# ABOUTME: Signed fixture for the Stage-5 presentation-form round-trip program.
# ABOUTME: Proves NID/L64 64-bit wire encoding and the render->reparse splice capstone.

roundtrip/stage5 — signed fixture for Stage-5 renderer coverage

Signed zone exercising the Stage-5 *_human() renderers: NSAP, TLSA, SMIMEA,
RP, NID, L64, and ZONEMD, alongside the SOA/NS/A records needed to form a
valid zone.

NID and L64 carry a 64-bit node-id / locator built from compose_binary_data's
'8' format specifier. Their RRSIGs are the canary for a wire-format
regression in that specifier: an earlier bug used htonl() (a 32-bit byte
swap) on the 64-bit value, truncating the high 32 bits and mis-ordering the
low 32, corrupting the wire rdata that RRSIG signs over. This fixture's
NID/L64 RRSIGs verify only when the 64-bit value is stored correctly in
network byte order across all 8 bytes.

A later-stage test also renders these records with -v and splices them back
into the zone (the roundtrip_splice capstone), proving the *_human() output
is wire-identical to the original.

Zone signed with RSASHA256 so signatures validate on every platform
(including RHEL9 where SHA-1 is disabled by crypto policy). Signing window
is 30 days (2027-01-01 .. 2027-01-31 UTC); the fixture is anchored by -t,
so window length does not affect test stability.

Test-time used by src/t/test.pl: 1800057600 (2027-01-15 12:00 UTC,
mid-window). If regenerate.sh is changed to use a different window, update
the -t flag in test.pl accordingly.

To regenerate:

    cd src/t/roundtrip/stage5
    sh regenerate.sh
