DNSSEC lifecycle report

test2.test

Time window
earliest → now
Generated
2026-04-13T04:46:05.953154+00:00
Key directory
/mnt/bind/keys/test2.test

Summary

No significant activity was recorded during the reported window.

Key inventory

TagRoleAlgorithmKey idFirst seen
45366 KSK 13 Ktest2.test.+013+45366 2026-04-11T11:03:18Z
7693 ZSK 13 Ktest2.test.+013+07693 2026-04-11T11:03:18Z
15503 ZSK 13 Ktest2.test.+013+15503 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), with phase-coloured bars (pre-publication / published / active / retired / removed). A thin DS overlay stripe above each KSK row shows when the parent-side chain of trust was actually complete, which is often when the interesting DNSSEC stories happen. If two algorithms are simultaneously active, the overlap region is highlighted behind their bars.

2026-04-11 11:03 → 2026-04-13 04:46 UTC04-11 11:0304-11 16:1604-11 21:2804-12 02:4104-12 07:5404-12 13:0704-12 18:2004-12 23:3304-13 04:46KSK · alg 13ZSK · alg 13tag 45366KSK tag 45366 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 04:46 UTCactiveDStag 7693ZSK tag 7693 alg 13 — published DNSKEY visible but not yet signing 2026-04-11 11:03 → 2026-04-13 04:46 UTCpublishedtag 15503ZSK tag 15503 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 04:46 UTCactivenowpre-publicationpublishedactiveto be deletedpast deletion date

Calendar view

Monthly calendars covering the reported window. Each day is shaded by the number of events observed and carries a coloured dot for every event source that fired that day. Hover any day for the count and a sample of the events (live UI only).

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
July 2025
MonTueWedThuFriSatSun
30123456
78910111213
14151617181920
21222324252627
28293031123
August 2025
MonTueWedThuFriSatSun
28293031123
45678910
11121314151617
18192021222324
25262728293031
September 2025
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
293012345
October 2025
MonTueWedThuFriSatSun
293012345
6789101112
13141516171819
20212223242526
272829303112
November 2025
MonTueWedThuFriSatSun
272829303112
3456789
10111213141516
17181920212223
24252627282930
December 2025
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
2930311234
January 2026
MonTueWedThuFriSatSun
2930311234
567891011
12131415161718
19202122232425
2627282930311
February 2026
MonTueWedThuFriSatSun
2627282930311
2345678
9101112131415
16171819202122
2324252627281
March 2026
MonTueWedThuFriSatSun
2324252627281
2345678
9101112131415
16171819202122
23242526272829
303112345
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123
May 2026
MonTueWedThuFriSatSun
27282930123
45678910
11121314151617
18192021222324
25262728293031

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status. Dots are coloured by source, stacked to avoid overlap, and the significant transitions are labelled inline.

No events in the reported window.

File event timeline

Changes observed directly on disk — every modification to a K*.state or K*.key file. Paired with the DNS timeline above, divergence between the two channels is usually where the interesting DNSSEC bugs live.

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:0411:03:18 [key] key_file_observed: new K*.key for test2.test ZSK tag=15503 11:03:18 [key] key_file_observed: new K*.key for test2.test KSK tag=45366 11:03:18 [key] key_file_observed: new K*.key for test2.test ZSK tag=76933key

State machine timeline

Colour bars show each key's state-machine value over the window. Separate lanes for GoalState, DNSKEYState, KRRSIGState, ZRRSIGState, and DSState. The rndc view is drawn below from rndc dnssec -status; discrepancies between the two are where bugs and BIND quirks usually live.

No state transitions recorded in this window.

BIND's view (rndc dnssec -status)

No rndc state transitions recorded in this window.

Chronological event log

2026-04-11

TimeSourceKeyTypeSummary
11:03:18Z key ZSK 15503 key_file_observed new K*.key for test2.test ZSK tag=15503
11:03:18Z key KSK 45366 key_file_observed new K*.key for test2.test KSK tag=45366
11:03:18Z key ZSK 7693 key_file_observed new K*.key for test2.test ZSK tag=7693

Per-key breakdown

For every observed key: the current K*.key timings and K*.state fields captured at report time, plus a calendar and split DNS / File timelines limited to that key's events. KSKs naturally show their DS lifecycle at the parent because DS events are tagged by key tag at emit time.

KSK · tag 45366

Algorithm: 13 · Key id: Ktest2.test.+013+45366 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2025-07-09 10:32:36 UTC
Publish2025-07-06 00:00:00 UTC
Activate2025-07-10 00:00:00 UTC
Revoke
Inactive
Delete
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:042026-04-11T11:03:18Z [key] key_file_observed new K*.key for test2.test KSK tag=45366key

ZSK · tag 7693

Algorithm: 13 · Key id: Ktest2.test.+013+07693 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2026-03-02 01:00:01 UTC
Publish2026-03-06 00:00:00 UTC
Activate2026-04-21 00:00:00 UTC
Revoke
Inactive2026-05-05 00:00:00 UTC
Delete2026-05-09 00:00:00 UTC
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:042026-04-11T11:03:18Z [key] key_file_observed new K*.key for test2.test ZSK tag=7693key

ZSK · tag 15503

Algorithm: 13 · Key id: Ktest2.test.+013+15503 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2025-08-25 10:49:25 UTC
Publish2025-08-29 00:00:00 UTC
Activate2025-10-14 00:00:00 UTC
Revoke
Inactive2026-04-21 00:00:00 UTC
Delete2026-04-25 00:00:00 UTC
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:042026-04-11T11:03:18Z [key] key_file_observed new K*.key for test2.test ZSK tag=15503key

Appendix — raw state snapshots

No state snapshots were captured in this window.