First, it is important to remember that mode 9, item 2 is not mandatory. You can check if it is available with mode 9, 0.
Second, the response will depend on the protocol. A 2000 Ford is probably J1850 PWM. In this case, VIN will be retruned as 5 packets, which are simply broadcast.
The newer vehicle might be CAN. In CAN, you get a single response for VIN query, but it uses flow control. A CAN packet caries a max of 8 bytes, so instead of the whole VIN, you'll get a few bytes. Basically the first one indicating that it is a FC, or flow controlled message, and the other rounding out total byte size.
The rest of the message won't come until the host sends a FC message in response. You can ask for a packet at a time, or basially send a buffer size of 0, in which case the ECU will send all the remaining packets one after another.
I don't have the spec in front of me, but that is what your second example looks like - the beginning of a flow controlled message.