sorry. i did a `keymgr edu.lb ## delete` first, to get a clean slate.
# keymgr net.lb generate algorithm=rsasha256
ksk=yes zsk=yes
1986ca221483d75a1045ab51afa26d1f8b62e88d
# knotc reload
Reloaded
# keymgr net.lb ds
net.lb. DS 8389 8 2 194b6f4571058ec4a39e13bd24159dd1d93242a60a23a8ea6a346c9b6ac8f3c5
net.lb. DS 8389 8 4
ec5c1a343a710fb0488bea3fbd2d49b82ffe520d0ec8234d56fcd3c7f92229f5c675806353e7a16d88985ca6f77f290c
< put the DSs in the parent, lb, zone file >
# knotc zone-reload tld
OK
randy