DNSSEC Debugger - www.af.mil

Domain Name:

Time: 2026-02-15 07:29:47 UTC

Analyzing DNSSEC problems for www.af.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 46127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to e.root-servers.net for www.af.mil/A
	Received 757 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 757 octets ;; HEADER SECTION ;; id = 30372 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . U1shM+/QBeR+nONEmSBIoeUejatIUpPc26gyD+Dw2pj6yYG/MFx/HdrULruH/9Bottarf8wtLSZx 9pOLo9fC8k/QxTYU/zmP6Fa/IA0JrOXB/oiY5I/uBfqBwjeNZtFDjwWX33ANlICCNUgwMRsEWX+m 8Uoru8XY90yDT28wLwgz70dGVlyovEC0SGmGfKkiIrKfJ2yF6TVmQvS7i4iMTN0CM6i9QHM49vd1 6GISx+Rs9ACE1iBEcNVwgj4iXmAZ58i/sTGKU2Y42hiH6fGBif7KOoRbndOuIHt45fBrk3L5ytLk b6wfClG+c+RTxyGslohTjA3Z6M6WnfRQrpGaEw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for mil/DNSKEY
	Received 753 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 753 octets ;; HEADER SECTION ;; id = 51325 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . U1shM+/QBeR+nONEmSBIoeUejatIUpPc26gyD+Dw2pj6yYG/MFx/HdrULruH/9Bottarf8wtLSZx 9pOLo9fC8k/QxTYU/zmP6Fa/IA0JrOXB/oiY5I/uBfqBwjeNZtFDjwWX33ANlICCNUgwMRsEWX+m 8Uoru8XY90yDT28wLwgz70dGVlyovEC0SGmGfKkiIrKfJ2yF6TVmQvS7i4iMTN0CM6i9QHM49vd1 6GISx+Rs9ACE1iBEcNVwgj4iXmAZ58i/sTGKU2Y42hiH6fGBif7KOoRbndOuIHt45fBrk3L5ytLk b6wfClG+c+RTxyGslohTjA3Z6M6WnfRQrpGaEw== ) ;; ADDITIONAL SECTION (13 records) pac2.nipr.mil. 172800 IN A 199.252.155.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 con2.nipr.mil. 172800 IN A 199.252.162.234 con1.nipr.mil. 172800 IN A 199.252.157.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to i.root-servers.net for mil/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 26431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . U1shM+/QBeR+nONEmSBIoeUejatIUpPc26gyD+Dw2pj6yYG/MFx/HdrULruH/9Bottarf8wtLSZx 9pOLo9fC8k/QxTYU/zmP6Fa/IA0JrOXB/oiY5I/uBfqBwjeNZtFDjwWX33ANlICCNUgwMRsEWX+m 8Uoru8XY90yDT28wLwgz70dGVlyovEC0SGmGfKkiIrKfJ2yF6TVmQvS7i4iMTN0CM6i9QHM49vd1 6GISx+Rs9ACE1iBEcNVwgj4iXmAZ58i/sTGKU2Y42hiH6fGBif7KOoRbndOuIHt45fBrk3L5ytLk b6wfClG+c+RTxyGslohTjA3Z6M6WnfRQrpGaEw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . U1shM+/QBeR+nONEmSBIoeUejatIUpPc26gyD+Dw2pj6yYG/MFx/HdrULruH/9Bottarf8wtLSZx 9pOLo9fC8k/QxTYU/zmP6Fa/IA0JrOXB/oiY5I/uBfqBwjeNZtFDjwWX33ANlICCNUgwMRsEWX+m 8Uoru8XY90yDT28wLwgz70dGVlyovEC0SGmGfKkiIrKfJ2yF6TVmQvS7i4iMTN0CM6i9QHM49vd1 6GISx+Rs9ACE1iBEcNVwgj4iXmAZ58i/sTGKU2Y42hiH6fGBif7KOoRbndOuIHt45fBrk3L5ytLk b6wfClG+c+RTxyGslohTjA3Z6M6WnfRQrpGaEw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to eur2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 1061 octets ;; HEADER SECTION ;; id = 7237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZzeiX/rb+M/fCfWbanEAjZFBjZa2h2JzOIWqaqc8YUc6WQDlH/VGdG6u4U+jUfuWJGNTdzD IJiUSIuwsI4wT1/iolr7h63lmRu37rLvcCUXX8NYqJUjtOwuts4XVFaQHGNc/FpKr/QPXwLHmox8 VhRC5ZBNSV9NDY3Pdy7NRx6z ) ; keytag 35769 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220235833 20260213235833 7870 mil. cxmQp5LgcGhUdFrdRJfzZVb2iQUNA5ogFnHpNe2RhjCrt7Omb+ZW4MDrxR4LmuS+3SyS9/rulvYu jtyfvJXT9flgG+kSWi/7BCZNvCBNu54G4p3oc8A+QHWI00ujfEQHsSrMBsYwFZlcXQbUyCSpHJJ0 uHCxoRTkyvc4sstyydk= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220235833 20260213235833 45019 mil. ZExz1UTym4TN3GH/igjZZ8GrhYzgN98EuIOBIGzmExb1YvZHYEZX8g9V9y/FYik1ZAuq4X+GFgug UJEad+evtuPTT3u+rHqsQiWcfJ2TeIPdLR0F7VKQ73dMzBXki+rJVOQ5aAkAyzrbCgZjYL5qnHv3 uBnZXSmJPXHDahw2Ori8ow0CheZvLR69uS2TE1/HFbXhgOsB//1YruRx+vAdfRN+7h+vS0Qe0u2I 4ETjzVQSB0igT+U9DZz0AfD5kdmuP/LQzxXmEoxYkuN2LbitusQ3jwdRpI1i/chpvq6cbXpyrf1W mU0uU4dUi3bdjY2/DdhIBlGCgXDPm0djJFtEfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAdRr5bJTlPmS7SVyEWu9wKzxLeolvJC3pYAhcrTLkDu9iEskrkjEn2fELyKoEa+ugcq/WQzP Is4CpNZOJcifmhW3p5rO1Cle0qKN9p0UtMVBw7e28UHrEc4Cq8Oga51oaKN+noRdMwshrifo0lVx mrCMotc8Sr3/V3Ko4xbrwmYZ ) ; keytag 7870`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAZzeiX/rb+M/fCfWbanEAjZFBjZa2h2JzOIWqaqc8YUc6WQDlH/VGdG6u4U+jUfuWJGNTdzD IJiUSIuwsI4wT1/iolr7h63lmRu37rLvcCUXX8NYqJUjtOwuts4XVFaQHGNc/FpKr/QPXwLHmox8 VhRC5ZBNSV9NDY3Pdy7NRx6z ) ; keytag 35769`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220235833 20260213235833 7870 mil. cxmQp5LgcGhUdFrdRJfzZVb2iQUNA5ogFnHpNe2RhjCrt7Omb+ZW4MDrxR4LmuS+3SyS9/rulvYu jtyfvJXT9flgG+kSWi/7BCZNvCBNu54G4p3oc8A+QHWI00ujfEQHsSrMBsYwFZlcXQbUyCSpHJJ0 uHCxoRTkyvc4sstyydk= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260220235833 20260213235833 45019 mil. ZExz1UTym4TN3GH/igjZZ8GrhYzgN98EuIOBIGzmExb1YvZHYEZX8g9V9y/FYik1ZAuq4X+GFgug UJEad+evtuPTT3u+rHqsQiWcfJ2TeIPdLR0F7VKQ73dMzBXki+rJVOQ5aAkAyzrbCgZjYL5qnHv3 uBnZXSmJPXHDahw2Ori8ow0CheZvLR69uS2TE1/HFbXhgOsB//1YruRx+vAdfRN+7h+vS0Qe0u2I 4ETjzVQSB0igT+U9DZz0AfD5kdmuP/LQzxXmEoxYkuN2LbitusQ3jwdRpI1i/chpvq6cbXpyrf1W mU0uU4dUi3bdjY2/DdhIBlGCgXDPm0djJFtEfw== )`
	RRSIG=7870 and DNSKEY=7870 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=7870 is now in the chain-of-trust
	DNSKEY=35769 is now in the chain-of-trust
	Query to eur2.nipr.mil for www.af.mil/A
	Received 554 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 554 octets ;; HEADER SECTION ;; id = 26240 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260220235833 20260213235833 7870 mil. rAAGntiz4D1iHhd7937hTYEZ171yMHW+GFPX3TrmJ+xyPsr6TG2pJnrVWCSx7WsXHHndFDVPHquN wKeFMTaI+X1Bor20JBcoR0ORk8+GtxqH3W9aldFOAZlbnf1mQUbYTHDdkeLX3jeHR9CLlf3yUpOl B8ssQduzqPRcn1V41TI= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Query to con1.nipr.mil for af.mil/DNSKEY
	Received 550 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 550 octets ;; HEADER SECTION ;; id = 21268 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260220235833 20260213235833 7870 mil. rAAGntiz4D1iHhd7937hTYEZ171yMHW+GFPX3TrmJ+xyPsr6TG2pJnrVWCSx7WsXHHndFDVPHquN wKeFMTaI+X1Bor20JBcoR0ORk8+GtxqH3W9aldFOAZlbnf1mQUbYTHDdkeLX3jeHR9CLlf3yUpOl B8ssQduzqPRcn1V41TI= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Found child zone af.mil

af.mil

	Checking DS between mil and af.mil
	Query to con1.nipr.mil for af.mil/DS
	Received 288 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 288 octets ;; HEADER SECTION ;; id = 12988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DS ;; ANSWER SECTION (3 records) AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260220235833 20260213235833 7870 mil. rAAGntiz4D1iHhd7937hTYEZ171yMHW+GFPX3TrmJ+xyPsr6TG2pJnrVWCSx7WsXHHndFDVPHquN wKeFMTaI+X1Bor20JBcoR0ORk8+GtxqH3W9aldFOAZlbnf1mQUbYTHDdkeLX3jeHR9CLlf3yUpOl B8ssQduzqPRcn1V41TI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for af.mil in the mil zone
	DS=38206/SHA-1 uses a deprecated digest algorithm
	DS=38206/SHA-256 has algorithm RSASHA256
	DS=38206/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260220235833 20260213235833 7870 mil. rAAGntiz4D1iHhd7937hTYEZ171yMHW+GFPX3TrmJ+xyPsr6TG2pJnrVWCSx7WsXHHndFDVPHquN wKeFMTaI+X1Bor20JBcoR0ORk8+GtxqH3W9aldFOAZlbnf1mQUbYTHDdkeLX3jeHR9CLlf3yUpOl B8ssQduzqPRcn1V41TI= )`
	RRSIG=7870 and DNSKEY=7870 verifies the DS RRset
	DS=38206/SHA-256 is now in the chain-of-trust
	`AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 )`
	`AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d`
	Query to YOKOTA-NS10.AFNOC.AF.MIL for af.mil/DNSKEY
	Received 1451 bytes from 132.3.9.10
	;; Response received from [132.3.9.10] 1451 octets ;; HEADER SECTION ;; id = 50410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (5 records) af.mil. 172454 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495 af.mil. 172454 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258 af.mil. 172454 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206 af.mil. 172454 IN RRSIG ( DNSKEY 8 2 172800 20260219062722 20260215052842 495 af.mil. tmpBzJombrTKYuLOG3H4ZUmeqqsh8iEA4eq28eNK2a9qCYwS5f7RxOGXa1H/wbRtvAuf78ywtZDI mwMHH5PUe1KKHR/mb+nIruRAEJO3ReaPFSb20tmSgIwkkutK8XiH9H+eNlOKk8UaED+VahGKn266 Cbd811VBAC5hl96wmupLQuOxMnPHsRX5hw11YivSoWwN6KkDjFqvCV7+ot6vjnLpTS2mUtvT5e8s sVegHAdug0Ro47L0YZGWjG+L253RucZhPLMo74/dwRznmgEMQR0Jxbszfv50S7FO4pxsWMWnYkGB 41QzCQeUgfMoZKiNHHeMa+6liHidln2xo2mL3w== ) af.mil. 172454 IN RRSIG ( DNSKEY 8 2 172800 20260219062722 20260215052842 38206 af.mil. wHwyU4sujYJVKY+HOKtR6Gtp5ybC6DFDYWDBRh0jT9vhUlZBcjL5GVXBBtgGcGXOUctWi46kHxSI Fqnz8OuY3AgVUsEaHnmNwiueX2cmGzkAM81+5JWJ6hFCupcVEs/iuVq0Q4ej3rbv5qVf9OO5HdUQ /db9xfhFJMmiKm/jQRywQ/QIltYMTj6hNJha85Oyt7+/1Pjb2/HAe2sjGpOWd5snl7altwxXLkR1 rsy3ZQE4DmmQ/F3ZYjRvdVj/m4usPkkB9oBQSslQmjt0LFXNHPr3qAW3rvJFnb9VgVNW+uPi1Por aUGdbOgWXdz3H7XZQeD4n2/oXm/FjhlGaa+TYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for af.mil
	`af.mil. 172454 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495`
	`af.mil. 172454 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258`
	`af.mil. 172454 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206`
	DNSKEY=38206/SEP is now in the chain-of-trust
	DS=38206/SHA-256 verifies DNSKEY=38206/SEP
	DS=38206/SHA-1 verifies DNSKEY=38206/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`af.mil. 172454 IN RRSIG ( DNSKEY 8 2 172800 20260219062722 20260215052842 495 af.mil. tmpBzJombrTKYuLOG3H4ZUmeqqsh8iEA4eq28eNK2a9qCYwS5f7RxOGXa1H/wbRtvAuf78ywtZDI mwMHH5PUe1KKHR/mb+nIruRAEJO3ReaPFSb20tmSgIwkkutK8XiH9H+eNlOKk8UaED+VahGKn266 Cbd811VBAC5hl96wmupLQuOxMnPHsRX5hw11YivSoWwN6KkDjFqvCV7+ot6vjnLpTS2mUtvT5e8s sVegHAdug0Ro47L0YZGWjG+L253RucZhPLMo74/dwRznmgEMQR0Jxbszfv50S7FO4pxsWMWnYkGB 41QzCQeUgfMoZKiNHHeMa+6liHidln2xo2mL3w== )`
	`af.mil. 172454 IN RRSIG ( DNSKEY 8 2 172800 20260219062722 20260215052842 38206 af.mil. wHwyU4sujYJVKY+HOKtR6Gtp5ybC6DFDYWDBRh0jT9vhUlZBcjL5GVXBBtgGcGXOUctWi46kHxSI Fqnz8OuY3AgVUsEaHnmNwiueX2cmGzkAM81+5JWJ6hFCupcVEs/iuVq0Q4ej3rbv5qVf9OO5HdUQ /db9xfhFJMmiKm/jQRywQ/QIltYMTj6hNJha85Oyt7+/1Pjb2/HAe2sjGpOWd5snl7altwxXLkR1 rsy3ZQE4DmmQ/F3ZYjRvdVj/m4usPkkB9oBQSslQmjt0LFXNHPr3qAW3rvJFnb9VgVNW+uPi1Por aUGdbOgWXdz3H7XZQeD4n2/oXm/FjhlGaa+TYg== )`
	RRSIG=495 and DNSKEY=495 verifies the DNSKEY RRset
	RRSIG=38206 and DNSKEY=38206/SEP verifies the DNSKEY RRset
	DNSKEY=495 is now in the chain-of-trust
	DNSKEY=15258 is now in the chain-of-trust
	Query to OSAN-NS10.AFNOC.AF.MIL for www.af.mil/A
	Received 374 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 374 octets ;; HEADER SECTION ;; id = 10022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (2 records) www.af.mil. 253 IN CNAME www.afpw.af.mil.edgekey.net. www.af.mil. 253 IN RRSIG ( CNAME 8 3 300 20260219013732 20260215012110 495 af.mil. mhdZMKqHbMxSoknWYyNB8Nm5Fz9jPpHCGAzZ4PHZMFGaftIzvf4lZagSYF7284srpT70ZuQZ7M0e HluR8xLtZWPTCONXTcFjWp/UFJHqe64tJBo1BpyRZ+bBk3KwwNzn8VtqiKqpCOSkllfnqp7IIVSi XATpN7iXs9Jx8t+jhkAqV0DQ2lc1pgTyV3fPPT45i2uaUTh1wcpyx8cxY5eWnWLAczysie8SLm5O ybo2S82Yrbh2tVSHwIHXPmwojrvoYYo4zIsVVMEDRa5boFeYGeD0pSMBt2ZJjrJCkYPmKcr6RqBj 1zZoijrO1xiLMrcdE7+dAOPQEMMLNTqY/Z8kbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	OSAN-NS10.AFNOC.AF.MIL is authoritative for www.af.mil
	Query to OSAN-NS10.AFNOC.AF.MIL for www.af.mil/DNSKEY
	Received 374 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 374 octets ;; HEADER SECTION ;; id = 9593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN DNSKEY ;; ANSWER SECTION (2 records) www.af.mil. 252 IN CNAME www.afpw.af.mil.edgekey.net. www.af.mil. 252 IN RRSIG ( CNAME 8 3 300 20260219013732 20260215012110 495 af.mil. mhdZMKqHbMxSoknWYyNB8Nm5Fz9jPpHCGAzZ4PHZMFGaftIzvf4lZagSYF7284srpT70ZuQZ7M0e HluR8xLtZWPTCONXTcFjWp/UFJHqe64tJBo1BpyRZ+bBk3KwwNzn8VtqiKqpCOSkllfnqp7IIVSi XATpN7iXs9Jx8t+jhkAqV0DQ2lc1pgTyV3fPPT45i2uaUTh1wcpyx8cxY5eWnWLAczysie8SLm5O ybo2S82Yrbh2tVSHwIHXPmwojrvoYYo4zIsVVMEDRa5boFeYGeD0pSMBt2ZJjrJCkYPmKcr6RqBj 1zZoijrO1xiLMrcdE7+dAOPQEMMLNTqY/Z8kbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by af.mil zone
	www.af.mil is a CNAME to www.afpw.af.mil.edgekey.net
	Found 1 RRSIGs over CNAME RRset
	`www.af.mil. 253 IN RRSIG ( CNAME 8 3 300 20260219013732 20260215012110 495 af.mil. mhdZMKqHbMxSoknWYyNB8Nm5Fz9jPpHCGAzZ4PHZMFGaftIzvf4lZagSYF7284srpT70ZuQZ7M0e HluR8xLtZWPTCONXTcFjWp/UFJHqe64tJBo1BpyRZ+bBk3KwwNzn8VtqiKqpCOSkllfnqp7IIVSi XATpN7iXs9Jx8t+jhkAqV0DQ2lc1pgTyV3fPPT45i2uaUTh1wcpyx8cxY5eWnWLAczysie8SLm5O ybo2S82Yrbh2tVSHwIHXPmwojrvoYYo4zIsVVMEDRa5boFeYGeD0pSMBt2ZJjrJCkYPmKcr6RqBj 1zZoijrO1xiLMrcdE7+dAOPQEMMLNTqY/Z8kbA== )`
	RRSIG=495 and DNSKEY=495 verifies the CNAME RRset

	Query to a.root-servers.net for www.afpw.af.mil.edgekey.net/A
	Received 1184 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1184 octets ;; HEADER SECTION ;; id = 2139 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . QPUVNhlKmG/XMbK47tONa9PbdsD09f6ZBfMwkbV28Ijf4ewkYLauA9HKgTQZFHb/X5A4EBA1FGxR 0MnxQjN0oXJ+Y6eQT0sH+ZjX84mPcu0TeJ0pwQ9TNtagQBqBeHNgo9TZWVBbJ0RY0BW/I/dxxXZY cPsOT8XawbBZ1jgB+k5f05INv7/neN4wQliyw2OMatA7/vbzYaCwaePWQ5ptMUPCwyUSgsEP8wjF 9+LOggzwFY3SomdsHv2Hmn0+Hak+yHQQm6WI26Vd16WBXNGWxjzYC3i1clNCkpLr44O+hdlNN3tk T7u1L4n/gMmZpDWW2wMBnoaKzOY6IYIwns1SYg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for net/DNSKEY
	Received 1160 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1160 octets ;; HEADER SECTION ;; id = 40838 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . QPUVNhlKmG/XMbK47tONa9PbdsD09f6ZBfMwkbV28Ijf4ewkYLauA9HKgTQZFHb/X5A4EBA1FGxR 0MnxQjN0oXJ+Y6eQT0sH+ZjX84mPcu0TeJ0pwQ9TNtagQBqBeHNgo9TZWVBbJ0RY0BW/I/dxxXZY cPsOT8XawbBZ1jgB+k5f05INv7/neN4wQliyw2OMatA7/vbzYaCwaePWQ5ptMUPCwyUSgsEP8wjF 9+LOggzwFY3SomdsHv2Hmn0+Hak+yHQQm6WI26Vd16WBXNGWxjzYC3i1clNCkpLr44O+hdlNN3tk T7u1L4n/gMmZpDWW2wMBnoaKzOY6IYIwns1SYg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to e.root-servers.net for net/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 58750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . QPUVNhlKmG/XMbK47tONa9PbdsD09f6ZBfMwkbV28Ijf4ewkYLauA9HKgTQZFHb/X5A4EBA1FGxR 0MnxQjN0oXJ+Y6eQT0sH+ZjX84mPcu0TeJ0pwQ9TNtagQBqBeHNgo9TZWVBbJ0RY0BW/I/dxxXZY cPsOT8XawbBZ1jgB+k5f05INv7/neN4wQliyw2OMatA7/vbzYaCwaePWQ5ptMUPCwyUSgsEP8wjF 9+LOggzwFY3SomdsHv2Hmn0+Hak+yHQQm6WI26Vd16WBXNGWxjzYC3i1clNCkpLr44O+hdlNN3tk T7u1L4n/gMmZpDWW2wMBnoaKzOY6IYIwns1SYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . QPUVNhlKmG/XMbK47tONa9PbdsD09f6ZBfMwkbV28Ijf4ewkYLauA9HKgTQZFHb/X5A4EBA1FGxR 0MnxQjN0oXJ+Y6eQT0sH+ZjX84mPcu0TeJ0pwQ9TNtagQBqBeHNgo9TZWVBbJ0RY0BW/I/dxxXZY cPsOT8XawbBZ1jgB+k5f05INv7/neN4wQliyw2OMatA7/vbzYaCwaePWQ5ptMUPCwyUSgsEP8wjF 9+LOggzwFY3SomdsHv2Hmn0+Hak+yHQQm6WI26Vd16WBXNGWxjzYC3i1clNCkpLr44O+hdlNN3tk T7u1L4n/gMmZpDWW2wMBnoaKzOY6IYIwns1SYg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to l.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 291 octets ;; HEADER SECTION ;; id = 48774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260221151035 20260206150535 37331 net. /TYdUlJseQZ86MIrjJUNBQ0KCybgm3ZcxAyZt4qfDn+OrxzHFODAeag7r0hs/hXndnuh8vkQZDZm En91g5fc4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260221151035 20260206150535 37331 net. /TYdUlJseQZ86MIrjJUNBQ0KCybgm3ZcxAyZt4qfDn+OrxzHFODAeag7r0hs/hXndnuh8vkQZDZm En91g5fc4A== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=44109 is now in the chain-of-trust
	Query to h.gtld-servers.net for www.afpw.af.mil.edgekey.net/A
	Received 935 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 935 octets ;; HEADER SECTION ;; id = 50472 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260219033138 20260212022138 44109 net. NoxUNdOWHEMI6kEgvuA0nCzV2dIywbctfvucDlEt3EW9w4irm8RfK4lGimAIYCVPSWjMvtfm2ANG VRlhQQKykw== ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN NSEC3 ( 1 1 0 - 2a0dd0dpd52r82hiivi678uqlmkqu1nf NS DS RRSIG ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN RRSIG ( NSEC3 13 2 900 20260221032737 20260214021737 44109 net. rREYT1418iKJmBnYpmVGIjqKoSOvaO+nH910cZy882G4NxW5qwMqTqWjtCz5d802CGQHwEu67B0S m1gY5N/dMg== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Query to b.gtld-servers.net for edgekey.net/DNSKEY
	Received 919 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 919 octets ;; HEADER SECTION ;; id = 44406 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260219033138 20260212022138 44109 net. NoxUNdOWHEMI6kEgvuA0nCzV2dIywbctfvucDlEt3EW9w4irm8RfK4lGimAIYCVPSWjMvtfm2ANG VRlhQQKykw== ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN NSEC3 ( 1 1 0 - 2a0dd0dpd52r82hiivi678uqlmkqu1nf NS DS RRSIG ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN RRSIG ( NSEC3 13 2 900 20260221032737 20260214021737 44109 net. rREYT1418iKJmBnYpmVGIjqKoSOvaO+nH910cZy882G4NxW5qwMqTqWjtCz5d802CGQHwEu67B0S m1gY5N/dMg== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Found child zone edgekey.net

edgekey.net

	Checking DS between net and edgekey.net
	Query to d.gtld-servers.net for edgekey.net/DS
	Received 569 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 569 octets ;; HEADER SECTION ;; id = 56140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260219033138 20260212022138 44109 net. NoxUNdOWHEMI6kEgvuA0nCzV2dIywbctfvucDlEt3EW9w4irm8RfK4lGimAIYCVPSWjMvtfm2ANG VRlhQQKykw== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1771140565 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20260222072925 20260215061925 44109 net. /mIOflO2DHP5f3+2oxjvuyRYDXawwikjqnfvrTm251UhOAU3An4d2qja5X10Jl/WbZfru9XasIsu kE3PBmiQdQ== ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN NSEC3 ( 1 1 0 - 2a0dd0dpd52r82hiivi678uqlmkqu1nf NS DS RRSIG ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN RRSIG ( NSEC3 13 2 900 20260221032737 20260214021737 44109 net. rREYT1418iKJmBnYpmVGIjqKoSOvaO+nH910cZy882G4NxW5qwMqTqWjtCz5d802CGQHwEu67B0S m1gY5N/dMg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for edgekey.net in the net zone
	Query to a6-65.akam.net for edgekey.net/DNSKEY
	Received 103 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 103 octets ;; HEADER SECTION ;; id = 27902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579437362 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a7-64.akam.net for www.afpw.af.mil.edgekey.net/A
	Received 93 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 93 octets ;; HEADER SECTION ;; id = 44839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (1 record) www.afpw.af.mil.edgekey.net. 300 IN CNAME e11218.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-64.akam.net is authoritative for www.afpw.af.mil.edgekey.net
	Query to a12-65.akam.net for mil.edgekey.net/DNSKEY
	Received 107 bytes from 184.26.160.65
	;; Response received from [184.26.160.65] 107 octets ;; HEADER SECTION ;; id = 49106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579437362 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-66.akam.net for af.mil.edgekey.net/DNSKEY
	Received 110 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 110 octets ;; HEADER SECTION ;; id = 36305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579437362 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7-64.akam.net for afpw.af.mil.edgekey.net/DNSKEY
	Received 115 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 115 octets ;; HEADER SECTION ;; id = 27764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afpw.af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579437362 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a28-65.akam.net for www.afpw.af.mil.edgekey.net/DNSKEY
	Received 93 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 93 octets ;; HEADER SECTION ;; id = 10765 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (1 record) www.afpw.af.mil.edgekey.net. 300 IN CNAME e11218.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.afpw.af.mil.edgekey.net is a CNAME to e11218.dscb.akamaiedge.net
	No RRSIGs found

net

	Query to f.gtld-servers.net for e11218.dscb.akamaiedge.net/A
	Received 731 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 731 octets ;; HEADER SECTION ;; id = 34453 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260219033138 20260212022138 44109 net. NoxUNdOWHEMI6kEgvuA0nCzV2dIywbctfvucDlEt3EW9w4irm8RfK4lGimAIYCVPSWjMvtfm2ANG VRlhQQKykw== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN NSEC3 ( 1 1 0 - gcrtlvurj6lelqbdj72r6hlm15kttvsi NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN RRSIG ( NSEC3 13 2 900 20260222032534 20260215021534 44109 net. hYeIyEbj+AhlRgYsXSRmwzm48EzoaQV7W805/VMBpQ4vKcNAXiolpEMEV6vy9zKn/Sfj1X5BtthC IvNwk4k8bA== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Query to k.gtld-servers.net for akamaiedge.net/DNSKEY
	Received 719 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 719 octets ;; HEADER SECTION ;; id = 62499 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260219033138 20260212022138 44109 net. NoxUNdOWHEMI6kEgvuA0nCzV2dIywbctfvucDlEt3EW9w4irm8RfK4lGimAIYCVPSWjMvtfm2ANG VRlhQQKykw== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN NSEC3 ( 1 1 0 - gcrtlvurj6lelqbdj72r6hlm15kttvsi NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN RRSIG ( NSEC3 13 2 900 20260222032534 20260215021534 44109 net. hYeIyEbj+AhlRgYsXSRmwzm48EzoaQV7W805/VMBpQ4vKcNAXiolpEMEV6vy9zKn/Sfj1X5BtthC IvNwk4k8bA== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Found child zone akamaiedge.net

akamaiedge.net

	Checking DS between net and akamaiedge.net
	Query to m.gtld-servers.net for akamaiedge.net/DS
	Received 572 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 572 octets ;; HEADER SECTION ;; id = 27392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260219033138 20260212022138 44109 net. NoxUNdOWHEMI6kEgvuA0nCzV2dIywbctfvucDlEt3EW9w4irm8RfK4lGimAIYCVPSWjMvtfm2ANG VRlhQQKykw== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1771140575 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20260222072935 20260215061935 44109 net. ehNwTnH9wMHg3j9+T6J1Hin2XelI/0Uk8nGcHsxj4mk7QyyPsDu3RZTAmDQSL10hNVSX8nTcBBN+ gyBQa7UFUA== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN NSEC3 ( 1 1 0 - gcrtlvurj6lelqbdj72r6hlm15kttvsi NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN RRSIG ( NSEC3 13 2 900 20260222032534 20260215021534 44109 net. hYeIyEbj+AhlRgYsXSRmwzm48EzoaQV7W805/VMBpQ4vKcNAXiolpEMEV6vy9zKn/Sfj1X5BtthC IvNwk4k8bA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for akamaiedge.net in the net zone
	Query to ns3-194.akamaiedge.net for akamaiedge.net/DNSKEY
	Received 109 bytes from 23.61.199.194
	;; Response received from [23.61.199.194] 109 octets ;; HEADER SECTION ;; id = 2601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns3-194.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 379 bytes from 23.61.199.194
	;; Response received from [23.61.199.194] 379 octets ;; HEADER SECTION ;; id = 29327 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n6dscb.akamaiedge.net. 4000 IN A 184.24.96.168 n3dscb.akamaiedge.net. 4000 IN A 23.40.19.183 n5dscb.akamaiedge.net. 4000 IN A 23.40.19.208 n1dscb.akamaiedge.net. 4000 IN A 23.40.19.195 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n7dscb.akamaiedge.net. 4000 IN A 23.198.215.152 n2dscb.akamaiedge.net. 4000 IN A 23.40.19.174 n4dscb.akamaiedge.net. 4000 IN A 23.40.19.177 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 ;; { "EDNS-VERSION": 0 }
	Query to a12-192.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 372 bytes from 184.26.160.192
	;; Response received from [184.26.160.192] 372 octets ;; HEADER SECTION ;; id = 62341 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n1dscb.akamaiedge.net. 4000 IN A 23.40.19.195 n5dscb.akamaiedge.net. 4000 IN A 23.40.19.208 n2dscb.akamaiedge.net. 4000 IN A 23.40.19.174 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n4dscb.akamaiedge.net. 4000 IN A 23.40.19.177 n7dscb.akamaiedge.net. 4000 IN A 23.198.215.152 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n6dscb.akamaiedge.net. 4000 IN A 184.24.96.168 n3dscb.akamaiedge.net. 4000 IN A 23.40.19.183 ;; { "EDNS-VERSION": 0 }
	Found child zone dscb.akamaiedge.net

dscb.akamaiedge.net

	Checking DS between akamaiedge.net and dscb.akamaiedge.net
	Query to ns3-194.akamaiedge.net for dscb.akamaiedge.net/DS
	Received 114 bytes from 23.61.199.194
	;; Response received from [23.61.199.194] 114 octets ;; HEADER SECTION ;; id = 2912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for dscb.akamaiedge.net in the akamaiedge.net zone
	Query to n3dscb.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 112 bytes from 23.40.19.173
	;; Response received from [23.40.19.173] 112 octets ;; HEADER SECTION ;; id = 17269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 71 octets ;; HEADER SECTION ;; id = 19240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n0dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.44.130.72
	;; Response received from [23.44.130.72] 119 octets ;; HEADER SECTION ;; id = 4437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 184.24.96.190
	;; Response received from [184.24.96.190] 112 octets ;; HEADER SECTION ;; id = 8585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.44.130.72
	;; Response received from [23.44.130.72] 112 octets ;; HEADER SECTION ;; id = 53938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 184.24.96.166
	;; Response received from [184.24.96.166] 112 octets ;; HEADER SECTION ;; id = 35662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 184.24.96.188
	;; Response received from [184.24.96.188] 112 octets ;; HEADER SECTION ;; id = 30280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 184.24.96.205
	;; Response received from [184.24.96.205] 112 octets ;; HEADER SECTION ;; id = 59433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.40.19.173
	;; Response received from [23.40.19.173] 112 octets ;; HEADER SECTION ;; id = 19208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.200.89.171
	;; Response received from [23.200.89.171] 112 octets ;; HEADER SECTION ;; id = 33013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 71 octets ;; HEADER SECTION ;; id = 8992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

dscb.akamaiedge.net

	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.40.19.173
	;; Response received from [23.40.19.173] 71 octets ;; HEADER SECTION ;; id = 57788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n3dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 184.24.96.188
	;; Response received from [184.24.96.188] 119 octets ;; HEADER SECTION ;; id = 40829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.40.19.173
	;; Response received from [23.40.19.173] 71 octets ;; HEADER SECTION ;; id = 48987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

dscb.akamaiedge.net

	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.188
	;; Response received from [184.24.96.188] 71 octets ;; HEADER SECTION ;; id = 5442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n1dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 184.24.96.166
	;; Response received from [184.24.96.166] 119 octets ;; HEADER SECTION ;; id = 32272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.188
	;; Response received from [184.24.96.188] 71 octets ;; HEADER SECTION ;; id = 48079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

dscb.akamaiedge.net

	Query to n2dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.205
	;; Response received from [184.24.96.205] 71 octets ;; HEADER SECTION ;; id = 43564 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n2dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n2dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 184.24.96.205
	;; Response received from [184.24.96.205] 119 octets ;; HEADER SECTION ;; id = 51375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.205
	;; Response received from [184.24.96.205] 71 octets ;; HEADER SECTION ;; id = 19916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

dscb.akamaiedge.net

	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.166
	;; Response received from [184.24.96.166] 71 octets ;; HEADER SECTION ;; id = 59007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n6dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 184.24.96.166
	;; Response received from [184.24.96.166] 119 octets ;; HEADER SECTION ;; id = 36972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.166
	;; Response received from [184.24.96.166] 71 octets ;; HEADER SECTION ;; id = 63024 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

dscb.akamaiedge.net

	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.190
	;; Response received from [184.24.96.190] 71 octets ;; HEADER SECTION ;; id = 29393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n7dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 184.24.96.190
	;; Response received from [184.24.96.190] 119 octets ;; HEADER SECTION ;; id = 13463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 184.24.96.190
	;; Response received from [184.24.96.190] 71 octets ;; HEADER SECTION ;; id = 26665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

dscb.akamaiedge.net

	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.44.130.72
	;; Response received from [23.44.130.72] 71 octets ;; HEADER SECTION ;; id = 10941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n4dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.44.130.72
	;; Response received from [23.44.130.72] 119 octets ;; HEADER SECTION ;; id = 24776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.44.130.72
	;; Response received from [23.44.130.72] 71 octets ;; HEADER SECTION ;; id = 50919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

dscb.akamaiedge.net

	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.200.89.171
	;; Response received from [23.200.89.171] 71 octets ;; HEADER SECTION ;; id = 56146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n5dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.200.89.171
	;; Response received from [23.200.89.171] 119 octets ;; HEADER SECTION ;; id = 47801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1771140592 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.200.89.171
	;; Response received from [23.200.89.171] 71 octets ;; HEADER SECTION ;; id = 5393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.204.8.126 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.204.8.126
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.af.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: