DomainDNSKEY

The DNSKEY a DS record was derived from.

  • Resource type identifier

  • RFC 4034 flags. 257 is a secure entry point, 256 a plain zone key.

  • RFC 4034 protocol. Always 3.

  • IANA DNSSEC algorithm number. Matches the DS record's own.

  • The public key, standard base64