My validation program reads a set of RR's in wire format where the first
RR is a DS RR, the next one is an RRSIG RR covering the previous DS RR
and the rest are "support records", including RRSIG's.
Note you need to be able to accept any order of RRdata if you get the order that came in
on the wire (because at least powerdns randomized the rrset)
_______________________________________________
DNSSEC-Transparency mailing list
DNSSEC-Transparency at lists.sunet.se
https://lists.sunet.se/listinfo/dnssec-transparency