DNSSEC lifecycle report

test8.devries.tv

Time window
earliest → now
Generated
2026-04-13T04:47:52.094164+00:00
Key directory
/mnt/bind/keys/test8.devries.tv

Summary

No significant activity was recorded during the reported window.

Key inventory

TagRoleAlgorithmKey idFirst seen
57087 KSK 13 Ktest8.devries.tv.+013+57087 2026-04-11T11:03:18Z
38756 ZSK 13 Ktest8.devries.tv.+013+38756 2026-04-11T11:03:18Z
53778 ZSK 13 Ktest8.devries.tv.+013+53778 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), with phase-coloured bars (pre-publication / published / active / retired / removed). A thin DS overlay stripe above each KSK row shows when the parent-side chain of trust was actually complete, which is often when the interesting DNSSEC stories happen. If two algorithms are simultaneously active, the overlap region is highlighted behind their bars.

2026-04-11 11:03 → 2026-04-13 04:47 UTC04-11 11:0304-11 16:1604-11 21:2904-12 02:4204-12 07:5504-12 13:0804-12 18:2104-12 23:3404-13 04:47KSK · alg 13ZSK · alg 13tag 57087KSK tag 57087 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 04:47 UTCactiveDStag 38756ZSK tag 38756 alg 13 — published DNSKEY visible but not yet signing 2026-04-11 11:03 → 2026-04-13 04:47 UTCpublishedtag 53778ZSK tag 53778 alg 13 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 04:47 UTCactivenowpre-publicationpublishedactiveto be deletedpast deletion date

Calendar view

Monthly calendars covering the reported window. Each day is shaded by the number of events observed and carries a coloured dot for every event source that fired that day. Hover any day for the count and a sample of the events (live UI only).

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
May 2025
MonTueWedThuFriSatSun
2829301234
567891011
12131415161718
19202122232425
2627282930311
June 2025
MonTueWedThuFriSatSun
2627282930311
2345678
9101112131415
16171819202122
23242526272829
30123456
July 2025
MonTueWedThuFriSatSun
30123456
78910111213
14151617181920
21222324252627
28293031123
August 2025
MonTueWedThuFriSatSun
28293031123
45678910
11121314151617
18192021222324
25262728293031
September 2025
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
293012345
October 2025
MonTueWedThuFriSatSun
293012345
6789101112
13141516171819
20212223242526
272829303112
November 2025
MonTueWedThuFriSatSun
272829303112
3456789
10111213141516
17181920212223
24252627282930
December 2025
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
2930311234
January 2026
MonTueWedThuFriSatSun
2930311234
567891011
12131415161718
19202122232425
2627282930311
February 2026
MonTueWedThuFriSatSun
2627282930311
2345678
9101112131415
16171819202122
2324252627281
March 2026
MonTueWedThuFriSatSun
2324252627281
2345678
9101112131415
16171819202122
23242526272829
303112345
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123
May 2026
MonTueWedThuFriSatSun
27282930123
45678910
11121314151617
18192021222324
25262728293031

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status. Dots are coloured by source, stacked to avoid overlap, and the significant transitions are labelled inline.

No events in the reported window.

File event timeline

Changes observed directly on disk — every modification to a K*.state or K*.key file. Paired with the DNS timeline above, divergence between the two channels is usually where the interesting DNSSEC bugs live.

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:0411:03:18 [key] key_file_observed: new K*.key for test8.devries.tv KSK tag=57087 11:03:18 [key] key_file_observed: new K*.key for test8.devries.tv ZSK tag=53778 11:03:18 [key] key_file_observed: new K*.key for test8.devries.tv ZSK tag=387563key

State machine timeline

Colour bars show each key's state-machine value over the window. Separate lanes for GoalState, DNSKEYState, KRRSIGState, ZRRSIGState, and DSState. The rndc view is drawn below from rndc dnssec -status; discrepancies between the two are where bugs and BIND quirks usually live.

No state transitions recorded in this window.

BIND's view (rndc dnssec -status)

No rndc state transitions recorded in this window.

Chronological event log

2026-04-11

TimeSourceKeyTypeSummary
11:03:18Z key KSK 57087 key_file_observed new K*.key for test8.devries.tv KSK tag=57087
11:03:18Z key ZSK 53778 key_file_observed new K*.key for test8.devries.tv ZSK tag=53778
11:03:18Z key ZSK 38756 key_file_observed new K*.key for test8.devries.tv ZSK tag=38756

Per-key breakdown

For every observed key: the current K*.key timings and K*.state fields captured at report time, plus a calendar and split DNS / File timelines limited to that key's events. KSKs naturally show their DS lifecycle at the parent because DS events are tagged by key tag at emit time.

KSK · tag 57087

Algorithm: 13 · Key id: Ktest8.devries.tv.+013+57087 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2025-05-28 17:24:52 UTC
Publish2025-05-28 17:24:52 UTC
Activate2025-05-28 17:24:52 UTC
Revoke
Inactive
Delete
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:042026-04-11T11:03:18Z [key] key_file_observed new K*.key for test8.devries.tv KSK tag=57087key

ZSK · tag 38756

Algorithm: 13 · Key id: Ktest8.devries.tv.+013+38756 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2026-03-02 01:00:01 UTC
Publish2026-03-06 00:00:00 UTC
Activate2026-04-21 00:00:00 UTC
Revoke
Inactive2026-05-05 00:00:00 UTC
Delete2026-05-09 00:00:00 UTC
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:042026-04-11T11:03:18Z [key] key_file_observed new K*.key for test8.devries.tv ZSK tag=38756key

ZSK · tag 53778

Algorithm: 13 · Key id: Ktest8.devries.tv.+013+53778 · First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created2025-08-25 10:49:25 UTC
Publish2025-08-29 00:00:00 UTC
Activate2025-10-14 00:00:00 UTC
Revoke
Inactive2026-04-21 00:00:00 UTC
Delete2026-04-25 00:00:00 UTC
SyncPublish
SyncDelete
K*.state — state machine
FieldValue
none observed
K*.state — timestamps
FieldValue
none observed

Calendar

on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
April 2026
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
27282930123

DNS events for this key

No events in the reported window.

File events for this key

2026-04-11T11:03:18+00:00 → 2026-04-11T11:04:18+00:0011:0311:0311:0311:0311:0311:0311:0411:0411:042026-04-11T11:03:18Z [key] key_file_observed new K*.key for test8.devries.tv ZSK tag=53778key

Appendix — raw state snapshots

No state snapshots were captured in this window.