Database set to: /var/opendnssec/kasp.db
Zones:
Zone:                           Policy:       Next change:               Signer Configuration:             
cacert.net                      default       Sat Nov  2 10:56:57 2019   /var/opendnssec/signconf/cacert.net.xml
cacert.com                      default       Sat Nov  2 11:19:18 2019   /var/opendnssec/signconf/cacert.com.xml
cacert.org                      default       Sun Nov  3 01:39:55 2019   /var/opendnssec/signconf/cacert.org.xml

Keys:
Zone:                           Keytype: State:    Date of next transition: Size: Algorithm: CKA_ID:                          Repository: KeyTag:
cacert.net                      KSK      retire    2019-11-02 10:56:57      2048  7          6a52eef2ab867c21734f4a047b0b4c42 SoftHSM     52510
cacert.net                      KSK      retire    2019-11-02 10:56:57      2048  7          879de630897fe21bfe86154ec8fe46cf SoftHSM     61923
cacert.net                      KSK      active    2019-11-02 10:56:57      2048  7          09c22db364e926369afa1026ccfa7efd SoftHSM     39516
cacert.net                      ZSK      active    2019-11-02 10:56:57      1024  7          793f067ef9ac2209e370fc06683b9217 SoftHSM     4145
Keys:
Zone:                           Key role:     DS:          DNSKEY:      RRSIGDNSKEY: RRSIG:       Pub: Act: Id:
cacert.net                      KSK           hidden       hidden       hidden       NA           0    0    6a52eef2ab867c21734f4a047b0b4c42
cacert.net                      KSK           hidden       hidden       hidden       NA           0    0    879de630897fe21bfe86154ec8fe46cf
cacert.net                      KSK           omnipresent  omnipresent  omnipresent  NA           1    1    09c22db364e926369afa1026ccfa7efd
cacert.net                      ZSK           NA           omnipresent  NA           omnipresent  1    1    793f067ef9ac2209e370fc06683b9217

Keys:
Zone:                           Keytype: State:    Date of next transition: Size: Algorithm: CKA_ID:                          Repository: KeyTag:
cacert.com                      KSK      retire    2019-11-02 11:19:18      2048  7          450a276f335e9eabe9c0a6e6ff2acd1a SoftHSM     39921
cacert.com                      KSK      retire    2019-11-02 11:19:18      2048  7          2ad6d00243b00abebaa0f9a7505c2507 SoftHSM     8236
cacert.com                      KSK      active    2019-11-02 11:19:18      2048  7          0592891c8d2c29e54ff7268a27032a8e SoftHSM     5364
cacert.com                      ZSK      active    2019-11-02 11:19:18      1024  7          3316ac3c5a1a298c9d116b921196e07d SoftHSM     7322
Keys:
Zone:                           Key role:     DS:          DNSKEY:      RRSIGDNSKEY: RRSIG:       Pub: Act: Id:
cacert.com                      KSK           hidden       hidden       hidden       NA           0    0    450a276f335e9eabe9c0a6e6ff2acd1a
cacert.com                      KSK           hidden       hidden       hidden       NA           0    0    2ad6d00243b00abebaa0f9a7505c2507
cacert.com                      KSK           omnipresent  omnipresent  omnipresent  NA           1    1    0592891c8d2c29e54ff7268a27032a8e
cacert.com                      ZSK           NA           omnipresent  NA           omnipresent  1    1    3316ac3c5a1a298c9d116b921196e07d

Keys:
Zone:                           Keytype: State:    Date of next transition: Size: Algorithm: CKA_ID:                          Repository: KeyTag:
cacert.org                      KSK      retire    2019-11-03 01:39:55      2048  7          b4c14d6967f5c18e41bf0119923dbd51 SoftHSM     7501
cacert.org                      KSK      retire    waiting for ds-gone      2048  7          5554940da953b3add2f3437f3b89d258 SoftHSM     17520
cacert.org                      ZSK      active    2019-11-03 01:39:55      1024  7          e39b6a8a38956bf35eb17dda2a24ed67 SoftHSM     28484
cacert.org                      KSK      ready     waiting for ds-seen      2048  7          5470a2f4a8722bb3474f84f07cf3f905 SoftHSM     38734
Keys:
Zone:                           Key role:     DS:          DNSKEY:      RRSIGDNSKEY: RRSIG:       Pub: Act: Id:
cacert.org                      KSK           hidden       hidden       hidden       NA           0    0    b4c14d6967f5c18e41bf0119923dbd51
cacert.org                      KSK           unretentive  omnipresent  omnipresent  NA           1    1    5554940da953b3add2f3437f3b89d258
cacert.org                      ZSK           NA           omnipresent  NA           omnipresent  1    1    e39b6a8a38956bf35eb17dda2a24ed67
cacert.org                      KSK           rumoured     omnipresent  omnipresent  NA           1    1    5470a2f4a8722bb3474f84f07cf3f905