The DS record with the key tag %2 at the trust point %1 does not correspond to a valid trust anchor. The corresponding DNSKEY ...

The DS record with the key tag %2 at the trust point %1 does not correspond to a valid trust anchor. The corresponding DNSKEY is not a key-signing-key (KSK) or no corresponding key could be found. The server try again to find a match at the next active refresh.