# ABOUTME: NSEC3-signed fixture for the Stage-6 generic round-trip harness.
# ABOUTME: Covers NSEC3 and NSEC3PARAM, which cannot coexist with NSEC.

roundtrip/stage6/nsec3 — NSEC3 type coverage for the Stage-6 harness

Minimal NSEC3-signed zone (SOA/NS/A) whose sole purpose is to bring the
NSEC3 and NSEC3PARAM renderers under the generic round-trip harness. These
two types cannot appear in the NSEC-signed "everything" fixture next door,
so they get their own minimal zone.

Signed with RSASHA256 (validates on RHEL9 where SHA-1 is disabled by crypto
policy), NSEC3 salt DEADBEEF, 10 iterations, 30-day window
(2027-01-01 .. 2027-01-31 UTC). Anchored by -t so window length does not
affect stability.

Test-time used by src/t/test.pl: 1800057600 (2027-01-15 12:00 UTC).

To regenerate:

    cd src/t/roundtrip/stage6/nsec3
    sh regenerate.sh
