ldns-key2ds(1) on Linux
The text fefaea568a1d, as Debian 12 (Bookworm), Debian 11 (Bullseye), Debian 10 (Buster), Debian 9 (Stretch) shipped it.
transform a DNSKEY RR to a DS RR
Flags it lists
-
-1 -
-2 -
-4 -
-f -
-g -
-n