[knot-dns-users] Re: How to check for next KSK or ZSK rollover dates?

On 12. Feb 2024, at 08:40, Daniel Salzman <daniel.salzman(a)nic.cz> wrote: Hi, the zone re-sign event covers all DNSSEC-related actions (key rollover, RRSIG updates, NSEC3 updates,...). I don't think it's important to understand what will happen during the next re-sign. ksk-lifetime - A period between KSK generation and the next rollover initiation. zsk-lifetime - A period between ZSK activation and the next rollover initiation. in combination with `keymgr ellael.org. list` gives the answer. However, since version 3.3.5 Knot will log the next key step.