[muks@jurassic dnssec]$ ./dnssec-verify -o example.org example.org.zone.signed Kexample.org.+249+02314
Loading zone 'example.org' from file 'example.org.zone.signed'
dnssec-verify: fatal: No self-signed KSK DNSKEY found.  Supply an active
key with the KSK flag set, or use '-P'.

But there's no -P argument to dnssec-verify.

		Mukund