export ksk/zsk from GTM

I discovered that as a test an administrator had set up a GTM authoritative screen? to sign a 'test' domain.

 

Problem is his idea of test, was a domain we serve that didn't point to a content-rich website. But, its an old email domain...namely it was for alumni back when there wasn't much in the way of central email (which was before we moved that into the cloud, where current alumni get free email accounts for life...)

 

Because of the divide between DNS administration and managing registrars. The quick weekend solution would be to make our bind server start signing the domain with the same KSK and ZSK that the GTM was going to.

 

Actually, its only the same KSK that I need.

 

How do find the info (either in bind format or with details to turn into bind format ;)

 

At least its a small zone, compared to the 5 big ones that our bind is doing now (its kind of wasteful that its a 24 core server so it can do a full resign on those 5 zones in a reasonable amount of time....and then idle the rest of the time....hence one of the reasons to make use of getting our 'better' license :)