1<?xml version="1.0" encoding="UTF-8"?> 2 3<SignerConfiguration> 4 <Zone name="opendnssec.org"> 5 6 <Signatures> 7 <Resign>PT2H</Resign> 8 <Refresh>P3D</Refresh> 9 <Validity> 10 <Default>P7D</Default> 11 <Denial>P14D</Denial> 12 </Validity> 13 <Jitter>PT12H</Jitter> 14 <InceptionOffset>PT300S</InceptionOffset> 15 </Signatures> 16 17 <Denial> 18 <NSEC3> 19 <!-- <TTL>PT0S</TTL> --> 20 <OptOut/> 21 <Hash> 22 <Algorithm>1</Algorithm> 23 <Iterations>10</Iterations> 24 <Salt>656d6d6b7469736169646f677461</Salt> 25 </Hash> 26 </NSEC3> 27 </Denial> 28 29 <Keys> 30 <TTL>PT3600S</TTL> 31 32 <Key> 33 <Flags>257</Flags> 34 <Algorithm>5</Algorithm> 35 <Locator>DFE7265B783F418685380AA784C2F31D</Locator> 36 <KSK/> 37 <Publish/> 38 </Key> 39 40 <Key> 41 <Flags>256</Flags> 42 <Algorithm>5</Algorithm> 43 <Locator>8D76C0C49FEB4A97B8E920C7552401CE</Locator> 44 <ZSK/> 45 <Publish/> 46 </Key> 47 </Keys> 48 49 <SOA> 50 <TTL>PT3600S</TTL> 51 <Minimum>PT3600S</Minimum> 52 <Serial>unixtime</Serial> 53 </SOA> 54 55 </Zone> 56</SignerConfiguration> 57