[knot-resolver-users] Re: Checking for updated Root KSK

On 23/03/2026 16.22, Ulrich Wisser wrote: I assumed so, but... currently it requires using internals which aren't meant to be long-term stable.  (though in this case it's unlikely that they'd change within a year or two) In usual installation of v6 it should work to run: $ echo 'trust_anchors.summary()' | sudo socat - /run/knot-resolver/control/0 . 86400 DNSKEY 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdpWWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwuMoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBevYtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ; Valid: ; KeyTag:38696 ' The exact location of a suitable socket path (used above) may vary slightly, as it's somewhat configurable and I think it usually differed slightly before v6.