DNSSEC lifecycle report

iodyndnsvvv.net

Time window
earliest → now
Generated
2026-06-04T20:07:39.418245+00:00
Key directory
/mnt/bind/keys/iodyndnsvvv.net

Summary

No significant activity was recorded during the reported window.

Key inventory

TagRoleAlgorithmKey idFirst seen
18542 KSK 13 Kiodyndnsvvv.net.+013+18542 2026-04-11T11:03:18Z
18522 ZSK 13 Kiodyndnsvvv.net.+013+18522 2026-05-18T01:00:05Z
29485 ZSK 13 Kiodyndnsvvv.net.+013+29485 2026-04-11T11:03:18Z
53488 ZSK 13 Kiodyndnsvvv.net.+013+53488 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), with phase-coloured bars (pre-published / published / active / retired / removed). A thin DS overlay stripe above each KSK row shows when the parent-side chain of trust was actually complete, which is often when the interesting DNSSEC stories happen. If two algorithms are simultaneously active, the overlap region is highlighted behind their bars.

2026-04-11 11:03 → 2026-06-04 20:07 UTC2026-04-112026-04-182026-04-252026-05-012026-05-082026-05-152026-05-222026-05-292026-06-04KSK · alg 13ZSK · alg 13tag 18542KSK tag 18542 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-06-04 20:07 UTCactiveDStag 29485ZSK tag 29485 alg 13 — published DNSKEY visible but not yet signing 2026-04-11 11:03 → 2026-05-26 00:00 UTCpublishedZSK tag 29485 alg 13 — removed past scheduled delete time — should no longer be in the zone 2026-05-26 00:00 → 2026-06-04 20:07 UTCremovedtag 53488ZSK tag 53488 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-06-04 20:07 UTCactivetag 18522ZSK tag 18522 alg 13 — pre-published generated but not yet in the DNSKEY RRset 2026-05-18 01:00 → 2026-05-22 00:00 UTCpre-publishedZSK tag 18522 alg 13 — published DNSKEY visible but not yet signing 2026-05-22 00:00 → 2026-06-04 20:07 UTCpublishednowpre-publishedpublishedactiveinactiveremoved

Calendar view

Monthly calendars covering the reported window. Each day is shaded by the number of events observed and carries a coloured dot for every event source that fired that day. Hover any day for the count and a sample of the events (live UI only).

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
July 2025
MonTueWedThuFriSatSun
30123456
78910111213
14151617181920
21222324252627
28293031123
August 2025
MonTueWedThuFriSatSun
28293031123
45678910
11121314151617
18192021222324
25262728293031
September 2025
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
293012345
October 2025
MonTueWedThuFriSatSun
293012345
6789101112
13141516171819
20212223242526
272829303112
November 2025
MonTueWedThuFriSatSun
272829303112
3456789
10111213141516
17181920212223
24252627282930
December 2025
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
2930311234
January 2026
MonTueWedThuFriSatSun
2930311234
567891011
12131415161718
19202122232425
2627282930311
February 2026
MonTueWedThuFriSatSun
2627282930311
2345678
9101112131415
16171819202122
2324252627281
March 2026
MonTueWedThuFriSatSun
2324252627281
2345678
9101112131415
16171819202122
23242526272829
303112345
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123
May 2026
MonTueWedThuFriSatSun
27282930123
45678910
11121314151617
18192021222324
25262728293031
June 2026
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
293012345
July 2026
MonTueWedThuFriSatSun
293012345
6789101112
13141516171819
20212223242526
272829303112

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status. Dots are coloured by source, stacked to avoid overlap, and the significant transitions are labelled inline.

No events in the reported window.

File event timeline

Changes observed directly on disk — every modification to a K*.state or K*.key file. Paired with the DNS timeline above, divergence between the two channels is usually where the interesting DNSSEC bugs live.

2026-04-11 11:03 → 2026-06-02 01:00 UTCkey2026-04-112026-04-172026-04-242026-04-302026-05-072026-05-132026-05-202026-05-262026-06-02333333333

State machine timeline

Colour bars show each key's state-machine value over the window. Separate lanes for GoalState, DNSKEYState, KRRSIGState, ZRRSIGState, and DSState. The rndc view is drawn below from rndc dnssec -status; discrepancies between the two are where bugs and BIND quirks usually live.

No state transitions recorded in this window.

BIND's view (rndc dnssec -status)

No rndc state transitions recorded in this window.

Chronological event log

2026-04-11

TimeSourceKeyTypeSummary
11:03:18Z key KSK 18542 key_file_observed new K*.key for iodyndnsvvv.net KSK tag=18542
11:03:18Z key ZSK 29485 key_file_observed new K*.key for iodyndnsvvv.net ZSK tag=29485
11:03:18Z key ZSK 53488 key_file_observed new K*.key for iodyndnsvvv.net ZSK tag=53488

2026-04-14

TimeSourceKeyTypeSummary
01:00:06Z key ZSK 29485 key_timing_changed iodyndnsvvv.net ZSK tag=29485 Activate: 20260421000000 -> 20260428000000
01:00:06Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260421000000 -> 20260428000000
01:00:06Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260425000000 -> 20260502000000

2026-04-21

TimeSourceKeyTypeSummary
01:00:06Z key ZSK 29485 key_timing_changed iodyndnsvvv.net ZSK tag=29485 Activate: 20260428000000 -> 20260505000000
01:00:06Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260428000000 -> 20260505000000
01:00:06Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260502000000 -> 20260509000000

2026-04-28

TimeSourceKeyTypeSummary
01:00:12Z key ZSK 29485 key_timing_changed iodyndnsvvv.net ZSK tag=29485 Activate: 20260505000000 -> 20260512000000
01:00:12Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260505000000 -> 20260512000000
01:00:12Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260509000000 -> 20260516000000

2026-05-05

TimeSourceKeyTypeSummary
01:00:24Z key ZSK 29485 key_timing_changed iodyndnsvvv.net ZSK tag=29485 Activate: 20260512000000 -> 20260519000000
01:00:24Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260512000000 -> 20260519000000
01:00:24Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260516000000 -> 20260523000000

2026-05-12

TimeSourceKeyTypeSummary
01:00:06Z key ZSK 29485 key_timing_changed iodyndnsvvv.net ZSK tag=29485 Activate: 20260519000000 -> 20260526000000
01:00:06Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260519000000 -> 20260526000000
01:00:06Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260523000000 -> 20260530000000

2026-05-18

TimeSourceKeyTypeSummary
01:00:05Z key ZSK 18522 key_file_observed new K*.key for iodyndnsvvv.net ZSK tag=18522

2026-05-19

TimeSourceKeyTypeSummary
01:00:32Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260526000000 -> 20260602000000
01:00:32Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260530000000 -> 20260606000000
01:00:32Z key ZSK 18522 key_timing_changed iodyndnsvvv.net ZSK tag=18522 Activate: 20260526000000 -> 20260602000000

2026-05-26

TimeSourceKeyTypeSummary
01:00:19Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260602000000 -> 20260609000000
01:00:19Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260606000000 -> 20260613000000
01:00:19Z key ZSK 18522 key_timing_changed iodyndnsvvv.net ZSK tag=18522 Activate: 20260602000000 -> 20260609000000

2026-06-02

TimeSourceKeyTypeSummary
01:00:22Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Inactive: 20260609000000 -> 20260616000000
01:00:22Z key ZSK 53488 key_timing_changed iodyndnsvvv.net ZSK tag=53488 Delete: 20260613000000 -> 20260620000000
01:00:22Z key ZSK 18522 key_timing_changed iodyndnsvvv.net ZSK tag=18522 Activate: 20260609000000 -> 20260616000000

Per-key breakdown

For every observed key: the current K*.key timings and K*.state fields captured at report time, plus a calendar and split DNS / File timelines limited to that key's events. KSKs naturally show their DS lifecycle at the parent because DS events are tagged by key tag at emit time.

KSK · tag 18542

Algorithm: 13 · Key id: Kiodyndnsvvv.net.+013+18542 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2025-07-02 15:22:57 UTC
Publish2025-07-02 15:22:57 UTC
Activate2025-07-02 15:22:57 UTC
Revoke
Inactive
Delete
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11 11:03 → 2026-04-11 11:04 UTCkey11:0311:0311:0311:0311:0311:0311:0411:0411:04

ZSK · tag 18522

Algorithm: 13 · Key id: Kiodyndnsvvv.net.+013+18522 · First seen: 2026-05-18T01:00:05Z

K*.key file timings
FieldValue
Created2026-05-18 01:00:02 UTC
Publish2026-05-22 00:00:00 UTC
Activate2026-06-16 00:00:00 UTC
Revoke
Inactive2026-07-21 00:00:00 UTC
Delete2026-07-25 00:00:00 UTC
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Timing changes observed

WhenSourceFieldOldNew
2026-05-19T01:00:32Z key Activate 2026-05-26 00:00:00 UTC 2026-06-02 00:00:00 UTC
2026-05-26T01:00:19Z key Activate 2026-06-02 00:00:00 UTC 2026-06-09 00:00:00 UTC
2026-06-02T01:00:22Z key Activate 2026-06-09 00:00:00 UTC 2026-06-16 00:00:00 UTC

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
May 2026
MonTueWedThuFriSatSun
27282930123
45678910
11121314151617
18192021222324
25262728293031
June 2026
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
293012345

DNS events for this key

No events in the reported window.

File events for this key

2026-05-18 01:00 → 2026-06-02 01:00 UTCkey2026-05-182026-05-192026-05-212026-05-232026-05-252026-05-272026-05-292026-05-312026-06-02

ZSK · tag 29485

Algorithm: 13 · Key id: Kiodyndnsvvv.net.+013+29485 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2026-03-02 01:00:01 UTC
Publish2026-03-06 00:00:00 UTC
Activate2026-05-26 00:00:00 UTC
Revoke
Inactive2026-05-05 00:00:00 UTC
Delete2026-05-09 00:00:00 UTC
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Timing changes observed

WhenSourceFieldOldNew
2026-04-14T01:00:06Z key Activate 2026-04-21 00:00:00 UTC 2026-04-28 00:00:00 UTC
2026-04-21T01:00:06Z key Activate 2026-04-28 00:00:00 UTC 2026-05-05 00:00:00 UTC
2026-04-28T01:00:12Z key Activate 2026-05-05 00:00:00 UTC 2026-05-12 00:00:00 UTC
2026-05-05T01:00:24Z key Activate 2026-05-12 00:00:00 UTC 2026-05-19 00:00:00 UTC
2026-05-12T01:00:06Z key Activate 2026-05-19 00:00:00 UTC 2026-05-26 00:00:00 UTC

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123
May 2026
MonTueWedThuFriSatSun
27282930123
45678910
11121314151617
18192021222324
25262728293031

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11 11:03 → 2026-05-12 01:00 UTCkey2026-04-112026-04-152026-04-192026-04-222026-04-262026-04-302026-05-042026-05-082026-05-12

ZSK · tag 53488

Algorithm: 13 · Key id: Kiodyndnsvvv.net.+013+53488 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2025-09-01 01:00:01 UTC
Publish2025-09-05 00:00:00 UTC
Activate2025-10-14 00:00:00 UTC
Revoke
Inactive2026-06-16 00:00:00 UTC
Delete2026-06-20 00:00:00 UTC
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Timing changes observed

WhenSourceFieldOldNew
2026-04-14T01:00:06Z key Inactive 2026-04-21 00:00:00 UTC 2026-04-28 00:00:00 UTC
2026-04-14T01:00:06Z key Delete 2026-04-25 00:00:00 UTC 2026-05-02 00:00:00 UTC
2026-04-21T01:00:06Z key Inactive 2026-04-28 00:00:00 UTC 2026-05-05 00:00:00 UTC
2026-04-21T01:00:06Z key Delete 2026-05-02 00:00:00 UTC 2026-05-09 00:00:00 UTC
2026-04-28T01:00:12Z key Inactive 2026-05-05 00:00:00 UTC 2026-05-12 00:00:00 UTC
2026-04-28T01:00:12Z key Delete 2026-05-09 00:00:00 UTC 2026-05-16 00:00:00 UTC
2026-05-05T01:00:24Z key Inactive 2026-05-12 00:00:00 UTC 2026-05-19 00:00:00 UTC
2026-05-05T01:00:24Z key Delete 2026-05-16 00:00:00 UTC 2026-05-23 00:00:00 UTC
2026-05-12T01:00:06Z key Inactive 2026-05-19 00:00:00 UTC 2026-05-26 00:00:00 UTC
2026-05-12T01:00:06Z key Delete 2026-05-23 00:00:00 UTC 2026-05-30 00:00:00 UTC
2026-05-19T01:00:32Z key Inactive 2026-05-26 00:00:00 UTC 2026-06-02 00:00:00 UTC
2026-05-19T01:00:32Z key Delete 2026-05-30 00:00:00 UTC 2026-06-06 00:00:00 UTC
2026-05-26T01:00:19Z key Inactive 2026-06-02 00:00:00 UTC 2026-06-09 00:00:00 UTC
2026-05-26T01:00:19Z key Delete 2026-06-06 00:00:00 UTC 2026-06-13 00:00:00 UTC
2026-06-02T01:00:22Z key Inactive 2026-06-09 00:00:00 UTC 2026-06-16 00:00:00 UTC
2026-06-02T01:00:22Z key Delete 2026-06-13 00:00:00 UTC 2026-06-20 00:00:00 UTC

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123
May 2026
MonTueWedThuFriSatSun
27282930123
45678910
11121314151617
18192021222324
25262728293031
June 2026
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
293012345

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11 11:03 → 2026-06-02 01:00 UTCkey2026-04-112026-04-172026-04-242026-04-302026-05-072026-05-132026-05-202026-05-262026-06-0222222222

Appendix — raw state snapshots

No state snapshots were captured in this window.