system/keymgr/policy.good

policy default:
    inherits global
    directory None
    algorithm None
    coverage None
    ksk_keysize None
    zsk_keysize None
    ksk_rollperiod None
    zsk_rollperiod None
    ksk_prepublish None
    ksk_postpublish None
    zsk_prepublish None
    zsk_postpublish None
    ksk_standby None
    zsk_standby None
    keyttl None

policy global:
    inherits None
    directory None
    algorithm RSASHA256
    coverage 15552000
    ksk_keysize 2048
    zsk_keysize 2048
    ksk_rollperiod None
    zsk_rollperiod 31536000
    ksk_prepublish 2592000
    ksk_postpublish 2592000
    zsk_prepublish 2592000
    zsk_postpublish 2592000
    ksk_standby None
    zsk_standby None
    keyttl 3600

constructed policy example.com:
    inherits global
    directory None
    algorithm RSASHA256
    coverage 15552000
    ksk_keysize 2048
    zsk_keysize 2048
    ksk_rollperiod None
    zsk_rollperiod 31536000
    ksk_prepublish 2592000
    ksk_postpublish 2592000
    zsk_prepublish 2592000
    zsk_postpublish 2592000
    ksk_standby None
    zsk_standby None
    keyttl 3600

policy default:
    inherits None
    directory "keydir"
    algorithm RSASHA1
    coverage 31536000
    ksk_keysize None
    zsk_keysize None
    ksk_rollperiod None
    zsk_rollperiod 15552000
    ksk_prepublish None
    ksk_postpublish None
    zsk_prepublish 3628800
    zsk_postpublish 3628800
    ksk_standby None
    zsk_standby None
    keyttl 3600

zone policy example.com:
    inherits extra
    directory "keydir"
    algorithm NSEC3RSASHA1
    coverage 12960000
    ksk_keysize 2048
    zsk_keysize 2048
    ksk_rollperiod 31536000
    zsk_rollperiod 7776000
    ksk_prepublish 7776000
    ksk_postpublish None
    zsk_prepublish 3628800
    zsk_postpublish 604800
    ksk_standby None
    zsk_standby None
    keyttl 7200

constructed policy example.org:
    inherits None
    directory "keydir"
    algorithm RSASHA1
    coverage 31536000
    ksk_keysize 2048
    zsk_keysize 1024
    ksk_rollperiod None
    zsk_rollperiod 15552000
    ksk_prepublish None
    ksk_postpublish None
    zsk_prepublish 3628800
    zsk_postpublish 3628800
    ksk_standby None
    zsk_standby None
    keyttl 3600

constructed policy example.net:
    inherits None
    directory "keydir"
    algorithm RSASHA1
    coverage 31536000
    ksk_keysize 2048
    zsk_keysize 1024
    ksk_rollperiod None
    zsk_rollperiod 15552000
    ksk_prepublish None
    ksk_postpublish None
    zsk_prepublish 3628800
    zsk_postpublish 3628800
    ksk_standby None
    zsk_standby None
    keyttl 3600

algorithm policy RSASHA1:
    inherits None
    directory None
    algorithm None
    coverage None
    ksk_keysize 2048
    zsk_keysize 1024
    ksk_rollperiod None
    zsk_rollperiod None
    ksk_prepublish None
    ksk_postpublish None
    zsk_prepublish None
    zsk_postpublish None
    ksk_standby None
    zsk_standby None
    keyttl None

algorithm policy DSA:
    inherits None
    directory None
    algorithm DSA
    coverage None
    ksk_keysize 1024
    zsk_keysize 2048
    ksk_rollperiod None
    zsk_rollperiod None
    ksk_prepublish None
    ksk_postpublish None
    zsk_prepublish None
    zsk_postpublish None
    ksk_standby None
    zsk_standby None
    keyttl None

policy extra:
    inherits default
    directory None
    algorithm None
    coverage 157680000
    ksk_keysize None
    zsk_keysize None
    ksk_rollperiod 31536000
    zsk_rollperiod 7776000
    ksk_prepublish 7776000
    ksk_postpublish None
    zsk_prepublish None
    zsk_postpublish 604800
    ksk_standby None
    zsk_standby None
    keyttl 7200