DNSSEC Debugger - tricare.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-16 03:19:58 UTC

Analyzing DNSSEC problems for tricare.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 45016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to g.root-servers.net for tricare.mil/A
	Received 761 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 761 octets ;; HEADER SECTION ;; id = 34363 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . pM+wG3wmOG/z3FVQ4w+V4n9NXU6rGqohHG1tSGbNtyNMVjK56/1gttgTiE2+bu3+JcA0t7zoJf1g puF8M+Lgs5rv9qynGZ39VZwfI1NBdfPjgNFqE1UGZPr0LKWL5q+WElgTgGIllw8hvl2qFgo8n/B7 9JmElySlcJ03X848phMtyV6h//BaI63ikRV48VExHgKO6jsuhc1mQQWgoilxmljfRU57vtleFKkR h5tSnt5oiZaP5lOHLkE87lMT7rGJ3tk8DK1ltapRt7U/4qZVOZF89jE21+fD6MKpQS3rdtXYoKvv g5NnAjd2uxhfjwCZvHLKoPA53h9To4ULkxS1PQ== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 750 octets ;; HEADER SECTION ;; id = 45089 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . pM+wG3wmOG/z3FVQ4w+V4n9NXU6rGqohHG1tSGbNtyNMVjK56/1gttgTiE2+bu3+JcA0t7zoJf1g puF8M+Lgs5rv9qynGZ39VZwfI1NBdfPjgNFqE1UGZPr0LKWL5q+WElgTgGIllw8hvl2qFgo8n/B7 9JmElySlcJ03X848phMtyV6h//BaI63ikRV48VExHgKO6jsuhc1mQQWgoilxmljfRU57vtleFKkR h5tSnt5oiZaP5lOHLkE87lMT7rGJ3tk8DK1ltapRt7U/4qZVOZF89jE21+fD6MKpQS3rdtXYoKvv g5NnAjd2uxhfjwCZvHLKoPA53h9To4ULkxS1PQ== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to l.root-servers.net for mil/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 53793 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . pM+wG3wmOG/z3FVQ4w+V4n9NXU6rGqohHG1tSGbNtyNMVjK56/1gttgTiE2+bu3+JcA0t7zoJf1g puF8M+Lgs5rv9qynGZ39VZwfI1NBdfPjgNFqE1UGZPr0LKWL5q+WElgTgGIllw8hvl2qFgo8n/B7 9JmElySlcJ03X848phMtyV6h//BaI63ikRV48VExHgKO6jsuhc1mQQWgoilxmljfRU57vtleFKkR h5tSnt5oiZaP5lOHLkE87lMT7rGJ3tk8DK1ltapRt7U/4qZVOZF89jE21+fD6MKpQS3rdtXYoKvv g5NnAjd2uxhfjwCZvHLKoPA53h9To4ULkxS1PQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . pM+wG3wmOG/z3FVQ4w+V4n9NXU6rGqohHG1tSGbNtyNMVjK56/1gttgTiE2+bu3+JcA0t7zoJf1g puF8M+Lgs5rv9qynGZ39VZwfI1NBdfPjgNFqE1UGZPr0LKWL5q+WElgTgGIllw8hvl2qFgo8n/B7 9JmElySlcJ03X848phMtyV6h//BaI63ikRV48VExHgKO6jsuhc1mQQWgoilxmljfRU57vtleFKkR h5tSnt5oiZaP5lOHLkE87lMT7rGJ3tk8DK1ltapRt7U/4qZVOZF89jE21+fD6MKpQS3rdtXYoKvv g5NnAjd2uxhfjwCZvHLKoPA53h9To4ULkxS1PQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 1061 octets ;; HEADER SECTION ;; id = 12967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcoLn7RHnro749kkPhm54Z2iOwMBsW/GJNJ55/9JM5SWmejqzFeOBlK7N/UCOVW0sZwtXtjj eCnsVB7oUeN2hihbvWpA9/8jOn3sffyiPctFvK+dpv40o21Fj6VDIv4L3HFv/ZgDJS0JabQpKeW8 sCCkOxqoduO5Cgj/ePnmW8/l ) ; keytag 43458 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb+BodjfUWUtBuYlbVkJuci7llIVNYfnDSyFUIRmoIpZW3s/yFEp3/xkGsIGnlhjbG97/ir8 yx0YSX1pxWdvYi+7gMwWsSV145Zu2x08IfC6Z6uHiNqgmanVcQ2Ms5Jy0bVyYAfBi4oCmMj1+/Qa MEszTRHTCi+yB906hhztkZO3 ) ; keytag 12574 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260623001118 20260616001118 12574 mil. Fb/GsavEGk3XcxyPrAJJhtgPVig3GlCENnu1iy69nsjclmTEStQ2LOHBLTA/7IpGMOoA4rxVH+pb Y03l0CdGWwfNWRhOHv/KGUiDFnOpfhn318yHaS9hlEhfHR/KePDx4PIWAXZPumEU85KaYeuyXi1P RDaCJzZbtxSASMlcMrE= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260623001118 20260616001118 45019 mil. Alm8ug4lNeVjGSbt1OR1JcBRw6M/urM/igjeeq/baOUt4/tGuG2/8JDatbMtp0kAXgoGDbLinTup SUIg0PQMEc/bSKBxM6tGtW2j1T8G9JkSAXIhZKDWHp6PVjwAgHhyxTBCtzZxlGXtAREgQFOKuyQJ EEL3YuNoduRgiX6XANb6PDbAKVMiOoGgIXVUCrSrMTJsCHd/Ktp6qyFzQY5RMUw/4HjC9Tuc/4F6 9/bpUNieO0SAEwtBJlA8N73OjQlzQa4qMblYx/RHE/oUf1Cftcs50bc/vF425mNWmp+RBLMgs9Ta MKhmCDBnZniI8Q5WQ2mwB5V52QYV/zXScDXdjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcoLn7RHnro749kkPhm54Z2iOwMBsW/GJNJ55/9JM5SWmejqzFeOBlK7N/UCOVW0sZwtXtjj eCnsVB7oUeN2hihbvWpA9/8jOn3sffyiPctFvK+dpv40o21Fj6VDIv4L3HFv/ZgDJS0JabQpKeW8 sCCkOxqoduO5Cgj/ePnmW8/l ) ; keytag 43458`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb+BodjfUWUtBuYlbVkJuci7llIVNYfnDSyFUIRmoIpZW3s/yFEp3/xkGsIGnlhjbG97/ir8 yx0YSX1pxWdvYi+7gMwWsSV145Zu2x08IfC6Z6uHiNqgmanVcQ2Ms5Jy0bVyYAfBi4oCmMj1+/Qa MEszTRHTCi+yB906hhztkZO3 ) ; keytag 12574`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260623001118 20260616001118 12574 mil. Fb/GsavEGk3XcxyPrAJJhtgPVig3GlCENnu1iy69nsjclmTEStQ2LOHBLTA/7IpGMOoA4rxVH+pb Y03l0CdGWwfNWRhOHv/KGUiDFnOpfhn318yHaS9hlEhfHR/KePDx4PIWAXZPumEU85KaYeuyXi1P RDaCJzZbtxSASMlcMrE= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260623001118 20260616001118 45019 mil. Alm8ug4lNeVjGSbt1OR1JcBRw6M/urM/igjeeq/baOUt4/tGuG2/8JDatbMtp0kAXgoGDbLinTup SUIg0PQMEc/bSKBxM6tGtW2j1T8G9JkSAXIhZKDWHp6PVjwAgHhyxTBCtzZxlGXtAREgQFOKuyQJ EEL3YuNoduRgiX6XANb6PDbAKVMiOoGgIXVUCrSrMTJsCHd/Ktp6qyFzQY5RMUw/4HjC9Tuc/4F6 9/bpUNieO0SAEwtBJlA8N73OjQlzQa4qMblYx/RHE/oUf1Cftcs50bc/vF425mNWmp+RBLMgs9Ta MKhmCDBnZniI8Q5WQ2mwB5V52QYV/zXScDXdjw== )`
	RRSIG=12574 and DNSKEY=12574 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=43458 is now in the chain-of-trust
	DNSKEY=12574 is now in the chain-of-trust
	Query to con1.nipr.mil for tricare.mil/A
	Received 641 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 641 octets ;; HEADER SECTION ;; id = 45402 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) TRICARE.MIL. 21600 IN NS NS01-NWC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SEA-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-EE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-NCR-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-CC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-WE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-PAC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SEC-GW.HEALTH.MIL. TRICARE.MIL. 10800 IN DS 35552 8 1 ca9da0539f884ee4712ae08879f5c7d46e055710 TRICARE.MIL. 10800 IN DS ( 35552 8 2 8b942af5f8ce51fe5797d8b7efd65b421c9fd869b931e671792a5cdeb46949e4 ) TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260623001118 20260616001118 12574 mil. Cfn7klTSAEaK75pKPNGLgsa5PoYHPBvja/TJDZHEu8UydyJ8lVLlM5DNRESro/sY+QpZkd1030jJ UXHGiyinAhi1IhJKDD29Szrc3J66FuKACB9n2JVlC0g7lr97NYhf3qJTSRWuubZEutQjDAOBCbB7 NC5V2V34enRlf5Wlloc= ) ;; ADDITIONAL SECTION (9 records) NS01-SEC-GW.HEALTH.MIL. 21600 IN A 214.2.209.178 NS01-SEA-GW.HEALTH.MIL. 21600 IN A 214.2.216.178 NS01-PAC-GW.HEALTH.MIL. 21600 IN A 214.2.215.178 NS01-NWC-GW.HEALTH.MIL. 21600 IN A 214.2.211.178 NS01-NCR-GW.HEALTH.MIL. 21600 IN A 214.2.208.178 NS01-WE-GW.HEALTH.MIL. 21600 IN A 214.2.214.178 NS01-EE-GW.HEALTH.MIL. 21600 IN A 214.2.213.178 NS01-CC-GW.HEALTH.MIL. 21600 IN A 214.2.210.178 ;; { "EDNS-VERSION": 0 }
	Query to con2.nipr.mil for tricare.mil/DNSKEY
	Received 641 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 641 octets ;; HEADER SECTION ;; id = 62127 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) TRICARE.MIL. 21600 IN NS NS01-SEA-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-EE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-WE-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-NWC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-CC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-PAC-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-NCR-GW.HEALTH.MIL. TRICARE.MIL. 21600 IN NS NS01-SEC-GW.HEALTH.MIL. TRICARE.MIL. 10800 IN DS 35552 8 1 ca9da0539f884ee4712ae08879f5c7d46e055710 TRICARE.MIL. 10800 IN DS ( 35552 8 2 8b942af5f8ce51fe5797d8b7efd65b421c9fd869b931e671792a5cdeb46949e4 ) TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260623001118 20260616001118 12574 mil. Cfn7klTSAEaK75pKPNGLgsa5PoYHPBvja/TJDZHEu8UydyJ8lVLlM5DNRESro/sY+QpZkd1030jJ UXHGiyinAhi1IhJKDD29Szrc3J66FuKACB9n2JVlC0g7lr97NYhf3qJTSRWuubZEutQjDAOBCbB7 NC5V2V34enRlf5Wlloc= ) ;; ADDITIONAL SECTION (9 records) NS01-SEC-GW.HEALTH.MIL. 21600 IN A 214.2.209.178 NS01-SEA-GW.HEALTH.MIL. 21600 IN A 214.2.216.178 NS01-PAC-GW.HEALTH.MIL. 21600 IN A 214.2.215.178 NS01-NWC-GW.HEALTH.MIL. 21600 IN A 214.2.211.178 NS01-NCR-GW.HEALTH.MIL. 21600 IN A 214.2.208.178 NS01-WE-GW.HEALTH.MIL. 21600 IN A 214.2.214.178 NS01-EE-GW.HEALTH.MIL. 21600 IN A 214.2.213.178 NS01-CC-GW.HEALTH.MIL. 21600 IN A 214.2.210.178 ;; { "EDNS-VERSION": 0 }
	Found child zone tricare.mil

tricare.mil

	Checking DS between mil and tricare.mil
	Query to eur1.nipr.mil for tricare.mil/DS
	Received 298 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 298 octets ;; HEADER SECTION ;; id = 37816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN DS ;; ANSWER SECTION (3 records) TRICARE.MIL. 10800 IN DS 35552 8 1 ca9da0539f884ee4712ae08879f5c7d46e055710 TRICARE.MIL. 10800 IN DS ( 35552 8 2 8b942af5f8ce51fe5797d8b7efd65b421c9fd869b931e671792a5cdeb46949e4 ) TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260623001118 20260616001118 12574 mil. Cfn7klTSAEaK75pKPNGLgsa5PoYHPBvja/TJDZHEu8UydyJ8lVLlM5DNRESro/sY+QpZkd1030jJ UXHGiyinAhi1IhJKDD29Szrc3J66FuKACB9n2JVlC0g7lr97NYhf3qJTSRWuubZEutQjDAOBCbB7 NC5V2V34enRlf5Wlloc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for tricare.mil in the mil zone
	DS=35552/SHA-1 uses a deprecated digest algorithm
	DS=35552/SHA-1 has algorithm RSASHA256
	DS=35552/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`TRICARE.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260623001118 20260616001118 12574 mil. Cfn7klTSAEaK75pKPNGLgsa5PoYHPBvja/TJDZHEu8UydyJ8lVLlM5DNRESro/sY+QpZkd1030jJ UXHGiyinAhi1IhJKDD29Szrc3J66FuKACB9n2JVlC0g7lr97NYhf3qJTSRWuubZEutQjDAOBCbB7 NC5V2V34enRlf5Wlloc= )`
	RRSIG=12574 and DNSKEY=12574 verifies the DS RRset
	DS=35552/SHA-1 is now in the chain-of-trust
	`TRICARE.MIL. 10800 IN DS 35552 8 1 ca9da0539f884ee4712ae08879f5c7d46e055710`
	`TRICARE.MIL. 10800 IN DS ( 35552 8 2 8b942af5f8ce51fe5797d8b7efd65b421c9fd869b931e671792a5cdeb46949e4 )`
	Query to NS01-WE-GW.HEALTH.MIL for tricare.mil/DNSKEY
	Received 2317 bytes from 214.2.214.178
	;; Response received from [214.2.214.178] 2317 octets ;; HEADER SECTION ;; id = 44459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN DNSKEY ;; ANSWER SECTION (8 records) tricare.mil. 140385 IN DNSKEY ( 256 3 8 AwEAAatyGUz5FjShaLSOlrC8A9WuQdjB6IgXHvq+VGN7cZQstXZ+y9ARwfMQQmtbBz/7gz5Pxz/L 3NMpfdAZONDaGRWj7/LgRs4GoLmzTOO5QczRAib+EvZE8qmnUO7Q1WYCgvuLHPeoh9Md5P+/TznP 8JdxHrswDKjczSQE0SjfaW4kKLyMGkCv2PJStYK2lBHxqE7V+HLxrOxvhT55GabVM7kFVPiSzjvr nqJcm2eeNIfub+Wur8dMVacy7BJG2Nt6eDHyLrqfLwnnuN60xE7lr/6GA8h19Bz6WqbAbkEvl33C 1JeMoG0xjMWfmTayepP2apeLKIk64EPQAjHxajhyF5k= ) ; keytag 10908 tricare.mil. 140385 IN DNSKEY ( 256 3 8 AwEAAaKudi2L18weBBkV3nvkf4EM9HDdRPesekfCpzveX8eJbVbD7bjAjcbBeN8RrSL7zYK5f70q +j6MqQz3xAJeSTboIerBCsCpm0Ngt2d+RfSi9ZvxBzSaiKOjr9GzrsviHlCGqTO7szcytYOrmIw6 hyig9UqsgA2QSe5DWJte1WS0rXNaj5NP5HVJKeRCHmH5B0PK/QM6wFyOT+z0MI02II+Snrs0Jh8i waslOWwaiS4R9eqRU+U8GfVeZB4gX7nkzZQ1abt7Z6WFKiGZfiRgGcsfaoCPt9dvhN0G+7fKo4a8 34ZDAD83KpPSWoCtn/o2VChGCDafV2k5JfeFFLnsAqc= ) ; keytag 46108 tricare.mil. 140385 IN DNSKEY ( 256 3 8 AwEAAZji5pZjKHlsbgrUS9+XOXSs3nwP0MjN5Nr4b9i1mkSxiVqcKBtB7D+rUEqvzapysEtv4HGo iQP/fguEuYAop3NzoIdr7KMy8VtW+ce+J4PLE8aJJm4yXrMjwjEv59xXHWxpQZU45vY/STdLloJV sAIOCFgnAH5KOB5+k/IPUTs13iTax1eh1In8e0F/E2obYszkhAJnX4DzgNOgwwvo1kzugE7qDEdl rpNRU2sJqh5OYoHb/5cFW5ZY5vIqiUcfEO0mIQJl+3a0WBz76AEYnur72gPZBYtugTyZtKaJZJpP IzkHVh0b4Qyzm9qB7u0IbA1H7hxe8o0+t4NSAvCXQ+k= ) ; keytag 57303 tricare.mil. 140385 IN DNSKEY ( 257 3 8 AwEAAaiz7P7NwHSGfKkqzuUUxcb1lNQDqbxNi5YKLCzLBREMuShO9qCJPzaie+ItcK9xDilxmaid exsXgzILTuwhXiSGlodJVcwg+1GN5ENsx8JrmkVotcXzpK6Zs4qSNJ26kGRRuNaYUF0BFnA+QKjX /bDlmYIGqJ/yajYHCHU2e2Vd4yqwHrwLnBy+9yzNsWJUh3mYlTPzKdyIL24HTAHpDymX9v6Htpu2 r/1qPZYuz2zlsERxHI6KuYqyd3cTQt2REYKzpu85iPn4ChEmtiixoxW4TxSY3Hri7I/1crlTOh3e dDAi4rBRp7oNNHsuwdsd5/FniSZp6gY2nm+e2m8flU0= ) ; keytag 43771 tricare.mil. 140385 IN DNSKEY ( 257 3 8 AwEAAdCuoVrepybUPNU9l6QhEahwps1FBIqwYreB/1McZrqtsWDxxbSzmgaEAsfwiUGYCRmejvx2 lO0kl9lehDBE+5CiKkZLQ7xa6J7h5TkNvrAzabWx7a8dO82MWWDlLZgRFB2pMwXAz74+S+cgxljP +Hxcv7bKm0Nsdnk8ZNBEMqijH9dbRvqUXa9VMRoZul6nw1/mjn+kn436XPYFHIfqZ2b12kGGo2aX cUD+Rm8ay+uhdjFRFnXNtyxlHIh+bQDk53+NnExyiNCxjQ1YickYPPg+F47WieO9Abz4oqP7RN+E dV/N+GJROPI/L3FQ8S146zXcNbnjgRHmq+pqO7FlWHM= ) ; keytag 35552 tricare.mil. 140385 IN RRSIG ( DNSKEY 8 2 172800 20260619170031 20260615164928 35552 tricare.mil. nXEYkxGNfHg9zpmChCKUhxFmtnLCnMLREfolvID6OUU3mXsGq9PjSqgFPbjtxOpyohi0sSy6Y5n1 oKMFBnA+e+XR1Cd2PTfflbAxekBGenHnQtSDKuYgHUhbreUmEirEbaXs1/Nf8RdR2qRvAQHWKiHL FtLeuUuG47zaz1FYEVGxr+uPN+FQlnCa+Q6iAWBRx8iz7P+BxljEq4ZtIANT6FxMNyDDPass7jRI whz3DWUDJn1/vO3X6urx13lSH7EeULJN+1m6M9sRALmOlmBgDi6RSjr5d0Z0jCpmOvLZP4v1QqsF pYQTl+4ELMjmAflrx1DHq8b1doTU3yMPnqveQQ== ) tricare.mil. 140385 IN RRSIG ( DNSKEY 8 2 172800 20260619170031 20260615164928 43771 tricare.mil. VdfSb8qrUeYE1UgEjhls50R5PlgBdzTRXaqpTMzqHE83sLtzlR9EB72oKSku5OS/U2u2CzrZzRJU SQDM5l/Y4nZft2aD8zPblSYpe+HNbHmYXNkfDYB+puTbLQcckDG6Mfib2dxzog7zonGZ8LvkHVZA cyT/IMJirDiFzt/UdKNAdxPBzP0KLr4QBThUhon8+xBci058ub+ns6fww1zk4a17bzskHVwU9dOa wTQuFBR12IC+Ua2WYOWrUfjQusUXK8YjuZe9lTjwjiZ3QUniGCdWYGcyT7vvKHr2U9gPHNH/YMPD oHmHiEIj0KwV9D0oMxkCIZ8ry4IQv66SJEOBmw== ) tricare.mil. 140385 IN RRSIG ( DNSKEY 8 2 172800 20260619170031 20260615164928 57303 tricare.mil. IQtWGMNW+5DrserNbtT19nYE07y04NHCLq1rCr+eSqGst2HZIvApBxpcbc7neN8/Z4hO0BVdH0td 5Ll0XBZcfAVQuH7QdBv8oI+L+mKMJdNH+kLuNajX69MwuXBbHudZtGfj+stT5e1WevTMQDvsUohv Z5ymmrHL/dQbEAkaXLNssP44LfhWdsIUO+rOw08gT3awnLL/oP8su+W6KBcw+WerilizkPMY67Py GJSoHEmwIHR1wKeFZiHYOibP/qZspuy0Kht29qRbTQar9tNxnVvIIKHnjga7Ets8K623XtXfyXeG o+gZ7ogS/fcAbZnVq5wOpGqQbvO6mAN/gBMKuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for tricare.mil
	`tricare.mil. 140385 IN DNSKEY ( 256 3 8 AwEAAatyGUz5FjShaLSOlrC8A9WuQdjB6IgXHvq+VGN7cZQstXZ+y9ARwfMQQmtbBz/7gz5Pxz/L 3NMpfdAZONDaGRWj7/LgRs4GoLmzTOO5QczRAib+EvZE8qmnUO7Q1WYCgvuLHPeoh9Md5P+/TznP 8JdxHrswDKjczSQE0SjfaW4kKLyMGkCv2PJStYK2lBHxqE7V+HLxrOxvhT55GabVM7kFVPiSzjvr nqJcm2eeNIfub+Wur8dMVacy7BJG2Nt6eDHyLrqfLwnnuN60xE7lr/6GA8h19Bz6WqbAbkEvl33C 1JeMoG0xjMWfmTayepP2apeLKIk64EPQAjHxajhyF5k= ) ; keytag 10908`
	`tricare.mil. 140385 IN DNSKEY ( 256 3 8 AwEAAaKudi2L18weBBkV3nvkf4EM9HDdRPesekfCpzveX8eJbVbD7bjAjcbBeN8RrSL7zYK5f70q +j6MqQz3xAJeSTboIerBCsCpm0Ngt2d+RfSi9ZvxBzSaiKOjr9GzrsviHlCGqTO7szcytYOrmIw6 hyig9UqsgA2QSe5DWJte1WS0rXNaj5NP5HVJKeRCHmH5B0PK/QM6wFyOT+z0MI02II+Snrs0Jh8i waslOWwaiS4R9eqRU+U8GfVeZB4gX7nkzZQ1abt7Z6WFKiGZfiRgGcsfaoCPt9dvhN0G+7fKo4a8 34ZDAD83KpPSWoCtn/o2VChGCDafV2k5JfeFFLnsAqc= ) ; keytag 46108`
	`tricare.mil. 140385 IN DNSKEY ( 256 3 8 AwEAAZji5pZjKHlsbgrUS9+XOXSs3nwP0MjN5Nr4b9i1mkSxiVqcKBtB7D+rUEqvzapysEtv4HGo iQP/fguEuYAop3NzoIdr7KMy8VtW+ce+J4PLE8aJJm4yXrMjwjEv59xXHWxpQZU45vY/STdLloJV sAIOCFgnAH5KOB5+k/IPUTs13iTax1eh1In8e0F/E2obYszkhAJnX4DzgNOgwwvo1kzugE7qDEdl rpNRU2sJqh5OYoHb/5cFW5ZY5vIqiUcfEO0mIQJl+3a0WBz76AEYnur72gPZBYtugTyZtKaJZJpP IzkHVh0b4Qyzm9qB7u0IbA1H7hxe8o0+t4NSAvCXQ+k= ) ; keytag 57303`
	`tricare.mil. 140385 IN DNSKEY ( 257 3 8 AwEAAaiz7P7NwHSGfKkqzuUUxcb1lNQDqbxNi5YKLCzLBREMuShO9qCJPzaie+ItcK9xDilxmaid exsXgzILTuwhXiSGlodJVcwg+1GN5ENsx8JrmkVotcXzpK6Zs4qSNJ26kGRRuNaYUF0BFnA+QKjX /bDlmYIGqJ/yajYHCHU2e2Vd4yqwHrwLnBy+9yzNsWJUh3mYlTPzKdyIL24HTAHpDymX9v6Htpu2 r/1qPZYuz2zlsERxHI6KuYqyd3cTQt2REYKzpu85iPn4ChEmtiixoxW4TxSY3Hri7I/1crlTOh3e dDAi4rBRp7oNNHsuwdsd5/FniSZp6gY2nm+e2m8flU0= ) ; keytag 43771`
	`tricare.mil. 140385 IN DNSKEY ( 257 3 8 AwEAAdCuoVrepybUPNU9l6QhEahwps1FBIqwYreB/1McZrqtsWDxxbSzmgaEAsfwiUGYCRmejvx2 lO0kl9lehDBE+5CiKkZLQ7xa6J7h5TkNvrAzabWx7a8dO82MWWDlLZgRFB2pMwXAz74+S+cgxljP +Hxcv7bKm0Nsdnk8ZNBEMqijH9dbRvqUXa9VMRoZul6nw1/mjn+kn436XPYFHIfqZ2b12kGGo2aX cUD+Rm8ay+uhdjFRFnXNtyxlHIh+bQDk53+NnExyiNCxjQ1YickYPPg+F47WieO9Abz4oqP7RN+E dV/N+GJROPI/L3FQ8S146zXcNbnjgRHmq+pqO7FlWHM= ) ; keytag 35552`
	DNSKEY=35552/SEP is now in the chain-of-trust
	DS=35552/SHA-1 verifies DNSKEY=35552/SEP
	DS=35552/SHA-256 verifies DNSKEY=35552/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`tricare.mil. 140385 IN RRSIG ( DNSKEY 8 2 172800 20260619170031 20260615164928 35552 tricare.mil. nXEYkxGNfHg9zpmChCKUhxFmtnLCnMLREfolvID6OUU3mXsGq9PjSqgFPbjtxOpyohi0sSy6Y5n1 oKMFBnA+e+XR1Cd2PTfflbAxekBGenHnQtSDKuYgHUhbreUmEirEbaXs1/Nf8RdR2qRvAQHWKiHL FtLeuUuG47zaz1FYEVGxr+uPN+FQlnCa+Q6iAWBRx8iz7P+BxljEq4ZtIANT6FxMNyDDPass7jRI whz3DWUDJn1/vO3X6urx13lSH7EeULJN+1m6M9sRALmOlmBgDi6RSjr5d0Z0jCpmOvLZP4v1QqsF pYQTl+4ELMjmAflrx1DHq8b1doTU3yMPnqveQQ== )`
	`tricare.mil. 140385 IN RRSIG ( DNSKEY 8 2 172800 20260619170031 20260615164928 43771 tricare.mil. VdfSb8qrUeYE1UgEjhls50R5PlgBdzTRXaqpTMzqHE83sLtzlR9EB72oKSku5OS/U2u2CzrZzRJU SQDM5l/Y4nZft2aD8zPblSYpe+HNbHmYXNkfDYB+puTbLQcckDG6Mfib2dxzog7zonGZ8LvkHVZA cyT/IMJirDiFzt/UdKNAdxPBzP0KLr4QBThUhon8+xBci058ub+ns6fww1zk4a17bzskHVwU9dOa wTQuFBR12IC+Ua2WYOWrUfjQusUXK8YjuZe9lTjwjiZ3QUniGCdWYGcyT7vvKHr2U9gPHNH/YMPD oHmHiEIj0KwV9D0oMxkCIZ8ry4IQv66SJEOBmw== )`
	`tricare.mil. 140385 IN RRSIG ( DNSKEY 8 2 172800 20260619170031 20260615164928 57303 tricare.mil. IQtWGMNW+5DrserNbtT19nYE07y04NHCLq1rCr+eSqGst2HZIvApBxpcbc7neN8/Z4hO0BVdH0td 5Ll0XBZcfAVQuH7QdBv8oI+L+mKMJdNH+kLuNajX69MwuXBbHudZtGfj+stT5e1WevTMQDvsUohv Z5ymmrHL/dQbEAkaXLNssP44LfhWdsIUO+rOw08gT3awnLL/oP8su+W6KBcw+WerilizkPMY67Py GJSoHEmwIHR1wKeFZiHYOibP/qZspuy0Kht29qRbTQar9tNxnVvIIKHnjga7Ets8K623XtXfyXeG o+gZ7ogS/fcAbZnVq5wOpGqQbvO6mAN/gBMKuQ== )`
	RRSIG=35552 and DNSKEY=35552/SEP verifies the DNSKEY RRset
	RRSIG=43771 and DNSKEY=43771/SEP verifies the DNSKEY RRset
	RRSIG=57303 and DNSKEY=57303 verifies the DNSKEY RRset
	DNSKEY=10908 is now in the chain-of-trust
	DNSKEY=46108 is now in the chain-of-trust
	DNSKEY=57303 is now in the chain-of-trust
	DNSKEY=43771/SEP is now in the chain-of-trust
	Query to NS01-SEC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.209.178
	;; Response received from [214.2.209.178] 355 octets ;; HEADER SECTION ;; id = 43927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 34 IN A 214.10.40.16 tricare.mil. 34 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-SEC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-NWC-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.211.178
	;; Response received from [214.2.211.178] 440 octets ;; HEADER SECTION ;; id = 51927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 900 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 72169 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 900 IN RRSIG ( SOA 8 2 900 20260619194643 20260615184643 57303 tricare.mil. IewPOfN7QU82jxGG0qhBfOnS3vnEO58lYoGykJrC36IIOST1TfxaNzcPLBsFE/CKw8hhAhDbmOlp XRC9dqPNiHgFNO871TCjlgQzKciqzoUdSPa0bb58J1GACZl8GPibVO80m5AmKgDyj8FupsPrNkkA XJNJoz05tI5PgifMp8opRbpANKWnGZEGeaVTvBQW+lkAUi0/SiOZofRxbGX6/9pAjDlmJ0WkWlXM kmUuXjRb+DW5T5ZKbyHrdziM7Rg0Og9eqg/UcfOYCC3U0KnkOMeO7IWBOTx5+e71TEWJUyPd+CaI KKa8jFeJ0WJ9LItyRJoTdQPc5OfXoFlAVWgw/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-NCR-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.208.178
	;; Response received from [214.2.208.178] 440 octets ;; HEADER SECTION ;; id = 23737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 900 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 72169 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 900 IN RRSIG ( SOA 8 2 900 20260619194643 20260615184643 57303 tricare.mil. IewPOfN7QU82jxGG0qhBfOnS3vnEO58lYoGykJrC36IIOST1TfxaNzcPLBsFE/CKw8hhAhDbmOlp XRC9dqPNiHgFNO871TCjlgQzKciqzoUdSPa0bb58J1GACZl8GPibVO80m5AmKgDyj8FupsPrNkkA XJNJoz05tI5PgifMp8opRbpANKWnGZEGeaVTvBQW+lkAUi0/SiOZofRxbGX6/9pAjDlmJ0WkWlXM kmUuXjRb+DW5T5ZKbyHrdziM7Rg0Og9eqg/UcfOYCC3U0KnkOMeO7IWBOTx5+e71TEWJUyPd+CaI KKa8jFeJ0WJ9LItyRJoTdQPc5OfXoFlAVWgw/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-PAC-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.215.178
	;; Response received from [214.2.215.178] 440 octets ;; HEADER SECTION ;; id = 27036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 900 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 72169 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 900 IN RRSIG ( SOA 8 2 900 20260619194643 20260615184643 57303 tricare.mil. IewPOfN7QU82jxGG0qhBfOnS3vnEO58lYoGykJrC36IIOST1TfxaNzcPLBsFE/CKw8hhAhDbmOlp XRC9dqPNiHgFNO871TCjlgQzKciqzoUdSPa0bb58J1GACZl8GPibVO80m5AmKgDyj8FupsPrNkkA XJNJoz05tI5PgifMp8opRbpANKWnGZEGeaVTvBQW+lkAUi0/SiOZofRxbGX6/9pAjDlmJ0WkWlXM kmUuXjRb+DW5T5ZKbyHrdziM7Rg0Og9eqg/UcfOYCC3U0KnkOMeO7IWBOTx5+e71TEWJUyPd+CaI KKa8jFeJ0WJ9LItyRJoTdQPc5OfXoFlAVWgw/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-SEA-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.216.178
	;; Response received from [214.2.216.178] 440 octets ;; HEADER SECTION ;; id = 1751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 900 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 72169 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 900 IN RRSIG ( SOA 8 2 900 20260619194643 20260615184643 57303 tricare.mil. IewPOfN7QU82jxGG0qhBfOnS3vnEO58lYoGykJrC36IIOST1TfxaNzcPLBsFE/CKw8hhAhDbmOlp XRC9dqPNiHgFNO871TCjlgQzKciqzoUdSPa0bb58J1GACZl8GPibVO80m5AmKgDyj8FupsPrNkkA XJNJoz05tI5PgifMp8opRbpANKWnGZEGeaVTvBQW+lkAUi0/SiOZofRxbGX6/9pAjDlmJ0WkWlXM kmUuXjRb+DW5T5ZKbyHrdziM7Rg0Og9eqg/UcfOYCC3U0KnkOMeO7IWBOTx5+e71TEWJUyPd+CaI KKa8jFeJ0WJ9LItyRJoTdQPc5OfXoFlAVWgw/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-WE-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.214.178
	;; Response received from [214.2.214.178] 440 octets ;; HEADER SECTION ;; id = 22596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 899 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 72169 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 899 IN RRSIG ( SOA 8 2 900 20260619194643 20260615184643 57303 tricare.mil. IewPOfN7QU82jxGG0qhBfOnS3vnEO58lYoGykJrC36IIOST1TfxaNzcPLBsFE/CKw8hhAhDbmOlp XRC9dqPNiHgFNO871TCjlgQzKciqzoUdSPa0bb58J1GACZl8GPibVO80m5AmKgDyj8FupsPrNkkA XJNJoz05tI5PgifMp8opRbpANKWnGZEGeaVTvBQW+lkAUi0/SiOZofRxbGX6/9pAjDlmJ0WkWlXM kmUuXjRb+DW5T5ZKbyHrdziM7Rg0Og9eqg/UcfOYCC3U0KnkOMeO7IWBOTx5+e71TEWJUyPd+CaI KKa8jFeJ0WJ9LItyRJoTdQPc5OfXoFlAVWgw/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-EE-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.213.178
	;; Response received from [214.2.213.178] 440 octets ;; HEADER SECTION ;; id = 32375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 899 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 72169 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 899 IN RRSIG ( SOA 8 2 900 20260619194643 20260615184643 57303 tricare.mil. IewPOfN7QU82jxGG0qhBfOnS3vnEO58lYoGykJrC36IIOST1TfxaNzcPLBsFE/CKw8hhAhDbmOlp XRC9dqPNiHgFNO871TCjlgQzKciqzoUdSPa0bb58J1GACZl8GPibVO80m5AmKgDyj8FupsPrNkkA XJNJoz05tI5PgifMp8opRbpANKWnGZEGeaVTvBQW+lkAUi0/SiOZofRxbGX6/9pAjDlmJ0WkWlXM kmUuXjRb+DW5T5ZKbyHrdziM7Rg0Og9eqg/UcfOYCC3U0KnkOMeO7IWBOTx5+e71TEWJUyPd+CaI KKa8jFeJ0WJ9LItyRJoTdQPc5OfXoFlAVWgw/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-CC-GW.HEALTH.MIL for tricare.mil/SOA
	Received 440 bytes from 214.2.210.178
	;; Response received from [214.2.210.178] 440 octets ;; HEADER SECTION ;; id = 34150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN SOA ;; ANSWER SECTION (2 records) tricare.mil. 899 IN SOA ( ns01-nsoc.mhsi.health.mil. usn\.jbcharleston\.niwcatlanticsc\.list\.dnsad.health.mil. 72169 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) tricare.mil. 899 IN RRSIG ( SOA 8 2 900 20260619194643 20260615184643 57303 tricare.mil. IewPOfN7QU82jxGG0qhBfOnS3vnEO58lYoGykJrC36IIOST1TfxaNzcPLBsFE/CKw8hhAhDbmOlp XRC9dqPNiHgFNO871TCjlgQzKciqzoUdSPa0bb58J1GACZl8GPibVO80m5AmKgDyj8FupsPrNkkA XJNJoz05tI5PgifMp8opRbpANKWnGZEGeaVTvBQW+lkAUi0/SiOZofRxbGX6/9pAjDlmJ0WkWlXM kmUuXjRb+DW5T5ZKbyHrdziM7Rg0Og9eqg/UcfOYCC3U0KnkOMeO7IWBOTx5+e71TEWJUyPd+CaI KKa8jFeJ0WJ9LItyRJoTdQPc5OfXoFlAVWgw/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to NS01-SEC-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 34 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

tricare.mil

	Query to NS01-EE-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.213.178
	;; Response received from [214.2.213.178] 355 octets ;; HEADER SECTION ;; id = 60282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 5 IN A 214.10.40.16 tricare.mil. 5 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-EE-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-EE-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 5 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

tricare.mil

	Query to NS01-NWC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.211.178
	;; Response received from [214.2.211.178] 355 octets ;; HEADER SECTION ;; id = 17701 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 5 IN A 214.10.40.16 tricare.mil. 5 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-NWC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-NWC-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 5 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

tricare.mil

	Query to NS01-CC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.210.178
	;; Response received from [214.2.210.178] 355 octets ;; HEADER SECTION ;; id = 57357 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 5 IN A 214.10.40.16 tricare.mil. 5 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-CC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-CC-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 5 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

tricare.mil

	Query to NS01-PAC-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.215.178
	;; Response received from [214.2.215.178] 355 octets ;; HEADER SECTION ;; id = 3609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 29 IN A 214.10.40.16 tricare.mil. 29 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-PAC-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-PAC-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 29 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

tricare.mil

	Query to NS01-NCR-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.208.178
	;; Response received from [214.2.208.178] 355 octets ;; HEADER SECTION ;; id = 64370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 26 IN A 214.10.40.16 tricare.mil. 26 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-NCR-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-NCR-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 26 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

tricare.mil

	Query to NS01-SEA-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.216.178
	;; Response received from [214.2.216.178] 355 octets ;; HEADER SECTION ;; id = 36542 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 4 IN A 214.10.40.16 tricare.mil. 4 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-SEA-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-SEA-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 4 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

tricare.mil

	Query to NS01-WE-GW.HEALTH.MIL for tricare.mil/A
	Received 355 bytes from 214.2.214.178
	;; Response received from [214.2.214.178] 355 octets ;; HEADER SECTION ;; id = 40090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tricare.mil. IN A ;; ANSWER SECTION (2 records) tricare.mil. 28 IN A 214.10.40.16 tricare.mil. 28 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NS01-WE-GW.HEALTH.MIL is authoritative for tricare.mil
	Found RRSIG signed by tricare.mil zone
	Query to NS01-WE-GW.HEALTH.MIL for tricare.mil/A
	tricare.mil A RR has value 214.10.40.16
	Found 1 RRSIGs over A RRset
	`tricare.mil. 28 IN RRSIG ( A 8 2 60 20260619154245 20260615151635 57303 tricare.mil. AEySW7UFmXzukneG47TZB1FgeKBY7f8KIdYsAA7Wd7iXAjZvyKCGmy6rU0Xuhc+0tFfxTHYd4E/7 iy7THEJL1K77+vAWkPFElvDSWajGdb6lZeZJEhjyNVoA+BuvXHXGRY1JBOj+KdFWcbCuROrCrxpW OV7rRmG/Nkcp8eGPiIH+rqU+4KGz4rkn7e6b16XTx0bd1TI9FURCY5hrpFH7RZLQGfkQggXM0gVh LMt8YHw2Vgf8pE8uXPG2x9fVPFiTaNnVjEODWVF8ZlSuUfHP6lQNczgTHNFhFg6WvKLZblI53Xt/ hrXWNJT/FyCJcmvRxV5EEy1haMltLKpPcKoUoA== )`
	RRSIG=57303 and DNSKEY=57303 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tricare.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: