The KSK secret key of .top TLD, will enter into the period for transition on September 14, 2017, according to the DNSSEC Practice Statement (DPS) for .top domain name. The old KSK secret key (Key ID:5869) will be removed from zone on November 27, 2017 at 10:00 (Beijing time).
If the recursive server you manage (or part of the browsers) enables DNS verification by using .top domain name as a trust anchor (using trusted-keys command), please remove the trust anchor configuration of .top domain name in the recursive server before November 27, 2017 at 10:00 (Beijing time), and Set up the new KSK secret key as the trust anchor. To maintain the continuity of recursive server service, please restart it after the invalidation of relevant recording buffer of old KSK secret key.
The following is the information for the new KSK public key (Key ID: 18451) of .top domain name: DNSKEY :top. 3600
IN DNSKEY 257 3 8
AwEAAb7I3lvj7WKho2eDAZNaG38wEQGMwlKa0ejrma09AFy+Ws50N4wY pf53sedkUThwFU2tz7D3AWCWDLt3uHDaRfYM7a9LyfcSr14pWs7gAeUX Cr+n3NaW9if83PpSLm9lSGEC1QeE3etn/5wjamPaU5GjA8KTifb0l0lj gvg7y+b464Psa5aAwK/jROyHShZ2IpCro7PX0qE7WdnO616BWohZM2C/ OuVVpAbf5AoYfNV93saVZ4YJjkXUuBqMTeXIlMgBcF8XcTRgnjjDUkdW EkqsGha3idNDLkFFcBofFsyEcbi26kAHiAJLJhV/tW5JtzY6quZ2SLib IDVG/9OdjoU=