identifying DNSKEY by label

[Axel Rau]

Hi all,

I have several ZSKs in one zone, but only one is being
used for signing.
The others seem to be relicts from earlier rollovers.
I would like to delete the unused DNSKEY RRs via nsupdate,
but how can I identify a DNSKEY by label ?

The zone has not yet been converted to dnssec-policy but
uses still auto-dnssec maintain.

Axel
---
PGP-Key: CDE74120  ☀ mobile: +49 160 7568212
computing @ chaos claudius