DNS Lookup Examples · Example 13 of 13 in Record Types
DNSKEY Records: DNSSEC Keys
The DNSKEY records of cloudflare.com: its DNSSEC public keys, flags 256 and 257.
Asks for the DNSKEY records of cloudflare.com.
The answer holds the domain's two DNSSEC public keys: flags 256 mark the zone-signing key and 257 the key-signing key (the one the DS record in .com points to). Both use algorithm 13; the key material is base64.