Notification of DNSSEC Key Rollover for “.CN” and “.中国/.中國”
According to the Policy and Practice Statement of .CN, .中国(xn--fiqs8s) and .中國(xn--fiqz9s), the KSK rollover of these cctlds have been started from 2014-07-20. The old KSK (.CN Key ID: 54694, .xn--fiqs8s and .xn--fiqz9s Key ID: 32812) will be revoked from 15:02, August 24, (UTC+8:00), 2014.
If you have turned on the dnssec validation option on the recursive name servers (or some browsers) which you managed and take .CN, .xn--fiqs8s or xn--fiqz9s as trust-anchor (trusted-keys option is used), please remove it before 15:02, August 24 (UTC+8:00), update the new KSK as trust-anchor, and make it active after the cache of old KSK expires so as to keep the continuity of the recursive server.
1) The public key information of new KSK for .CN (Key ID: 32425) is as follow:
cn. 86400 IN DNSKEY 257 3 8 AwEAAbNuIdsNTNJQFxOU9vUOIKBtxhbnZTFeHNzq6YbaJRoZZnhzrq6B ksNP6XhK+e3Odd4xexV4lpwPu26999eT7cZwBzNUl+dUsB0vgymg4G1n 4NkUIE0gzJorK5+joD7Ad7y+DpofQjsNceZBkqiSFsvSE7huzBm9R4ZV BhE0u/1Ugn4MxZaedMX46va2wpUuvdXQfxSRkI9O0qerPyl7ZVjK9Ib+ cemxhewO1ucJTDFGpPOlKSc7mFPEBfzF5Ttiar35vsYVrrtL4ufD/06Z lP/JTVqPULu40ddtUVk6/3WagaJRVgEkyx9m1DSnNTf1e+PT+mMUWzvZ Bfh4S//6Tbc=
2) The public key information of new KSK for .中国(xn--fiqs8s, Key ID: 20470) is as follow:
xn--fiqs8s. 86400 IN DNSKEY 257 3 8 AwEAAdXj/JNT3Cs1fwWnbZ8fYNKpGddJbM/e//xbwCRkLHzfWR6Dul9w 5BzHfyiLFiY438Ro20KDOk9uGT0ItAQVPyV0wsBxvpRiob9yqdcSW8B0 5FZjeeTxEDoH8i3ayWl9WniruPlMS0H3a/eaPBWzf786vnEJqt2jUMm4 F10Iy6cUwRkahcYZ4FMgSkc+SiwWsXHWoEOiugeFrOrMzKenMWY+EtSQ PZIrulqyUnHXBygZf6IkjWm+efpQp8ucWF2LeIVRW7S/PSS8i2Wf2AJ0 thmEKU8VgwOhAVLBpPyroh86am+U7Gdut+p4FmnHhBob1gfaHrGk/Ezt OiiaZB7O5PU=
3) The public key information of new KSK for .中國(xn--fiqz9s, Key ID: 20470) is as follow:
xn--fiqz9s. 86400 IN DNSKEY 257 3 8 AwEAAdXj/JNT3Cs1fwWnbZ8fYNKpGddJbM/e//xbwCRkLHzfWR6Dul9w 5BzHfyiLFiY438Ro20KDOk9uGT0ItAQVPyV0wsBxvpRiob9yqdcSW8B0 5FZjeeTxEDoH8i3ayWl9WniruPlMS0H3a/eaPBWzf786vnEJqt2jUMm4 F10Iy6cUwRkahcYZ4FMgSkc+SiwWsXHWoEOiugeFrOrMzKenMWY+EtSQ PZIrulqyUnHXBygZf6IkjWm+efpQp8ucWF2LeIVRW7S/PSS8i2Wf2AJ0 thmEKU8VgwOhAVLBpPyroh86am+U7Gdut+p4FmnHhBob1gfaHrGk/Ezt OiiaZB7O5PU=
If you have turned on the dnssec validation option on the recursive name servers (or some browsers) which you managed and take .CN, .xn--fiqs8s or xn--fiqz9s as trust-anchor (trusted-keys option is used), please remove it before 15:02, August 24 (UTC+8:00), update the new KSK as trust-anchor, and make it active after the cache of old KSK expires so as to keep the continuity of the recursive server.
1) The public key information of new KSK for .CN (Key ID: 32425) is as follow:
cn. 86400 IN DNSKEY 257 3 8 AwEAAbNuIdsNTNJQFxOU9vUOIKBtxhbnZTFeHNzq6YbaJRoZZnhzrq6B ksNP6XhK+e3Odd4xexV4lpwPu26999eT7cZwBzNUl+dUsB0vgymg4G1n 4NkUIE0gzJorK5+joD7Ad7y+DpofQjsNceZBkqiSFsvSE7huzBm9R4ZV BhE0u/1Ugn4MxZaedMX46va2wpUuvdXQfxSRkI9O0qerPyl7ZVjK9Ib+ cemxhewO1ucJTDFGpPOlKSc7mFPEBfzF5Ttiar35vsYVrrtL4ufD/06Z lP/JTVqPULu40ddtUVk6/3WagaJRVgEkyx9m1DSnNTf1e+PT+mMUWzvZ Bfh4S//6Tbc=
2) The public key information of new KSK for .中国(xn--fiqs8s, Key ID: 20470) is as follow:
xn--fiqs8s. 86400 IN DNSKEY 257 3 8 AwEAAdXj/JNT3Cs1fwWnbZ8fYNKpGddJbM/e//xbwCRkLHzfWR6Dul9w 5BzHfyiLFiY438Ro20KDOk9uGT0ItAQVPyV0wsBxvpRiob9yqdcSW8B0 5FZjeeTxEDoH8i3ayWl9WniruPlMS0H3a/eaPBWzf786vnEJqt2jUMm4 F10Iy6cUwRkahcYZ4FMgSkc+SiwWsXHWoEOiugeFrOrMzKenMWY+EtSQ PZIrulqyUnHXBygZf6IkjWm+efpQp8ucWF2LeIVRW7S/PSS8i2Wf2AJ0 thmEKU8VgwOhAVLBpPyroh86am+U7Gdut+p4FmnHhBob1gfaHrGk/Ezt OiiaZB7O5PU=
3) The public key information of new KSK for .中國(xn--fiqz9s, Key ID: 20470) is as follow:
xn--fiqz9s. 86400 IN DNSKEY 257 3 8 AwEAAdXj/JNT3Cs1fwWnbZ8fYNKpGddJbM/e//xbwCRkLHzfWR6Dul9w 5BzHfyiLFiY438Ro20KDOk9uGT0ItAQVPyV0wsBxvpRiob9yqdcSW8B0 5FZjeeTxEDoH8i3ayWl9WniruPlMS0H3a/eaPBWzf786vnEJqt2jUMm4 F10Iy6cUwRkahcYZ4FMgSkc+SiwWsXHWoEOiugeFrOrMzKenMWY+EtSQ PZIrulqyUnHXBygZf6IkjWm+efpQp8ucWF2LeIVRW7S/PSS8i2Wf2AJ0 thmEKU8VgwOhAVLBpPyroh86am+U7Gdut+p4FmnHhBob1gfaHrGk/Ezt OiiaZB7O5PU=
China Internet Network Information Center (CNNIC)
August 12, 2014
August 12, 2014
Contact Us
TEL 010--58813000
Address:Floor 1, Building 1, Software Park, Chinese Academy of Sciences, 4 South 4th Street, Zhongguancun, Beijing
Postcode:100190
Tel:8610-58813000
Fax:8610-58812666
Website:www.cnnic.cn
www.中国互联网络信息中心.中国
Email:service@cnnic.cn(For Service)
supervise@cnnic.cn(For Complaint)
