dnssec-settime.docbook revision f2af4484a813d670d88e9310e322e3074f1dc8b2
ea206aebcafe1ed5d470dd99daab9a1cedc81c7cMark Andrews - Copyright (C) 2009-2011, 2014-2016 Internet Systems Consortium, Inc. ("ISC")
ea206aebcafe1ed5d470dd99daab9a1cedc81c7cMark Andrews - This Source Code Form is subject to the terms of the Mozilla Public
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews - License, v. 2.0. If a copy of the MPL was not distributed with this
ea206aebcafe1ed5d470dd99daab9a1cedc81c7cMark Andrews - file, You can obtain one at http://mozilla.org/MPL/2.0/.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<!-- Converted by db4-upgrade version 1.0 -->
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.dnssec-settime">
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <refentryinfo>
f8f37672a57524560fbdde52484e6ae3de1c3354Mark Andrews <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </refentryinfo>
0756445a735e2df39bf798d8de42ae5dd030aa3bMark Andrews <refentrytitle><application>dnssec-settime</application></refentrytitle>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <refnamediv>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <refname><application>dnssec-settime</application></refname>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <refpurpose>set the key timing metadata for a DNSSEC key</refpurpose>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews </refnamediv>
ed178efa9ab8f813538fce4ff603b81ded9f1799Mark Andrews <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </copyright>
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews <refsynopsisdiv>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <arg choice="opt" rep="norepeat"><option>-f</option></arg>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <arg choice="opt" rep="norepeat"><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <arg choice="opt" rep="norepeat"><option>-L <replaceable class="parameter">ttl</replaceable></option></arg>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <arg choice="opt" rep="norepeat"><option>-P <replaceable class="parameter">date/offset</replaceable></option></arg>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <arg choice="opt" rep="norepeat"><option>-P sync <replaceable class="parameter">date/offset</replaceable></option></arg>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <arg choice="opt" rep="norepeat"><option>-A <replaceable class="parameter">date/offset</replaceable></option></arg>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <arg choice="opt" rep="norepeat"><option>-R <replaceable class="parameter">date/offset</replaceable></option></arg>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <arg choice="opt" rep="norepeat"><option>-I <replaceable class="parameter">date/offset</replaceable></option></arg>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <arg choice="opt" rep="norepeat"><option>-D <replaceable class="parameter">date/offset</replaceable></option></arg>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <arg choice="opt" rep="norepeat"><option>-D sync <replaceable class="parameter">date/offset</replaceable></option></arg>
26a77b80bb7ee886c6fa704348d5e80a011d8811Mark Andrews <arg choice="opt" rep="norepeat"><option>-h</option></arg>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <arg choice="opt" rep="norepeat"><option>-V</option></arg>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <arg choice="opt" rep="norepeat"><option>-v <replaceable class="parameter">level</replaceable></option></arg>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <arg choice="opt" rep="norepeat"><option>-E <replaceable class="parameter">engine</replaceable></option></arg>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </cmdsynopsis>
eaccf5e805405de257b5a4840256c580fefe00e3Mark Andrews </refsynopsisdiv>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <refsection><info><title>DESCRIPTION</title></info>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson reads a DNSSEC private key file and sets the key timing metadata
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson as specified by the <option>-P</option>, <option>-A</option>,
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <option>-R</option>, <option>-I</option>, and <option>-D</option>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson options. The metadata can then be used by
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <command>dnssec-signzone</command> or other signing software to
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson determine when a key is to be published, whether it should be
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson used for signing a zone, etc.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson If none of these options is set on the command line,
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson then <command>dnssec-settime</command> simply prints the key timing
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson metadata already stored in the key.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington When key metadata fields are changed, both files of a key
c25080dc50542213058c240226c9f342186e6285Mark Andrews pair (<filename>Knnnn.+aaa+iiiii.key</filename> and
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <filename>Knnnn.+aaa+iiiii.private</filename>) are regenerated.
413988c8166976498250c0ebb2e3a645d0366bd3Mark Andrews Metadata fields are stored in the private file. A human-readable
0756445a735e2df39bf798d8de42ae5dd030aa3bMark Andrews description of the metadata is also placed in comments in the key
642e0716c8b4ab82ebc8e60f94c9e897ee89f19aMark Andrews file. The private file's permissions are always set to be
c25080dc50542213058c240226c9f342186e6285Mark Andrews inaccessible to anyone other than the owner (mode 0600).
413988c8166976498250c0ebb2e3a645d0366bd3Mark Andrews </refsection>
c25080dc50542213058c240226c9f342186e6285Mark Andrews <refsection><info><title>OPTIONS</title></info>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <variablelist>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews Force an update of an old-format key with no metadata fields.
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews Without this option, <command>dnssec-settime</command> will
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews fail when attempting to update a legacy key. With this option,
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews the key will be recreated in the new format, but with the
642e0716c8b4ab82ebc8e60f94c9e897ee89f19aMark Andrews original key data retained. The key's creation date will be
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews set to the present time. If no other values are specified,
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews then the key's publication and activation dates will also
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews be set to the present time.
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews </varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <varlistentry>
c25080dc50542213058c240226c9f342186e6285Mark Andrews <term>-K <replaceable class="parameter">directory</replaceable></term>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews Sets the directory in which the key files are to reside.
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews </varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <term>-L <replaceable class="parameter">ttl</replaceable></term>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Sets the default TTL to use for this key when it is converted
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews into a DNSKEY RR. If the key is imported into a zone,
ed178efa9ab8f813538fce4ff603b81ded9f1799Mark Andrews this is the TTL that will be used for it, unless there was
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews already a DNSKEY RRset in place, in which case the existing TTL
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews would take precedence. If this value is not set and there
642e0716c8b4ab82ebc8e60f94c9e897ee89f19aMark Andrews is no existing DNSKEY RRset, the TTL will default to the
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews SOA TTL. Setting the default TTL to <literal>0</literal>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews or <literal>none</literal> removes it from the key.
ed178efa9ab8f813538fce4ff603b81ded9f1799Mark Andrews </varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews Emit usage message and exit.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews </varlistentry>
642e0716c8b4ab82ebc8e60f94c9e897ee89f19aMark Andrews <varlistentry>
ea206aebcafe1ed5d470dd99daab9a1cedc81c7cMark Andrews Prints version information.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews </varlistentry>
7c40ffd67bd1e73907f83a79a6ff8c635f4a4a74Mark Andrews <varlistentry>
0756445a735e2df39bf798d8de42ae5dd030aa3bMark Andrews <term>-v <replaceable class="parameter">level</replaceable></term>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Sets the debugging level.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </varlistentry>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <varlistentry>
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <term>-E <replaceable class="parameter">engine</replaceable></term>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews Specifies the cryptographic hardware to use, when applicable.
ed178efa9ab8f813538fce4ff603b81ded9f1799Mark Andrews When BIND is built with OpenSSL PKCS#11 support, this defaults
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews to the string "pkcs11", which identifies an OpenSSL engine
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews that can drive a cryptographic accelerator or hardware service
5752b9e296f14034f103149f18188770c2cc5239Mark Andrews module. When BIND is built with native PKCS#11 cryptography
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews (--enable-native-pkcs11), it defaults to the path of the PKCS#11
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews provider library specified via "--with-pkcs11".
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </varlistentry>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </variablelist>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <refsection><info><title>TIMING OPTIONS</title></info>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson If the argument begins with a '+' or '-', it is interpreted as
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson an offset from the present time. For convenience, if such an offset
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson then the offset is computed in years (defined as 365 24-hour days,
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson ignoring leap years), months (defined as 30 24-hour days), weeks,
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews days, hours, or minutes, respectively. Without a suffix, the offset
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington is computed in seconds. To unset a date, use 'none' or 'never'.
eaccf5e805405de257b5a4840256c580fefe00e3Mark Andrews <variablelist>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <varlistentry>
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews <term>-P <replaceable class="parameter">date/offset</replaceable></term>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews Sets the date on which a key is to be published to the zone.
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews After that date, the key will be included in the zone but will
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews not be used to sign it.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term>-P sync <replaceable class="parameter">date/offset</replaceable></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Sets the date on which CDS and CDNSKEY records that match this
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington key are to be published to the zone.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term>-A <replaceable class="parameter">date/offset</replaceable></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Sets the date on which the key is to be activated. After that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington date, the key will be included in the zone and used to sign
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term>-R <replaceable class="parameter">date/offset</replaceable></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Sets the date on which the key is to be revoked. After that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington date, the key will be flagged as revoked. It will be included
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington in the zone and will be used to sign it.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term>-I <replaceable class="parameter">date/offset</replaceable></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Sets the date on which the key is to be retired. After that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington date, the key will still be included in the zone, but it
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington will not be used to sign it.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term>-D <replaceable class="parameter">date/offset</replaceable></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Sets the date on which the key is to be deleted. After that
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews date, the key will no longer be included in the zone. (It
eaccf5e805405de257b5a4840256c580fefe00e3Mark Andrews may remain in the key repository, however.)
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington </varlistentry>
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington <varlistentry>
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington <term>-D sync <replaceable class="parameter">date/offset</replaceable></term>
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington Sets the date on which the CDS and CDNSKEY records that match this
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington key are to be deleted.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term>-S <replaceable class="parameter">predecessor key</replaceable></term>
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews Select a key for which the key being modified will be an
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews explicit successor. The name, algorithm, size, and type of the
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews predecessor key must exactly match those of the key being
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews modified. The activation date of the successor key will be set
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews to the inactivation date of the predecessor. The publication
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews date will be set to the activation date minus the prepublication
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews interval, which defaults to 30 days.
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews </varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <varlistentry>
a9789e288ee11ae4315e27235c33bae5405bd7c4Mark Andrews <term>-i <replaceable class="parameter">interval</replaceable></term>
eaccf5e805405de257b5a4840256c580fefe00e3Mark Andrews Sets the prepublication interval for a key. If set, then
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews the publication and activation dates must be separated by at least
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington this much time. If the activation date is specified but the
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews publication date isn't, then the publication date will default
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to this much time before the activation date; conversely, if
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the publication date is specified but activation date isn't,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington then activation will be set to this much time after publication.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington If the key is being set to be an explicit successor to another
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington key, then the default prepublication interval is 30 days;
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington otherwise it is zero.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington As with date offsets, if the argument is followed by one of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington interval is measured in years, months, weeks, days, hours,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington or minutes, respectively. Without a suffix, the interval is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington measured in seconds.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </variablelist>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </refsection>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <refsection><info><title>PRINTING OPTIONS</title></info>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <command>dnssec-settime</command> can also be used to print the
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews timing metadata associated with a key.
eaccf5e805405de257b5a4840256c580fefe00e3Mark Andrews <variablelist>
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Print times in UNIX epoch format.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term>-p <replaceable class="parameter">C/P/Psync/A/R/I/D/Dsync/all</replaceable></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Print a specific metadata value or set of metadata values.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The <option>-p</option> option may be followed by one or more
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of the following letters or strings to indicate which value
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington or values to print:
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>P</option> for the publication date,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>Psync</option> for the CDS and CDNSKEY publication date,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>A</option> for the activation date,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>R</option> for the revocation date,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>I</option> for the inactivation date,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>D</option> for the deletion date, and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>Dsync</option> for the CDS and CDNSKEY deletion date
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington To print all of the metadata, use <option>-p all</option>.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </variablelist>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </refsection>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <refsection><info><title>SEE ALSO</title></info>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </citerefentry>,
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews <citerefentry>
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews <refentrytitle>dnssec-signzone</refentrytitle><manvolnum>8</manvolnum>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </citerefentry>,
75216e007570b8ea36b3ac9cca096bf70c0ca6f6Mark Andrews <citetitle>BIND 9 Administrator Reference Manual</citetitle>,
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews </refsection>