Hello, I were just analyzing our BIND code to tell difference between "dnssec-loadkeys-interval" and "sig-validity-interval". I found a strange code that I believe logs incorrect timestamp. In lib/dns/zone.c:6125; set_key_expiry_warning is logging zone->refreshkeytime instead of zone->keywarntime it just changed. Unless it is non-obvious intention, I think this is just copy & paste error. Patch for master attached. Best Regards, Petr -- Petr Menšík Software Engineer Red Hat, http://www.redhat.com/ email: pemensik@redhat.com PGP: 65C6C973