Utility to download DNS zone contents using the DNSSEC NXT/NSEC record chain (even when AXFR is disabled). It can also verify all digital signature resource records within a zone against the zone key.