DNSSEC-VERIFY(1) BIND 9 DNSSEC-VERIFY(1) (NAME) dnssec-verify - DNSSEC (Zone) (SYNOPSIS) dnssec-verify [-c class] [-E engine] [-I input-format] [-J filename] [-o origin] [-q] [-v level] [-V] [-x] [-z] {zonefile} (DESCRIPTION) dnssec-verify (zone) DNSKEY NSEC/NSEC3 . (OPTIONS) -c class DNS . -E engine . BIND 9 OpenSSL OpenSSL ( pkcs11) . -I input-format . text () raw. (dynamic signed zones) . . -J filename dnssec-verify . -o origin (origin) . . -v level (debugging level) . -V . -q (quiet mode) . dnssec-verify . . -x DNSKEY (KSK) . DNSKEY . DNSKEY (ZSK) . -x dnssec-signzone <#cmdoption- dnssec-signzone-x> . -z KSK . DNSKEY KSK DNSKEY DNSKEY KSK . BIND 9 DNSKEY KSK . -z dnssec-signzone <#cmdoption-dnssec-signzone-z> . zonefile . (SEE ALSO) dnssec-signzone(8) <#std-iscman-dnssec-signzone>, BIND 9 Administrator Reference Manual, RFC 4033 . (AUTHORS) Internet Systems Consortium (COPYRIGHT) 2026, Internet Systems Consortium 9.20.27 2026-08-19 DNSSEC-VERIFY(1)