how use zone-status to check key rotation
https://www.knot-dns.cz/docs/3.3/html/operation.html#dnssec-key-rollovers
The operator may check the next rollover phase time by watching the next zone signing time, either in the log or via knotc zone-status. There is no special log for finishing a rollover.
How do I use the knotc zone-status command to check the time of the next zone key rotation
zsk-lifetime: 90m
propagation-delay: 2m
dnskey-ttl: 10m
zone-max-ttl: 15m
rrsig-refresh: 18m
rrsig-lifetime: 25m
rrsig-pre-refresh: 5m
/home/gtld/knot/sbin/keymgr -c knot.conf zdns.cn list
602617397a7d11f4d30fc1215afae40acadec22e 60305 KSK RSASHA256/2048 publish=1699001476 ready=1699001476 active=1699001540
31ac433667d0012d2883aed5afb591e827a5ede0 35583 ZSK RSASHA256/2048 publish=1699325116 active=1699325836
/home/gtld/knot/sbin/knotc -c knot.conf -e zone-status
[zdns.cn.] role: slave | serial: 2010119468 | transaction: - | freeze: - | XFR-freeze: - | catalog: - | load: - | refresh: +5h59m40s | update: - | expiration: +6D23h59m40s | flush: - | backup/restore: - | notify: - | re-sign: +4m39s | DS-check: - | DS-push: - | DNSKEY-sync: -