DNSSEC intervals