zones
{
  ; dbFile @DEFAULT_DBFILE@
  ; validatorConfigFile @CONFDIR@/validator.conf

  zone
  {
    ; name / ; name of the zone
             ; KeyChain must have a identity with this name appended by <NDNS> at tail
    ; cert  /KEY/dsk-123/CERT/v=0 ; certificate to sign data
             ; omit cert to select the default certificate of above identity
  }

  ; zone
  ; {
    ; name /ndn ; name of the zone, zone should not have the same name
             ; KeyChain must have a identity with this name appended by <NDNS> at tail
    ; cert  /ndn/KEY/dsk-234/CERT/v=0 ; certificate to sign data
             ; omit cert to select the default certificate of above identity
  ; }
}