EXPCHK(1)
๐ expchk(1) โ the girlies' guide to expired zones ๐
okay so bestie, you know how DNS zones have expiry dates and nobody ever checks them until everything is on fire? ๐ซ That's what expchk is for. It's a little tool from the DNSSEC-Tools package (this is the expchk page from the User Contributed Perl Documentation section of your manual, iykyk) and it literally just... tells you which zones are expired. No cap. ๐
โจ NAME โจ
expchk โ check a keyrec file for expired zones. that's it, that's the job. ๐
๐ธ SYNOPSIS ๐ธ
expchk -all -expired -valid -warn numdays -zone zonename -count -help keyrec_files
๐ฆ DESCRIPTION ๐ฆ
So expchk takes a set of keyrec files and goes through them to figure out whether each zone keyrec is valid or expired. It's giving vibe check, but for keyrecs. ๐
Which kind of zones get displayed depends entirely on the options you pick. And here's the little plot twist: if you give it no options at all, it'll just list the expired zones for you. Default behaviour, slaying quietly. ๐
๐ OPTIONS ๐
-allโ show expiration info for every single zone, expired or valid, in the keyrec files you named. no zone left behind fr fr. โจ-expiredโ show expiration info for just the expired zones in the specified keyrec files. This is the default action, so it's the main character even when you don't say anything. ๐-validโ show expiration info for just the valid zones in the specified keyrec files. good news zones only, we love a healthy zone. ๐ธ-warn numdaysโ gives you a warning for each valid zone that's gonna expire innumdaysdays. โฐ Heads up bestie!! And btw, this option has no effect on expired zones โ expired is expired, the warning ship has sailed. ๐-zone zonenameโ show expiration info for the zone you name inzonename. just the one. we're being specific. ๐ฏ-countโ only gives you the count of matching zones (valid or expired), no details, just the number. And if you selected both types of zones, then the count will be the number of zones in the specified keyrec files. math is math. ๐งฎ-helpโ displays a usage message. your friendly lil helper. ๐ซถ-Versionโ displays the version information forexpchkand the DNSSEC-Tools package. (capital V, don't come for me, that's just how it is.) โญ
๐ COPYRIGHT ๐
Copyright 2004-2014 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. ๐ซก
๐ AUTHOR ๐
Wayne Morrison, tewok@tislabs.com ๐
๐ SEE ALSO ๐
zonesigner(8)Net::DNS::SEC::Tools::keyrec.pm(3)
and that's the whole page, bestie!! this one came from perl v5.42.0 and it's dated 2025-07-23. go check those zones before they expire on you, mwah ๐๐ธ๐ฆ
๐ฆ where this page comes from
- fedora 43: dnssec-tools 2.2.3-30.fc43 ยท LicenseRef-Callaway-BSD
- ๐ girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms