$ dig +bufsize=4096 +dnssec +ignore +tries=1 +time=1 any "lk." "@204.61.216.27" I just followed instructions on http://dnscurve.org/dnssecamp.html.