DNSSEC lifecycle report
testc.devries.tv
Time window
earliest → now
Generated
2026-05-28T06:32:57.831969+00:00
Key directory
/mnt/bind/keys/testC.devries.tv
Summary
No significant activity was recorded during the reported window.
Keys observed: 5
Events recorded: 28
State changes (state_file): 0
State changes (rndc dnssec -status): 0
DNS observations (zone + parent): 0
iodyn-dnssec actions: 0
Key inventory
Tag Role Algorithm Key id First seen
11567
KSK
13
Ktestc.devries.tv.+013+11567
2026-05-13T01:00:05Z
29425
KSK
13
Ktestc.devries.tv.+013+29425
2026-04-11T11:03:18Z
3718
ZSK
13
Ktestc.devries.tv.+013+03718
2026-04-11T11:03:18Z
33245
ZSK
13
Ktestc.devries.tv.+013+33245
2026-05-18T01:00:05Z
54483
ZSK
13
Ktestc.devries.tv.+013+54483
2026-04-11T11:03:18Z
Rollover view
Every observed key on a time axis, grouped by
(role, algorithm), with phase-coloured bars
(pre-published / published / active / retired / removed). A
thin DS overlay stripe above each KSK row shows when the
parent-side chain of trust was actually complete, which is
often when the interesting DNSSEC stories happen. If two
algorithms are simultaneously active, the overlap region is
highlighted behind their bars.
2026-04-11 11:03 → 2026-05-28 06:32 UTC 2026-04-11 2026-04-17 2026-04-23 2026-04-29 2026-05-04 2026-05-10 2026-05-16 2026-05-22 2026-05-28 KSK · alg 13 ZSK · alg 13 tag 29425 KSK tag 29425 alg 13 — active
signing DNSKEY / zone data
2026-04-11 11:03 → 2026-05-21 00:00 UTC active KSK tag 29425 alg 13 — inactive
not signing, published for resolver caches, awaiting delete
2026-05-21 00:00 → 2026-05-25 00:00 UTC inactive KSK tag 29425 alg 13 — removed
past scheduled delete time — should no longer be in the zone
2026-05-25 00:00 → 2026-05-28 06:32 UTC removed DS tag 11567 KSK tag 11567 alg 13 — pre-published
generated but not yet in the DNSKEY RRset
2026-05-13 01:00 → 2026-05-17 00:00 UTC pre-published KSK tag 11567 alg 13 — published
DNSKEY visible but not yet signing
2026-05-17 00:00 → 2026-05-21 00:00 UTC published KSK tag 11567 alg 13 — active
signing DNSKEY / zone data
2026-05-21 00:00 → 2026-05-28 06:32 UTC active DS tag 3718 ZSK tag 3718 alg 13 — active
signing DNSKEY / zone data
2026-04-11 11:03 → 2026-05-28 06:32 UTC active tag 54483 ZSK tag 54483 alg 13 — published
DNSKEY visible but not yet signing
2026-04-11 11:03 → 2026-05-26 00:00 UTC published ZSK tag 54483 alg 13 — removed
past scheduled delete time — should no longer be in the zone
2026-05-26 00:00 → 2026-05-28 06:32 UTC tag 33245 ZSK tag 33245 alg 13 — pre-published
generated but not yet in the DNSKEY RRset
2026-05-18 01:00 → 2026-05-22 00:00 UTC pre-published ZSK tag 33245 alg 13 — published
DNSKEY visible but not yet signing
2026-05-22 00:00 → 2026-05-28 06:32 UTC published now pre-published published active inactive removed
Calendar view
Monthly calendars covering the reported window. Each day is
shaded by the number of events observed and carries a coloured
dot for every event source that fired that day. Hover any day
for the count and a sample of the events (live UI only).
on-disk state rndc dnssec -status DNS probe K*.key timing iodyn / syslog named.log scheduled (from K*.key) today
May 2025 Mon Tue Wed Thu Fri Sat Sun 28 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 1
June 2025 Mon Tue Wed Thu Fri Sat Sun 26 27 28 29 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 1 2 3 4 5 6
July 2025 Mon Tue Wed Thu Fri Sat Sun 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 1 2 3
August 2025 Mon Tue Wed Thu Fri Sat Sun 28 29 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
September 2025 Mon Tue Wed Thu Fri Sat Sun 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 1 2 3 4 5
October 2025 Mon Tue Wed Thu Fri Sat Sun 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 1 2
November 2025 Mon Tue Wed Thu Fri Sat Sun 27 28 29 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
December 2025 Mon Tue Wed Thu Fri Sat Sun 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 1 2 3 4
January 2026 Mon Tue Wed Thu Fri Sat Sun 29 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 1
February 2026 Mon Tue Wed Thu Fri Sat Sun 26 27 28 29 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 1
March 2026 Mon Tue Wed Thu Fri Sat Sun 23 24 25 26 27 28 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 1 2 3 4 5
April 2026 Mon Tue Wed Thu Fri Sat Sun 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 1 2 3
May 2026 Mon Tue Wed Thu Fri Sat Sun 27 28 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
June 2026 Mon Tue Wed Thu Fri Sat Sun 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 1 2 3 4 5
July 2026 Mon Tue Wed Thu Fri Sat Sun 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 1 2
DNS event timeline
Events observed via live DNS queries and reported by
rndc dnssec -status. Dots are coloured by
source, stacked to avoid overlap, and the significant
transitions are labelled inline.
No events in the reported window.
File event timeline
Changes observed directly on disk — every modification to a
K*.state or K*.key file. Paired with
the DNS timeline above, divergence between the two channels is
usually where the interesting DNSSEC bugs live.
2026-04-11 11:03 → 2026-05-26 01:00 UTC key 2026-04-11 2026-04-17 2026-04-22 2026-04-28 2026-05-03 2026-05-09 2026-05-14 2026-05-20 2026-05-26 3 3 3 3 3 3 3 3 3
State machine timeline
Colour bars show each key's state-machine value over the window.
Separate lanes for GoalState, DNSKEYState,
KRRSIGState, ZRRSIGState, and
DSState. The rndc view is drawn below from
rndc dnssec -status; discrepancies between the two
are where bugs and BIND quirks usually live.
No state transitions recorded in this window.
BIND's view (rndc dnssec -status)
No rndc state transitions recorded in this window.
Chronological event log
2026-04-11
Time Source Key Type Summary
11:03:18Z
key
KSK 29425
key_file_observed
new K*.key for testc.devries.tv KSK tag=29425
11:03:18Z
key
ZSK 54483
key_file_observed
new K*.key for testc.devries.tv ZSK tag=54483
11:03:18Z
key
ZSK 3718
key_file_observed
new K*.key for testc.devries.tv ZSK tag=3718
2026-04-14
Time Source Key Type Summary
01:00:06Z
key
ZSK 54483
key_timing_changed
testc.devries.tv ZSK tag=54483 Activate: 20260421000000 -> 20260428000000
01:00:06Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Inactive: 20260421000000 -> 20260428000000
01:00:06Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Delete: 20260425000000 -> 20260502000000
2026-04-21
Time Source Key Type Summary
01:00:06Z
key
ZSK 54483
key_timing_changed
testc.devries.tv ZSK tag=54483 Activate: 20260428000000 -> 20260505000000
01:00:06Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Inactive: 20260428000000 -> 20260505000000
01:00:06Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Delete: 20260502000000 -> 20260509000000
2026-04-28
Time Source Key Type Summary
01:00:12Z
key
ZSK 54483
key_timing_changed
testc.devries.tv ZSK tag=54483 Activate: 20260505000000 -> 20260512000000
01:00:12Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Inactive: 20260505000000 -> 20260512000000
01:00:12Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Delete: 20260509000000 -> 20260516000000
2026-05-05
Time Source Key Type Summary
01:00:24Z
key
ZSK 54483
key_timing_changed
testc.devries.tv ZSK tag=54483 Activate: 20260512000000 -> 20260519000000
01:00:24Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Inactive: 20260512000000 -> 20260519000000
01:00:24Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Delete: 20260516000000 -> 20260523000000
2026-05-12
Time Source Key Type Summary
01:00:06Z
key
ZSK 54483
key_timing_changed
testc.devries.tv ZSK tag=54483 Activate: 20260519000000 -> 20260526000000
01:00:06Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Inactive: 20260519000000 -> 20260526000000
01:00:06Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Delete: 20260523000000 -> 20260530000000
2026-05-13
Time Source Key Type Summary
01:00:05Z
key
KSK 29425
key_timing_changed
testc.devries.tv KSK tag=29425 Inactive: (unset) -> 20260521000000
01:00:05Z
key
KSK 29425
key_timing_changed
testc.devries.tv KSK tag=29425 Delete: (unset) -> 20260525000000
01:00:05Z
key
KSK 11567
key_file_observed
new K*.key for testc.devries.tv KSK tag=11567
2026-05-18
Time Source Key Type Summary
01:00:05Z
key
ZSK 33245
key_file_observed
new K*.key for testc.devries.tv ZSK tag=33245
2026-05-19
Time Source Key Type Summary
01:00:32Z
key
ZSK 33245
key_timing_changed
testc.devries.tv ZSK tag=33245 Activate: 20260526000000 -> 20260602000000
01:00:32Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Inactive: 20260526000000 -> 20260602000000
01:00:32Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Delete: 20260530000000 -> 20260606000000
2026-05-26
Time Source Key Type Summary
01:00:19Z
key
ZSK 33245
key_timing_changed
testc.devries.tv ZSK tag=33245 Activate: 20260602000000 -> 20260609000000
01:00:19Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Inactive: 20260602000000 -> 20260609000000
01:00:19Z
key
ZSK 3718
key_timing_changed
testc.devries.tv ZSK tag=3718 Delete: 20260606000000 -> 20260613000000
Per-key breakdown
For every observed key: the current K*.key timings
and K*.state fields captured at report time, plus a
calendar and split DNS / File timelines limited to that key's
events. KSKs naturally show their DS lifecycle at the parent
because DS events are tagged by key tag at emit time.
KSK · tag 11567
Algorithm: 13 ·
Key id: Ktestc.devries.tv.+013+11567 ·
First seen: 2026-05-13T01:00:05Z
K*.key file timings
Field Value
Created 2026-05-13 01:00:02 UTC
Publish 2026-05-17 00:00:00 UTC
Activate 2026-05-21 00:00:00 UTC
Revoke —
Inactive —
Delete —
SyncPublish —
SyncDelete —
K*.state — state machine
Field Value
none observed
K*.state — timestamps
Field Value
none observed
Calendar
on-disk state rndc dnssec -status DNS probe K*.key timing iodyn / syslog named.log scheduled (from K*.key) today
May 2026 Mon Tue Wed Thu Fri Sat Sun 27 28 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
DNS events for this key
No events in the reported window.
File events for this key
2026-05-13 01:00 → 2026-05-13 01:01 UTC key 01:00 01:00 01:00 01:00 01:00 01:00 01:00 01:00 01:01
KSK · tag 29425
Algorithm: 13 ·
Key id: Ktestc.devries.tv.+013+29425 ·
First seen: 2026-04-11T11:03:18Z
K*.key file timings
Field Value
Created 2025-05-28 17:30:09 UTC
Publish 2025-05-28 17:30:09 UTC
Activate 2025-05-28 17:30:09 UTC
Revoke —
Inactive 2026-05-21 00:00:00 UTC
Delete 2026-05-25 00:00:00 UTC
SyncPublish —
SyncDelete —
K*.state — state machine
Field Value
none observed
K*.state — timestamps
Field Value
none observed
Timing changes observed
When Source Field Old New
2026-05-13T01:00:05Z
key
Inactive
—
2026-05-21 00:00:00 UTC
2026-05-13T01:00:05Z
key
Delete
—
2026-05-25 00:00:00 UTC
Calendar
on-disk state rndc dnssec -status DNS probe K*.key timing iodyn / syslog named.log scheduled (from K*.key) today
April 2026 Mon Tue Wed Thu Fri Sat Sun 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 1 2 3
May 2026 Mon Tue Wed Thu Fri Sat Sun 27 28 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
DNS events for this key
No events in the reported window.
File events for this key
2026-04-11 11:03 → 2026-05-13 01:00 UTC key 2026-04-11 2026-04-15 2026-04-19 2026-04-23 2026-04-27 2026-05-01 2026-05-05 2026-05-09 2026-05-13 2
ZSK · tag 3718
Algorithm: 13 ·
Key id: Ktestc.devries.tv.+013+03718 ·
First seen: 2026-04-11T11:03:18Z
K*.key file timings
Field Value
Created 2025-08-25 10:49:25 UTC
Publish 2025-08-29 00:00:00 UTC
Activate 2025-10-14 00:00:00 UTC
Revoke —
Inactive 2026-06-09 00:00:00 UTC
Delete 2026-06-13 00:00:00 UTC
SyncPublish —
SyncDelete —
K*.state — state machine
Field Value
none observed
K*.state — timestamps
Field Value
none observed
Timing changes observed
When Source Field Old New
2026-04-14T01:00:06Z
key
Inactive
2026-04-21 00:00:00 UTC
2026-04-28 00:00:00 UTC
2026-04-14T01:00:06Z
key
Delete
2026-04-25 00:00:00 UTC
2026-05-02 00:00:00 UTC
2026-04-21T01:00:06Z
key
Inactive
2026-04-28 00:00:00 UTC
2026-05-05 00:00:00 UTC
2026-04-21T01:00:06Z
key
Delete
2026-05-02 00:00:00 UTC
2026-05-09 00:00:00 UTC
2026-04-28T01:00:12Z
key
Inactive
2026-05-05 00:00:00 UTC
2026-05-12 00:00:00 UTC
2026-04-28T01:00:12Z
key
Delete
2026-05-09 00:00:00 UTC
2026-05-16 00:00:00 UTC
2026-05-05T01:00:24Z
key
Inactive
2026-05-12 00:00:00 UTC
2026-05-19 00:00:00 UTC
2026-05-05T01:00:24Z
key
Delete
2026-05-16 00:00:00 UTC
2026-05-23 00:00:00 UTC
2026-05-12T01:00:06Z
key
Inactive
2026-05-19 00:00:00 UTC
2026-05-26 00:00:00 UTC
2026-05-12T01:00:06Z
key
Delete
2026-05-23 00:00:00 UTC
2026-05-30 00:00:00 UTC
2026-05-19T01:00:32Z
key
Inactive
2026-05-26 00:00:00 UTC
2026-06-02 00:00:00 UTC
2026-05-19T01:00:32Z
key
Delete
2026-05-30 00:00:00 UTC
2026-06-06 00:00:00 UTC
2026-05-26T01:00:19Z
key
Inactive
2026-06-02 00:00:00 UTC
2026-06-09 00:00:00 UTC
2026-05-26T01:00:19Z
key
Delete
2026-06-06 00:00:00 UTC
2026-06-13 00:00:00 UTC
Calendar
on-disk state rndc dnssec -status DNS probe K*.key timing iodyn / syslog named.log scheduled (from K*.key) today
April 2026 Mon Tue Wed Thu Fri Sat Sun 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 1 2 3
May 2026 Mon Tue Wed Thu Fri Sat Sun 27 28 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
DNS events for this key
No events in the reported window.
File events for this key
2026-04-11 11:03 → 2026-05-26 01:00 UTC key 2026-04-11 2026-04-17 2026-04-22 2026-04-28 2026-05-03 2026-05-09 2026-05-14 2026-05-20 2026-05-26 2 2 2 2 2 2 2
ZSK · tag 33245
Algorithm: 13 ·
Key id: Ktestc.devries.tv.+013+33245 ·
First seen: 2026-05-18T01:00:05Z
K*.key file timings
Field Value
Created 2026-05-18 01:00:02 UTC
Publish 2026-05-22 00:00:00 UTC
Activate 2026-06-09 00:00:00 UTC
Revoke —
Inactive 2026-07-21 00:00:00 UTC
Delete 2026-07-25 00:00:00 UTC
SyncPublish —
SyncDelete —
K*.state — state machine
Field Value
none observed
K*.state — timestamps
Field Value
none observed
Timing changes observed
When Source Field Old New
2026-05-19T01:00:32Z
key
Activate
2026-05-26 00:00:00 UTC
2026-06-02 00:00:00 UTC
2026-05-26T01:00:19Z
key
Activate
2026-06-02 00:00:00 UTC
2026-06-09 00:00:00 UTC
Calendar
on-disk state rndc dnssec -status DNS probe K*.key timing iodyn / syslog named.log scheduled (from K*.key) today
May 2026 Mon Tue Wed Thu Fri Sat Sun 27 28 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
DNS events for this key
No events in the reported window.
File events for this key
2026-05-18 01:00 → 2026-05-26 01:00 UTC key 2026-05-18 2026-05-19 2026-05-20 2026-05-21 2026-05-22 2026-05-23 2026-05-24 2026-05-25 2026-05-26
ZSK · tag 54483
Algorithm: 13 ·
Key id: Ktestc.devries.tv.+013+54483 ·
First seen: 2026-04-11T11:03:18Z
K*.key file timings
Field Value
Created 2026-03-02 01:00:01 UTC
Publish 2026-03-06 00:00:00 UTC
Activate 2026-05-26 00:00:00 UTC
Revoke —
Inactive 2026-05-05 00:00:00 UTC
Delete 2026-05-09 00:00:00 UTC
SyncPublish —
SyncDelete —
K*.state — state machine
Field Value
none observed
K*.state — timestamps
Field Value
none observed
Timing changes observed
When Source Field Old New
2026-04-14T01:00:06Z
key
Activate
2026-04-21 00:00:00 UTC
2026-04-28 00:00:00 UTC
2026-04-21T01:00:06Z
key
Activate
2026-04-28 00:00:00 UTC
2026-05-05 00:00:00 UTC
2026-04-28T01:00:12Z
key
Activate
2026-05-05 00:00:00 UTC
2026-05-12 00:00:00 UTC
2026-05-05T01:00:24Z
key
Activate
2026-05-12 00:00:00 UTC
2026-05-19 00:00:00 UTC
2026-05-12T01:00:06Z
key
Activate
2026-05-19 00:00:00 UTC
2026-05-26 00:00:00 UTC
Calendar
on-disk state rndc dnssec -status DNS probe K*.key timing iodyn / syslog named.log scheduled (from K*.key) today
April 2026 Mon Tue Wed Thu Fri Sat Sun 30 31 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 1 2 3
May 2026 Mon Tue Wed Thu Fri Sat Sun 27 28 29 30 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
DNS events for this key
No events in the reported window.
File events for this key
2026-04-11 11:03 → 2026-05-12 01:00 UTC key 2026-04-11 2026-04-15 2026-04-19 2026-04-22 2026-04-26 2026-04-30 2026-05-04 2026-05-08 2026-05-12
Appendix — raw state snapshots
No state snapshots were captured in this window.