The DS record with the key tag {1} at the trust point {0} will be replaced with a DNSKEY trust anchor when a matching DNSKEY ...