2025-11-13 20:15:07,475: kskm.common.config: INFO Loaded configuration from file ksrsigner.yaml SHA-256 0b39eba8309fca9c6cd74352afaca45cfe58e60fad9637da7e7727d2391b500b WORDS alone corporate trouble paramount chairlift opulent spellbind October glucose stethoscope crucial enrollment rocker penetrate regain fascinate woodlark everyday tracker atmosphere ringbolt monument clamshell surrender locale inception brackish sensation classroom bravado drumbeat armistice 2025-11-13 20:15:07,493: kskm.skr.load: INFO Loaded SKR from file skr-root-2025-q4.xml SHA-256 4df0896d6457ecba10220fa9ac0b19136073753d0b1de7f35165a67f5b8dbb09 WORDS dreadful upcoming nightbird hazardous flytrap Eskimo tumor puberty assume candidate artist passenger ribcage armistice bedlamp barbecue facial hurricane indulge crucifix alone breakaway transit vertigo drunken glossary rematch integrate erase microscope shamrock applicant 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO Previous SKR: 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 1 2025-10-01T00:00:00 2025-10-22T00:00:00 46441,61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 2 2025-10-11T00:00:00 2025-11-01T00:00:00 61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 3 2025-10-21T00:00:00 2025-11-11T00:00:00 61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 4 2025-10-31T00:00:00 2025-11-21T00:00:00 61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 5 2025-11-10T00:00:00 2025-12-01T00:00:00 61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 6 2025-11-20T00:00:00 2025-12-11T00:00:00 61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 7 2025-11-30T00:00:00 2025-12-21T00:00:00 61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 8 2025-12-10T00:00:00 2025-12-31T00:00:00 61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,497: kskm.tools.ksrsigner: INFO 9 2025-12-20T00:00:00 2026-01-10T00:00:00 21831,61809 20326(Klajeyz)/S,38696(Kmyv6jo)/P 2025-11-13 20:15:07,498: kskm.ksr.load: INFO Loaded KSR from file ksr-root-2026-q1-2-c_to_c.xml SHA-256 54189ba26cd1352a9e4d32f0a001cde2f91c76b773adf47aa6a05b6aeaad9efc WORDS eating borderline puppy Pacific glucose scavenger chopper chambermaid quiver disruptive checkup upcoming ragtime adviser spindle tomorrow waffle Brazilian inverse processor hockey perceptive upshot infancy rematch Orlando erase hamburger Trojan perceptive quiver Wilmington 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO Validating KSR using request policy: 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO acceptable_domains: ['.'] 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO approved_algorithms: ['RSASHA256'] 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_bundle_intervals: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_bundle_overlap: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_chain_keys: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_chain_keys_in_hsm: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_chain_overlap: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_cycle_length: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_keys_match_ksk_operator_policy: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_keys_publish_safety: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO check_keys_retire_safety: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO dns_ttl: 172800 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO enable_unsupported_ecdsa: False 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO enable_unsupported_edwards_dsa: False 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO keys_match_zsk_policy: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO max_bundle_interval: 11 days, 0:00:00 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO max_cycle_inception_length: 81 days, 0:00:00 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO min_bundle_interval: 9 days, 0:00:00 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO min_cycle_inception_length: 79 days, 0:00:00 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO num_bundles: 9 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO num_different_keys_in_all_bundles: 3 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO num_keys_per_bundle: [2, 1, 1, 1, 1, 1, 1, 1, 2] 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO rsa_approved_exponents: [65537] 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO rsa_approved_key_sizes: [2048] 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO rsa_exponent_match_zsk_policy: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO signature_algorithms_match_zsk_policy: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO signature_check_expire_horizon: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO signature_horizon_days: 180 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO signature_validity_match_zsk_policy: True 2025-11-13 20:15:07,500: kskm.ksr.validate: INFO validate_signatures: True 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-DOMAIN: Verified domain '.' 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-ID: Will be checked later, when SKR is available 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-BUNDLE-UNIQUE: All 9 bundles have unique ids 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-BUNDLE-KEYS: All 3 unique keys in the bundles accepted by policy 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-BUNDLE-POP: All 9 bundles contain proof-of-possession 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-BUNDLE-COUNT: Number of bundles (9) accepted 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-BUNDLE-CYCLE-DURATION: The cycle length is in accordance with the KSK operator policy 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-POLICY-KEYS: Validated number of keys per bundle, and for all bundles 2025-11-13 20:15:07,501: kskm.ksr.validate: INFO KSR-POLICY-ALG: All 1 ZSK operator signature algorithms accepted by policy 2025-11-13 20:15:07,502: kskm.ksr.validate: INFO KSR-POLICY-SIG-OVERLAP: All bundles overlap in accordance with the stated ZSK operator policy 2025-11-13 20:15:07,502: kskm.ksr.validate: INFO KSR-POLICY-SIG-VALIDITY: All 9 bundles have 21 days <= validity >= 21 days 2025-11-13 20:15:07,502: kskm.ksr.validate: INFO KSR-POLICY-SIG-HORIZON: All signatures expire in less than 180 days 2025-11-13 20:15:07,502: kskm.ksr.validate: INFO KSR-POLICY-BUNDLE-INTERVALS: All bundles intervals in accordance with the KSK operator policy 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO Request: 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 1 2026-01-01T00:00:00 2026-01-22T00:00:00 61809,21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 2 2026-01-11T00:00:00 2026-02-01T00:00:00 21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 3 2026-01-21T00:00:00 2026-02-11T00:00:00 21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 4 2026-01-31T00:00:00 2026-02-21T00:00:00 21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 5 2026-02-10T00:00:00 2026-03-03T00:00:00 21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 6 2026-02-20T00:00:00 2026-03-13T00:00:00 21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 7 2026-03-02T00:00:00 2026-03-23T00:00:00 21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 8 2026-03-12T00:00:00 2026-04-02T00:00:00 21831 2025-11-13 20:15:07,502: kskm.tools.ksrsigner: INFO 9 2026-03-22T00:00:00 2026-04-12T00:00:00 21831,54393 2025-11-13 20:15:07,502: kskm.misc.hsm: INFO Initializing PKCS#11 module aep using /opt/Keyper/PKCS11Provider/pkcs11.linux_gcc_4_1_2_glibc_2_5_x86_64.so.5.02 2025-11-13 20:15:07,650: kskm.misc.hsm: INFO HSM First slot: ICANNKSK 2025-11-13 20:15:07,650: kskm.misc.hsm: INFO HSM ManufacturerID: Ultra Electronics AEP Networks 2025-11-13 20:15:07,650: kskm.misc.hsm: INFO HSM Model: Keyper 9860-2 2025-11-13 20:15:07,650: kskm.misc.hsm: INFO HSM Serial: H2110010 2025-11-13 20:15:07,650: kskm.misc.hsm: INFO Initializing PKCS#11 module luna using /usr/safenet/lunaclient/lib/libCryptoki2_64.so 2025-11-13 20:15:07,944: kskm.misc.hsm: INFO HSM First slot: HSM9E_KSK-2024 2025-11-13 20:15:07,944: kskm.misc.hsm: INFO HSM ManufacturerID: 2025-11-13 20:15:07,944: kskm.misc.hsm: INFO HSM Model: Luna G7 2025-11-13 20:15:07,944: kskm.misc.hsm: INFO HSM Serial: 1658876115494 2025-11-13 20:15:07,944: kskm.signer.verify_chain: INFO Checking coherence between SKR(n-1) and this KSR 2025-11-13 20:15:07,945: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: The last keys in SKR(n-1) matches the first keys in this KSR 2025-11-13 20:15:07,945: kskm.signer.verify_chain: INFO KSR-CHAIN-OVERLAP: Overlap with last bundle in SKR(n-1) 9 days is in accordance with the KSR policy 2025-11-13 20:15:07,946: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: All 1 signatures in the last bundle of the last SKR were made with keys present in the HSM(s) 2025-11-13 20:16:10,120: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,125: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,130: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,134: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,138: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,143: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,147: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,152: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,156: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False 2025-11-13 20:16:10,160: kskm.signer.policy: INFO KSR-POLICY-SAFETY: PublishSafety validated 2025-11-13 20:16:10,160: kskm.signer.policy: INFO KSR-POLICY-SAFETY: RetireSafety validated 2025-11-13 20:16:10,160: kskm.tools.ksrsigner: INFO Generated SKR: 2025-11-13 20:16:10,160: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2025-11-13 20:16:10,160: kskm.tools.ksrsigner: INFO 1 2026-01-01T00:00:00 2026-01-22T00:00:00 61809,21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 2 2026-01-11T00:00:00 2026-02-01T00:00:00 21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 3 2026-01-21T00:00:00 2026-02-11T00:00:00 21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 4 2026-01-31T00:00:00 2026-02-21T00:00:00 21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 5 2026-02-10T00:00:00 2026-03-03T00:00:00 21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 6 2026-02-20T00:00:00 2026-03-13T00:00:00 21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 7 2026-03-02T00:00:00 2026-03-23T00:00:00 21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 8 2026-03-12T00:00:00 2026-04-02T00:00:00 21831 20326(Klajeyz)/S 2025-11-13 20:16:10,161: kskm.tools.ksrsigner: INFO 9 2026-03-22T00:00:00 2026-04-12T00:00:00 21831,54393 20326(Klajeyz)/S 2025-11-13 20:16:10,271: kskm.signer: INFO Wrote SKR to file skr-root-2026-q1-2-c_to_c.xml SHA-256 1e7de3d31099b4289d452093e2294176771df4241f64bde2ba1ad10e6891ddf3 WORDS berserk insincere tissue sociable assume nebula scenic cellulose quadrant detector bison molasses tiger certify cranky impetus involve breakaway upshot Capricorn billiard getaway skullcap tomorrow shadow Bradbury stairway Atlantic frighten miracle swelter vertigo