OnWorks favicon

cleankrfp - Online in the Cloud

Run cleankrfp in OnWorks free hosting provider over Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

This is the command cleankrfp that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator



cleankrf - Clean a DNSSEC-Tools keyrec files of old data


cleankrf [options] <keyrec-files>


cleankrf cleans old data out of a set of DNSSEC-Tools keyrec files. The old data are
obsolete signing sets, orphaned keys, and obsolete keys.

Obsolete signing sets are set keyrecs unreferenced by a zone keyrec. Revoked signing sets
are considered obsolete by cleankrf.

Orphaned keys are KSK and ZSK key keyrecs unreferenced by a set keyrec.

Obsolete keys are key keyrecs with a keyrec_type of kskobs or zskobs.

cleankrf's exit code is the count of orphaned and obsolete keyrecs found.


Display a final count of old keyrecs found in the keyrec files. This option allows
the count to be displayed even if the -quiet option is given.

The key keyrecs are checked for old keyrecs, but they are not removed from the keyrec
file. The names of the old keyrecs are displayed.

-rm Delete the key files, both .key and .private, from orphaned and expired keyrecs.

Display no output.

Display output about referenced keys and unreferenced keys.

Displays the version information for cleankrf and the DNSSEC-Tools package.

Display a usage message.


Copyright 2004-2014 SPARTA, Inc. All rights reserved. See the COPYING file included with
the DNSSEC-Tools package for details.

Use cleankrfp online using onworks.net services

Free Servers & Workstations

Download Windows & Linux apps

Linux commands