dnssec-tracker

iodyn-dns.com — key 35209

← back to zone

Clear

For KSKs the DS lifecycle at the parent stays visible under role=KSK; switching to role=ZSK additionally drops dns_ds_*, dns_cds_*, and dns_cdnskey_* events since ZSKs have no parent presence.

ZSK · tag 35209

Algorithm: 15
Key id: Kiodyn-dns.com.+015+35209
First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created 2026-03-06 11:53:52 UTC
Publish 2026-03-06 11:53:52 UTC
Activate 2026-03-06 13:08:52 UTC
Revoke
Inactive 2026-04-05 13:08:52 UTC
Delete 2026-04-15 14:13:52 UTC
SyncPublish
SyncDelete
K*.state file — state machine
FieldValue
GoalStatehidden
DNSKEYStatehidden
ZRRSIGStatehidden
K*.state file — timestamps
FieldValue
Generated20260306115352 (Fri Mar 6 11:53:52 2026)
Published20260306115352 (Fri Mar 6 11:53:52 2026)
Active20260306130852 (Fri Mar 6 13:08:52 2026)
Retired20260405130852 (Sun Apr 5 13:08:52 2026)
Removed20260415141352 (Wed Apr 15 14:13:52 2026)
DNSKEYChange20260415142852 (Wed Apr 15 14:28:52 2026)
ZRRSIGChange20260415141352 (Wed Apr 15 14:13:52 2026)

Timing changes observed

Every time a value in a K*.key or K*.state file moved — whether from dnssec-settime, iodyn-dnssec, or BIND's own state machine.

WhenSourceFieldOldNew
2026-04-15T14:29:05Z state DNSKEYChange 20260415141352 (Wed Apr 15 14:13:52 2026) 20260415142852 (Wed Apr 15 14:28:52 2026)
2026-04-15T14:14:04Z state ZRRSIGChange 20260405130852 (Sun Apr 5 13:08:52 2026) 20260415141352 (Wed Apr 15 14:13:52 2026)
2026-04-15T14:14:04Z state DNSKEYChange 20260306130852 (Fri Mar 6 13:08:52 2026) 20260415141352 (Wed Apr 15 14:13:52 2026)

Rollover view

This key's lifecycle on a time axis with phase colouring. For KSKs the DS-at-parent overlay stripe shows when the parent-side chain of trust was actually complete, independently of BIND's internal state machine.

2026-04-11 11:03 → 2026-04-15 18:14 UTC2026-04-112026-04-112026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-15ZSK · alg 15tag 35209ZSK tag 35209 alg 15 — pre-published generated but not yet in the DNSKEY RRset 2026-04-11 11:03 → 2026-04-11 11:03 UTCZSK tag 35209 alg 15 — inactive not signing, published for resolver caches, awaiting delete 2026-04-11 11:03 → 2026-04-15 14:13 UTCinactiveZSK tag 35209 alg 15 — removed past scheduled delete time — should no longer be in the zone 2026-04-15 14:13 → 2026-04-15 18:14 UTCnowpre-publishedpublishedactiveinactiveremoved

Calendar view

← earlier 2025-02 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
January 2025
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
272829303112
February 2025
MonTueWedThuFriSatSun
272829303112
3456789
10111213141516
17181920212223
242526272812
March 2025
MonTueWedThuFriSatSun
242526272812
3456789
10111213141516
17181920212223
24252627282930
31123456

DNS event timeline

Live DNS observations and rndc dnssec -status reports for this key. For KSKs this includes the DS lifecycle at the parent zone (captured by key tag from the DS rdata).

2026-04-11 11:03 → 2026-04-15 14:33 UTCrndcdns2026-04-112026-04-112026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-15414:18:40 [rndc] rndc_state_changed: iodyn-dns.com ZSK tag=35209 published: yes -> no 14:18:40 [rndc] rndc_state_changed: iodyn-dns.com ZSK tag=35209 zone_rrsig: unretentive -> hidden 14:18:40 [rndc] rndc_state_changed: iodyn-dns.com ZSK tag=35209 dnskey: omnipresent -> unretentive 14:33:49 [rndc] rndc_state_changed: iodyn-dns.com ZSK tag=35209 dnskey: unretentive -> hidden11:03:19 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 35209) appeared at zone for iodyn-dns.com14:14:06 [dns] dns_dnskey_disappeared_at_zone: DNSKEY (key tag 35209) disappeared at zone for iodyn-dns.com

File event timeline

On-disk changes to this key's K*.state / K*.key files.

2026-04-11 11:03 → 2026-04-15 14:29 UTCstatekey2026-04-112026-04-112026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-1511:03:18 [state] state_key_observed: new K*.state for iodyn-dns.com ZSK tag=35209614:14:04 [state] state_timing_changed: iodyn-dns.com ZSK tag=35209 ZRRSIGChange: 20260405130852 (Sun Apr 5 13:08:52 2026) -> 20260415141352 (Wed Apr 15 14:13:52 2026) 14:14:04 [state] state_timing_changed: iodyn-dns.com ZSK tag=35209 DNSKEYChange: 20260306130852 (Fri Mar 6 13:08:52 2026) -> 20260415141352 (Wed Apr 15 14:13:52 2026) 14:14:04 [state] state_changed: iodyn-dns.com ZSK tag=35209 ZRRSIGState: unretentive -> hidden 14:14:04 [state] state_changed: iodyn-dns.com ZSK tag=35209 DNSKEYState: omnipresent -> unretentive 14:29:05 [state] state_timing_changed: iodyn-dns.com ZSK tag=35209 DNSKEYChange: 20260415141352 (Wed Apr 15 14:13:52 2026) -> 20260415142852 (Wed Apr 15 14:28:52 2026) 14:29:05 [state] state_changed: iodyn-dns.com ZSK tag=35209 DNSKEYState: unretentive -> hidden11:03:18 [key] key_file_observed: new K*.key for iodyn-dns.com ZSK tag=35209

All events for this key

WhenSourceTypeSummary
2026-04-15T14:33:49Z rndc rndc_state_changed iodyn-dns.com ZSK tag=35209 dnskey: unretentive -> hidden
2026-04-15T14:29:05Z state state_timing_changed iodyn-dns.com ZSK tag=35209 DNSKEYChange: 20260415141352 (Wed Apr 15 14:13:52 2026) -> 20260415142852 (Wed Apr 15 14:28:52 2026)
2026-04-15T14:29:05Z state state_changed iodyn-dns.com ZSK tag=35209 DNSKEYState: unretentive -> hidden
2026-04-15T14:18:40Z rndc rndc_state_changed iodyn-dns.com ZSK tag=35209 published: yes -> no
2026-04-15T14:18:40Z rndc rndc_state_changed iodyn-dns.com ZSK tag=35209 zone_rrsig: unretentive -> hidden
2026-04-15T14:18:40Z rndc rndc_state_changed iodyn-dns.com ZSK tag=35209 dnskey: omnipresent -> unretentive
2026-04-15T14:14:06Z dns dns_dnskey_disappeared_at_zone DNSKEY (key tag 35209) disappeared at zone for iodyn-dns.com
2026-04-15T14:14:04Z state state_timing_changed iodyn-dns.com ZSK tag=35209 ZRRSIGChange: 20260405130852 (Sun Apr 5 13:08:52 2026) -> 20260415141352 (Wed Apr 15 14:13:52 2026)
2026-04-15T14:14:04Z state state_timing_changed iodyn-dns.com ZSK tag=35209 DNSKEYChange: 20260306130852 (Fri Mar 6 13:08:52 2026) -> 20260415141352 (Wed Apr 15 14:13:52 2026)
2026-04-15T14:14:04Z state state_changed iodyn-dns.com ZSK tag=35209 ZRRSIGState: unretentive -> hidden
2026-04-15T14:14:04Z state state_changed iodyn-dns.com ZSK tag=35209 DNSKEYState: omnipresent -> unretentive
2026-04-11T11:03:19Z dns dns_dnskey_appeared_at_zone DNSKEY (key tag 35209) appeared at zone for iodyn-dns.com
2026-04-11T11:03:18Z key key_file_observed new K*.key for iodyn-dns.com ZSK tag=35209
2026-04-11T11:03:18Z state state_key_observed new K*.state for iodyn-dns.com ZSK tag=35209