Which command-line tool is used to verify the replication status between Domain Controllers and diagnose AD replication failures?