content-type: text/plain; charset="utf-8" Content-Disposition: inline X-RT-Original-Encoding: ascii Content-Length: 335 [muks@jurassic dnssec]$ ./dnssec-verify -o example.org example.org.zone.signed Kexample.org.+249+02314 Loading zone 'example.org' from file 'example.org.zone.signed' dnssec-verify: fatal: No self-signed KSK DNSKEY found. Supply an active key with the KSK flag set, or use '-P'. But there's no -P argument to dnssec-verify. Mukund