# genkrf -zone=example.com -ksk=Kexample.com.+005+47670 -zskcur=Kexample.com.+005+48926db-in.example.com. db-in.example.com..signed

The genkrf command generates a keyrec file from existing key files. It also generates any additional keys that zonesigner uses. In the above example, genkrf will generate a new key zskpub along with the keyrec file named example.com.krf. It will display the following message if successful:

genkrf: file example.com.krf created successfully.