sorry.  i did a `keymgr edu.lb ## delete` first, to get a clean slate.
      # keymgr net.lb generate algorithm=rsasha256
ksk=yes zsk=yes
     1986ca221483d75a1045ab51afa26d1f8b62e88d
     # knotc reload
     Reloaded
     # keymgr net.lb ds
     net.lb. DS 8389 8 2 194b6f4571058ec4a39e13bd24159dd1d93242a60a23a8ea6a346c9b6ac8f3c5
     net.lb. DS 8389 8 4
ec5c1a343a710fb0488bea3fbd2d49b82ffe520d0ec8234d56fcd3c7f92229f5c675806353e7a16d88985ca6f77f290c
     < put the DSs in the parent, lb, zone file >
     # knotc zone-reload tld
     OK 
randy