1<?xml version="1.0" encoding="UTF-8"?>
2
3<SignerConfiguration>
4	<Zone name="opendnssec.org">
5
6		<Signatures>
7			<Resign>PT2H</Resign>
8			<Refresh>P3D</Refresh>
9			<Validity>
10					<Default>P7D</Default>
11					<Denial>P14D</Denial>
12			</Validity>
13			<Jitter>PT12H</Jitter>
14			<InceptionOffset>PT300S</InceptionOffset>
15		</Signatures>
16
17		<Denial>
18			<NSEC3>
19				<!-- <TTL>PT0S</TTL> -->
20				<OptOut/>
21				<Hash>
22					<Algorithm>1</Algorithm>
23					<Iterations>10</Iterations>
24					<Salt>656d6d6b7469736169646f677461</Salt>
25				</Hash>
26			</NSEC3>
27		</Denial>
28
29		<Keys>
30			<TTL>PT3600S</TTL>
31
32			<Key>
33				<Flags>257</Flags>
34				<Algorithm>5</Algorithm>
35				<Locator>DFE7265B783F418685380AA784C2F31D</Locator>
36				<KSK/>
37				<Publish/>
38			</Key>
39
40			<Key>
41				<Flags>256</Flags>
42				<Algorithm>5</Algorithm>
43				<Locator>8D76C0C49FEB4A97B8E920C7552401CE</Locator>
44				<ZSK/>
45				<Publish/>
46			</Key>
47		</Keys>
48
49		<SOA>
50			<TTL>PT3600S</TTL>
51			<Minimum>PT3600S</Minimum>
52			<Serial>unixtime</Serial>
53		</SOA>
54
55	</Zone>
56</SignerConfiguration>
57