9.9.1

usage: dnssec-coverage [-h] [-K dir] [-f file] [-m time] [-d time] [-r time] [-c path] [-l time] [-z] [-k] [-D] [-v] zone dnssec-coverage: checks future DNSKEY coverage for a zone positional arguments: zone zone to check optional arguments: -h, --help show this help message and exit -K dir a directory containing keys to process -f file zone master file -m time the longest TTL in the zone(s) -d time the DNSKEY TTL -r time the RRSIG refresh interval in seconds [default: 22.5 days] -c path path to 'named-compilezone' -l time Length of time to check for DNSSEC coverage [default: 0 (unlimited)] -z Only check zone-signing keys (ZSKs) -k Only check key-signing keys (KSKs) -D, --debug Turn on debugging output -v, --version show program's version number and exit