[root@services:/etc/bind/master] # vim /etc/bind/master/nl/freshdot.nl/zone.db
[root@services:/etc/bind/master] # zkt-signer -v -v -D /etc/bind/master/nl freshdot.nl.
parsing zone "freshdot.nl." in dir "/etc/bind/master/nl/freshdot.nl"
Check RFC5011 status
->not a rfc5011 zone, looking for a regular ksk rollover
Check KSK status
Check ZSK status
Re-signing necessary: Zone file edited
Writing key file "/etc/bind/master/nl/freshdot.nl/dnskey.db"
Incrementing serial number in file "/etc/bind/master/nl/freshdot.nl/zone.db"
Signing zone "freshdot.nl."
Run cmd "cd /etc/bind/master/nl/freshdot.nl; /usr/sbin/dnssec-signzone -u -3 3796FE -C -g -o freshdot.nl. -e +1814400 zone.db K*.private 2>&1"
Cmd dnssec-signzone return: "zone.db.signed"
Signing completed after 0s.