ldns-keygen(1) on Linux
The text c433d2fffc30, as Debian 7 (Wheezy) shipped it.
generate a DNSSEC key pair
Flags it lists
-
-a -
-b -
-k -
-r -
-v