[ldns-users] Finding out which signatures belong to which RRs

[Vladimir Levijev]

Hi,

Imagine I'm parsing AUTHORITY section of output of "IN A" request. I
get 2 NSEC3 RRs and 2 signatures for each, something like:

IN NSEC3 <-- let's call it A
IN RRSIG NSEC3 <-- first rrsig of A
IN RRSIG NSEC3 <-- second rrsig of A
IN NSEC3 <-- let's call it B
IN RRSIG NSEC3 <-- first rrsig of B
IN RRSIG NSEC3 <-- second rrsig of B

So, how can I verify which NSEC3 the signatures belong to? In other
words, what do RRs that sign and that are being signed have in common,
and which ldns function I could use to get it?

Cheers,

VL