--- /dev/null
+#!/bin/sh
+cleandig dnssec-parent.com AXFR showflags unhash
--- /dev/null
+Are all records present in the AXFR output (with the correct type map)
--- /dev/null
+delegated.dnssec-parent.com. IN NS 3600 ns1.delegated.dnssec-parent.com.
+delegated.dnssec-parent.com. IN NS 3600 ns2.delegated.dnssec-parent.com.
+dnssec-parent.com. IN A 3600 9.9.9.9
+dnssec-parent.com. IN NS 3600 ns1.dnssec-parent.com.
+dnssec-parent.com. IN NS 3600 ns2.dnssec-parent.com.
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+insecure-delegated.ent.dnssec-parent.com. IN NS 3600 ns.example.com.
+ns1.delegated.dnssec-parent.com. IN A 3600 4.5.6.7
+ns1.dnssec-parent.com. IN A 3600 1.2.3.4
+ns1.secure-delegated.dnssec-parent.com. IN A 3600 1.2.3.4
+ns2.delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+ns2.dnssec-parent.com. IN A 3600 4.3.2.1
+ns2.secure-delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+secure-delegated.dnssec-parent.com. IN DS 3600 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+secure-delegated.dnssec-parent.com. IN NS 3600 ns1.secure-delegated.dnssec-parent.com.
+secure-delegated.dnssec-parent.com. IN NS 3600 ns2.secure-delegated.dnssec-parent.com.
--- /dev/null
+delegated.dnssec-parent.com. IN NS 3600 ns1.delegated.dnssec-parent.com.
+delegated.dnssec-parent.com. IN NS 3600 ns2.delegated.dnssec-parent.com.
+delegated.dnssec-parent.com. IN NSEC 86400 insecure-delegated.ent.dnssec-parent.com. NS RRSIG NSEC
+delegated.dnssec-parent.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN A 3600 9.9.9.9
+dnssec-parent.com. IN DNSKEY 86400 256 3 8 ...
+dnssec-parent.com. IN DNSKEY 86400 257 3 8 ...
+dnssec-parent.com. IN NS 3600 ns1.dnssec-parent.com.
+dnssec-parent.com. IN NS 3600 ns2.dnssec-parent.com.
+dnssec-parent.com. IN NSEC 86400 delegated.dnssec-parent.com. A NS SOA RRSIG NSEC DNSKEY
+dnssec-parent.com. IN RRSIG 3600 A 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 3600 NS 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 3600 SOA 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 DNSKEY 8 2 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 NSEC 8 2 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+insecure-delegated.ent.dnssec-parent.com. IN NS 3600 ns.example.com.
+insecure-delegated.ent.dnssec-parent.com. IN NSEC 86400 ns1.dnssec-parent.com. NS RRSIG NSEC
+insecure-delegated.ent.dnssec-parent.com. IN RRSIG 86400 NSEC 8 4 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.delegated.dnssec-parent.com. IN A 3600 4.5.6.7
+ns1.dnssec-parent.com. IN A 3600 1.2.3.4
+ns1.dnssec-parent.com. IN NSEC 86400 ns2.dnssec-parent.com. A RRSIG NSEC
+ns1.dnssec-parent.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.dnssec-parent.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.secure-delegated.dnssec-parent.com. IN A 3600 1.2.3.4
+ns2.delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+ns2.dnssec-parent.com. IN A 3600 4.3.2.1
+ns2.dnssec-parent.com. IN NSEC 86400 secure-delegated.dnssec-parent.com. A RRSIG NSEC
+ns2.dnssec-parent.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns2.dnssec-parent.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns2.secure-delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+secure-delegated.dnssec-parent.com. IN DS 3600 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+secure-delegated.dnssec-parent.com. IN NS 3600 ns1.secure-delegated.dnssec-parent.com.
+secure-delegated.dnssec-parent.com. IN NS 3600 ns2.secure-delegated.dnssec-parent.com.
+secure-delegated.dnssec-parent.com. IN NSEC 86400 dnssec-parent.com. NS DS RRSIG NSEC
+secure-delegated.dnssec-parent.com. IN RRSIG 3600 DS 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+secure-delegated.dnssec-parent.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
--- /dev/null
+delegated.dnssec-parent.com. IN NS 3600 ns1.delegated.dnssec-parent.com.
+delegated.dnssec-parent.com. IN NS 3600 ns2.delegated.dnssec-parent.com.
+delegated.dnssec-parent.com. IN NSEC3 86400 1 0 1 abcd [next owner] NS
+delegated.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN A 3600 9.9.9.9
+dnssec-parent.com. IN DNSKEY 86400 256 3 8 ...
+dnssec-parent.com. IN DNSKEY 86400 257 3 8 ...
+dnssec-parent.com. IN NS 3600 ns1.dnssec-parent.com.
+dnssec-parent.com. IN NS 3600 ns2.dnssec-parent.com.
+dnssec-parent.com. IN NSEC3 86400 1 0 1 abcd [next owner] A NS SOA RRSIG DNSKEY NSEC3PARAM
+dnssec-parent.com. IN NSEC3PARAM 86400 1 0 1 abcd
+dnssec-parent.com. IN RRSIG 3600 A 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 3600 NS 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 3600 SOA 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 DNSKEY 8 2 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 NSEC3PARAM 8 2 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+ent.dnssec-parent.com. IN NSEC3 86400 1 0 1 abcd [next owner]
+ent.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+insecure-delegated.ent.dnssec-parent.com. IN NS 3600 ns.example.com.
+insecure-delegated.ent.dnssec-parent.com. IN NSEC3 86400 1 0 1 abcd [next owner] NS
+insecure-delegated.ent.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.delegated.dnssec-parent.com. IN A 3600 4.5.6.7
+ns1.dnssec-parent.com. IN A 3600 1.2.3.4
+ns1.dnssec-parent.com. IN NSEC3 86400 1 0 1 abcd [next owner] A RRSIG
+ns1.dnssec-parent.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.secure-delegated.dnssec-parent.com. IN A 3600 1.2.3.4
+ns2.delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+ns2.dnssec-parent.com. IN A 3600 4.3.2.1
+ns2.dnssec-parent.com. IN NSEC3 86400 1 0 1 abcd [next owner] A RRSIG
+ns2.dnssec-parent.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns2.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns2.secure-delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+secure-delegated.dnssec-parent.com. IN DS 3600 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+secure-delegated.dnssec-parent.com. IN NS 3600 ns1.secure-delegated.dnssec-parent.com.
+secure-delegated.dnssec-parent.com. IN NS 3600 ns2.secure-delegated.dnssec-parent.com.
+secure-delegated.dnssec-parent.com. IN NSEC3 86400 1 0 1 abcd [next owner] NS DS RRSIG
+secure-delegated.dnssec-parent.com. IN RRSIG 3600 DS 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+secure-delegated.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
--- /dev/null
+delegated.dnssec-parent.com. IN NS 3600 ns1.delegated.dnssec-parent.com.
+delegated.dnssec-parent.com. IN NS 3600 ns2.delegated.dnssec-parent.com.
+dnssec-parent.com. IN A 3600 9.9.9.9
+dnssec-parent.com. IN DNSKEY 86400 256 3 8 ...
+dnssec-parent.com. IN DNSKEY 86400 257 3 8 ...
+dnssec-parent.com. IN NS 3600 ns1.dnssec-parent.com.
+dnssec-parent.com. IN NS 3600 ns2.dnssec-parent.com.
+dnssec-parent.com. IN NSEC3 86400 1 1 1 abcd [next owner] A NS SOA RRSIG DNSKEY NSEC3PARAM
+dnssec-parent.com. IN NSEC3PARAM 86400 1 0 1 abcd
+dnssec-parent.com. IN RRSIG 3600 A 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 3600 NS 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 3600 SOA 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 DNSKEY 8 2 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN RRSIG 86400 NSEC3PARAM 8 2 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+insecure-delegated.ent.dnssec-parent.com. IN NS 3600 ns.example.com.
+ns1.delegated.dnssec-parent.com. IN A 3600 4.5.6.7
+ns1.dnssec-parent.com. IN A 3600 1.2.3.4
+ns1.dnssec-parent.com. IN NSEC3 86400 1 1 1 abcd [next owner] A RRSIG
+ns1.dnssec-parent.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns1.secure-delegated.dnssec-parent.com. IN A 3600 1.2.3.4
+ns2.delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+ns2.dnssec-parent.com. IN A 3600 4.3.2.1
+ns2.dnssec-parent.com. IN NSEC3 86400 1 1 1 abcd [next owner] A RRSIG
+ns2.dnssec-parent.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns2.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...
+ns2.secure-delegated.dnssec-parent.com. IN A 3600 5.6.7.8
+secure-delegated.dnssec-parent.com. IN DS 3600 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+secure-delegated.dnssec-parent.com. IN NS 3600 ns1.secure-delegated.dnssec-parent.com.
+secure-delegated.dnssec-parent.com. IN NS 3600 ns2.secure-delegated.dnssec-parent.com.
+secure-delegated.dnssec-parent.com. IN NSEC3 86400 1 1 1 abcd [next owner] NS DS RRSIG
+secure-delegated.dnssec-parent.com. IN RRSIG 3600 DS 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ...
+secure-delegated.dnssec-parent.com. IN RRSIG 86400 NSEC3 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ...