| id "NDNS KEY signing rule" |
| regex ^([^<NDNS>]*)<NDNS><KEY><><><>$ |
| k-regex ^([^<NDNS>]*)<NDNS>(<>*)<KEY><>$ |
| h-relation equal ; ksk should be signed by dkey in parent zone |
| p-regex ^([^<NDNS>]*)<NDNS><KEY><><><>$ |
| ; data: /ndn/ndnsim/NDNS/KEY/ksk-1/CERT/123 |
| ; k-locator: /ndn/NDNS/ndnsim/KEY/dkey-1 |
| ; data: /ndn/ndnsim/NDNS/KEY/dsk-1/CERT/123 |
| ; k-locator: /ndn/ndnsim/NDNS/KEY/ksk-1 |
| id "NDNS data signing rule" |
| regex ^([^<NDNS>]*)<NDNS>(<>*)<><>$ |
| k-regex ^([^<NDNS>]*)<NDNS><KEY><>$ |
| h-relation equal; data should be signed by dsk |
| p-regex ^([^<NDNS>]*)<NDNS>(<>*)<><>$ |
| ; data: /ndn/ndnsim/NDNS/NS/CERT/123 |
| ; k-locator: /ndn/ndnsim/NDNS/KEY/dsk-1 |