* Sergio Gelato [2017-10-04 11:26:02 +0200]: > The corresponding package in stretch-updates looks OK. Could it be that the > one in jessie-updates needs to be built with a newer version of bind9utils?
Indeed it seems that jessie's (including jessie-updates') dnssec-dsfromkey only processes the first key in the file.
