dnssec-coverage(8) on Linux
The text 8ae040eacabb, as Debian 10 (Buster) shipped it.
checks future DNSKEY coverage for a zone
Flags it lists
-
-K -
-f -
-k -
-l -
-z