Done, thanks for reading and reporting. Best regards, Matthijs On 17-11-2022 02:43, vom513 wrote: > ISC folks: can someone take a look at: > > https://kb.isc.org/docs/dnssec-key-and-signing-policy > > Seems one of the examples has a “-when” argument to rndc and the time is “1w” > > rndc seems to want YYYYMMDDHHMMSS (UTC) instead. > > Thanks. > > >