Hi! I was trying check5011.pl script to test validity of trust anchors in my bind file. I have found that it does not parse well recent dig +multiline output of dig. Before alg always ended without space, but at least from version 9.10.4 there is space present. Now: ; KSK; alg = RSASHA256 ; key id = 19036 Before: ; KSK; alg = RSASHA256; key id = 19036 check5011.pl does silently fail to parse alg and key id. Uses previous values from DNSKEY flags instead. It is not print helpful results then. I am sending patch that accepts both versions. Petr Menšík