Capabilities and limitations of catalog zones

Are we not able to use catalog zones to propagate zone-configuration for anything other than 'master' zones? I've been playing with catalog zones in the lab, and am stuck. I have defined a catalog zone on my primary, with a zone file that looks like: $TTL 300 @ IN SOA @ hostmaster.ak.gov.

dnssec: ds showing hidden 3+ days after key roll

Greetings, new poster. I just converted over to DNSSEC-policy, and rolled my KSK. I see: key: 269 (RSASHA256), KSK published: yes - since Sun Feb 6 14:31:32 2022 key signing:yes - since Sun Feb 6 14:31:32 2022 No rollover scheduled - goal: omnipresent -