Signing zones with the MLDSA44 DNSSEC algorithm using Loop
September 29, 2026
Loop now supports the new post-quantum MLDSA44(18) DNSSEC algorithm as
specified by draft-westerbaan-dnssec-mldsa-04. Loop's resolver
automatically performs DNSSEC validation using this algorithm, so we
will not cover that in this article. This is a simple example of how to
perform manual DNSSEC zone signing with the MLDSA44 DNSSEC algorithm
using the DNSSEC utilities in Loop. There are other ways to sign a zone
such as inline signing which we will not cover in this article.
Install dependencies
Install Loop for your operating system platform by following its installation instructions.
Create a working directory
For this example, we will create and change to a sub-directory called
mldsa44/ as our working directory.
[user@host ~]$ mkdir mldsa44
[user@host ~]$ cd mldsa44
[user@host ~/mldsa44]$
Create a DNSKEY with algorithm MLSDA44
We will create a DNSKEY to sign the example.com. zone. The
dnssec-keygen
program can be used to generate a key. We create a DNSKEY with algorithm
MLDSA44:
[user@host ~/mldsa44]$ dnssec-keygen -a MLDSA44 -n ZONE example.com
Generating key pair.
Kexample.com.+018+27299
[user@host ~/mldsa44]$ cat Kexample.com.+018+27299.private
Private-key-format: v1.3
Algorithm: 18 (MLDSA44)
PrivateKey: pbGxY/QGvJYQWaM9NfTKazo9wZGmJRFupuQL3UFr3uo=
Created: 20260929013813
Publish: 20260929013813
Activate: 20260929013813
[user@host ~/mldsa44]$ cat Kexample.com.+018+27299.key
; This is a zone-signing key, keyid 27299, for example.com.
; Created: 20260929013813 (Tue Sep 29 09:38:13 2026)
; Publish: 20260929013813 (Tue Sep 29 09:38:13 2026)
; Activate: 20260929013813 (Tue Sep 29 09:38:13 2026)
example.com. IN DNSKEY 256 3 18 dNBgWlmYdEDiXE05FanPBDiqbcUYvubNh566T++iVbtHcbQt78wm+CJY eYOHnb33KAZ9Qxs0fCBXuSYDK8SPbixrgIzqoBhPTU5mxosQ37SktbBa Y9r1CuvYRgYg0upB1Yk0JS0EVaslxPr8YxhR8FZHgUJlnKwd/VBxkfsu x+PqLtId5wWxwxg7abXTooRGW6YLLudn0O0J7zR/PWMba+nRTmBFjD8M fSDbZdeWrEl32M9zBSIMASNCRYboK7LMz/lvGuz0GQDkJem9UkJtC4HD eHhCXMcyNUFccKTPxVAJ/3Ss5N9YiznhWvs7FtxRosBIjVqPjkMMpA7F KZ2wu9nx9YBwQf6lJvx53t+W/XwiEEYrms6VltREcHAQLxJEFTmSSVmI Bh3R372+lbYWiwIOIk//fYeJKJi9ZuZcqOrIj4vXjJ5ZhEb6hhxWmfMP TcuG/XQLMt9oSCegkuHOZUIYy9O0n6PgsIEtkuVFD6tZS5mzdO9hKlI/ X6imV2ujg6s7q17N6dhJwEKyaTKcKsELwNHRZOy2ldHT3RaoHj+LERP8 mFbX1OWth7NUFpAgtjAtsHOjynXoivcXNou12HzXXr+Wkczhs0Oj5TMz G58hOD/69nLVKxv+Ylm2MHRvoUCGZf4AEtZMzfXcH+GpAv3kyWUdmcj1 d/ctzjwbEf7d1MW8DQ3aefBcvXqVC/dfZLGM0FCyUUXCf+E1Wcl8GaUz HXqRdSVL/eUKlmsGMwCHRrO1RfrXNPfbDLXuV/qmdFuqhWKnKendISt5 EQvT1MLd8FLLmDQjR65w7aCQF6FCbvASgk2cQ7e/yAndrKEMjdH8pbaj MdhQhrDW0wyRB6gfApwVtFAS6E6lCnau2XuBlqJxU9R/1PZukxAHum0X AEKP1yi6JTok7VVEAZFMYYQ8pJ4+cXVwHGatKLgYUUz63haKG/RWFYE9 XM0ofLoI3Xn5IAk6QPAkEv2TX/C9skmKOyjOFTMb5ituuClQeD+Ddjlf YGPhZZCD+MvAz5u+Mtxp/fNmwiaj1eo86Yx4MzyR85JGx/q/o1nxr+AM c8ZzIBRVp2MC6+ex8/tHyhg7WPKEQQQdt4u73pPgil0CzyqEuYFp35JX W2vWXWsXtI4dBfBAN9nPYWVI8xn22OapaMrzEaPZr6Fs3aVajP9jQtP5 +YcDZmsq1HhPthEKxjQ0Vvenn2xGw+cod97EmqfOot5Alu8Yw8nAa6c7 KwXeqI7g7M3vGwjUTCKt+Jk4cxBmOWaLLWkn/SnFhsfm0byxZ9zmozg0 HszHhaYywK2C8vzB48AmrpN+pD3rdKo6AYCdIKo+b1eT0A2ESL6YZxe1 bX0jG9as6SPXhaHE8+DxhjqbMgtdNijEO/FcJntuyn3gbT5CloRClMZQ jbnCKaWk/dWJt0faVNItNs+F37jD6nDv5RaMdTv/LJY4ZJ1O0rkOu12y di6H/zixaJhdQpSnW20T93ty/KDpC8G/7nZAUUzzrHk6xPLNhTHGvzsO nLjSvnjij3BOuCS6AerEG6Z2l6nNT1vWydNR3MlsJ6dsyX6aE51cR6Wa jv028PgeATCIXgGDDCX1pUuyGSrUzXo32OcYgEClr+thbkfu6rShS+s+ 4QyKkLoAki13A+10oFx48E8DTZt/QgIFG4E4iBzKbNpXWWXMMw5LRGzF AKGwcbxgCmbDi0BYElyPV6h75fQrMEFCoqHnNoe1OYbEy45UWObnvK41 1fLTj2beU4v/tg==
[user@host ~/mldsa44]$
(The DNSKEY key ID it assigns may differ for you as it is chosen randomly; it does not matter.)
See the
dnssec-keygen(1)
manpage for more details on its usage.
Sign a DNS zone using the DNSKEY
Now that we have the Kexample.com.+018+27299.key and
Kexample.com.+018+27299.private files, we can sign a master file for
the example.com zone. We use the the
dnssec-signzone program to sign zones.
Let's create a sample master file for the example.com. zone, and also
check that it is syntactically correct:
[user@host ~/mldsa44]$ cat > example.com.db
$TTL 3600
example.com. IN SOA . . 2026092900 600 600 1200 600
example.com. NS ns1.example.com.
ns1.example.com. A 127.0.0.1
example.com. A 127.0.0.1
[user@host ~/mldsa44]$ named-checkzone example.com example.com.db
zone example.com/IN: loaded serial 2026092900
OK
[user@host ~/mldsa44]$
This zone's data can be signed now using the DNSKEY we just created. We
use smart signing by calling dnssec-signzone -S so that it discovers
the DNSKEY automatically in the Kexample.com.+018+27299.key and
Kexample.com.+018+27299.private files.
[user@host ~/mldsa44]$ dnssec-signzone -S -z -o example.com example.com.db
Fetching ZSK 27299/MLDSA44 from key repository.
Verifying the zone using the following algorithms: MLDSA44.
Zone fully signed:
Algorithm: MLDSA44: KSKs: 0 active, 0 stand-by, 0 revoked
ZSKs: 1 active, 0 stand-by, 0 revoked
example.com.db.signed
[user@host ~/mldsa44]$
The signed zone's data is saved to the master file
example.com.db.signed and has the following content:
[user@host ~/mldsa44]$ cat example.com.db.signed
; File written on Tue Sep 29 09:45:56 2026
; dnssec-signzone version 1.99.23.19700101000000.000000000
example.com. 3600 IN SOA . . (
2026092900 ; serial
600 ; refresh (10 minutes)
600 ; retry (10 minutes)
1200 ; expire (20 minutes)
600 ; minimum (10 minutes)
)
3600 RRSIG SOA 18 2 3600 (
20261029004556 20260929004556 27299 example.com.
sILVqIgxR4Ph1A5u8Sq3IVI6qyAeiHWvIK9E
NywmlMGG+uxCxL+zKjYuORfLcTSBLROlv5/l
fkvV0CTvxnZUSkdTbnmUHs+0cleh2A69h9cl
uSBEP8qggomk1nKbXsj7NHCXG5BA5rEv07ns
tWd9azof/PPCQxC7AEvsoZpDwzG6VR6VnY+L
pYhy2hTV1uDgBAwyhkW9/j/Abtlu0SwAsh9C
nVs9xvxhDm0qi1+GgQvGnTFF+4rHLpeI6Y/c
LJrmyVypcpeISwsrb6ohhNuLkAIeWQBbFNpK
1BPAwQ4Ic/ixkb8UkjUk/oq+rD2/5/d0PgeO
Qy/3mfnstZArUAk1NcfpCXwcorSOeNFGcgdh
IZ7B/NHNpk3Xs82qdSr/cctS2glAqrbY+zdS
DL4/m8+Vr/8zCrKUKe6QiPD9czP7NW3pl3Kp
6tzGCN2Y3qXTElAGtcnD3Ut+dWYatJo+ybap
lVSJC9C8MVFnEgXBjrU345FJXg/r1Fakpv8J
3cU6OO7K4TLy72Wu4QzxSqBlim9xQuwCKfaI
r85+0lMOCFdk2wJi0TSvMWRFh3DbEnew8+/g
6kHvQ4gZ0lmQJJ5JfmT7awhXsHmtlxRSoyng
ZMfUvu0x2ePATU8uSvX/+L7bxv6phOyPzBZY
D1fjRbmw3SbB6qh8/3Uv6BeNcmLM8EMFL/U/
ymhMp3y49GlKN0666XVal0PIVlbs3CCEhIIW
UflBkrA1vFuJpopuUzpwOIyS+b86NYAmgwTR
uQBeHuAa7DdwJPyP27IupPFIX5ACgrMnvveo
hG322ILZsN6nhv8bgqmTC6r1O8Ibb8djzWR8
eR1q0z7EY0rxXKShJAifye77nZREYfR+H3+2
n+/G4pgK4T8UfffLr3ZUkWauYPh8X/RMsePi
RVRXFJK7zsTKuB5DhQU2b+lVqLOUjGgjEAAC
KJDhZMjiO3TLAPkBs5abGhTpljp+xWqDjtze
oW9q/hI3Vm+TGCEnqONuzelNyXoT9TbKvo4w
FVJ05w4wDtYq0z6j3BCVibTIRses/CY63o2m
0IXV30OAQ936H+CvzalOqRM0BZ2iYHLTdB2L
yPRZZ9eH9CHIrhbjoRJXS/PV1duM6l+v+eyX
sqOUGlQwrGbd4g2KVbZ3wacOmZgfffSNCZ45
nl9zWHs9eu5Y800ntH7jbMiUGPnQqRC+Aj55
nxIdkGurJ5bugnkEI95HCwYoZPZbX6l6q0Vc
Jxq+LgFKrrH5ZZsOTz+LfdpyOFAtekGKi0/h
EJKYD4xw146KTgutW0Ep0pkeeFfNNdF4l2jl
YQ3j774eDUGV1epI//1xxBybvQtzK0lMRegA
3Ct/KL0+XaHHkPlzkazEnKXo/WcByqgyA0Vh
4mUMG+pzBNHhT8ftx5FC5IUNxs3ADVxjlEB0
rH8uHgONlcFOjVqxBl6q5iQlqAf6TBXWkL5X
WSCj9CYWGWp5a0TqlNUtrrefpim6sF0W4dvu
Env8DD7TGDapSwVUS6NP+sXrjHAxoCwAaUnr
qFrdxfXsAFfIpFqt7mYIrv7nBBSCREhWa2x+
noZD5IEFtSoKhfUEihF9eaM1g3IsldBRS8+5
IOouaqKyG6+uj5NfKlhwvCQiK8J3bPvqoavz
61MUGB/jst+f25Oqq3lIT8mnetXSPtPh+KMN
xTVMayIs3KcFkxJo5CpX5C030KWXbpWCEcEN
XFWNtt1q0j+ZzyARID8rabvn4x6EfeShIrOU
mhLPh/odt88zW8jTU4Hj+HR369XpSEkj+wW1
+mbrQp77qpQnFXIycBm+yPaH/6y7u4TdPwcP
lcjxp5yexuUhw4jwjuzFTFBhKrhiz1z0cBIB
h4IRHGKENvNZO92MMFEuOBtQuifQvA+3DH6M
nM/WM65MdrC+yzdjntKMf47x8YRCNBezYXj3
jBcRd4DEi2UxWiOoQZOJac9bh2lRFXkLVguO
PwGzJIV08ELHGj6nXrd0oYA94GY2ZDEduUJW
L31JconIDz93DH8ugi4Bk8k1eqyF1FTJytgu
jHav/HRJNxj1SS/8akx5QKcja92SikmtuE0j
dWL63ZUDuCUGFW4Z9EvDr5xqX5mIepdhsaFa
yBUjIIW9dmj8n/QkfxpKlEYsyqvEr8EbX7p6
qhngXswZRzc54fGXef6ELGDOPQpP11MdNPVi
r2wKyGmmkv5Bf7HXY2o0WkPBMKzhVaJoRhH2
lhukORTDNDrlYIcg7YLsjJ9nJ9zca3BeR4Qc
SK7N+YH9edElDXeST0l1WpRChEUY1mb4dSwq
m8lah9UH2yde6CEXMIlWJM9wnTu0jNChE91E
bM0jR1M4MqOBF5i8DSmOt35fyLUtAeyFAAcT
6CP6P64h+Cn5Kx+K+wF22fYoWUDf3rZy9p76
zPZmboArjhy5QPnr/gIXWAh7Lo/KZZtWyk3K
DslmvrTtKqskatbrIuLDaPwovGmyrg+MKuZQ
G4mjBVbeHXNsAnmkjqHt7oJYuQL5W8ZuI5Ko
ujcYGvOVHbSoJsg8782PB/n5kT4+C0HMe0UG
ksowM14ZZWcOeSq9AoTZNKRSuZgunxMUHjQ8
nicXXa0vkxgzmN4clleg8EvpTEEezi0tDAqz
Xaiie+TshuxCd/QSs6LpgHD87NU6Y9K+2HEk
ey58FX2lat+4KX+Fc+5SuP4ROaZ3IZBjaHWU
OcUxlDNUc0mSJ3WPU6jNsValANj1AerXZ/6u
0UGL9k19E+PzY1hhhiNB3yPQ65Fu+jwRa8X2
2IoyVJsIHbNChVfOUYEcREwBeQmgOn+hqeJv
FhLoHpfu7ITVx0hSKzEbMzvANx/XqSJEb4ND
Wg3tyH/0xeoVZVs1Zxx1CYFAiiZvnhVnh5EK
tRBqcO5oIe/2IvdQNFQYH2q2tsQcCd0/cqYJ
Y3AccutIIX0zB5RvUwKWD1eGX2U7n20e35+w
HFFrYe9OC4jaWROF8g2ymezUL4VtvLH1X6Eq
h7J0jHKvrNcOYf1phMMeu+VTpkb9KjTNX74I
2/eV2yyjJrgAVX4hOelakqY+MdNIHPtx5sGX
BE7ycWi0GBWKK6nEhfEO86hteJOCRlHbpVfS
ZAiCeXp0wSG9lRnlf6qBqhhQyRCZGPgFIeze
SKwEJIRNFiN0eHr3VigQFBsvMDJgbKiuvcDd
4wYHFh07R1OTpaiy6OsYGUVGVVh0eXqCiImO
qra6wdPUAhErMjhWV2Cp3+Lo/QAAAAAAAAAA
AAAAAAAAAAAAAAAAAA4bLjs= )
3600 NS ns1.example.com.
3600 RRSIG NS 18 2 3600 (
20261029004556 20260929004556 27299 example.com.
Pg2kUjA9oeROq+ISGnLkSv7m5QwiTBOBiTiD
Xg/HVHNkfDvtNw+N+Bo1rQ+QxtRXq5t4ORPl
5IQV/aDepbd5EdR2dY7g/Fbl5xZVbLOQwWPC
9Ua1IV+Eabv/EEvTCMYs0eOyENjpVPzIB9lK
L9ZO3mDCLjjXHFxG4j3iW7A9ez7SxMpDCU7y
u2XIoOWptrHdipl4jafejvtjaso0Lw209OXH
Z5mZVUNcK/00gIj2TTqMgx4rn+46I9FB/N7X
CKYqHadIPi2JkyyKNvpvVxhNyEDfK6LLsmct
x6cEtPMfQkgGqqHMJrV1Je4fW8bgJkxwOtis
wbzcnUYTvzVbuK62X3ralVvPI1IKAOIVYkzL
fjodRpFnqW/AkHUCt7eWLtbMwdxVfKn9EbML
vxTmN++MLjvH4OgBGZ+42bA4UDelkH2b/d7b
V+IrjszLECwmEeRWpLN1SmKhx7YKyNgWHytw
wP52HnU5Rw3bvV38t2OkE2dt29TKAZnDcUaL
+iQ7c3twdWM5r/Grtx6XOP+rCtQT1HtJmXrb
PNv5OSp8xA/sAjl96BKEQwsiymqplTNIY1Ze
MatQymgaTgIMV3zjSTaNDuan7PZJMJcucBby
3eWht0/b7zHBVJgxgcQd0pumhqxe6bijsEP1
opTuyqThqf976rWt2WAtw9LuCIsOIyXPZ7Xn
fZ5Cpat2dQZwJ59b9DOP4hIpEmiAmYrrom/J
Er8lEFtNdzG+9EQEZ65GJwn1XTphxPTj1ybO
3rhRRa6fYGzEj046nQKjD+0iucMCstvE3PxR
kh8Q15CVIOCJTNiBBr7QYm6JIR+Zx0zG5JRP
eTxkTNyIUfAVY2zLF+kdiuTTtW2sjim1c6d9
+dqISSMtoTyS8OE8lW8YHFVf/JbVWSPbiJbz
EYI18H5DHDXmwc8JSLM3uqK/QFy+vlvHQX96
0rou+5ZVjKE9iMTgf33mkO7lOVqz9NMur4eR
YlI8KxLsvgVhvzZVJw+yis1zq90r4pU3vl79
+IkAFl4JZ0xNTokLpcq42xwOp5QvpHd/z4zV
ZRpOSpinrs/GDLuwNsf+HzRU+hMHjNMLTuQg
EXM0MOwvSXMAjzFuFHPq9zvDIFk74C1am1lU
GiGYDciOG/G4aab0ydGayD73MF5fSejDOgEF
ruOgLOGIO7liwR26tQoRIJloZAmxogKQCFCd
Z41ptaaiN2F7Idu3/z24Qnrd3x04AJ1QM/cO
7//AsFmNrS2dXLJcodaQDDRKWRxvIZfrDBTe
gK41G52p8tQLbCISKZ1ag1QnuGlDgDdQT1/G
wLP2NfQYAXYQQlIB4tNh8aZevuX9lg3XkKcS
JCrCKPivJIASUlQib8QOrqApsyGuHoRf4W76
p1RNKFh0o62jOJj8CaGMRQT1OUWUvXKtl9Gm
tXgT2G9hYT/b4IowMvUC7RoAoZMvR+nj/MyT
e77nxr2IY70jOo6UqjAAVBDTJ+IPQKlmnutg
i1KSHadDubD8Ts4AFqCkxxunFP7Pwuk/+kFh
/pFsjvmn66mhGw6xT/Tq4rR0NyhLdvgQ8CtJ
hETE+wGZfvwkXFNnay+Jqf8SNmQW2OczQDD/
bZBLqfavUoQbZGcMCNWZIp3w0NkTDXkUVjKT
ba9KeqKPOptrGyExbdxFiFuUZXrz3qLcJHOb
CZ8JlabSI+/0Wd98KkfVA68F8cuERkgALTau
QBhbgskBQH2cHOaKOvArqU4IVlhB/KagRe/H
QNqIo7Co5ojffthT04DTx3JnDx9tWZD3p+aK
48hucTFqCtPtLZfofYyHdaF7+SwlXMEdcmGh
sER0HRhPL53RrJQzgpjl1xVA0wPToSEXpZIq
RZbLbFqfgeshqhNz6Oo6fQR6l6cSbY3m1Ap8
CjbCmqBskdDB5NLoViQshrK5zbeKj1nx+kD4
yc1D5ikiHIHMQQgoFL+lHAhp41xAhiGp7/1U
4o9yunFG4mZVh/wWhym3POfqJDLWNsef8W93
u+dUNdynNEPPk/krq13z1tGv4xUJo+5wKCxF
ioiUSKEI8saJgxyIAvOKwz92+wCzf4UjCn3o
ORpz1Ekc/EO9aYh2SEYz70hBLehZNheMiRVk
R8D7bdw5ugZ66Vw6vnBAuBjtvJvy6pEPjapg
heB1pMO6HTOkMNwhpxwNWv9rit0MWKk8UMdE
vocsc28CGXU/OzGozGarOLRoKQU3WfVgN2ae
oYddTEKm1P4rFLekiylRve6JslWjUmOtuQP/
YUc1qPcivBIQgAatKLI60g4mtggf6Fxk+0p5
rZov9qyIXwN4jZClUcn6kI2806pJTnYotHdb
hwxDHdwb0xzeuH8jRiPoCYel4hwqen0oDgNs
RLQ57KLm3H/5ZcIp1/++6eT5Clzn6DXOl6RL
O1GtnsL2yjIkazc39z0RoO7cPmToxa5te1Br
DtI4BSVmFqz3DZ6qi6VYOs17m/gIVebUum+T
tgifA3mn3Cd8aa7WtY8W3DT9TNthYmLoDppR
UMUNLnJ+A0JEgTC0usxz5wN1aFMr+RkpxmC2
n8Q5oK+3WdDJ0SKtjkDhSEcpw6+6aqoOqZ5i
EFpVT6fvIh+h9kogC+w1l5yWHvDACQxmYxYX
HyLmRmb2MokM8egHZC72WkZFJeW1dkes1pAD
VfOi8jaeispmOzZau+Vt30IxUV3aRYMMkK4r
Fd8Pb+YM9g11xSXMJch8zU17kGck8DBAVfz1
dPMXyZ4iXaqrYsf953Si3fykv4FOirtgNm+J
rhWvuZ1o6rfmsoc1DFh5oa+bmjIsThE3rIM0
Its9VXIYXOM6BfV8Xwk8CoeEKbI44NFTuSvz
bxalgoF0jewf2RAaPQHnABq4ZUH6SqCbvdfM
r1Xoyw68e1ezUKh1+MgkBP6cBoFXeO2sky/4
TdwcE2GlI20aBrF097wCumu0wHVsvF8BH0yV
Y2hgyI12B9QfEqtm0FavVusQXA2USt+8jx9M
H82d1ph/vArhDAzigR1yc3SeXZjj1N0RNGKD
tdmzKYU7ljvsCTz3Q0gRs2emMeuz/IuAj+jL
o0uA5w7EgJW076uasPAIYcPj1nNpsFkHbOlN
PkUhxIQ1gERo33Oq389vXGqWBHY/tQsVjOI5
BTKaG+FvNiYtOfT93pZJTlZigZCpvcDJ+g8a
QWiYssfS1NnyEh0gJDg8QEZXdnePmKClrc3T
1dvj9AUPEiIlKz5BRFhpcXZ7gI2ktMrq7e75
AAAAAAAAAAAAAAAAAAsWLEM= )
3600 A 127.0.0.1
3600 RRSIG A 18 2 3600 (
20261029004556 20260929004556 27299 example.com.
JgplpW3johWVOIhxlbCZ1EpQH3p4AwM74ySI
fMPaLGiZ1DtNFyTvX+2+EynNaYxgPIt8FGqU
cAx3rrf45HAoscRPfshXnlbgFVvNyr1HRyTo
Wo/JDgNjZCTRgW+7JG+QYIV94JjrYFPBUbqU
M90q2qcHxrjmOVEvPde5iPL4Z4ne9kGR25I2
A2LM7y3uQpVSoS7WUwe4/YmY99OZAC4d795O
H0rS3xw34ThpOHq++mQ0AD1ntir9CxqMu2Fe
ZYHWR5X9AvFshIGQVmazvp5+fGUBnbrG8pje
wwEkqzgc2tVPvg/5NXzNrmqgAnc5MtU1UAE6
Hspa3ji7J47PL0/z+DRPmOARKS3lX8IuIEPc
E0dEAg7wYDs2jXg8LcVJNlKSI2RL6wUPELKc
4Zm9JNyt9kBcyez0fxzqPdVaY+W4iwkiibe0
ieUnwycGRQKPg4P3ebnxNF0ojEVkN7VSVN+e
NeyqTxSENcSAPkIN+7bdpCRm6heE1csh3hCC
CpwiJ/qpxATnGxrbfJTIjPaRGyspSzYOTWBd
4BZvcSo+OYJEof9T8sgEAXqIgXk9RoKTgNBi
YMub0xkfOcxIOgfAj0Kq+l52nk8XAuN1ZnbK
NTqgl8mCm8eeBQ3pYbPqcupcHYmlqlmKVAMN
OqhiNtOVWGNj6TWYlnhQtJda3qQV1k1yXTg5
TwENtOveHn44+reOE+CWytnlVbKtDGo/ifVT
Y0lDy6qADM9mdwbtKGMcQVztO6VwwEtEw5f5
5CJl+VBRJ/PYcAN0HsGzojzne86FLIDZd06P
8d6C3eoNilP+RkU54eiISoEtj7qjRzzAlwtD
Saxo9XfwEl43JDsjQ9Vgs2aF9au44LmG2Pxp
QOqkR0dvIsMfjJyxWy3UrLAI/1TzMPRt46Le
wDdG0lxrg2Q1xtC2Q7q3CRLV/nMxKcdmEVI9
cP81HhyB/LKRGt1qxLeI+LVhh0NaZRim24lh
ZWXMwSUmj+BL2PmfWmagNNjioaE7+ww94KKk
HLFLt2IUAR/xGcoemsCZ6D3Fbnhp/EBZIb64
EC9NGxRi3xvfZgvJnqKbcp2qjijNZiW7Ern2
wspoDPlCLGliYXbw6TwzD248wXf7EWCq3j01
iUxLM0CtuGB37Fb4Tzi9OOnBpNecVOIolWM7
Vh6kmQ8Jzgr6GmdPHgD5KW4622LXCI3TEpLR
MV64N4Us8sQ4m0LnEE7QpNv/afCGxZ4QekxM
7NaYyKrgzb6HCP0CkzBaSkWV2v6CmW2ZFclw
K3dA2j+K5fkaEc8JJQ2tv38wu3Zg3h+MlBDr
mgHMjISPkqh1f0izPtwcHnsIg47NwPWb5eZI
Zr4GC+F2FefOOX5jjYywtDd0zBQdBFv/VyIO
wQKhVSkKj0Mcgd3+URCLw8k/yi8GmSxpL/4F
2UWAh/DAONKE2R3OFTD3pi6wSpp4KTdtylRq
QRRuSl50odXAl/zFVwnL+9zi3hpQ2nfDdSUw
gSE8AL2QpEK2UC9JKts14hDvhOiv2fMoHniA
BAtYer1bAivUIZqhKTjIqpFxy0SZLiz+doYa
3isLXERX/e/fVuCURpctv2jugTGLthgmNSAP
SGzoOUSMHcD03xyGIvQPv22ZN69y2+IxZC8S
KFjrj7UiOZbgI2bloU43fYpYb77msZ/kuNV3
6N8GEpsbffYfl4GQ6Hbcn63axYLBCY2bsz1C
bHYPt0N9K6AEoXXtyu68gJQUDNoTUNjlPXBY
wIrKsaDbXTX9xZO/hY5qo/HHBQb2H6QPzYDC
L65qDAIpdcsAtDFDnrJKTlZhdm3yaoQtjxWE
2mUJkkv11CSXiXXKTKaZwGIBohuyF80Bdnkv
3vO8844ZgLIJ4vT7mm67rw4+yjxEQexNqon2
FTtL57Z/Bqmuaq6Nw4T1YNIQTlicmf/ciKkl
6jdumrBCU/efHo0dzn548ssWeJZwVm19Qhvk
sWISf9/Tbg08P1qqr3wA9HkCOIy2jKLZkdTc
BUR4sw7GjlXid1r2hp9vKlSdBhCC7dxpFGN1
LbF2N8ZUO0Q9AimqQSQcdl4RQoGETWZb+kcI
G7pEi1mjk693E+PaVVq8OYd/VeT7VB4hsq/y
MMmGhxt3BHDS/EWaD2Lr8krFnelOUOwnTJFf
TFEBoO3fZh7lQcsf+qCUKKwzrdKPHCC9EKoX
jIvBOu0TZykMkBD56OHCWLFiLXdKntAqs+ip
RrakBW3mqqoYC88LlP/agCXnpVAq3Xwj0SWX
sWoifjYMJBqz2kRyx+oQwGTn0h3pIT2ZNyMl
Wm7RjuU7tUdAqBGGy0VNGaGwqt8rFbDrlU4B
bYbO0KBSbUi6mfJRBIyXajIa5g3cSyUQrg/t
0HVIKY6J8/GoozggMO63qTwr2q485DA61lKn
8VZYCcnbRtur/Xi+9PzJeRgPQrW1wsx6/16j
cDBBVtbXzWXxUeEILypqrkTU5dW6BknHUGEX
mTRVfbXAhXccE6+IbLv+QEXNKEeAmZrq/fXy
I0Ez/MPjHYhtymWuLeM+iOlvDSMMudC7akIO
aPi31NsFynPAfdsiAwugg05FLxCjaUaEYWjB
KtjHtaC3RsRLrrg6PvJn/mavu+OEZzfQiF8i
52tk0P9mVe8lKDM2yffxmT5pZzpCPYc0yzEm
eAaiazenu20T3UXFQZRNDSj4gQJ4U4y07uv2
PT6HBis0aVNmVXyB+t10GKJ16ZvUKwZskZZ3
72lBEHhj8kssDRxSQ4ye0eMthkBhGnAm1KEz
sGQV1Zk3ytg1YUjAVBJpm3b3gQWLG8lRjpEm
nhiqoTbGr1XHLUhuQ8XrQ9AztBi/dscIkurN
gcaq0Ui83oKBMwO1zfGX1CWZ2731jI0fpq7F
Rvlz0sK5ywlnV7NYmLXwqC9ZWKE9gcy26MDA
F46byi4GWiAHGNHFiztKN7+S0GG/wg9mgNBu
v4y+oGuLRiouGy507AH/4nhWFYdwthNvSr+y
GDx7Oe/DVN6QHrVFzF0Lrei8gQlg2KfrfxNS
YndJ0WIvE0yQx0xc+/odHUSEuMKxG83W3gTN
0S+CnmDzZZAcAMxT1IJrZHbn/9sXuI6ZX880
Qhd/V5PRyCnVwqxJ7UiQH6JWDVgflFlCa8TC
Untsf0s/BsZ6yipzNqsBEh8kJTo+QEtQUVlm
bYKOm8DDxsjy+R9ZXW94gIeus7S17QA+U4OL
jpSusLO9v8/T/khVW2NmdImKjrO5wtnmAAAA
AAAAAAAAAAAAAAAAABcjMkA= )
600 NSEC ns1.example.com. A NS SOA RRSIG NSEC DNSKEY
600 RRSIG NSEC 18 2 600 (
20261029004556 20260929004556 27299 example.com.
1k2j4XxTrcO8kwP3C+1yo5iLBMsk+9jqNps7
5H9KsvhVSBDGXYsaR0haPQa+wr4p1bmFwzN7
UP6CS6xIcwcsCbY44i0VNQ5c+QIE4Hm9lJwh
M7BLmPALPggOMKx/WR8dt3TV5aeRHRqdGFvd
MoO3kazEyROhhv0l0BXaPsYXSBjVD5Pb11If
bo/fcBOyXHkv3F2slXCRniNlz1piBJzILPVY
5z4cEHrkcVPFyKFiCeLxSerknIflGj1n4Hqy
sMHpX90ZZUQ3PhjR5hDK80Azf+9aO6tI/rIu
RG+TcDmAFg2ySpfG1ptDnxtT4hASSFGTIOIW
XHcgTado1AMJo2z/nNbgja1DF7ZkMj1sRK1k
GmgPNF5fHafi77lU+6UC3U3rjJYFeBscqlUl
pfZ+HtLzIsn9VSUWgeIzHOn4bN4YLcQujizR
HjOkUPxYK3oOYYOJd4IA71jy/kJ73Sbl0FIU
z0UJg6uoNPnkb7a8SrMTc5Z0KgqSqnBmFZh/
vucYLQPVXANWCNK46I5Q017Re8OJxkvk/a7t
R+rcuMWtoeXbwRNv8+4GgmLp+0OK0rxaeEx7
jcX6P4411FY4fcjht1S6xgzaHhcVldRmogML
koBQT+WkwLyRQ9P8gyb7uUiH722nLq7rT1fj
MePi7wvz2ETef6jy6FQ9axUEdCG1wxOT16mx
+x0tEy/RsOpcfglKu6njSA5Yu/RZyP5TNOCL
cmkpGjoALQEwB7sW7g0aIklT3QbqqAUqDaG9
2K65heGHM+rVdj/nhR/R1PRGzd1xJMiWO7fq
zeGrFVp67cB06kltBSXJZ4lcLnurpQHgfrHC
YwojqcAc+QaVNonjXrrr3YSvoaJoNbMxZOX/
cXRhrcyogCr8/k3t3UN3ihXVner1Rcv/h1dW
wTVPBtkZBVckd7O+wBFcFd2xOULJRI/YegpU
9j97vn2EiagW6Wu8COSd1+NqLZ2Yd1WA6qZ8
VgLlIt/hS+EYAghA11OniUq7Knq8h01jUCUe
vbDhSrs4XkntYDVZg9YKIngLvoX7Eci4Z1rl
C/Cosf3Jec0FOp93WWnk6EiYQOGkY2MGF6ol
aCtfimE3pIyTXpDf33mH0sft1dMw/siCtBdG
hUpW6E0ZEInLirMVOn2QtPCYkKgxM2oJ1j1o
5/HGq5CZCezwzdu94H4jOSXocfBqPUHT2sGS
8qPaOTlxtT4RMqKWu8YFf9zkKUZJWMuFuvvD
UtaAguVZk3kuNGL/zIE2oKhhsaY6sDxctJYN
rfnluicEuZFV+yIY7te99GUKOqcwJzetgiq8
IEL5ETkI4v+0BNYrrN5ROq1lu3eKPNKyGwxc
i3erNlKrIVJQXkUaO6QL+BTOv86YwdE/sRPv
sznyprm5Sk4D0BfEuRqTr44QR7tVaWKKxGAa
H/YkXU0+l9eLzuaAOKdP1Bc11Q0NwLJyHuLu
ytYfPKh2KOQLivkp3tErBfeBAzECGqKUD2l4
7fl7yl4rksz0cCffWGv0jVRtAoEdkEISeIEA
0pUPBCezLBCqRPHa/qaBWOtqY08EvrqWsCi6
GfEKXgqPNiw3twzHbReSHV+rNMt5eV5PtK7b
6j65tRLjGI7GwZBOQy+NfGDDg0vEoXeh99xs
FytByySjBZv/gQeP81shH60Aq5xOgm5sCc4P
X84yajjYwwcN0hN3BcWTq+e/a/qudhpSG9f9
h1TbXLUkqqB5ecCUwmzdtxfHz+cHfVkIc6Oz
qwA2cqmUbMXH2oIcZ0buLltdqn4t4BxO4Hzc
9BOQIzVJnZbrjM7UkBL4A09TLtoRtZ+aEtpo
fxedvKi9ny68FX4KmPgkl7Hc8hiTNY0BahFa
pEyXgHzNub5IdiPlNQ2d87nX3H6+fPS6aAlx
2zf1ERWNz1yHc4sJb9hzN3bQWWDNXYcBvmJU
MkKy6wmXQjJD67z8JULk/kTT7zqBAPv0XUBJ
RiGHXscaqZ1854THPrncMFDvl/ioN9hM7d5T
qnDRmRs0YkmAzU3qkFX5n7HbbbIPdlMsPS3k
XVXFpQjVm07LrccLo5OIJVThWkKEJp0oNXol
gqUbnsLr1LdE85CUaJiCp2b0WtFtb/x4kg0z
zFQ/naJAdxD9jnT3I0ZMat14YGzWWiDQLq7Y
W9/if+gocoLLbS70oEr24mav2PgQz0h1rkli
fMHfjfDAKIJBxqnbW8TACp4F29N8/OPe7GNA
roHfKgLP7xJLtl56wSOTAovXdAxWJgV9d4Kd
wRPbrqQYHvO59Ti63ll2rDwkmBJzw9HDGCc2
UR9hUtiSfBkddx7++oty4aEIQoiV8JbSRZKa
12O+oxTNcZiLaVZnPwv/fQf3Zu4XNyFwWGrJ
teuv4sFRRHXIGiJFEdZi48g9ksh4TSt89Gk4
KuRYJ1vOmUNJY1b1z8ufEB9WhyWAuB7WfgbL
xby/E9hwKprfiEk5uu7bFCI9Is6WSakqJWpR
Bi59QcwseudexiSJPfJDL37+mduzT/2MqveJ
gNARUrpMySWvkVpKqnawS1p/8hbKsdqo2OOe
vVag/yg3x7xGDy4kLJsYE8X9A9pw5Ze2kmYF
ubZqrGmrVZHQBbV23fdIrJkEbHPRJ1eDRBd+
c204xF/EL8L3tRj+kob8vIitPfJPPzCW/f2C
mBSk8ICwgWE/p7azliIOI5yb7Z7hknvhle7Z
aNtgyj73B+khAavSS2ppeZYs85pnLktD0nDd
qLmucOJ41Puow+AtBYTyQaXk4Gh0HvAPHI+f
8TaB05JDETrfO4Lub6g7gRzZZpzcJEpL0/zE
FKFbnPF3im2MmVAV9nB6ZIhriba21CQthyzb
5K0+XHfXEoSa0EptP5eaDsRdRpIgBerC1570
Hyb+vNFte2EPXDPsPTaGeukPQi4ibZrTwPac
mAVM2qqcIJwa5gi28DMpTX6maMDOMHIfWb8X
1SVu8K2RpLoh/f4sQLMFA7qH41MVvqPRYH3X
B8amFdWwguCDpKiZONTewSCIgg7rrTLT69XL
k2HRH7u/vKBPwui9LSDyrzhCQvaeCDgXew3A
SM3mNhTRsEU6a86FcmOp1rIEG31SFW53v4JO
BRLGKtZRDRhXzFA1zl2k5YxFEZfAmz43lzDJ
FUHq3FpAVQD702PkHgkIIz5hYpCVuhAnQUZQ
doyVqbe9wsrV2u4NGiZLT19meYCfpKi1uNXa
6/L3+v0HFh0yNTpKS1l9o6+9vr/FzNLd5e3z
9gAAAAAAAAAAAAAAAAgYLUQ= )
3600 DNSKEY 256 3 18 (
dNBgWlmYdEDiXE05FanPBDiqbcUYvubNh566
T++iVbtHcbQt78wm+CJYeYOHnb33KAZ9Qxs0
fCBXuSYDK8SPbixrgIzqoBhPTU5mxosQ37Sk
tbBaY9r1CuvYRgYg0upB1Yk0JS0EVaslxPr8
YxhR8FZHgUJlnKwd/VBxkfsux+PqLtId5wWx
wxg7abXTooRGW6YLLudn0O0J7zR/PWMba+nR
TmBFjD8MfSDbZdeWrEl32M9zBSIMASNCRYbo
K7LMz/lvGuz0GQDkJem9UkJtC4HDeHhCXMcy
NUFccKTPxVAJ/3Ss5N9YiznhWvs7FtxRosBI
jVqPjkMMpA7FKZ2wu9nx9YBwQf6lJvx53t+W
/XwiEEYrms6VltREcHAQLxJEFTmSSVmIBh3R
372+lbYWiwIOIk//fYeJKJi9ZuZcqOrIj4vX
jJ5ZhEb6hhxWmfMPTcuG/XQLMt9oSCegkuHO
ZUIYy9O0n6PgsIEtkuVFD6tZS5mzdO9hKlI/
X6imV2ujg6s7q17N6dhJwEKyaTKcKsELwNHR
ZOy2ldHT3RaoHj+LERP8mFbX1OWth7NUFpAg
tjAtsHOjynXoivcXNou12HzXXr+Wkczhs0Oj
5TMzG58hOD/69nLVKxv+Ylm2MHRvoUCGZf4A
EtZMzfXcH+GpAv3kyWUdmcj1d/ctzjwbEf7d
1MW8DQ3aefBcvXqVC/dfZLGM0FCyUUXCf+E1
Wcl8GaUzHXqRdSVL/eUKlmsGMwCHRrO1RfrX
NPfbDLXuV/qmdFuqhWKnKendISt5EQvT1MLd
8FLLmDQjR65w7aCQF6FCbvASgk2cQ7e/yAnd
rKEMjdH8pbajMdhQhrDW0wyRB6gfApwVtFAS
6E6lCnau2XuBlqJxU9R/1PZukxAHum0XAEKP
1yi6JTok7VVEAZFMYYQ8pJ4+cXVwHGatKLgY
UUz63haKG/RWFYE9XM0ofLoI3Xn5IAk6QPAk
Ev2TX/C9skmKOyjOFTMb5ituuClQeD+Ddjlf
YGPhZZCD+MvAz5u+Mtxp/fNmwiaj1eo86Yx4
MzyR85JGx/q/o1nxr+AMc8ZzIBRVp2MC6+ex
8/tHyhg7WPKEQQQdt4u73pPgil0CzyqEuYFp
35JXW2vWXWsXtI4dBfBAN9nPYWVI8xn22Oap
aMrzEaPZr6Fs3aVajP9jQtP5+YcDZmsq1HhP
thEKxjQ0Vvenn2xGw+cod97EmqfOot5Alu8Y
w8nAa6c7KwXeqI7g7M3vGwjUTCKt+Jk4cxBm
OWaLLWkn/SnFhsfm0byxZ9zmozg0HszHhaYy
wK2C8vzB48AmrpN+pD3rdKo6AYCdIKo+b1eT
0A2ESL6YZxe1bX0jG9as6SPXhaHE8+Dxhjqb
MgtdNijEO/FcJntuyn3gbT5CloRClMZQjbnC
KaWk/dWJt0faVNItNs+F37jD6nDv5RaMdTv/
LJY4ZJ1O0rkOu12ydi6H/zixaJhdQpSnW20T
93ty/KDpC8G/7nZAUUzzrHk6xPLNhTHGvzsO
nLjSvnjij3BOuCS6AerEG6Z2l6nNT1vWydNR
3MlsJ6dsyX6aE51cR6Wajv028PgeATCIXgGD
DCX1pUuyGSrUzXo32OcYgEClr+thbkfu6rSh
S+s+4QyKkLoAki13A+10oFx48E8DTZt/QgIF
G4E4iBzKbNpXWWXMMw5LRGzFAKGwcbxgCmbD
i0BYElyPV6h75fQrMEFCoqHnNoe1OYbEy45U
WObnvK411fLTj2beU4v/tg==
) ; ZSK; alg = MLDSA44 ; key id = 27299
3600 RRSIG DNSKEY 18 2 3600 (
20261029004556 20260929004556 27299 example.com.
iw8bYLG7APpMsioqReSusmqzIw+2JW8hoQDt
CtvKkyTdZ3QCYLVFHsbiiGWB4TV6q+yLdB2E
FThPPUCULxKjZ09yRbbuwGgg9wyIkQb9RBy8
3nxDbDC7WGDmBhdPMIFDQ0hUbgSRJtWnBGDF
2I7kvhH+UNZGDVJUw7YOubTtjP0qsDqFH2Go
ZUiM+7vNVejDyL1Ng7g6YTvfdG7zNaRla/93
iAIW1S2A2+KZjPGRqRJSM/VOaAR6gmB3oS5d
lacv85fJ1/0wxJKHZZzon4g60SKSpIA/ilku
cL5Hf5qOHw1dAyHPnvpm31ZePYrTKjM0CPuf
Emsj78fixYZvUajncvx2PW0HNGMxN/0PvvCS
xbTEvxzZtzxqW3cJ1tlbICT1YWWG3gbqFN4j
mBO9woG7zD+YO+TBTNs7f3TyGrYPwtPJMRLz
e98Tt2J4cvoV8+A29doE0W18nu0yFP7n/rAS
XIBNqG/6rJWLFFWiDepAC0FaaMQA2XSMaYOb
lfuDzJ/RkMZbKZHBURHvJn1VnygMzoiTUyBJ
3lSeyIgeiiQEnilaf/nBzoNtQh5YiCohZPSk
V1h2eWYnxBJ4NiI3XbWRmkMXB+2qdYWr4ou/
nENK6Njosm4mHkf/eKgjjhqpOtCGplUNedhH
aP0ld8ShRVvC7/0lgU51skC/Cc7uoZgAAz2X
FSICbfm5E1leVPDHZlJMk59yPlL+zwenxsZi
0FSW5lGu4tTXsbl2XYVDwf5pGlxQGhCN6kED
mY6clarUUAkFPqTw3Eg7IWIdbbX2lIZRLI9Y
UEiSewwitvfbtwLJVeXUqJ9xxykAxyRnoYG6
PdtXcWLrCW7863rD1TWMqVbc3C4kBxZOIF7N
VmebLnLHFa8iZZrVQbWzJ7LGZIcnqNF9mdRv
N+uDJdzxm/yQVRnD/a59wrRjndFkb9fuIdpW
XBEX6oBEjmDSr3lXpzcO3BHBjT8Xen+xr8h4
1f9CflqHEAPgpV1GXO2ImgQvjO1lbfF1QOm4
7tJlMFhF3P1tb4bNBnpPNJApDcSB+FXnm5ru
WK6qYOaURKX+/szdNhFsbMFakxi6UTXbtAJf
6HP+GT58sF+slhsrrR0B4GvwqHI2NE6BdsoG
IqtsG9C0rPIPiRTN4Ikg7GGDM1RSUPNY2wnN
2IjvU3bb/2n5S/dzpZkkd6qANtXie8UO18Y0
8hkijlUL1lxU9/XkvMp+nXsf11AuK9lSYP3f
tANQ/oqGiL0fl/Ov2qd+vwnLnUAixjmVqbKl
mBIdrv1bA0tPVEEswE9ULhf4h1eU10DLLxtu
Yz21gOWr9DWjPxmXdERxXWtAawPCJ0MJgDBp
NQGq+ETAP3/UjciPRJSJkAToof2aFHHTXT3z
5rHfGXnN8Gj6zR/gKU2FBP6stBSfc449WMwI
mgkA+SSQAVOZH7jdO1k2Eu3jSouGiKqwG7e8
l7A2MAZI5TQkIYAWzuYzo8ATkimMz6PJJaRI
dqNs3v61xWaIXW2L1jWo4qfVk+9Bt1I69Sf9
I2tqXJfEXIXMc9GLgoCmp2o9InB1RTGFGi0A
6nLI6WR2ORTBRvvAyF5JA2VjH9oOpA9Dit1U
sgurSU3W4BCujtMxbuQCQrsA4+/xV39gl428
yfSMH1msGH2a+1VPX5Dl5NUBhV+SNk8uktRE
qh0HYim1SIaRdeyfkCUr7xKK4Wl6spBRY234
q82hA/zRpGeL+k1M1Hcj3m0eNMZ8iHYWIhu6
9KF3rOfHuYNzMjQEtN7etKNXIZqPScxFknaU
gXc+BHMlbdWTLG9yfwQQkGBfvf44j7j/fz33
fKxsayQRuy9aEx0x8auS3ApUS4v9h8838zRE
tPPBA6kecigYSUYNg1W/UPZ/EpgmZno+LPcX
Azx0ZV1oUv3RvDJmjUT8rhNehSFMxkkyqwzS
kAkrvckSrVN0Ce0PdXcHGOUWTH0LDnpnpbEI
s9KxxZRyvZfjm1kTaByyZEZ5NW0BPIFB51RG
foEe6pXTEYjC6kunpmUymLo8zEqA2hpdDPvb
8UJKGp+UCmlYy+ELJa733e6En6b5LVtTimdJ
S8vEZuE8aqMvaYYWEE5OCeTmQ4O2fiV2ZoZl
sGMV+sVf9y2QwlRQr7ruCzc23Kwl70N2E0WM
43haFUvfVsr3gnQuNh/JBh3daZlkaU8ayyNb
iSi0g3wLLatKwCUG4bfRJzgx8XTAdS3fzmY2
ZSR1R1nJN8NSob1m7ZlOXU0A9jrCRUuE+ynd
ftN8EGHl6B2R6KDrjZBIkTJaL4WxKcjgyFtE
rcpaqLb2Z4uw3WrqToA5fMinYZDWzpDsX3tY
xel7g1End2zGPaM55BsdY1h3C0UTrhwuhNWC
MJAhgvFU6sWcwj7bsi08aWrTh12qbKfH/LK3
cZGYVE2v60Zfd5djR2GaGfl9mT7EIBgoOZya
9YiDSKicXWL8lsFNdZbJaFTz77lREAY6t1iA
Fg2urRTAGxPd4uyT2KyoD//p0xLIWGsHeWLn
5kX3avncPJjMFVy15qu50Z2g5o9fX85SX2H5
PalkPBIt6+l5tb2x8mMXKRXGaYK5gaQDopbi
bl8ZDYk45gasGM0Ece0Ba8oAyPXZIpK+gUxO
qJlxtyjJKDvjIegiRUB3wy70ey3XKR9AAUe8
1s7rNBPIY9fb6stw7+23F0pYj8y3idlEwtWE
RHoXYbThNNEo32gzw05b49w4IA5mPlE9MBNj
lHYMzLSJPV4+EmPnqKpZ/x5aol3LrZtYQMa2
VYZnJrsQbhHckXaS0eABA64jtzI7M5AijGth
3JokfDy7QqGYrb3ooZfrSVTYIfv9q6/XTp/x
syRXb5NG6tkUCCSYP3B0pacS7Ssl6l3Wiwg3
QLe3XRaOXO5FEnEQ/ScB3GykiJLv3FFfh5CR
tRRjKFKb7VPl/7gRHVAOWzEaLTW4ju88ZSWV
V4g4LPKFSsapnSwFnY8hv5IjF2c3l99DwtTb
l8ANPkzIBVv4jALbw8BvDe7gHHM54QcOdPMJ
pEDo0bjTp/VpBzrgANKan0pbuQTqCU+a2DhL
Q8OhhqQwrVKpXOrq6IgccAUnTdjkcEWnhOgz
PRRZyHB/YOn67HGRCjJetp0/6CxBtr+ao41x
/kYdVg/ubiWZ8YtBvIEwQEhLTVZjamu12un4
/wUJEBMlRlZ0jKLR2wwfLzhCWV9ylaKtssHF
yM/d5+0BBwgXNUZIUllfcoqLnqGywcvNz+Tr
7/D+AAAAAAAAAAAAAA4aLUY= )
ns1.example.com. 3600 IN A 127.0.0.1
3600 RRSIG A 18 3 3600 (
20261029004556 20260929004556 27299 example.com.
8RTBtl1RxOgzyg+cJ8VNz61tfpV8Ju4oxS65
j8DbMrW4zRpqtiX+yrUATXp0r1hcqBKjiTbI
uS78jun1CV+WVqflok6qq3JY4GgMdt4GZQXn
i9N1fZrHEUVgIGOJY/d3L29ttEiq3Vce32hI
i6o7NGfFUl3bPP4UtHrrhPastwWl5g2d91DX
AinWJwctRm1WJ7oNFt0d5HAMyCQdF6r2Gkbu
JjgXz3edZn84kEWQwzNycv77QmVMqRJUfT6P
z1kNnSw+JmyNdRcVUMhiXbTKjvqnip4l7R/Q
LMlKSZEMGLQLu/GcxXd79iHPE1vPK9Hp+rsn
u+l00MuVRv0TfcOtsgfsTUqAw7sPJC9+Jesr
KcKu3PMI6x69cnHROwdXqI+ZV3jjSZ74qicO
gVf4QJ12GkWfiBpVIUWNUu1OaA9vx0EyvY8s
RxGBh6v5Ie6Ni0jF95ioVQ31Ri56chSr8x/J
LNioq1++8W5iQWgP5Cl2ckuJ+KmZmoQrQoLh
ZxcTaolJy315rowztWkjNmtFTkNFiIh/NzkJ
B5DulZPOEQpEwt/GtFB/aUTm4v3SADIzN9T/
Gu6gv0aSA95D/R4vEOOAIUmJK95hGOe5uG61
ioo5FN7l7Vesm28CDjCduwlVxfvghBk+n8De
cVFp1i+B4/5+xmajgS6X4ksMb12el7c1Jb6q
vOfGz5Yf/xFCOnh5i7rVtKJTomI6FrBO0R5T
2f8n9KoRfX82Tmhtp8t2ZDZsrOgxCCoPE3J0
J+5sm+sPPmYtgOocQwwEd/IX/ebN/gZWRg15
fYpXDhRKkY3zm6puvZWOJjHlCOtMosnzLcnI
55vdg1vZ9EuxzOKfxef0C662rw3RN+418gEJ
8o87JvZSIs+x4QnVnJn04yUs8AlOz6Ul6Tda
N+gbpUcfPGcBpETi2QYXFHxFUGWKqFFOzlG+
07Jf0YHj3azjGGAHRNPmynnfGnsb6/FObPcm
mrbeqbuzt7tAKvHJVEBf2TOWpSKTeHEkZ6Nx
YeVEclMjjxitQ/J6qLberMmV63RnI/b+w+vY
s7uOfyNlVQYV4ICzyZVwy8zKkj7vVhhs0514
Q4FMpXcABx0f7+w/P7nk0eM/9XBLgM2AIL9M
YOJZ4r05w2/VTu7+8dkn1MNOc41rTZ6/EpLC
RBJ+NUoVhE+znrptH8+MBvfUZrpIiAh1TeN0
uYBkyzH5kkVSjSa/yRX4AhARxMs7cwMhLF4e
BARN6qagjADJzL7VVBfxRAzh1asnU2KcW2r+
bMesy/R/ENb6/KB08bDxrzhRwUEAjnqza/49
7FV2TA9lxSwXLHX9voQRJKkNgrt1UhcR2UaS
gU34N6+i/YvffMVRksHQjVpeTjoAxr+CaZvo
n7EJdQUQh3AdyY+iNpS5eWrN6T1mKaalBOKc
4U5E0BYOXTMIFsXhUbqSVy95Rr9eLiF4+50h
DaV7eTmE8Ev8W87lNBRIEo0Qy1xBal/Tlyiu
zqtp5G/Yq4zpYvHdCU1I71pMkONkt8P2zQDQ
wVr6xKD394vcifOMIB6EOf5/5aFzaI+12+50
4sZcvaI4EjhZE9SW3LaNiHTLaCFjqWeTfzAP
BN32OtFWVKzJGKauL5s1XBcBu85Ne9Ye/wUt
ngOl0k4TgG/kgwi3/kljSk2bQ6RM6Ri58cOh
WEFsvvGIBVy6mBdrPQVtY/Rq5iQ8xlZ3sZOS
dYDHems6s1p2BCIKQFpuouso9v5QWCZUYjj8
1bDB3+0P9xNIed5TXuK8xa3JbWzlLfcAogBG
DDI5v6lTfu51OmQGCP6cCjNuvY+2rjDkxFpO
oNVYjb8XALPDsOzPpwE22AWMnkh13j3Fywpy
3Da7Jzuijk78jSK1D2fUV91xB4vG9IPDqx4x
GdnwHnAFX1RO6ChyTQFv4B1kYt5Dh489qAlE
1NV/583fDWa6qMb/UvL8Mq21wwFsC+45/FMg
dwJQUDMZrNG8GCxcHHu92lV1vP/ldNUR7J0r
em3YY6mIiAexdv+uJ1uob3lnwLmjCXsN8T7A
+C3NJfnGQgLbmzQL2ChE1kmcg6e4ui/KkpzB
hCp0/RSRAQjTM47s9wKUUKBe0ZrdVSOMVSvN
oklNwH39pF2YI/NTBpAJZXMHIL8KO1jEClVy
14OF9+YxSFexfhZqZi/jOEHMnCaBFd1IURTN
M4heTvJUjeViqLd6MUNfC3/rSBOEZO80JHQX
mKWTaKKHd3UBjcxjnYZxepzYOm9z//5cKF6E
XP85AWtLJxNNpNPKiy//GauOOSDZEBSOLCnU
2L5vAppC132ZZ3KiRV7zgsUyJVSCaOVkIr/L
Is3MgKdSMrhEOPFv1eSf+/11gxVpdfoCENtZ
LON9+PH/u6rSWrGA7cFMBQgIL+iCiW9Qdy2/
SVCDBT67YDshN115AyKRMQfBVpbJDkG14W2b
mKxKO4f0u8P/9jTf6jQ/u+zTtAMakIXMqtcc
fJfBwHzU+7SAxubxEmydslAHixhBA5XWZtiK
QzkGSbafOF7bNy6ca0pkSQ3N+QreEwl1qqxf
IMfLWTUGa6BTN+QNRugaF6eUIzQSvkCvME4C
KhWkZsK+Hcsod0q5ea16V7gz6NvC0a9mLkCl
j8Zj4ZvsE60UFL6E8tCffY9nKbtbfn+UD5AZ
4P3Sb8JfWPksWKlLXoLYxcppsHDMr6JqTUb9
k7mo6KlJqRrjkk/6xcWbrEgcmS7av7l2uSjp
cSuSd7bG4Z4SIgh2MEWqMqPtbrX6QadSD20t
QpkWzgkBoPHGm8Pfztm+C5cIXuXI4YY/Alzf
NZxIEeo+TEyj/MZ/x5+IemqOXrWjFg0Qdp3n
eAkGEJbyb/xqzHnw3qXg3Q3Cc+QCJKBWUCqs
e6hvUGimrnOubgb4lwMKfGviUquMvo1TSihU
M/i5YKmgt6//Z6hKi3jypz3bLJVfLzW2XQYT
sdPbxCy+/eWKKrDxr39LFvcPrYvOwyXbN6b5
ucMrvYWqpPMIoVKV28DTOmiMygGWIGpXyCV+
VnYakJe8Seey8mEzO8EDzirYfPNmcmh5T3lM
I1rriH7jFwsc1v6Hlcx4FDpkcWlbIw9090LY
naQIuPgdVEKaSshFA8eGYT3sQhFBYBWZI5jw
7t/bx7vZ7T8kuKFiCF4VGR8uREtWb3V6fICC
hrGzxcnb4e8xPD9BWHSLqa+8zeLsAAoUFxot
QU9wdnqCiZCfscjP19re6Orw8vj5BgsuQUZS
hszwAAAAAAAAAAAAABUiPUY= )
600 NSEC example.com. A RRSIG NSEC
600 RRSIG NSEC 18 3 600 (
20261029004556 20260929004556 27299 example.com.
2nd3UcZz3PGA/Rqlv7Qls3SuoOrNSAn2LBbP
m38XS+ufuj8yqzlDtse7rwGwYUU5q5/hUqQ3
IBZudtSnZYEfi8hGTxImwjlBrQsQmRTG7M3Y
+otB7xq9X0bqWr/Aly8hVaDNr4OLZJNwmoyR
zp2JRJRWhvioyr09AFCTwUsu4JgN/4Khki6Z
4auQxVTGNzv0sfppix1eBERzbj98iMIvZNQ6
hYQ0QL84QXvl9IjLVr68KU3WF4hsDsvz88Z7
Ltah1Iz+fNZQ3Qh/nHJY3tTiOLFa15dKEvPj
/Q70ECcZQIIgMHegOsqHt10V2o9k7O5qer8x
x4YZsL6JjUTYfk/8n7tYMjVKKiI85kk0FeVz
eB/0BWl9K/5kjO0zH8svlg8RRwsZKuNw39mi
WkcyFw8IwgJn2zjHeIRajcnnKiFHT6Gie/DS
7ai4Vz1237dMrzCWG2CBq8NMBDnByiGfR59b
3ULuQK34UVO2CBDC1HijqPcblbTLK4OoW5/I
86NkEdIZkzEyVFlM2pbwlXpCB/bQC04Xle7I
lsWEuYj5h88ON+qn9p0Y+BstbAg0568/jx8c
6/sD7oVjMSHpy1eMAp5t7nTpsE6DyZazM7Jc
qKYC5YBunwOZZxqEEPGkusqfYnw6T0ZHpfet
OEDeB2/Aj9R0ZyMN9svayc7d/MzJ/in0cN+J
+Ar6M4CUyRycxRy9zO/iupn6kGY0omTzksRd
TBwvgFYUrs+SY32T7stuuswPApH96nh6oBNK
nYr6Q6xC4d0C4CiFKzdNUm+bVU3hVcgSK7pO
GR9TSOp/6Zat6YQ8ypWkP/ALnzzsXKcHuFXQ
avLEVUvUrqKO/TR6O6hxYNl8Ju9dMXnLYmGc
XGQtRo3E5gXXbFrEeHhKCG3dRt8BIFzY/IgZ
5Iyyy2aZcrGJBqmzxeYMcGe86EFIW9n4mEjF
rS2ewLGcFuISPXHYCcIjgiphCGaPM5g6VZRh
21aaa9yzBYpGhhQ5AefUJSh1YUEpePymT+9T
x5ZI4Wu6RPV//LqYu/yag89RRkaCQ5rdj25b
xbu0jwG3mRuMm781eZbmP8S7SKFbOjdwMmHV
XCoTYHIq/tbVNVDe5mYlvfO57Lme8QxOcjWn
3IaGC17c41Y7XpxAPHsEOUq9mNVrU/1jjOyZ
Y2eXfvp+pF0QsCVByDJgeyfyfJ52hpViY5LI
xqjnPpYJTGjkdQVnvU4qc7BUyo4pgXpx2wBD
Sd/XW7XGp64s8+ICkTtzEyOUmdD7SDIukySV
Bh9X0YIkLijx3M5Wr458ShJUk/3siCKkX6AW
+2Khb5JqmfkTODLJoR0xDHAKqT/+cQbhMF2U
aIvXTyhEztsYNF+eY4zw9Pfmsu9/5LxVjwPM
wvpbXK+EkoG4DayUR304A1NthrM0uAoSNYIJ
uiN9/xgVYvP0mH4gWrM04HrrXX9YzO012slH
SEQuGmxZSX535JMPnXLZK3qXrvS9ipaeiwpO
cBO6WOaKNCdkbxQIMchb1TdBMlCLvinxCNPq
0lyfKEcwCe/t+NHn08/jWm63WdjDrtLAJQsL
NpyLu2Qb6p4nh2PwqZFU4tV9sqHayDhG/nux
SBEv8M0s2RyXHiae7rKaKvnJzLnJgKGZjBGr
DNq7cA+rMX1JTbXjJIGR996SpdzRLF5G/0S0
MLpdU1weOH8fPBKQP7t+Df+fnELRbix3h1Yn
jRMeMomR58Z1p7GJqGwEK8D8YAt8O8Dj8mUE
gSCzI5M42F3VJH/Z3HPW5wSGinkTlUlFdjUv
oZ+4Q4KDCPe1H+DSdo1/xqdTzr+/l7R8hBFP
aWCpIwCAOxSARHD5W+OPDjicjhI3iRudRr9b
gchSgNPjo1pZCci77FCrNCJKLE1tJI3GVigN
zqDbfibbbRXIKw1SYMZLqpDV1om4ErHyeHH8
5ghuvUPbde7LoXI6Qk90okJKUeW/8VX2E5h5
O8Jx5a3Cui/WIWUcAhd+Ai29xKQyob75pbCj
0uHViUfEUjSsCryvGqkkJ+6eroJxojD/AyJN
kq5dlvrJkIQKe6f1lrfx5strqvYnp6cDESmw
tOqpr06bkf9p+v8bsuuGqecBP9T9E5+R6B+S
xCU5Iyk66dZnEk1J/AtxoyjPCvP9pgyy08lM
qgawoPPq+E5/up8pc5Coxlz0DZj91oJvy0BE
qPNIMq8tbiNFX26AfOVVcFYwjo8iapupAWdf
Cnj6XXDXe8fytAd5lASWA52aURQ8ICEPJDz5
3ERMRrJoC22v/48GazZ2c1edQQ/kATTg2Lmv
TWyHqK2PpRpO+8r2+XaR/pKAwPFKo7sfzMTe
Q0fyIyTEbuFJt7Zty4THicQuGYm7nViL4nDl
zZAajaw5aD3lyc13GZsLIjt7kXA1JHOCTs0w
EcSzWFiaQJWI3kWZMgneDAnho3bIzhQP9NTH
J7F9PoRAg1FF6ealCARQarDl3XwhdLDb8vJJ
fZJJuKlZAh2bQIQbwfhgHHR1LzAbKT1RNiBg
JHGjsHbl3vuOh59RVQlpG1fCDNU+Vk2KPfkY
G5Iy1S7NABwslbaPz941zRA0jCasZ4VIXeSG
vKCZS8gC750jgRByBYzUaHiIINvpWNn8dIzN
ksO0frWtOuJ02RH5s2Thb10IxewCcattXs3p
5GKfV8bBwTqwra/ds8259x7gmA8+Sm+i7Ypn
vQRX1ps4j0MPJeqR+ptVCcBuZWaZeKTYnOVM
kMiqhVA3RRnjBxUoC2n5DKe0n8rLc7F661ih
LpHZEmkbg4mXSamVyokWoIy8AYBA/v2V7F1E
O4UkhdUQxHB13o1nwFvbu/ZSB9OL4GFqJPcC
05E79Ioj9aXu2U/GWsEofHpRpfmkoeYyAxZ+
0HXT/DPEz3wr0k6dGGp9/l/qYrn7EBSIVO5m
gb6erauxz658m0OtTgm5dJ6iCD1cYmlB9z3a
+hEqLrvrWkG3ql9wov63QTRTsjFSHCJvg8a6
LKyRRCToTb7R9ibYRR6z/G/RFtwNRgE6LMTj
cOo87cfd6abiIUIGdm+uvwSRf/3nRruTZIZO
AOp3z6nkDUmLCDPlWG0UvI0whsQMgTO16VAX
yKxfR/d30U8XET65WSGctxEzL/Ce6J6FQP8z
V6luj8euQ7bXxu3/+fQwNUFISktseHyVrurx
/QEEBiAlJikuNFZ3fqSpqrvJzd3j7QIFOkWS
oMHO6RwjKisuNDs9UVRekpOWqq61uLvK9vsA
AAAAAAAAAAAAAAAAAA4jLEI= )
[user@host ~/mldsa44]$
As you can see, MLDSA44 signatures are large (2420 octets in size each).
See the
dnssec-signzone(1)
manpage for more details on its usage.
Verify the signed zone's data
Though the signed zone's data is automatically verified as part of the
signing process, we can explicitly verify the signed zone's data to
check that it is signed properly using the
dnssec-verify
program:
[user@host ~/mldsa44]$ dnssec-verify -z -o example.com example.com.db.signed
Verifying the zone using the following algorithms: MLDSA44.
Zone fully signed:
Algorithm: MLDSA44: KSKs: 0 active, 0 stand-by, 0 revoked
ZSKs: 1 active, 0 stand-by, 0 revoked
[user@host ~/mldsa44]$
See the
dnssec-verify(1)
manpage for more details on its usage.
Publish the zone, and DS records in the parent zone
The next step would be to serve the zone on named and also publish DS
records in the parent zone. How you do this may vary depending upon your
DNS operations, but it is the same process as for any other DNSSEC
algorithm.
The DS records can be found in the file dsset-example.com. generated
by dnssec-signzone. You can also use the dnssec-dsfromkey program
to generate DS records for your DNSKEY. See the
dnssec-dsfromkey(1)
manpage for more details on its usage.
This ends the example.