UNBOUND-ANCHOR(8) Unbound UNBOUND-ANCHOR(8) (NAME) unbound-anchor - (trust anchor) Unbound (SYNOPSIS) unbound-anchor [opts] (DESCRIPTION) unbound-anchor (root trust anchor) DNSSEC . RFC 5011 RFC 7958 . DNS unbound(8) . RFC 5011 Unbound ( auto-trust-anchor-file) Unbound Unbound ( 'unbound') ( ) . Unbound . : # in the init scripts. # provide or update the root anchor (if necessary) unbound-anchor -a "/etc/trusted-key.key" # Please note usage of this root anchor is at your own risk # and under the terms of our LICENSE (see source). # # start validating resolver # the unbound.conf contains: # auto-trust-anchor-file: "/etc/trusted-key.key" unbound -c unbound.conf . . https root-anchors.xml (RFC 7958) . . DNSSEC DNS RFC 5011 . . : -a . /etc/trusted-key.key . . -c . /etc/unbound/icannbundle.pem . . -l (stdout). -u https://name . https:// . "data.iana.org" . -P . IPv4 IPv6 ( ) . -S SNI HTTPS. SNI . -b
(bind) https. IPv4 IPv6 ( ) . -x root-anchors.xml ( -u ). /root-anchors/root-anchors.xml . -s root-anchors.p7s ( -u ). /root-anchors/root-anchors.p7s . PKCS7 xml pem (-c) . -n emailAddress (Subject) p7s. . dnssec@iana.org . "" emailAddress . -4 IPv4 https. IPv4 IPv6 . -6 IPv6 https. IPv4 IPv6 . -f resolv.conf . /etc/resolv.conf . IP (recursive nameservers) . (bootstrap) ( ). (upstream cache) (captive portals) . -r root.hints ( BIND Unbound) . (root hints) . unbound-anchor ( -u) DNSKEY . . -R (fallback) -f . DNSSEC . -v (verbose). ( ) . . . -C . -P https. 443 . -F xml . DNS ( ) . ( ) xml . -h . (EXIT CODE) 1 . RFC 5011 0 . : unbound-anchor -a "root.key" || logger "Please check root.key" . (TRUST) ( LICENSE https://github.com/NLnetLabs/unbound/blob/master/LICENSE ) . unbound-anchor -l . root-cert rootkey . (FILES) /etc/trusted-key.key . . /etc/unbound/icannbundle.pem DNSSEC . https://data.iana.org/root-anchors/icannbundle.pem ( ). . https://data.iana.org/root-anchors/root-anchors.xml . https://data.iana.org/root-anchors/root-anchors.p7s . (SEE ALSO) unbound.conf(5), unbound(8). (AUTHOR) Unbound CREDITS . (COPYRIGHT) 1999-2026, NLnet Labs 1.26.0 August 4, 2026 UNBOUND-ANCHOR(8)