# ABOUTME: "Everything" NSEC-signed fixture for the Stage-6 round-trip harness.
# ABOUTME: One record of every renderable type except NSEC3/NSEC3PARAM.

roundtrip/stage6/everything — comprehensive renderable-type coverage

NSEC-signed zone holding exactly one record of every type validns can render
(the set printed by `validns -L`), except:

  - NSEC3 / NSEC3PARAM  — cannot coexist with NSEC; see ../nsec3/.
  - RRSIG / NSEC / DNSKEY — produced by dnssec-signzone.

DS, DLV, CDS, CDNSKEY appear as explicit authoritative records (the
delegation DS is signed by this zone, so no child dsset is needed). The
generic Stage-6 driver in src/t/test.pl auto-detects every renderable
record here, re-renders it with -v, splices it back, and re-verifies the
whole zone — proving each rendering is wire-identical.

Signed with RSASHA256 (validates on RHEL9 where SHA-1 is disabled by crypto
policy), 30-day window (2027-01-01 .. 2027-01-31 UTC). Anchored by -t so
window length does not affect stability.

Test-time used by src/t/test.pl: 1800057600 (2027-01-15 12:00 UTC).

To regenerate:

    cd src/t/roundtrip/stage6/everything
    sh regenerate.sh
