The DS record with the key tag %2 at the trust point %1 will be replaced with a DNSKEY trust anchor when a matching DNSKEY ...