzvUHxTB0 bit80JT83QOSdWekCsR5Hz5K+MAnLDOKTDJapBXBccR45Y2xSpQX/WRAY+LBu0ydmHgDbc6YYNyG 30Waejh5utxagbMM4lJDmekox+wCWi/LfqcvNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-CC-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.210.178
	;; Response received from 214.2.210.178 (440 octets) ;; HEADER SECTION ;; id = 54778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 898 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 898 IN RRSIG ( SOA 8 2 900 20230928010641 20230924000641 52170 tricare.mil. dLBjx8dqRuimtMs/EPQG3kUHWYfvftu7IYbEiWnPgH+R+0wd37pGBq2cQ98iOs+oO0r6qIgBwdGG SKObRixQ7JBCM1PIOg2/LgMBLgWKsr5heJaMSLYwXfgkJRDg/q80kTaCYp07dH/4+691Vl0w7lDS Ai4uDqvENmzvqCH9/GYjVBWq6yfWexOHV1/Elyj5fLK44cRZQAYtY1pQEeOlZ2gQvPNgzvUHxTB0 bit80JT83QOSdWekCsR5Hz5K+MAnLDOKTDJapBXBccR45Y2xSpQX/WRAY+LBu0ydmHgDbc6YYNyG 30Waejh5utxagbMM4lJDmekox+wCWi/LfqcvNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-PAC-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.215.178
	;; Response received from 214.2.215.178 (440 octets) ;; HEADER SECTION ;; id = 46461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 900 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 900 IN RRSIG ( SOA 8 2 900 20230928010641 20230924000641 52170 tricare.mil. dLBjx8dqRuimtMs/EPQG3kUHWYfvftu7IYbEiWnPgH+R+0wd37pGBq2cQ98iOs+oO0r6qIgBwdGG SKObRixQ7JBCM1PIOg2/LgMBLgWKsr5heJaMSLYwXfgkJRDg/q80kTaCYp07dH/4+691Vl0w7lDS Ai4uDqvENmzvqCH9/GYjVBWq6yfWexOHV1/Elyj5fLK44cRZQAYtY1pQEeOlZ2gQvPNgzvUHxTB0 bit80JT83QOSdWekCsR5Hz5K+MAnLDOKTDJapBXBccR45Y2xSpQX/WRAY+LBu0ydmHgDbc6YYNyG 30Waejh5utxagbMM4lJDmekox+wCWi/LfqcvNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-WE-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.214.178
	;; Response received from 214.2.214.178 (440 octets) ;; HEADER SECTION ;; id = 28559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 900 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 900 IN RRSIG ( SOA 8 2 900 20230928010641 20230924000641 52170 tricare.mil. dLBjx8dqRuimtMs/EPQG3kUHWYfvftu7IYbEiWnPgH+R+0wd37pGBq2cQ98iOs+oO0r6qIgBwdGG SKObRixQ7JBCM1PIOg2/LgMBLgWKsr5heJaMSLYwXfgkJRDg/q80kTaCYp07dH/4+691Vl0w7lDS Ai4uDqvENmzvqCH9/GYjVBWq6yfWexOHV1/Elyj5fLK44cRZQAYtY1pQEeOlZ2gQvPNgzvUHxTB0 bit80JT83QOSdWekCsR5Hz5K+MAnLDOKTDJapBXBccR45Y2xSpQX/WRAY+LBu0ydmHgDbc6YYNyG 30Waejh5utxagbMM4lJDmekox+wCWi/LfqcvNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-SEA-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.216.178
	;; Response received from 214.2.216.178 (440 octets) ;; HEADER SECTION ;; id = 37273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 898 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 898 IN RRSIG ( SOA 8 2 900 20230928010641 20230924000641 52170 tricare.mil. dLBjx8dqRuimtMs/EPQG3kUHWYfvftu7IYbEiWnPgH+R+0wd37pGBq2cQ98iOs+oO0r6qIgBwdGG SKObRixQ7JBCM1PIOg2/LgMBLgWKsr5heJaMSLYwXfgkJRDg/q80kTaCYp07dH/4+691Vl0w7lDS Ai4uDqvENmzvqCH9/GYjVBWq6yfWexOHV1/Elyj5fLK44cRZQAYtY1pQEeOlZ2gQvPNgzvUHxTB0 bit80JT83QOSdWekCsR5Hz5K+MAnLDOKTDJapBXBccR45Y2xSpQX/WRAY+LBu0ydmHgDbc6YYNyG 30Waejh5utxagbMM4lJDmekox+wCWi/LfqcvNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-SWC-GW.HEALTH.MIL for tricare.mil/SOA
	Received 141 bytes from 214.2.212.178
	;; Response received from 214.2.212.178 (141 octets) ;; HEADER SECTION ;; id = 46506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (1 record) tricare.mil. 747 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 33129 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to NS01-NWC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.211.178
	;; Response received from 214.2.211.178 (355 octets) ;; HEADER SECTION ;; id = 41454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 297 IN A 214.10.40.16 tricare.mil. 297 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 297 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-EE-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.213.178
	;; Response received from 214.2.213.178 (355 octets) ;; HEADER SECTION ;; id = 32834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 297 IN A 214.10.40.16 tricare.mil. 297 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-EE-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-EE-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.213.178
	;; Response received from 214.2.213.178 (355 octets) ;; HEADER SECTION ;; id = 46507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 296 IN A 214.10.40.16 tricare.mil. 296 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 296 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-CC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.210.178
	;; Response received from 214.2.210.178 (355 octets) ;; HEADER SECTION ;; id = 2350 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 296 IN A 214.10.40.16 tricare.mil. 296 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-CC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-CC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.210.178
	;; Response received from 214.2.210.178 (355 octets) ;; HEADER SECTION ;; id = 32954 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 296 IN A 214.10.40.16 tricare.mil. 296 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 296 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-SWC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.212.178
	;; Response received from 214.2.212.178 (355 octets) ;; HEADER SECTION ;; id = 41482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 270 IN A 214.10.40.16 tricare.mil. 270 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-SWC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-SWC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.212.178
	;; Response received from 214.2.212.178 (355 octets) ;; HEADER SECTION ;; id = 50848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 270 IN A 214.10.40.16 tricare.mil. 270 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 270 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-NCR-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.208.178
	;; Response received from 214.2.208.178 (355 octets) ;; HEADER SECTION ;; id = 1681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 270 IN A 214.10.40.16 tricare.mil. 270 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-NCR-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-NCR-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.208.178
	;; Response received from 214.2.208.178 (355 octets) ;; HEADER SECTION ;; id = 19778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 270 IN A 214.10.40.16 tricare.mil. 270 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 270 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-WE-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.214.178
	;; Response received from 214.2.214.178 (355 octets) ;; HEADER SECTION ;; id = 15982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 236 IN A 214.10.40.16 tricare.mil. 236 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-WE-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-WE-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.214.178
	;; Response received from 214.2.214.178 (355 octets) ;; HEADER SECTION ;; id = 60846 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 235 IN A 214.10.40.16 tricare.mil. 235 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 235 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-SEA-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.216.178
	;; Response received from 214.2.216.178 (355 octets) ;; HEADER SECTION ;; id = 56236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 295 IN A 214.10.40.16 tricare.mil. 295 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-SEA-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-SEA-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.216.178
	;; Response received from 214.2.216.178 (355 octets) ;; HEADER SECTION ;; id = 19064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 295 IN A 214.10.40.16 tricare.mil. 295 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 295 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-SEC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.209.178
	;; Response received from 214.2.209.178 (355 octets) ;; HEADER SECTION ;; id = 48199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 295 IN A 214.10.40.16 tricare.mil. 295 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-SEC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-SEC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.209.178
	;; Response received from 214.2.209.178 (355 octets) ;; HEADER SECTION ;; id = 46128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 295 IN A 214.10.40.16 tricare.mil. 295 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 295 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

tricare.mil

	Query to NS01-PAC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.215.178
	;; Response received from 214.2.215.178 (355 octets) ;; HEADER SECTION ;; id = 55086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 299 IN A 214.10.40.16 tricare.mil. 299 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NS01-PAC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-PAC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.215.178
	;; Response received from 214.2.215.178 (355 octets) ;; HEADER SECTION ;; id = 2109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 299 IN A 214.10.40.16 tricare.mil. 299 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 299 IN RRSIG ( A 8 2 300 20230927211300 20230923205253 52170 tricare.mil. hDw7OtA1mGAKCSdExEaaHG632UH0nE0e9cFOEy9pECVCQamnEafbE3W4Az/SQRwN2K5tvV+EdZJz okL+B/WmA68fP2Ty8qqShSNg0gNNL2QcYW9/RtzE39oR35FMtgxomG8eDnnVnhL4JqAbpCC44Vc2 6HKi0w1Sctk93ervsSKFJnE4BW6MdGNtHrrMmZGkdzaeTIBfD8Y54jXlbhlV5IPUaodAdqoR5ITS f/jKCP/bOxpf+26lYZLgUgm6/+oC9KpKUnbulD2iYSL25B4zjYgUOZewayTi5zgGHz5e2exkT2wl LVXDev4OTnaGP7GGwM+TmiwfvAQ6QnJPy2oavg== )`
	RRSIG=52170 and DNSKEY=52170 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tricare.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: