DomainKeyRecord

One RFC 5910 DNSKEY record published for a domain.

  • Resource type identifier

  • Row typeid (prefix dkr_)

  • RFC 4034 flags. 257 is a secure entry point, 256 a plain zone key.

  • RFC 4034 protocol. Always 3.

  • IANA DNSSEC algorithm number (e.g., 13 = ECDSA P-256, 15 = Ed25519)

  • The public key, standard base64