Fixture for the *_human() round-trip fixed-point program, stage 2
(base64-consumers cluster): DNSKEY/CDNSKEY, CERT, DHCID, IPSECKEY.

example.sec.signed is signed with RSASHA256 (30-day window,
inception 2027-01-01, expiration 2027-01-31). test.pl verifies and
renders it with -t1800057600 (2027-01-16 00:00 UTC, mid-window).

CERT/DHCID/IPSECKEY rdata bodies are reused from
t/issues/lots-of-rare-rrs/all.rr.org (known-valid).

ipseckey-alg0.zone is a separate UNSIGNED fixture: it holds an
algorithm-0 (no-key) IPSECKEY with gateway type 0 ("."). BIND's
dnssec-signzone rejects such a record (it requires >=1 key octet
unconditionally), so it cannot live in example.sec.signed. The
algorithm-0 render is therefore verified by parse+render only, not by
the signed round-trip splice.

Regenerate with: sh regenerate.sh   (needs BIND dnssec-keygen/signzone)
