This may have been stated already, but the DNI final character is a control one, it can be computed from the characters and the algorithm is well-known. So there should be no need to brute-force it.