DNSSEC Debugger - www.af.mil

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-16 02:04:24 UTC

Analyzing DNSSEC problems for www.af.mil

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 62253 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to k.root-servers.net for www.af.mil/A
	Received 757 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 757 octets ;; HEADER SECTION ;; id = 14798 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . GQO3C+SqS3GyITIWDlvMPWQraeULFoZnDzAW/cueInd482/d0TcnrLMcPfD3i1nsxBgTDv73ws0d D8UExtGlFJi//9YXviUH4WdkQ4OEBndvnZa2UADCtgSBvDXCwXGy/OXrux21fjJThpKLy3ybmaSv C7cQEuOjhpbDg4UMOwKj/b17izQ5ZETMOSbNvrwGn81QY8ceQ4y0GEY8urBN6M1wWV/tpdkv+OSJ tKc3Bfeo+p9qvC2BrpHyNx42yFc5xdf8fKt+1llkJFT/5GT68Cpr3OS6BbPM1I85AegWJJ3jLqwY kMJDgkPzC49NBBJng1tm7qr5/QN+mbnxeEZOPw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for mil/DNSKEY
	Received 750 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 750 octets ;; HEADER SECTION ;; id = 51624 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . GQO3C+SqS3GyITIWDlvMPWQraeULFoZnDzAW/cueInd482/d0TcnrLMcPfD3i1nsxBgTDv73ws0d D8UExtGlFJi//9YXviUH4WdkQ4OEBndvnZa2UADCtgSBvDXCwXGy/OXrux21fjJThpKLy3ybmaSv C7cQEuOjhpbDg4UMOwKj/b17izQ5ZETMOSbNvrwGn81QY8ceQ4y0GEY8urBN6M1wWV/tpdkv+OSJ tKc3Bfeo+p9qvC2BrpHyNx42yFc5xdf8fKt+1llkJFT/5GT68Cpr3OS6BbPM1I85AegWJJ3jLqwY kMJDgkPzC49NBBJng1tm7qr5/QN+mbnxeEZOPw== ) ;; ADDITIONAL SECTION (13 records) con1.nipr.mil. 172800 IN A 199.252.157.234 con2.nipr.mil. 172800 IN A 199.252.162.234 eur1.nipr.mil. 172800 IN A 199.252.154.234 eur2.nipr.mil. 172800 IN A 199.252.143.234 pac1.nipr.mil. 172800 IN A 199.252.180.234 pac2.nipr.mil. 172800 IN A 199.252.155.234 con1.nipr.mil. 172800 IN AAAA 2608:140:c:157::234 con2.nipr.mil. 172800 IN AAAA 2608:120:c:162::234 eur1.nipr.mil. 172800 IN AAAA 2608:4122:2:154::234 eur2.nipr.mil. 172800 IN AAAA 2608:4163:1:143::234 pac1.nipr.mil. 172800 IN AAAA 2608:c184:1:180::234 pac2.nipr.mil. 172800 IN AAAA 2608:c144:1:155::234 ;; { "EDNS-VERSION": 0 }
	Found child zone mil

mil

	Checking DS between . and mil
	Query to g.root-servers.net for mil/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 1814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DS ;; ANSWER SECTION (2 records) mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 ) mil. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . GQO3C+SqS3GyITIWDlvMPWQraeULFoZnDzAW/cueInd482/d0TcnrLMcPfD3i1nsxBgTDv73ws0d D8UExtGlFJi//9YXviUH4WdkQ4OEBndvnZa2UADCtgSBvDXCwXGy/OXrux21fjJThpKLy3ybmaSv C7cQEuOjhpbDg4UMOwKj/b17izQ5ZETMOSbNvrwGn81QY8ceQ4y0GEY8urBN6M1wWV/tpdkv+OSJ tKc3Bfeo+p9qvC2BrpHyNx42yFc5xdf8fKt+1llkJFT/5GT68Cpr3OS6BbPM1I85AegWJJ3jLqwY kMJDgkPzC49NBBJng1tm7qr5/QN+mbnxeEZOPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mil in the . zone
	DS=45019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`mil. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . GQO3C+SqS3GyITIWDlvMPWQraeULFoZnDzAW/cueInd482/d0TcnrLMcPfD3i1nsxBgTDv73ws0d D8UExtGlFJi//9YXviUH4WdkQ4OEBndvnZa2UADCtgSBvDXCwXGy/OXrux21fjJThpKLy3ybmaSv C7cQEuOjhpbDg4UMOwKj/b17izQ5ZETMOSbNvrwGn81QY8ceQ4y0GEY8urBN6M1wWV/tpdkv+OSJ tKc3Bfeo+p9qvC2BrpHyNx42yFc5xdf8fKt+1llkJFT/5GT68Cpr3OS6BbPM1I85AegWJJ3jLqwY kMJDgkPzC49NBBJng1tm7qr5/QN+mbnxeEZOPw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=45019/SHA-256 is now in the chain-of-trust
	`mil. 86400 IN DS ( 45019 8 2 28e0bc91841d398a8d96be5115f3eb780a440a75acdf4fb6a735f60a422bd437 )`
	Query to con1.nipr.mil for mil/DNSKEY
	Received 1061 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 1061 octets ;; HEADER SECTION ;; id = 58167 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil. IN DNSKEY ;; ANSWER SECTION (5 records) MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKGgOyd9pwnzlCcPNBga7Re4GsHv3y/x4uTR8vVKtKrbBRq7ITQJ5lgU1R8dYD3rpMQY6sO Q6itUxFk+MYgVAbfJ/Fi5alaYnv0jtkU+J/lPd3KRX/M7fIAmz3Cmp0IKhpQAdeXG0/j3TSA1jTS x3GlajBxLhTZ+C6dfGCELb9D ) ; keytag 22014 MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019 MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb+BodjfUWUtBuYlbVkJuci7llIVNYfnDSyFUIRmoIpZW3s/yFEp3/xkGsIGnlhjbG97/ir8 yx0YSX1pxWdvYi+7gMwWsSV145Zu2x08IfC6Z6uHiNqgmanVcQ2Ms5Jy0bVyYAfBi4oCmMj1+/Qa MEszTRHTCi+yB906hhztkZO3 ) ; keytag 12574 MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 22014 mil. YCFMUD5LVGHZsbxidGKGFEfVgZBamUWos0BYcq2VPP3P79GoO7QfTG8oQA1bi87wbw7vOZ5PBsrd ixg5/2MKBX72hwhcO+kpKu5Jn16hq6TuMwS0Czznfl3loulAcDlEGQMCeqNUVyNlHHKZ0JabxyLj IF4Z9zyaKIGGbjqrBQc= ) MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 45019 mil. IfDClwC9awkmhx8beMhBGV0Rsbb92+sf2iwkowPCC84kbo9I4Ot8f4nd6Ld82+ARC+UD7ap3GLJG kseHie5ZrqaHASYksd4GHmCQu3tOeJ7Mkqrqqy7zMonx3kyW70/BhOqpJAgBbv15SwmcHYTSnKcz cb26sExHw49DscbDGgo+q7SE4yqFxD2JS2rjh//q2JCTwRIsj82ZLLfIkfJcnbtRGqqnXr55Qb2o 4xUVfia7SuG5nfxX5/I23q/W+t6qEgiFS4qlDX04AWOFt2/WF/GCXxJs652v9QInR6Rg63/si3dB rpKoTKELTEeuRxG6kqOgKgWkJ8szr6H2uigaHA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for mil
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAbKGgOyd9pwnzlCcPNBga7Re4GsHv3y/x4uTR8vVKtKrbBRq7ITQJ5lgU1R8dYD3rpMQY6sO Q6itUxFk+MYgVAbfJ/Fi5alaYnv0jtkU+J/lPd3KRX/M7fIAmz3Cmp0IKhpQAdeXG0/j3TSA1jTS x3GlajBxLhTZ+C6dfGCELb9D ) ; keytag 22014`
	`MIL. 10800 IN DNSKEY ( 257 3 8 AwEAAaBG6UdF/eZAwVwHA9xTGEHxO6Lkifu0QT13WgMyHHXvaSqW/x9OxpygejmNrnZgl/vW21y3 a2dEBO6V34TrjKwyqot8P2xODgq0UVQoQ51LYR405dyZ3Nam9owt3anNO1jY3iP+NJ1ZPWNlrTnQ aMTxTQ14Xy72kcH2ZG4HVQAVS/tCl5Q3NhNFnEVfGvx77eeMuXUpBbOM6UmRH6GwtoEaoaiwyzcs xwqVlPqPvXR1FBd3mH4paATCg6czgtvsGzZ5JlyUmZhlMcNHqfdbblxhUUGmv3yyoo7HeHPHZl1E sa0Z2Eq0NGd1p5cDcUF/CwxxbFCf8EZhx6+U6+xFb2M= ) ; keytag 45019`
	`MIL. 10800 IN DNSKEY ( 256 3 8 AwEAAb+BodjfUWUtBuYlbVkJuci7llIVNYfnDSyFUIRmoIpZW3s/yFEp3/xkGsIGnlhjbG97/ir8 yx0YSX1pxWdvYi+7gMwWsSV145Zu2x08IfC6Z6uHiNqgmanVcQ2Ms5Jy0bVyYAfBi4oCmMj1+/Qa MEszTRHTCi+yB906hhztkZO3 ) ; keytag 12574`
	DNSKEY=45019/SEP is now in the chain-of-trust
	DS=45019/SHA-256 verifies DNSKEY=45019/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 22014 mil. YCFMUD5LVGHZsbxidGKGFEfVgZBamUWos0BYcq2VPP3P79GoO7QfTG8oQA1bi87wbw7vOZ5PBsrd ixg5/2MKBX72hwhcO+kpKu5Jn16hq6TuMwS0Czznfl3loulAcDlEGQMCeqNUVyNlHHKZ0JabxyLj IF4Z9zyaKIGGbjqrBQc= )`
	`MIL. 10800 IN RRSIG ( DNSKEY 8 1 10800 20260522230059 20260515230059 45019 mil. IfDClwC9awkmhx8beMhBGV0Rsbb92+sf2iwkowPCC84kbo9I4Ot8f4nd6Ld82+ARC+UD7ap3GLJG kseHie5ZrqaHASYksd4GHmCQu3tOeJ7Mkqrqqy7zMonx3kyW70/BhOqpJAgBbv15SwmcHYTSnKcz cb26sExHw49DscbDGgo+q7SE4yqFxD2JS2rjh//q2JCTwRIsj82ZLLfIkfJcnbtRGqqnXr55Qb2o 4xUVfia7SuG5nfxX5/I23q/W+t6qEgiFS4qlDX04AWOFt2/WF/GCXxJs652v9QInR6Rg63/si3dB rpKoTKELTEeuRxG6kqOgKgWkJ8szr6H2uigaHA== )`
	RRSIG=22014 and DNSKEY=22014 verifies the DNSKEY RRset
	RRSIG=45019 and DNSKEY=45019/SEP verifies the DNSKEY RRset
	DNSKEY=22014 is now in the chain-of-trust
	DNSKEY=12574 is now in the chain-of-trust
	Query to eur2.nipr.mil for www.af.mil/A
	Received 638 bytes from 199.252.143.234
	;; Response received from [199.252.143.234] 638 octets ;; HEADER SECTION ;; id = 31057 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. GHLSrz4kE9XTcVJORDZ1LGec+5xbLUwK7/yI8G7ic1Y+E0p+e6IqaFvIMh4Mn0xo1XMmIQeMKdyv wojiieqWtGquWCawBe7HK2EyLBVraj+JNFJMCSV4AMSBZC17TMwl2R1+q8LBo/6dgZTGKQhC+tp+ EZ7AyWdgC41fwJywRDo= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Query to eur1.nipr.mil for af.mil/DNSKEY
	Received 634 bytes from 199.252.154.234
	;; Response received from [199.252.154.234] 634 octets ;; HEADER SECTION ;; id = 56298 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 11 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) AF.MIL. 21600 IN NS GUNTER-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS LACKLAND-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS RAMSTEIN-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS OSAN-NS10.AFNOC.AF.MIL. AF.MIL. 21600 IN NS HICKAM-NS2.AFNOC.AF.MIL. AF.MIL. 21600 IN NS YOKOTA-NS10.AFNOC.AF.MIL. AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. GHLSrz4kE9XTcVJORDZ1LGec+5xbLUwK7/yI8G7ic1Y+E0p+e6IqaFvIMh4Mn0xo1XMmIQeMKdyv wojiieqWtGquWCawBe7HK2EyLBVraj+JNFJMCSV4AMSBZC17TMwl2R1+q8LBo/6dgZTGKQhC+tp+ EZ7AyWdgC41fwJywRDo= ) ;; ADDITIONAL SECTION (7 records) RAMSTEIN-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.148 LACKLAND-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.140 YOKOTA-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.9.10 HICKAM-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.156 GUNTER-NS2.AFNOC.AF.MIL. 21600 IN A 132.3.48.132 OSAN-NS10.AFNOC.AF.MIL. 21600 IN A 132.3.13.10 ;; { "EDNS-VERSION": 0 }
	Found child zone af.mil

af.mil

	Checking DS between mil and af.mil
	Query to con1.nipr.mil for af.mil/DS
	Received 372 bytes from 199.252.157.234
	;; Response received from [199.252.157.234] 372 octets ;; HEADER SECTION ;; id = 13396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DS ;; ANSWER SECTION (5 records) AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 ) AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 ) AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. GHLSrz4kE9XTcVJORDZ1LGec+5xbLUwK7/yI8G7ic1Y+E0p+e6IqaFvIMh4Mn0xo1XMmIQeMKdyv wojiieqWtGquWCawBe7HK2EyLBVraj+JNFJMCSV4AMSBZC17TMwl2R1+q8LBo/6dgZTGKQhC+tp+ EZ7AyWdgC41fwJywRDo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for af.mil in the mil zone
	DS=38206/SHA-1 uses a deprecated digest algorithm
	DS=64894/SHA-1 uses a deprecated digest algorithm
	DS=64894/SHA-256 has algorithm RSASHA256
	DS=38206/SHA-1 has algorithm RSASHA256
	DS=38206/SHA-256 has algorithm RSASHA256
	DS=64894/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AF.MIL. 10800 IN RRSIG ( DS 8 2 10800 20260522230059 20260515230059 22014 mil. GHLSrz4kE9XTcVJORDZ1LGec+5xbLUwK7/yI8G7ic1Y+E0p+e6IqaFvIMh4Mn0xo1XMmIQeMKdyv wojiieqWtGquWCawBe7HK2EyLBVraj+JNFJMCSV4AMSBZC17TMwl2R1+q8LBo/6dgZTGKQhC+tp+ EZ7AyWdgC41fwJywRDo= )`
	RRSIG=22014 and DNSKEY=22014 verifies the DS RRset
	DS=64894/SHA-256 is now in the chain-of-trust
	DS=38206/SHA-1 is now in the chain-of-trust
	`AF.MIL. 10800 IN DS ( 64894 8 2 fc06636260f0ebfa3f1d1206fa09d5a8f0fa95f722606ca7a23083bb917860d0 )`
	`AF.MIL. 10800 IN DS 38206 8 1 2d48fb5340313ba3b0442e30734b7a1387c3296d`
	`AF.MIL. 10800 IN DS ( 38206 8 2 a0c8f2cb415423ccb8519227472c70c8e00bf414306c779e91a718e784f90e44 )`
	`AF.MIL. 10800 IN DS 64894 8 1 502101a31c359dcd744de8d8f69ff72badca268c`
	Query to HICKAM-NS2.AFNOC.AF.MIL for af.mil/DNSKEY
	Received 2021 bytes from 132.3.48.156
	;; Response received from [132.3.48.156] 2021 octets ;; HEADER SECTION ;; id = 49691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil. IN DNSKEY ;; ANSWER SECTION (7 records) af.mil. 171162 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258 af.mil. 171162 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495 af.mil. 171162 IN DNSKEY ( 257 3 8 AwEAAcEBm0szeFHwHLwEiQP7K4ZYjyzsq1VdOJSDPgflgJ4qA2MVQ/fLjMJjiBqO0jnKQgL0Q8nr LuvRsBFPVunWl3Cc10oiLVxsefBuB8nu2dJ71o8RbND/9swcCUKs64TcRMM9j6pyFf3pCh9gE/Qr AbzcM5Yw/ex3q7tI2UPwJV+aoR12UYTR2W/j3gzRDEU8NidNKwhts9NNGNyLFFpIhAO2JjDjTf6h b7CYw0/uvwoz1TQr7OMDzZTCx3qAnwaeSQdjfO+GvrwjAUHMCcN3LFPJjBvnZq1gxdTY2x/r3+4G oBt7jyUgVGJnlpqCAQ65/eAYXjy5VYNaqJQsgLSYQ2c= ) ; keytag 64894 af.mil. 171162 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206 af.mil. 171162 IN RRSIG ( DNSKEY 8 2 172800 20260519130750 20260515124956 495 af.mil. LtIY3j5NZ6vgzgBF7KJvY+22a539VqCo2/GZBw8hUeR5pd/PvJIiSjyX1NFZJPw8FJtNIuPYo53L xaVHlR3lTE/iShsa7vIyZi/CABOHy0675q25LQVCrTlteP8jku4tKx+MxXjBxNmUC1ckq8sXBvsR UJV1eIdcitQ9Re9MUFQzW/Nqe1Dv4xiHjza6XRdgiSs3A6wLDX+1/Acsk3pHeMa7NT5gU6YOMOxt WmLs0matlpYZc5Fdce0KoIOJSNeygA1ZdWwZ1h/GE79QKHMj0in8tiM7pz0uw0FrVHhDi20tAIQR 1YjJWBSeBhPMMG66RtQIk2zzUfDcuMxlUyPNcw== ) af.mil. 171162 IN RRSIG ( DNSKEY 8 2 172800 20260519130750 20260515124956 38206 af.mil. DMA9AZq0aSekRdqk7ObsIREGbC8B6v8eBFIlDlLGco2Aa/96TtC0Flss5WyKzRWLPhry4AoSDthe kjaR9SEYT0SqbvY9+c+IkRWHpJBlTJ69L6dfCldtVFdZkglEe0QJgKCiOoGdG3B4y7cMYjVbl6Nb pDh4UQdsJb5TRzuiAw1/0BYnESJ10owj5kImJZxXDVMERelXpgU7vLk7HgVZPBnWRQiesKmxAJgz a0nTUWKdXgyFHlZ/eYQ1lISuFATxCS9qQ6fVdbLG1piLka9W7XTgOFr7GS4PfA33qN4nIbL7fHJd ylJLxecuTSQ6AbbvVeuH7aC8aPiuj8Sgi+N40A== ) af.mil. 171162 IN RRSIG ( DNSKEY 8 2 172800 20260519130750 20260515124956 64894 af.mil. YnnXTMXkO8djdHZ+J+AidtPFhXp5VaAFWsvK5GAMXdK+DjLuRFTGEYzLJKt16BrIgNoYhGrQ0bFo iWAQrQTE+XLhx2W+tUdyBog9nOt4tw6JXJNPQfEfi01zE3rJu1rp6lpuydkQ+GCk95OMebkFm32G HtfyoOtDFtpLCmWojxcohp/1v9fuS0Sex05bgvJcwTaU7NV4qQdbvxJkjl9a6dfDPzdlxDm/Pi/7 EHE57aKHwu+ctbM44kpNx7CdA0rVhVq8Ky+rSlerBF1+KWxPHFXmb+ze+2uwDhe+3xCPY8tj/R8Z Xy1TPfqyr4/cEpm2jejLK4fJHP4uCH8GXPe8yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for af.mil
	`af.mil. 171162 IN DNSKEY ( 256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+TDoWYcHdY3hxp3MmvAvP 0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkudKO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJy SDz42QLFNgQFOyVj+aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcskVihm Ql7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQRW+1Lb1vfWryKHLtOJBIHUxi+ cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtckgEwagBEZH0= ) ; keytag 15258`
	`af.mil. 171162 IN DNSKEY ( 256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOiY+mI9uq4QZbE2TaUfhUX EIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZ S6R0QzDekgNCgSjXHVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1OXmIv oIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUATg5eZqKqrigQtfI7IXl1ANDa R75xRfj4jEEzXU6n5/aZVoDz0HJBmg46I5xdq8k8Up0= ) ; keytag 495`
	`af.mil. 171162 IN DNSKEY ( 257 3 8 AwEAAcEBm0szeFHwHLwEiQP7K4ZYjyzsq1VdOJSDPgflgJ4qA2MVQ/fLjMJjiBqO0jnKQgL0Q8nr LuvRsBFPVunWl3Cc10oiLVxsefBuB8nu2dJ71o8RbND/9swcCUKs64TcRMM9j6pyFf3pCh9gE/Qr AbzcM5Yw/ex3q7tI2UPwJV+aoR12UYTR2W/j3gzRDEU8NidNKwhts9NNGNyLFFpIhAO2JjDjTf6h b7CYw0/uvwoz1TQr7OMDzZTCx3qAnwaeSQdjfO+GvrwjAUHMCcN3LFPJjBvnZq1gxdTY2x/r3+4G oBt7jyUgVGJnlpqCAQ65/eAYXjy5VYNaqJQsgLSYQ2c= ) ; keytag 64894`
	`af.mil. 171162 IN DNSKEY ( 257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicqCe7r0f7N2cvbq1RCy2lK Ju9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvhO8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0M LIZPo9i7G4wLCpBbzweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q0JAc 5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAtyugELKDXADIEfQvsNAdXSCC0 xQAPEs1cgyo8LsG00/MghMvrUSROT9IswBEnCIzHIPc= ) ; keytag 38206`
	DNSKEY=64894/SEP is now in the chain-of-trust
	DS=64894/SHA-256 verifies DNSKEY=64894/SEP
	DS=64894/SHA-1 verifies DNSKEY=64894/SEP
	DNSKEY=38206/SEP is now in the chain-of-trust
	DS=38206/SHA-1 verifies DNSKEY=38206/SEP
	DS=38206/SHA-256 verifies DNSKEY=38206/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`af.mil. 171162 IN RRSIG ( DNSKEY 8 2 172800 20260519130750 20260515124956 495 af.mil. LtIY3j5NZ6vgzgBF7KJvY+22a539VqCo2/GZBw8hUeR5pd/PvJIiSjyX1NFZJPw8FJtNIuPYo53L xaVHlR3lTE/iShsa7vIyZi/CABOHy0675q25LQVCrTlteP8jku4tKx+MxXjBxNmUC1ckq8sXBvsR UJV1eIdcitQ9Re9MUFQzW/Nqe1Dv4xiHjza6XRdgiSs3A6wLDX+1/Acsk3pHeMa7NT5gU6YOMOxt WmLs0matlpYZc5Fdce0KoIOJSNeygA1ZdWwZ1h/GE79QKHMj0in8tiM7pz0uw0FrVHhDi20tAIQR 1YjJWBSeBhPMMG66RtQIk2zzUfDcuMxlUyPNcw== )`
	`af.mil. 171162 IN RRSIG ( DNSKEY 8 2 172800 20260519130750 20260515124956 38206 af.mil. DMA9AZq0aSekRdqk7ObsIREGbC8B6v8eBFIlDlLGco2Aa/96TtC0Flss5WyKzRWLPhry4AoSDthe kjaR9SEYT0SqbvY9+c+IkRWHpJBlTJ69L6dfCldtVFdZkglEe0QJgKCiOoGdG3B4y7cMYjVbl6Nb pDh4UQdsJb5TRzuiAw1/0BYnESJ10owj5kImJZxXDVMERelXpgU7vLk7HgVZPBnWRQiesKmxAJgz a0nTUWKdXgyFHlZ/eYQ1lISuFATxCS9qQ6fVdbLG1piLka9W7XTgOFr7GS4PfA33qN4nIbL7fHJd ylJLxecuTSQ6AbbvVeuH7aC8aPiuj8Sgi+N40A== )`
	`af.mil. 171162 IN RRSIG ( DNSKEY 8 2 172800 20260519130750 20260515124956 64894 af.mil. YnnXTMXkO8djdHZ+J+AidtPFhXp5VaAFWsvK5GAMXdK+DjLuRFTGEYzLJKt16BrIgNoYhGrQ0bFo iWAQrQTE+XLhx2W+tUdyBog9nOt4tw6JXJNPQfEfi01zE3rJu1rp6lpuydkQ+GCk95OMebkFm32G HtfyoOtDFtpLCmWojxcohp/1v9fuS0Sex05bgvJcwTaU7NV4qQdbvxJkjl9a6dfDPzdlxDm/Pi/7 EHE57aKHwu+ctbM44kpNx7CdA0rVhVq8Ky+rSlerBF1+KWxPHFXmb+ze+2uwDhe+3xCPY8tj/R8Z Xy1TPfqyr4/cEpm2jejLK4fJHP4uCH8GXPe8yg== )`
	RRSIG=495 and DNSKEY=495 verifies the DNSKEY RRset
	RRSIG=38206 and DNSKEY=38206/SEP verifies the DNSKEY RRset
	RRSIG=64894 and DNSKEY=64894/SEP verifies the DNSKEY RRset
	DNSKEY=15258 is now in the chain-of-trust
	DNSKEY=495 is now in the chain-of-trust
	Query to RAMSTEIN-NS2.AFNOC.AF.MIL for www.af.mil/A
	Received 374 bytes from 132.3.48.148
	;; Response received from [132.3.48.148] 374 octets ;; HEADER SECTION ;; id = 21048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN A ;; ANSWER SECTION (2 records) www.af.mil. 276 IN CNAME www.afpw.af.mil.edgekey.net. www.af.mil. 276 IN RRSIG ( CNAME 8 3 300 20260519051246 20260515043103 495 af.mil. MtbIf1aYRllAZO4hpWoU/9yz2Fig7oKpgRsWCoI4kJ5PlJvTqOV21shLMjXohKjmZaZmlru7CWz7 msaCvyZQ8yUsuvziQqQ+sUZWbUCVw3z38OgRSuPdE3F8PFQaRE7p0gCrP3LujFh7yD26ojmWGQA5 lWQJ7w4y8XlOTALbz8exgK1eO2rt8Az1OU7rHxXy9/jQdAWgVv11y1E9H5MZqboV34TgO2qkEkSu cx8c5ewcQ8BHp+O2rUdZ0WcQMmJZWoOd67uFw0/LFx6pLpHjJf3BJ040Gv6DVdXJxiy+EL2ZgClH aH20wdVIW/vnFj5dO2t6xbvNn7GgOoUwlp6tvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	RAMSTEIN-NS2.AFNOC.AF.MIL is authoritative for www.af.mil
	Query to OSAN-NS10.AFNOC.AF.MIL for www.af.mil/DNSKEY
	Received 374 bytes from 132.3.13.10
	;; Response received from [132.3.13.10] 374 octets ;; HEADER SECTION ;; id = 12682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.af.mil. IN DNSKEY ;; ANSWER SECTION (2 records) www.af.mil. 277 IN CNAME www.afpw.af.mil.edgekey.net. www.af.mil. 277 IN RRSIG ( CNAME 8 3 300 20260519051246 20260515043103 495 af.mil. MtbIf1aYRllAZO4hpWoU/9yz2Fig7oKpgRsWCoI4kJ5PlJvTqOV21shLMjXohKjmZaZmlru7CWz7 msaCvyZQ8yUsuvziQqQ+sUZWbUCVw3z38OgRSuPdE3F8PFQaRE7p0gCrP3LujFh7yD26ojmWGQA5 lWQJ7w4y8XlOTALbz8exgK1eO2rt8Az1OU7rHxXy9/jQdAWgVv11y1E9H5MZqboV34TgO2qkEkSu cx8c5ewcQ8BHp+O2rUdZ0WcQMmJZWoOd67uFw0/LFx6pLpHjJf3BJ040Gv6DVdXJxiy+EL2ZgClH aH20wdVIW/vnFj5dO2t6xbvNn7GgOoUwlp6tvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by af.mil zone
	www.af.mil is a CNAME to www.afpw.af.mil.edgekey.net
	Found 1 RRSIGs over CNAME RRset
	`www.af.mil. 276 IN RRSIG ( CNAME 8 3 300 20260519051246 20260515043103 495 af.mil. MtbIf1aYRllAZO4hpWoU/9yz2Fig7oKpgRsWCoI4kJ5PlJvTqOV21shLMjXohKjmZaZmlru7CWz7 msaCvyZQ8yUsuvziQqQ+sUZWbUCVw3z38OgRSuPdE3F8PFQaRE7p0gCrP3LujFh7yD26ojmWGQA5 lWQJ7w4y8XlOTALbz8exgK1eO2rt8Az1OU7rHxXy9/jQdAWgVv11y1E9H5MZqboV34TgO2qkEkSu cx8c5ewcQ8BHp+O2rUdZ0WcQMmJZWoOd67uFw0/LFx6pLpHjJf3BJ040Gv6DVdXJxiy+EL2ZgClH aH20wdVIW/vnFj5dO2t6xbvNn7GgOoUwlp6tvw== )`
	RRSIG=495 and DNSKEY=495 verifies the CNAME RRset

	Query to h.root-servers.net for www.afpw.af.mil.edgekey.net/A
	Received 1184 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1184 octets ;; HEADER SECTION ;; id = 29693 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . bdQCKLhhoxmFXSUi4A822LJfd6klnGlDR2jCL9uRIsc6c15rdprdv7gPLtGGvsy+2TLJNIQo5coL ODIgwbiuHpDA2oD/Kf3Sfy4xet3ZRbP4eujHAiLmrFJMaAD/Rpt1G2DPJlm8e4hWHwGWU259GWUX i1TWvUlg1bzr/LYcaKb2atn1EDFzHHs5p+knwBxF0Itkxvjcz0bVT/SnHXvNSmMUYlaZRu1nDWNs M+/1WoFyQE5eL32/ZDavT2vZdh0aVfuwENoB2etM49/B5in8wnGK4Y6vEL6Lc2RAefZj/yhvVM9g awVnVCsN9mA0pBM8wMmRk/UBq4ciXrDxOsfoFA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1160 octets ;; HEADER SECTION ;; id = 40898 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . bdQCKLhhoxmFXSUi4A822LJfd6klnGlDR2jCL9uRIsc6c15rdprdv7gPLtGGvsy+2TLJNIQo5coL ODIgwbiuHpDA2oD/Kf3Sfy4xet3ZRbP4eujHAiLmrFJMaAD/Rpt1G2DPJlm8e4hWHwGWU259GWUX i1TWvUlg1bzr/LYcaKb2atn1EDFzHHs5p+knwBxF0Itkxvjcz0bVT/SnHXvNSmMUYlaZRu1nDWNs M+/1WoFyQE5eL32/ZDavT2vZdh0aVfuwENoB2etM49/B5in8wnGK4Y6vEL6Lc2RAefZj/yhvVM9g awVnVCsN9mA0pBM8wMmRk/UBq4ciXrDxOsfoFA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to e.root-servers.net for net/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 26422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . bdQCKLhhoxmFXSUi4A822LJfd6klnGlDR2jCL9uRIsc6c15rdprdv7gPLtGGvsy+2TLJNIQo5coL ODIgwbiuHpDA2oD/Kf3Sfy4xet3ZRbP4eujHAiLmrFJMaAD/Rpt1G2DPJlm8e4hWHwGWU259GWUX i1TWvUlg1bzr/LYcaKb2atn1EDFzHHs5p+knwBxF0Itkxvjcz0bVT/SnHXvNSmMUYlaZRu1nDWNs M+/1WoFyQE5eL32/ZDavT2vZdh0aVfuwENoB2etM49/B5in8wnGK4Y6vEL6Lc2RAefZj/yhvVM9g awVnVCsN9mA0pBM8wMmRk/UBq4ciXrDxOsfoFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . bdQCKLhhoxmFXSUi4A822LJfd6klnGlDR2jCL9uRIsc6c15rdprdv7gPLtGGvsy+2TLJNIQo5coL ODIgwbiuHpDA2oD/Kf3Sfy4xet3ZRbP4eujHAiLmrFJMaAD/Rpt1G2DPJlm8e4hWHwGWU259GWUX i1TWvUlg1bzr/LYcaKb2atn1EDFzHHs5p+knwBxF0Itkxvjcz0bVT/SnHXvNSmMUYlaZRu1nDWNs M+/1WoFyQE5eL32/ZDavT2vZdh0aVfuwENoB2etM49/B5in8wnGK4Y6vEL6Lc2RAefZj/yhvVM9g awVnVCsN9mA0pBM8wMmRk/UBq4ciXrDxOsfoFA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to j.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 291 octets ;; HEADER SECTION ;; id = 1072 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 t2SrYFBW+j+SfG9o6F55gP5p7TkfKF9qIXXCYzDzv8gg67T/M80Mul4UATJ7yH7F0Ictyl6o6Cd9 +q9mJoeozg== ) ; keytag 1560 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260522141035 20260507140535 37331 net. 3Cecd/LNXbXsqbz4KRFQ7h37sZbnW65klMcnJLd18AhzOlkiLTAtdjrKd6ZG1rwev4C5prKnnUro H6tyrijJzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 t2SrYFBW+j+SfG9o6F55gP5p7TkfKF9qIXXCYzDzv8gg67T/M80Mul4UATJ7yH7F0Ictyl6o6Cd9 +q9mJoeozg== ) ; keytag 1560`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260522141035 20260507140535 37331 net. 3Cecd/LNXbXsqbz4KRFQ7h37sZbnW65klMcnJLd18AhzOlkiLTAtdjrKd6ZG1rwev4C5prKnnUro H6tyrijJzg== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=1560 is now in the chain-of-trust
	Query to i.gtld-servers.net for www.afpw.af.mil.edgekey.net/A
	Received 935 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 935 octets ;; HEADER SECTION ;; id = 50939 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260522032735 20260515021735 1560 net. mU+rhvx7KaUgu/Sv+Akk7aw3WoBUaAKok7gjdAAEDoH+Qr7AzYhNT9S6VTlG8c2GcTHKj2nz6c9J qme5+foJWQ== ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN NSEC3 ( 1 1 0 - 2a0dd0dpd52r82hiivi678uqlmkqu1nf NS DS RRSIG ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN RRSIG ( NSEC3 13 2 900 20260520032601 20260513021601 1560 net. InlXKUVRDZFi6r6EcJehiOFCuuGUTxbduyxOX+ihf7lXt3l1hzT9E/7vW7I67OQqcNzFdurTK66x aiw+PU6D6g== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Query to c.gtld-servers.net for edgekey.net/DNSKEY
	Received 919 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 919 octets ;; HEADER SECTION ;; id = 56307 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260522032735 20260515021735 1560 net. mU+rhvx7KaUgu/Sv+Akk7aw3WoBUaAKok7gjdAAEDoH+Qr7AzYhNT9S6VTlG8c2GcTHKj2nz6c9J qme5+foJWQ== ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN NSEC3 ( 1 1 0 - 2a0dd0dpd52r82hiivi678uqlmkqu1nf NS DS RRSIG ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN RRSIG ( NSEC3 13 2 900 20260520032601 20260513021601 1560 net. InlXKUVRDZFi6r6EcJehiOFCuuGUTxbduyxOX+ihf7lXt3l1hzT9E/7vW7I67OQqcNzFdurTK66x aiw+PU6D6g== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Found child zone edgekey.net

edgekey.net

	Checking DS between net and edgekey.net
	Query to d.gtld-servers.net for edgekey.net/DS
	Received 569 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 569 octets ;; HEADER SECTION ;; id = 16216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260522032735 20260515021735 1560 net. mU+rhvx7KaUgu/Sv+Akk7aw3WoBUaAKok7gjdAAEDoH+Qr7AzYhNT9S6VTlG8c2GcTHKj2nz6c9J qme5+foJWQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1778897036 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20260523020356 20260516005356 1560 net. e5XCw+vtHF5MHL8fTsKwz7rSs9+6RYxCEx9lK7O5Ta4+6dOeX1zdmeCLena5Se7EB0PlzNbI7joF htxVIKvsLA== ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN NSEC3 ( 1 1 0 - 2a0dd0dpd52r82hiivi678uqlmkqu1nf NS DS RRSIG ) 2A09L90J5OP53DJ5M5O1FL8J39GHPRTI.net. 900 IN RRSIG ( NSEC3 13 2 900 20260520032601 20260513021601 1560 net. InlXKUVRDZFi6r6EcJehiOFCuuGUTxbduyxOX+ihf7lXt3l1hzT9E/7vW7I67OQqcNzFdurTK66x aiw+PU6D6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for edgekey.net in the net zone
	Query to a6-65.akam.net for edgekey.net/DNSKEY
	Received 103 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 103 octets ;; HEADER SECTION ;; id = 55330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579448430 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a16-65.akam.net for www.afpw.af.mil.edgekey.net/A
	Received 93 bytes from 23.211.132.65
	;; Response received from [23.211.132.65] 93 octets ;; HEADER SECTION ;; id = 46994 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN A ;; ANSWER SECTION (1 record) www.afpw.af.mil.edgekey.net. 300 IN CNAME e11218.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a16-65.akam.net is authoritative for www.afpw.af.mil.edgekey.net
	Query to a18-65.akam.net for mil.edgekey.net/DNSKEY
	Received 107 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 107 octets ;; HEADER SECTION ;; id = 38148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579448430 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a16-65.akam.net for af.mil.edgekey.net/DNSKEY
	Received 110 bytes from 23.211.132.65
	;; Response received from [23.211.132.65] 110 octets ;; HEADER SECTION ;; id = 6201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579448430 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a28-65.akam.net for afpw.af.mil.edgekey.net/DNSKEY
	Received 115 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 115 octets ;; HEADER SECTION ;; id = 37885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afpw.af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579448430 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a18-65.akam.net for www.afpw.af.mil.edgekey.net/DNSKEY
	Received 93 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 93 octets ;; HEADER SECTION ;; id = 22333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.afpw.af.mil.edgekey.net. IN DNSKEY ;; ANSWER SECTION (1 record) www.afpw.af.mil.edgekey.net. 300 IN CNAME e11218.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.afpw.af.mil.edgekey.net is a CNAME to e11218.dscb.akamaiedge.net
	No RRSIGs found

net

	Query to a.gtld-servers.net for e11218.dscb.akamaiedge.net/A
	Received 731 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 731 octets ;; HEADER SECTION ;; id = 17385 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260522032735 20260515021735 1560 net. mU+rhvx7KaUgu/Sv+Akk7aw3WoBUaAKok7gjdAAEDoH+Qr7AzYhNT9S6VTlG8c2GcTHKj2nz6c9J qme5+foJWQ== ) GCRQBTGLALP4UH4EJ86LRR4FDP2MNIGP.net. 900 IN NSEC3 ( 1 1 0 - gcrtlvurj6lelqbdj72r6hlm15kttvsi NS DS RRSIG ) GCRQBTGLALP4UH4EJ86LRR4FDP2MNIGP.net. 900 IN RRSIG ( NSEC3 13 2 900 20260519031954 20260512020954 1560 net. 60hWTis/ZXKLWpsisCLN+qDct/4vsxTmW11X6H3qAeJ68D5lirhMKAG6ja8O6uOy5Ue54KXx1MQE Da8P4lPVFQ== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Query to h.gtld-servers.net for akamaiedge.net/DNSKEY
	Received 719 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 719 octets ;; HEADER SECTION ;; id = 14298 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260522032735 20260515021735 1560 net. mU+rhvx7KaUgu/Sv+Akk7aw3WoBUaAKok7gjdAAEDoH+Qr7AzYhNT9S6VTlG8c2GcTHKj2nz6c9J qme5+foJWQ== ) GCRQBTGLALP4UH4EJ86LRR4FDP2MNIGP.net. 900 IN NSEC3 ( 1 1 0 - gcrtlvurj6lelqbdj72r6hlm15kttvsi NS DS RRSIG ) GCRQBTGLALP4UH4EJ86LRR4FDP2MNIGP.net. 900 IN RRSIG ( NSEC3 13 2 900 20260519031954 20260512020954 1560 net. 60hWTis/ZXKLWpsisCLN+qDct/4vsxTmW11X6H3qAeJ68D5lirhMKAG6ja8O6uOy5Ue54KXx1MQE Da8P4lPVFQ== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Found child zone akamaiedge.net

akamaiedge.net

	Checking DS between net and akamaiedge.net
	Query to j.gtld-servers.net for akamaiedge.net/DS
	Received 572 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 572 octets ;; HEADER SECTION ;; id = 9905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260522032735 20260515021735 1560 net. mU+rhvx7KaUgu/Sv+Akk7aw3WoBUaAKok7gjdAAEDoH+Qr7AzYhNT9S6VTlG8c2GcTHKj2nz6c9J qme5+foJWQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1778897036 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20260523020356 20260516005356 1560 net. e5XCw+vtHF5MHL8fTsKwz7rSs9+6RYxCEx9lK7O5Ta4+6dOeX1zdmeCLena5Se7EB0PlzNbI7joF htxVIKvsLA== ) GCRQBTGLALP4UH4EJ86LRR4FDP2MNIGP.net. 900 IN NSEC3 ( 1 1 0 - gcrtlvurj6lelqbdj72r6hlm15kttvsi NS DS RRSIG ) GCRQBTGLALP4UH4EJ86LRR4FDP2MNIGP.net. 900 IN RRSIG ( NSEC3 13 2 900 20260519031954 20260512020954 1560 net. 60hWTis/ZXKLWpsisCLN+qDct/4vsxTmW11X6H3qAeJ68D5lirhMKAG6ja8O6uOy5Ue54KXx1MQE Da8P4lPVFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for akamaiedge.net in the net zone
	Query to ns3-194.akamaiedge.net for akamaiedge.net/DNSKEY
	Received 109 bytes from 23.61.199.194
	;; Response received from [23.61.199.194] 109 octets ;; HEADER SECTION ;; id = 57837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a28-192.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 379 bytes from 95.100.173.192
	;; Response received from [95.100.173.192] 379 octets ;; HEADER SECTION ;; id = 50338 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n7dscb.akamaiedge.net. 4000 IN A 23.198.215.155 n4dscb.akamaiedge.net. 4000 IN A 23.40.19.188 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n5dscb.akamaiedge.net. 4000 IN A 23.40.19.183 n1dscb.akamaiedge.net. 4000 IN A 23.40.19.177 n3dscb.akamaiedge.net. 4000 IN A 23.40.19.208 n2dscb.akamaiedge.net. 4000 IN A 23.40.19.175 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n6dscb.akamaiedge.net. 4000 IN A 23.196.2.4 ;; { "EDNS-VERSION": 0 }
	Query to lar2.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 372 bytes from 2.16.40.192
	;; Response received from [2.16.40.192] 372 octets ;; HEADER SECTION ;; id = 5194 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n3dscb.akamaiedge.net. 4000 IN A 23.40.19.208 n7dscb.akamaiedge.net. 4000 IN A 23.198.215.155 n2dscb.akamaiedge.net. 4000 IN A 23.40.19.175 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n4dscb.akamaiedge.net. 4000 IN A 23.40.19.188 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n1dscb.akamaiedge.net. 4000 IN A 23.40.19.177 n5dscb.akamaiedge.net. 4000 IN A 23.40.19.183 n6dscb.akamaiedge.net. 4000 IN A 23.196.2.4 ;; { "EDNS-VERSION": 0 }
	Found child zone dscb.akamaiedge.net

dscb.akamaiedge.net

	Checking DS between akamaiedge.net and dscb.akamaiedge.net
	Query to a12-192.akamaiedge.net for dscb.akamaiedge.net/DS
	Received 114 bytes from 184.26.160.192
	;; Response received from [184.26.160.192] 114 octets ;; HEADER SECTION ;; id = 28757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for dscb.akamaiedge.net in the akamaiedge.net zone
	Query to n5dscb.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 112 bytes from 23.40.19.183
	;; Response received from [23.40.19.183] 112 octets ;; HEADER SECTION ;; id = 12178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to n2dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.40.19.175
	;; Response received from [23.40.19.175] 71 octets ;; HEADER SECTION ;; id = 9469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n2dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.196.2.4
	;; Response received from [23.196.2.4] 119 octets ;; HEADER SECTION ;; id = 388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.198.215.155
	;; Response received from [23.198.215.155] 112 octets ;; HEADER SECTION ;; id = 22940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.40.19.177
	;; Response received from [23.40.19.177] 112 octets ;; HEADER SECTION ;; id = 3282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.196.2.4
	;; Response received from [23.196.2.4] 112 octets ;; HEADER SECTION ;; id = 3338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 112 octets ;; HEADER SECTION ;; id = 54295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.40.19.188
	;; Response received from [23.40.19.188] 112 octets ;; HEADER SECTION ;; id = 3552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.40.19.208
	;; Response received from [23.40.19.208] 112 octets ;; HEADER SECTION ;; id = 37589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.40.19.183
	;; Response received from [23.40.19.183] 112 octets ;; HEADER SECTION ;; id = 9472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

dscb.akamaiedge.net

	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.196.2.4
	;; Response received from [23.196.2.4] 71 octets ;; HEADER SECTION ;; id = 12949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n6dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.198.215.155
	;; Response received from [23.198.215.155] 119 octets ;; HEADER SECTION ;; id = 58333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

dscb.akamaiedge.net

	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.40.19.183
	;; Response received from [23.40.19.183] 71 octets ;; HEADER SECTION ;; id = 49434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n5dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.40.19.183
	;; Response received from [23.40.19.183] 119 octets ;; HEADER SECTION ;; id = 6007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

dscb.akamaiedge.net

	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.198.215.155
	;; Response received from [23.198.215.155] 71 octets ;; HEADER SECTION ;; id = 4115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n7dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 119 octets ;; HEADER SECTION ;; id = 1316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

dscb.akamaiedge.net

	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 71 octets ;; HEADER SECTION ;; id = 19745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n0dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.40.19.177
	;; Response received from [23.40.19.177] 119 octets ;; HEADER SECTION ;; id = 65051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

dscb.akamaiedge.net

	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.40.19.188
	;; Response received from [23.40.19.188] 71 octets ;; HEADER SECTION ;; id = 24553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n4dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.40.19.208
	;; Response received from [23.40.19.208] 119 octets ;; HEADER SECTION ;; id = 55801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1778897068 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

dscb.akamaiedge.net

	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.40.19.177
	;; Response received from [23.40.19.177] 71 octets ;; HEADER SECTION ;; id = 43890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n1dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Query to n1dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

dscb.akamaiedge.net

	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	Received 71 bytes from 23.40.19.208
	;; Response received from [23.40.19.208] 71 octets ;; HEADER SECTION ;; id = 12735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e11218.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (1 record) e11218.dscb.akamaiedge.net. 20 IN A 69.192.21.83 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n3dscb.akamaiedge.net is authoritative for e11218.dscb.akamaiedge.net
	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/DNSKEY
	Query to n3dscb.akamaiedge.net for e11218.dscb.akamaiedge.net/A
	e11218.dscb.akamaiedge.net A RR has value 69.192.21.83
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.af.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: