JP Mens on Nostr: npub18r6mp…0lcuk have you checked whether Knot's `keymgr pregenerate +6mo' would do ...

npub18r6mpv2d269mfl48xcslcdgpqajy8nk7vtqlqd6ray7ed56ns2esa0lcuk (npub18r6…lcuk) have you checked whether Knot's `keymgr pregenerate +6mo' would do what you need?

They do document also how to keep a KSK offline, in case that helps: https://www.knot-dns.cz/docs/3.4/html/operation.html#dnssec-offline-ksk