DomainVersionKeyRecord

Frozen DNSKEY record at a single version.

  • Resource type identifier

  • DNSKEY flags field: 257 marks a key-signing key, 256 a zone-signing key

  • DNSKEY protocol field; always 3

  • DNSSEC algorithm number

  • Base64-encoded public key