Usage: dnssec-cds options [options] -f -d Version: 9.20.30 Options: -a digest algorithm (SHA-1 / SHA-256 / SHA-384) -c of domain (default IN) -D prefer CDNSKEY records instead of CDS -d where to find parent dsset- file -f child DNSKEY+CDNSKEY+CDS+RRSIG records -i[extension] update dsset- file in place -s oldest permitted child signatures -u emit nsupdate script -T TTL of DS records -V print version -v