Usage: DnsCmd /EnumTrustAnchors /v - The name of a trust point, given by /EnumTrustPoints. If not given, all valid DNSKEY ...

Usage: DnsCmd  /EnumTrustAnchors [] [/v]
    -- The name of a trust point, given by /EnumTrustPoints.
                       If not given, all valid DNSKEY trust anchors will be
                       displayed.
  /v                -- Display RRData for each trust anchor

  Output:
    Type            -- Either DS or DNSKEY
    State           -- The current state of the trust anchor. One of:
      Valid      -- Trusted for DNSSEC validation
      AddPend    -- Not yet trusted for DNSSEC validation, but will become 
                    valid after the add hold-down period
      Missing    -- Trusted for DNSSEC validation, but was missing during the
                    last active refresh
      Revoked    -- Revoked by the trust point administrator, and no longer
                    valid for DNSSEC validation
      DS Pending -- Waiting for a matching DNSKEY, which will become a valid
                    trust anchor
      DS Invalid -- Matched with a DNSKEY that cannot be a valid trust anchor
    Key Tag -- the DNSSEC key tag associated with this trust anchor
    Entered state time -- when this trust anchor entered the current state
    Removal time -- when the Revoked trust anchor is elegible to be deleted
    Valid after time -- when the AddPend trust anchor is elegible to become
                        Valid
    RRData -- The raw fields of the resource record