See also https://www.knot-dns.cz/docs/3.3/singlehtml/index.html#cds-cdnskey-publishI was also confused that knot doesn’t publish CDS records for zones, that are not in the process of rolling a key, but after picking the right zone, it turns out everything works as intended:
/Libor --
