DNSSEC Debugger - www.af.mil

Domain Name:

Time: 2025-03-15 20:18:27 UTC

Analyzing DNSSEC problems for www.af.mil

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 51849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for www.af.mil/A
	Received 757 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 757 octets ;; HEADER SECTION ;; id = 14635 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . ZU+jQKnun8CHVp2LK3cC7l6gfEiXEN5s3f2FCJmiYJLt8xsaSFSgO/pDujWpqNjvt0m7Ow7Hw1xz eLUZL+JVgB7PaUExoI9RD4AMe0VFmWM7WQx5WpoN7Ulo9z5uvtpick9HmYepn557IMko2BWik6ri pN5ZFBLcgGeiUKsq0TZgYifSUAtNVyqUWCPRskekXp1T04z+b9LVFuRG0bVyn5wG5uyp5FzzQiXn jl3BiihbYx3of3BB42xvoiOXW5J9xxs0MvAlMPhDhR6TWyojtSBxBNHkwTmDysse44mxZ58mWIDE gTn8dW+PyGt/JSKp/QbuXB47woEd/ruHz3Ngvg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN A 199.252.162.234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN A 199.252.143.234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN A 199.252.155.234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for mil/DNSKEY
	Received 750 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 750 octets ;; HEADER SECTION ;; id = 34108 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . ZU+jQKnun8CHVp2LK3cC7l6gfEiXEN5s3f2FCJmiYJLt8xsaSFSgO/pDujWpqNjvt0m7Ow7Hw1xz eLUZL+JVgB7PaUExoI9RD4AMe0VFmWM7WQx5WpoN7Ulo9z5uvtpick9HmYepn557IMko2BWik6ri pN5ZFBLcgGeiUKsq0TZgYifSUAtNVyqUWCPRskekXp1T04z+b9LVFuRG0bVyn5wG5uyp5FzzQiXn jl3BiihbYx3of3BB42xvoiOXW5J9xxs0MvAlMPhDhR6TWyojtSBxBNHkwTmDysse44mxZ58mWIDE gTn8dW+PyGt/JSKp/QbuXB47woEd/ruHz3Ngvg== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to f.root-servers.net for mil/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 59104 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . ZU+jQKnun8CHVp2LK3cC7l6gfEiXEN5s3f2FCJmiYJLt8xsaSFSgO/pDujWpqNjvt0m7Ow7Hw1xz eLUZL+JVgB7PaUExoI9RD4AMe0VFmWM7WQx5WpoN7Ulo9z5uvtpick9HmYepn557IMko2BWik6ri pN5ZFBLcgGeiUKsq0TZgYifSUAtNVyqUWCPRskekXp1T04z+b9LVFuRG0bVyn5wG5uyp5FzzQiXn jl3BiihbYx3of3BB42xvoiOXW5J9xxs0MvAlMPhDhR6TWyojtSBxBNHkwTmDysse44mxZ58mWIDE gTn8dW+PyGt/JSKp/QbuXB47woEd/ruHz3Ngvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=63500/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . ZU+jQKnun8CHVp2LK3cC7l6gfEiXEN5s3f2FCJmiYJLt8xsaSFSgO/pDujWpqNjvt0m7Ow7Hw1xz eLUZL+JVgB7PaUExoI9RD4AMe0VFmWM7WQx5WpoN7Ulo9z5uvtpick9HmYepn557IMko2BWik6ri pN5ZFBLcgGeiUKsq0TZgYifSUAtNVyqUWCPRskekXp1T04z+b9LVFuRG0bVyn5wG5uyp5FzzQiXn jl3BiihbYx3of3BB42xvoiOXW5J9xxs0MvAlMPhDhR6TWyojtSBxBNHkwTmDysse44mxZ58mWIDE gTn8dW+PyGt/JSKp/QbuXB47woEd/ruHz3Ngvg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=63500/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 63500 8 2 3baa83867103d6604a124282063f295e1b15c87cc13cb875a42f5754a912ebe0 )`
	Query to con2.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.162.234
	;; Response received from [199.252.162.234] 1061 octets ;; HEADER SECTION ;; id = 12228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcy8HBe1JZB/Pmh8d2htH6J3KwuKkdouwk6CepTcrozTjqNwtAlKxyVzEUAKSe2tRBdwoW+8 NUkWLlfIwq5nUXKSIVkXs1+mMSmm9l2FG3tI6PdQrDMrxch/bwUym872SZimN6r0fx9bS0iXVqfE yDybmSogFU/3fFLbvI8ZahYB ) ; keytag 5184 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAapYbbFha8etebgpYlXHIgsSKXKbnvIfWWhxJJvOQkCryRSMhgDmSB4veIVeTI8U/jvy+vI1 FrmvCKtOGrA6Re1yl0iHj/FQREsIVs0Z1T8CzXWifPqvw9qXM2s/kq4Y8+3Pj2vOp2HbNXBaWOBM eBkmohpSDgo8rvCcsAzvbx8t ) ; keytag 44341 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250321230049 20250314230049 5184 mil. euYVmyliSZ7ep2yx7IT0gIQKO0yS3+pxCkFpvC72U0/FPpkj3oWpgZoRmwyKEkRpfdpZfCb49jOa s5xNz4RXUmG0xtx2XE0gQAmV+vPMerljY3kuDmBENI5pkOVrWaC087fz9mas7ZqxqL3M1KD+hIZ9 cw/CDIVtqEj7gmidMA4= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250321230049 20250314230049 63500 mil. JxEcopcPpNqRK9Wv5otgYZqR/lQRWv+Sc8N5XC+r6v+mnFJvPocyDYkpjLIqsjqOPmzpddIOgOhz Zfmv1EDDoRdQI4u121/6lX8HLV2oAIkqVnslYfNctr9EjCaYKamSGRV9Oj+XktPU2zKqd0IUa0ID hIK3WAzoEkYeVSCHte3qyoK5LHLj/FBYA4lrY6TN2OEvwNpjwxX3ZQxMdwHxFeGzWhFq6ufQyhQ2 wDTm5BFVBnPNyHQnAwMad708WYrcb3fzh9+qSQ0nDCU4Uvyea+gEhVz4XBY0HpaOi+B6UL3QsWz8 YzNqNHpiZO97yA2F8DVIMmoC0HncqJe8EAB+0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaVYoXAtb7EHYO8afpfixahO02I/ozDEndNc/odNBgN21DKJbo8AY5LLPsX69GLlMN9aDCQa RfGyG/ggux0iWxxEmtl1xZjeupp5OZi7XCxLnEJcXHoexTPU7PmS4BlRaZKNOcpXhfG9noZJqFM/ DWxLsnzqCFyEzjOPIDOt4sjPtgz0uPe0AevU5+pGsRGpb160bDtmXRGJCe7QJYjU8hI/zj5lO1jH pkdrJ3p+UhKO/a/kqrd6DCam+GMabK06zXfh7pACFBQi+puYu/wU4VJb0cuwwu+Qf+p4/bMJZ/Hq gUsYep03l3r3iVmUo58F1LnbyQ14oNzG+T2uZZLLxU0= ) ; keytag 63500`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAcy8HBe1JZB/Pmh8d2htH6J3KwuKkdouwk6CepTcrozTjqNwtAlKxyVzEUAKSe2tRBdwoW+8 NUkWLlfIwq5nUXKSIVkXs1+mMSmm9l2FG3tI6PdQrDMrxch/bwUym872SZimN6r0fx9bS0iXVqfE yDybmSogFU/3fFLbvI8ZahYB ) ; keytag 5184`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAapYbbFha8etebgpYlXHIgsSKXKbnvIfWWhxJJvOQkCryRSMhgDmSB4veIVeTI8U/jvy+vI1 FrmvCKtOGrA6Re1yl0iHj/FQREsIVs0Z1T8CzXWifPqvw9qXM2s/kq4Y8+3Pj2vOp2HbNXBaWOBM eBkmohpSDgo8rvCcsAzvbx8t ) ; keytag 44341`
	DNSKEY=63500/SEP is now in the chain-of-trust
	DS=63500/SHA-256 verifies DNSKEY=63500/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250321230049 20250314230049 5184 mil. euYVmyliSZ7ep2yx7IT0gIQKO0yS3+pxCkFpvC72U0/FPpkj3oWpgZoRmwyKEkRpfdpZfCb49jOa s5xNz4RXUmG0xtx2XE0gQAmV+vPMerljY3kuDmBENI5pkOVrWaC087fz9mas7ZqxqL3M1KD+hIZ9 cw/CDIVtqEj7gmidMA4= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20250321230049 20250314230049 63500 mil. JxEcopcPpNqRK9Wv5otgYZqR/lQRWv+Sc8N5XC+r6v+mnFJvPocyDYkpjLIqsjqOPmzpddIOgOhz Zfmv1EDDoRdQI4u121/6lX8HLV2oAIkqVnslYfNctr9EjCaYKamSGRV9Oj+XktPU2zKqd0IUa0ID hIK3WAzoEkYeVSCHte3qyoK5LHLj/FBYA4lrY6TN2OEvwNpjwxX3ZQxMdwHxFeGzWhFq6ufQyhQ2 wDTm5BFVBnPNyHQnAwMad708WYrcb3fzh9+qSQ0nDCU4Uvyea+gEhVz4XBY0HpaOi+B6UL3QsWz8 YzNqNHpiZO97yA2F8DVIMmoC0HncqJe8EAB+0Q== )`
	RRSIG=5184 and DNSKEY=5184 verifies the DNSKEY RRset
	RRSIG=63500 and DNSKEY=63500/SEP verifies the DNSKEY RRset
	DNSKEY=5184 is now in the chain-of-trust
	DNSKEY=44341 is now in the chain-of-trust
	Query to pac1.nipr.mil for www.af.mil/A
	Received 554 bytes from 199.252.180.234
	;; Response received from [199.252.180.234] 554 octets ;; HEADER SECTION ;; id = 27444 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS 15529 8 1 768e33a5e079b9990be958489c2e60e8b4d258fa AF.MIL. 10800 IN DS ( 15529 8 2 99f6cf6b9f75844e7b98a39c6b833cf585f461fd33e3ffdd4daeefea31b1e872 ) AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250321230049 20250314230049 5184 mil. ESJrG9TDsCnyD8/OU+AqZsfgflg8Eu6eU+RPiAPl05JrK/5Sh05686LBgsRfRzBqn2zp2icX6lDe 9Oa8xAzC0j+V9SOAPFb7bINsG3+n2/HQ06ww3HMV3vDv7Ho7J2swx+SQWwyEdimaFr0Y15IG2Wjz bUPTlg4lV9XEJbhhp5Y= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Query to eur2.nipr.mil for af.mil/DNSKEY
	Received 550 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 550 octets ;; HEADER SECTION ;; id = 61508 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 15529 8 2 99f6cf6b9f75844e7b98a39c6b833cf585f461fd33e3ffdd4daeefea31b1e872 ) AF.MIL. 10800 IN DS 15529 8 1 768e33a5e079b9990be958489c2e60e8b4d258fa AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250321230049 20250314230049 5184 mil. ESJrG9TDsCnyD8/OU+AqZsfgflg8Eu6eU+RPiAPl05JrK/5Sh05686LBgsRfRzBqn2zp2icX6lDe 9Oa8xAzC0j+V9SOAPFb7bINsG3+n2/HQ06ww3HMV3vDv7Ho7J2swx+SQWwyEdimaFr0Y15IG2Wjz bUPTlg4lV9XEJbhhp5Y= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Found child zone af.mil

af.mil

	Checking DS between mil and af.mil
	Query to eur2.nipr.mil for af.mil/DS
	Received 288 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 288 octets ;; HEADER SECTION ;; id = 13226 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DS ;; ANSWER SECTION (3 records) AF.MIL. 10800 IN DS 15529 8 1 768e33a5e079b9990be958489c2e60e8b4d258fa AF.MIL. 10800 IN DS ( 15529 8 2 99f6cf6b9f75844e7b98a39c6b833cf585f461fd33e3ffdd4daeefea31b1e872 ) AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250321230049 20250314230049 5184 mil. ESJrG9TDsCnyD8/OU+AqZsfgflg8Eu6eU+RPiAPl05JrK/5Sh05686LBgsRfRzBqn2zp2icX6lDe 9Oa8xAzC0j+V9SOAPFb7bINsG3+n2/HQ06ww3HMV3vDv7Ho7J2swx+SQWwyEdimaFr0Y15IG2Wjz bUPTlg4lV9XEJbhhp5Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for af.mil in the mil zone
	DS=15529/SHA-1 uses a deprecated digest algorithm
	DS=15529/SHA-1 has algorithm RSASHA256
	DS=15529/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20250321230049 20250314230049 5184 mil. ESJrG9TDsCnyD8/OU+AqZsfgflg8Eu6eU+RPiAPl05JrK/5Sh05686LBgsRfRzBqn2zp2icX6lDe 9Oa8xAzC0j+V9SOAPFb7bINsG3+n2/HQ06ww3HMV3vDv7Ho7J2swx+SQWwyEdimaFr0Y15IG2Wjz bUPTlg4lV9XEJbhhp5Y= )`
	RRSIG=5184 and DNSKEY=5184 verifies the DS RRset
	DS=15529/SHA-1 is now in the chain-of-trust
	`AF.MIL. 10800 IN DS 15529 8 1 768e33a5e079b9990be958489c2e60e8b4d258fa`
	`AF.MIL. 10800 IN DS ( 15529 8 2 99f6cf6b9f75844e7b98a39c6b833cf585f461fd33e3ffdd4daeefea31b1e872 )`
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/DNSKEY
	Received 1451 bytes from 132.3.48.156
	;; Response received from [132.3.48.156] 1451 octets ;; HEADER SECTION ;; id = 21623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (5 records) af.mil. 149426 IN DNSKEY ( 257 3 8 AwEAAcNA/jfyoURhgrkK7uMnzuM6ySfO1Nok6UZ+7HCIZokp1PD2aznqYFh4mJ1aMIUaKQNUzb/7 lxXiwGotzEFj0JPzMzupvwg8xoFa6n/arOlYgwMDQ5glTGLll0hnVfNEH5a2I1TmBidOXBab7rJm d68CVmGbZGU69xfjmmVgO5X8CcqTUA8ObnJc0fPirJ3D+zWPa7auqEm4LPh+AvdCgIfkgrTZG0Wu Q8JTWa7p3+iqJFNH+I3JgVZke/oSQr/xhjBoReJFm4CSjfqVDRnC4xrpHz29QGi1SiN2dnaMlSxK DK24wJxTC1tTQi9+IeZzhJp9Kqlx35uhzNDr658zHUE= ) ; keytag 15529 af.mil. 149426 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258 af.mil. 149426 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495 af.mil. 149426 IN RRSIG ( DNSKEY 8 2 172800 20250319034625 20250315025500 495 af.mil. DM+70vGPXWXnz0IDeOyE5YCIRsg5HQ9/Vj0m9dhotd8gXyMTfQ9KqrMNrLArFDsUd4ALtNKpfMIQ tLUoAE0TbTB254mqDtnbT0SNcKNZLZrhKIo1So6e6anScuuXiAuQQMjOYHKwHSwWivZV40AsT+Mr Tcm/IflatdHBdJOPb1yo2xQbGgEjUqG2OR5ZlRhG8WGW/c/+HTfUiqO0KmLsFmlS8bZbt4M8+Dfv frYLduyK2FnGTHiQ+0BKsDjcguDgnXgR/vjmek30CQyC0S+ui99cQTMJwQOVvLECi1+yuAy7nMJc DBSKGf9j9v7DG6HShd3Y8qBhpWtH2km+Yg9MNA== ) af.mil. 149426 IN RRSIG ( DNSKEY 8 2 172800 20250319034625 20250315025500 15529 af.mil. JfqIBqRF5Dta1QaY4ZohCdb3dSz4gwgoDOZmxTlll18p1zTH5QwpTxpckYDoq4jfzln6gVlw6QXl Dl9kmgu/vvpMwEd81RemhMHbV9+C5K23xyFZc4mGcqoxLj30LPeWGAvbTGYPi2dQeo+UtjEkyC8H cJeCfE3f5y2DKS31F8txrshNYBqHTq207foBtnK3QN3l5rkxrkNVTfbBVVmyrNLXjwGjVpo1O4Pj GVTK14f7iMWU4hGzhDI0rgKRPY2rLUMwm01KP9IZDdbiFEsRf/kFgyip6rmjUDaZV4WUwXIOe5aa Jzarm5MKiZh/XKYGWXUhXLzUexd4As2YrvcFGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for af.mil
	`af.mil. 149426 IN DNSKEY ( 257 3 8 AwEAAcNA/jfyoURhgrkK7uMnzuM6ySfO1Nok6UZ+7HCIZokp1PD2aznqYFh4mJ1aMIUaKQNUzb/7 lxXiwGotzEFj0JPzMzupvwg8xoFa6n/arOlYgwMDQ5glTGLll0hnVfNEH5a2I1TmBidOXBab7rJm d68CVmGbZGU69xfjmmVgO5X8CcqTUA8ObnJc0fPirJ3D+zWPa7auqEm4LPh+AvdCgIfkgrTZG0Wu Q8JTWa7p3+iqJFNH+I3JgVZke/oSQr/xhjBoReJFm4CSjfqVDRnC4xrpHz29QGi1SiN2dnaMlSxK DK24wJxTC1tTQi9+IeZzhJp9Kqlx35uhzNDr658zHUE= ) ; keytag 15529`
	`af.mil. 149426 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258`
	`af.mil. 149426 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495`
	DNSKEY=15529/SEP is now in the chain-of-trust
	DS=15529/SHA-1 verifies DNSKEY=15529/SEP
	DS=15529/SHA-256 verifies DNSKEY=15529/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`af.mil. 149426 IN RRSIG ( DNSKEY 8 2 172800 20250319034625 20250315025500 495 af.mil. DM+70vGPXWXnz0IDeOyE5YCIRsg5HQ9/Vj0m9dhotd8gXyMTfQ9KqrMNrLArFDsUd4ALtNKpfMIQ tLUoAE0TbTB254mqDtnbT0SNcKNZLZrhKIo1So6e6anScuuXiAuQQMjOYHKwHSwWivZV40AsT+Mr Tcm/IflatdHBdJOPb1yo2xQbGgEjUqG2OR5ZlRhG8WGW/c/+HTfUiqO0KmLsFmlS8bZbt4M8+Dfv frYLduyK2FnGTHiQ+0BKsDjcguDgnXgR/vjmek30CQyC0S+ui99cQTMJwQOVvLECi1+yuAy7nMJc DBSKGf9j9v7DG6HShd3Y8qBhpWtH2km+Yg9MNA== )`
	`af.mil. 149426 IN RRSIG ( DNSKEY 8 2 172800 20250319034625 20250315025500 15529 af.mil. JfqIBqRF5Dta1QaY4ZohCdb3dSz4gwgoDOZmxTlll18p1zTH5QwpTxpckYDoq4jfzln6gVlw6QXl Dl9kmgu/vvpMwEd81RemhMHbV9+C5K23xyFZc4mGcqoxLj30LPeWGAvbTGYPi2dQeo+UtjEkyC8H cJeCfE3f5y2DKS31F8txrshNYBqHTq207foBtnK3QN3l5rkxrkNVTfbBVVmyrNLXjwGjVpo1O4Pj GVTK14f7iMWU4hGzhDI0rgKRPY2rLUMwm01KP9IZDdbiFEsRf/kFgyip6rmjUDaZV4WUwXIOe5aa Jzarm5MKiZh/XKYGWXUhXLzUexd4As2YrvcFGQ== )`
	RRSIG=495 and DNSKEY=495 verifies the DNSKEY RRset
	RRSIG=15529 and DNSKEY=15529/SEP verifies the DNSKEY RRset
	DNSKEY=15258 is now in the chain-of-trust
	DNSKEY=495 is now in the chain-of-trust
	Query to OSAN-NS10.AFNOC.AF.MIL for www.af.mil/A
	Received 374 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 374 octets ;; HEADER SECTION ;; id = 23115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (2 records) www.af.mil. 273 IN CNAME www.afpw.af.mil.edgekey.net. www.af.mil. 273 IN RRSIG ( CNAME 8 3 300 20250319030936 20250315021734 495 af.mil. Id5RENqF4Q3F3cRVhdaJYYqlMjfj/ogqKb7X/J9sHXpw5h1wXXV3c1IsMrrYA64mWBHGe2vtdc8u Cvg4VbnMpQ/mEE1a57UHAFQj0+Gc6YUUlzp5nPTYkH2uEpi/4T1a1M8LznDFtqKkCSTnzkKnH4nQ PcBccwrhIVHRI2n+aWceuJMvax6fmZ0333GXMpCWiKetU6vbseabHPfQi96x2ojqgH3fYzUOVt/6 5JvD4kfBLbaWWfitC9I3PESHnUxSa2ciPCw6ddlsfPDcLgj9dj42IwRvQrhuj4ULQTY5poXuDlOr /JjDzgTc1GVxDL1qQsrcDe3vqDZ4v/r4JnuV2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	OSAN-NS10.AFNOC.AF.MIL is authoritative for www.af.mil
	Query to HICKAM-NS2.AFNOC.AF.MIL for www.af.mil/DNSKEY
	Received 374 bytes from 132.3.48.156
	;; Response received from [132.3.48.156] 374 octets ;; HEADER SECTION ;; id = 5622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN DNSKEY ;; ANSWER SECTION (2 records) www.af.mil. 100 IN CNAME www.afpw.af.mil.edgekey.net. www.af.mil. 100 IN RRSIG ( CNAME 8 3 300 20250319030936 20250315021734 495 af.mil. Id5RENqF4Q3F3cRVhdaJYYqlMjfj/ogqKb7X/J9sHXpw5h1wXXV3c1IsMrrYA64mWBHGe2vtdc8u Cvg4VbnMpQ/mEE1a57UHAFQj0+Gc6YUUlzp5nPTYkH2uEpi/4T1a1M8LznDFtqKkCSTnzkKnH4nQ PcBccwrhIVHRI2n+aWceuJMvax6fmZ0333GXMpCWiKetU6vbseabHPfQi96x2ojqgH3fYzUOVt/6 5JvD4kfBLbaWWfitC9I3PESHnUxSa2ciPCw6ddlsfPDcLgj9dj42IwRvQrhuj4ULQTY5poXuDlOr /JjDzgTc1GVxDL1qQsrcDe3vqDZ4v/r4JnuV2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by af.mil zone
	www.af.mil is a CNAME to www.afpw.af.mil.edgekey.net
	Found 1 RRSIGs over CNAME RRset
	`www.af.mil. 273 IN RRSIG ( CNAME 8 3 300 20250319030936 20250315021734 495 af.mil. Id5RENqF4Q3F3cRVhdaJYYqlMjfj/ogqKb7X/J9sHXpw5h1wXXV3c1IsMrrYA64mWBHGe2vtdc8u Cvg4VbnMpQ/mEE1a57UHAFQj0+Gc6YUUlzp5nPTYkH2uEpi/4T1a1M8LznDFtqKkCSTnzkKnH4nQ PcBccwrhIVHRI2n+aWceuJMvax6fmZ0333GXMpCWiKetU6vbseabHPfQi96x2ojqgH3fYzUOVt/6 5JvD4kfBLbaWWfitC9I3PESHnUxSa2ciPCw6ddlsfPDcLgj9dj42IwRvQrhuj4ULQTY5poXuDlOr /JjDzgTc1GVxDL1qQsrcDe3vqDZ4v/r4JnuV2A== )`
	RRSIG=495 and DNSKEY=495 verifies the CNAME RRset

	Query to m.root-servers.net for www.afpw.af.mil.edgekey.net/A
	Received 1190 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1190 octets ;; HEADER SECTION ;; id = 53830 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1160 octets ;; HEADER SECTION ;; id = 44659 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== ) ;; ADDITIONAL SECTION (27 records) i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to a.root-servers.net for net/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 41849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to m.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 291 octets ;; HEADER SECTION ;; id = 53429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 DcRLo7wZKZVjZtXzAPruukiCt5wkgTSNlYeUefnfNfc935+zFdfirhH0VZW/SYAqPA7blb0yRNL3 mkptK4sDnQ== ) ; keytag 10024 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250328141035 20250313140535 37331 net. EdDVToF/Q0VjpU1h69A5YYFkdknPhA0cLESXFVSXQ8tJxmwJBctloMmBlSwr+Cpqf+6FkJRABBqI eenOdv9nOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 DcRLo7wZKZVjZtXzAPruukiCt5wkgTSNlYeUefnfNfc935+zFdfirhH0VZW/SYAqPA7blb0yRNL3 mkptK4sDnQ== ) ; keytag 10024`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250328141035 20250313140535 37331 net. EdDVToF/Q0VjpU1h69A5YYFkdknPhA0cLESXFVSXQ8tJxmwJBctloMmBlSwr+Cpqf+6FkJRABBqI eenOdv9nOw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=10024 is now in the chain-of-trust
	Query to a.gtld-servers.net for www.afpw.af.mil.edgekey.net/A
	Received 935 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 935 octets ;; HEADER SECTION ;; id = 18284 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320030944 20250313015944 10024 net. 5odEhtWxvcx6AimRDTSeSf8F9aIx+GR4joGV2iFMHLLqK6L5uCSibwbM2OftF6hW2CRXo99bMY5U plAXJ+Xo3w== ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 900 IN NSEC3 ( 1 1 0 - 2a0dj5vpi8s7nqvoi1idabi5tt0jc7g7 NS DS RRSIG ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320031410 20250313020410 10024 net. YmUGwKyZBeFVWB1JRvyspo8dtmmU1mpO+ttDLcCWPuTIkhyul4LqjaHQMmi15QgRp+i18kGgHAQS hMQiT/25nQ== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Query to a.gtld-servers.net for edgekey.net/DNSKEY
	Received 919 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 919 octets ;; HEADER SECTION ;; id = 7883 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320030944 20250313015944 10024 net. 5odEhtWxvcx6AimRDTSeSf8F9aIx+GR4joGV2iFMHLLqK6L5uCSibwbM2OftF6hW2CRXo99bMY5U plAXJ+Xo3w== ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 900 IN NSEC3 ( 1 1 0 - 2a0dj5vpi8s7nqvoi1idabi5tt0jc7g7 NS DS RRSIG ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320031410 20250313020410 10024 net. YmUGwKyZBeFVWB1JRvyspo8dtmmU1mpO+ttDLcCWPuTIkhyul4LqjaHQMmi15QgRp+i18kGgHAQS hMQiT/25nQ== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Found child zone edgekey.net

edgekey.net

	Checking DS between net and edgekey.net
	Query to h.gtld-servers.net for edgekey.net/DS
	Received 569 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 569 octets ;; HEADER SECTION ;; id = 60791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320030944 20250313015944 10024 net. 5odEhtWxvcx6AimRDTSeSf8F9aIx+GR4joGV2iFMHLLqK6L5uCSibwbM2OftF6hW2CRXo99bMY5U plAXJ+Xo3w== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1742069892 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20250322201812 20250315190812 10024 net. qBewNhNbPJ/lF+Zq/5+WbXd5E+loibumh0G5tODbiMrvhWaeZyL5FAloJd56DyHYXs0gbjRC/iuD EsnSaEmJlA== ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 900 IN NSEC3 ( 1 1 0 - 2a0dj5vpi8s7nqvoi1idabi5tt0jc7g7 NS DS RRSIG ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320031410 20250313020410 10024 net. YmUGwKyZBeFVWB1JRvyspo8dtmmU1mpO+ttDLcCWPuTIkhyul4LqjaHQMmi15QgRp+i18kGgHAQS hMQiT/25nQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for edgekey.net in the net zone
	Query to a7-64.akam.net for edgekey.net/DNSKEY
	Received 103 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 103 octets ;; HEADER SECTION ;; id = 8324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579394376 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a1-66.akam.net for www.afpw.af.mil.edgekey.net/A
	Received 93 bytes from 193.108.91.66
	;; Response received from [193.108.91.66] 93 octets ;; HEADER SECTION ;; id = 13060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (1 record) www.afpw.af.mil.edgekey.net. 300 IN CNAME e11218.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-66.akam.net is authoritative for www.afpw.af.mil.edgekey.net
	Query to a7-64.akam.net for mil.edgekey.net/DNSKEY
	Received 107 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 107 octets ;; HEADER SECTION ;; id = 38376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579394376 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-65.akam.net for af.mil.edgekey.net/DNSKEY
	Received 110 bytes from 184.26.160.65
	;; Response received from [184.26.160.65] 110 octets ;; HEADER SECTION ;; id = 20512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579394376 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-66.akam.net for afpw.af.mil.edgekey.net/DNSKEY
	Received 115 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 115 octets ;; HEADER SECTION ;; id = 48297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afpw.af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579394376 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-66.akam.net for www.afpw.af.mil.edgekey.net/DNSKEY
	Received 93 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 93 octets ;; HEADER SECTION ;; id = 54500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (1 record) www.afpw.af.mil.edgekey.net. 300 IN CNAME e11218.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.afpw.af.mil.edgekey.net is a CNAME to e11218.dscb.akamaiedge.net
	No RRSIGs found

net

	Query to c.gtld-servers.net for e11218.dscb.akamaiedge.net/A
	Received 731 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 731 octets ;; HEADER SECTION ;; id = 16220 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320030944 20250313015944 10024 net. 5odEhtWxvcx6AimRDTSeSf8F9aIx+GR4joGV2iFMHLLqK6L5uCSibwbM2OftF6hW2CRXo99bMY5U plAXJ+Xo3w== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN NSEC3 ( 1 1 0 - gcrt8m94sakjl9is4doef588j7uvkp84 NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN RRSIG ( NSEC3 13 2 900 20250319030338 20250312015338 10024 net. WRX5u1ZPOA6xqessihKvZvnGEcgn+IGsZR89jEZ+qatKMi1NI2npTQwzPQe8HK6cO8Vh+Ly269qb nSDjFCgfMg== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Query to d.gtld-servers.net for akamaiedge.net/DNSKEY
	Received 719 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 719 octets ;; HEADER SECTION ;; id = 42078 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320030944 20250313015944 10024 net. 5odEhtWxvcx6AimRDTSeSf8F9aIx+GR4joGV2iFMHLLqK6L5uCSibwbM2OftF6hW2CRXo99bMY5U plAXJ+Xo3w== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN NSEC3 ( 1 1 0 - gcrt8m94sakjl9is4doef588j7uvkp84 NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN RRSIG ( NSEC3 13 2 900 20250319030338 20250312015338 10024 net. WRX5u1ZPOA6xqessihKvZvnGEcgn+IGsZR89jEZ+qatKMi1NI2npTQwzPQe8HK6cO8Vh+Ly269qb nSDjFCgfMg== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Found child zone akamaiedge.net

akamaiedge.net

	Checking DS between net and akamaiedge.net
	Query to d.gtld-servers.net for akamaiedge.net/DS
	Received 572 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 572 octets ;; HEADER SECTION ;; id = 20013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20250320030944 20250313015944 10024 net. 5odEhtWxvcx6AimRDTSeSf8F9aIx+GR4joGV2iFMHLLqK6L5uCSibwbM2OftF6hW2CRXo99bMY5U plAXJ+Xo3w== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1742069892 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20250322201812 20250315190812 10024 net. qBewNhNbPJ/lF+Zq/5+WbXd5E+loibumh0G5tODbiMrvhWaeZyL5FAloJd56DyHYXs0gbjRC/iuD EsnSaEmJlA== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN NSEC3 ( 1 1 0 - gcrt8m94sakjl9is4doef588j7uvkp84 NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 900 IN RRSIG ( NSEC3 13 2 900 20250319030338 20250312015338 10024 net. WRX5u1ZPOA6xqessihKvZvnGEcgn+IGsZR89jEZ+qatKMi1NI2npTQwzPQe8HK6cO8Vh+Ly269qb nSDjFCgfMg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for akamaiedge.net in the net zone
	Query to a1-192.akamaiedge.net for akamaiedge.net/DNSKEY
	Received 109 bytes from 193.108.88.0
	;; Response received from [193.108.88.0] 109 octets ;; HEADER SECTION ;; id = 10988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to la1.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 379 bytes from 184.26.161.192
	;; Response received from [184.26.161.192] 379 octets ;; HEADER SECTION ;; id = 50146 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n4dscb.akamaiedge.net. 4000 IN A 23.222.16.100 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n2dscb.akamaiedge.net. 4000 IN A 23.218.223.7 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n7dscb.akamaiedge.net. 4000 IN A 23.218.223.16 n1dscb.akamaiedge.net. 4000 IN A 23.218.223.20 n5dscb.akamaiedge.net. 4000 IN A 23.218.223.18 n6dscb.akamaiedge.net. 4000 IN A 23.218.220.152 n3dscb.akamaiedge.net. 4000 IN A 23.48.249.148 ;; { "EDNS-VERSION": 0 }
	Query to ns3-194.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 372 bytes from 23.61.199.194
	;; Response received from [23.61.199.194] 372 octets ;; HEADER SECTION ;; id = 62396 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n6dscb.akamaiedge.net. 4000 IN A 23.218.220.152 n2dscb.akamaiedge.net. 4000 IN A 23.218.223.7 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n1dscb.akamaiedge.net. 4000 IN A 23.218.223.20 n7dscb.akamaiedge.net. 4000 IN A 23.218.223.16 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n5dscb.akamaiedge.net. 4000 IN A 23.218.223.18 n3dscb.akamaiedge.net. 4000 IN A 23.48.249.148 n4dscb.akamaiedge.net. 4000 IN A 23.222.16.100 ;; { "EDNS-VERSION": 0 }
	Found child zone dscb.akamaiedge.net

dscb.akamaiedge.net

	Checking DS between akamaiedge.net and dscb.akamaiedge.net
	Query to a1-192.akamaiedge.net for dscb.akamaiedge.net/DS
	Received 114 bytes from 193.108.88.0
	;; Response received from [193.108.88.0] 114 octets ;; HEADER SECTION ;; id = 19741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for dscb.akamaiedge.net in the akamaiedge.net zone
	Query to n2dscb.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 112 bytes from 23.218.223.7
	;; Response received from [23.218.223.7] 112 octets ;; HEADER SECTION ;; id = 23157 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.222.16.100
	;; Response received from [23.222.16.100] 71 octets ;; HEADER SECTION ;; id = 60940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n4dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.48.249.148
	;; Response received from [23.48.249.148] 119 octets ;; HEADER SECTION ;; id = 35828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.48.249.148
	;; Response received from [23.48.249.148] 112 octets ;; HEADER SECTION ;; id = 54017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.218.220.152
	;; Response received from [23.218.220.152] 112 octets ;; HEADER SECTION ;; id = 28125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 112 octets ;; HEADER SECTION ;; id = 18473 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.218.223.20
	;; Response received from [23.218.223.20] 112 octets ;; HEADER SECTION ;; id = 21401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.218.223.18
	;; Response received from [23.218.223.18] 112 octets ;; HEADER SECTION ;; id = 60306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.218.223.16
	;; Response received from [23.218.223.16] 112 octets ;; HEADER SECTION ;; id = 49344 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.218.223.7
	;; Response received from [23.218.223.7] 112 octets ;; HEADER SECTION ;; id = 6870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.222.16.100
	;; Response received from [23.222.16.100] 71 octets ;; HEADER SECTION ;; id = 26233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

dscb.akamaiedge.net

	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.20
	;; Response received from [23.218.223.20] 71 octets ;; HEADER SECTION ;; id = 39120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n1dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.218.223.20
	;; Response received from [23.218.223.20] 119 octets ;; HEADER SECTION ;; id = 8558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.20
	;; Response received from [23.218.223.20] 71 octets ;; HEADER SECTION ;; id = 18177 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

dscb.akamaiedge.net

	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.48.249.148
	;; Response received from [23.48.249.148] 71 octets ;; HEADER SECTION ;; id = 32638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n3dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 119 octets ;; HEADER SECTION ;; id = 10266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069909 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.48.249.148
	;; Response received from [23.48.249.148] 71 octets ;; HEADER SECTION ;; id = 3039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

dscb.akamaiedge.net

	Query to n2dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.7
	;; Response received from [23.218.223.7] 71 octets ;; HEADER SECTION ;; id = 8605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n2dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.218.223.16
	;; Response received from [23.218.223.16] 119 octets ;; HEADER SECTION ;; id = 18945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069910 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.7
	;; Response received from [23.218.223.7] 71 octets ;; HEADER SECTION ;; id = 44565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

dscb.akamaiedge.net

	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.18
	;; Response received from [23.218.223.18] 71 octets ;; HEADER SECTION ;; id = 43293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n5dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 119 octets ;; HEADER SECTION ;; id = 55717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069910 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.18
	;; Response received from [23.218.223.18] 71 octets ;; HEADER SECTION ;; id = 35753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

dscb.akamaiedge.net

	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 71 octets ;; HEADER SECTION ;; id = 11556 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n0dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.218.220.152
	;; Response received from [23.218.220.152] 119 octets ;; HEADER SECTION ;; id = 5726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069910 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 71 octets ;; HEADER SECTION ;; id = 26593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

dscb.akamaiedge.net

	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.16
	;; Response received from [23.218.223.16] 71 octets ;; HEADER SECTION ;; id = 9651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n7dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.218.223.16
	;; Response received from [23.218.223.16] 119 octets ;; HEADER SECTION ;; id = 19752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069910 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.223.16
	;; Response received from [23.218.223.16] 71 octets ;; HEADER SECTION ;; id = 51144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

dscb.akamaiedge.net

	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.220.152
	;; Response received from [23.218.220.152] 71 octets ;; HEADER SECTION ;; id = 23068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n6dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.218.220.152
	;; Response received from [23.218.220.152] 119 octets ;; HEADER SECTION ;; id = 56191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1742069910 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.218.220.152
	;; Response received from [23.218.220.152] 71 octets ;; HEADER SECTION ;; id = 63113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 23.218.128.231 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e11218.dscb.akamaiedge.net A RR has value 23.218.128.231
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.af.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: