Practices

Define your own secure zone
child.sec.soiN.jinmei.org
on your second PC
we begin with 'child' for the next practice
make zone keys
sign the zone
note: you don't have to specify the .signed file for dnssec-signzone
(it's the output of the command)

Check if it works as intended
use dig +dnssec
ask existent or non-existent name
try to follow all RRs by the "NSEC chaining"