Evan Hunt via RT wrote: > Revised Tony's patch to use a "-r" ("rdata format") command line option instead > of a different command name. Aww, the reason for that was to make it easy to copy and paste in the terminal, without having to configure a shell alias, e.g. $ dig +noall +authority +multiline +dnssec com txt com. 842 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. ( 1496938278 ; serial 1800 ; refresh (30 minutes) 900 ; retry (15 minutes) 604800 ; expire (1 week) 86400 ; minimum (1 day) ) com. 842 IN RRSIG SOA 8 1 900 ( 20170615161118 20170608150118 27302 com. E3gsDnskMAcuoGABm0/wMgR7DWZp8jB6hxns4YoIsr5q DpW8krVCT1+pOvWk1txNKKv0FKTxnrFsXq0g7oXLDQV3 KLFEsCU2K1EUZRYSOe3SGgQlAGRehTnaxfNP1ouxpd/D bTgrL2/gaBLusiWbrpNIddJUHdFTPIxwySXRUOE= ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 842 IN RRSIG NSEC3 8 2 86400 ( 20170614044955 20170607033955 27302 com. L7uifuxG3NekZAUdohvpumfcsofMciePoRre/O/tt6ic Gmku6oQfuLZSZXWMemgW5Fe66JGPe8RixH2FSOM8rO9k zG3zlssQM40z9wSPGiwnJZqSS3hr2LyAN/Q/FnY8jODA U+5iIDVIhPlHOFkIlMpFoA6UVZqBY1IduxoSGug= ) ; I want to check this record vvvvvvvvvvvvv CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 842 IN NSEC3 1 1 0 - ( ; so I copy the highlighted bit ^^^^^^^^^^^^^ CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM ) $ NSEC3 1 1 0 - com com NSEC3 1 1 0 - CK0POJMG874LJREF7EFN8430QVIT8BSM Tony. -- f.anthony.n.finch http://dotat.at/ - I xn--zr8h punycode Lundy, Fastnet, Irish Sea: South or southwest, veering west for a time, 5 to 7, decreasing 4 at times. Moderate or rough, occasionally slight. Rain or thundery showers. Moderate or good, occasionally poor.