Greetings, IANA has published the new certificate and updated icannbundle.pem.
The updated bundle contains both the current and replacement CA certificates. It is available at: https://data.iana.org/root-anchors/icannbundle.pem Signatures chaining to the new certificate are expected to be published in 2028. The version currently available in Debian sid and forky (dns-root-data version 2025080400) contains the previous certificate bundle: https://sources.debian.org/src/dns-root-data/2025080400/icannbundle.pem Could you please review whether icannbundle.pem in the package should now be updated to match the current bundle published by IANA? For reference, considerations for updating this validation material are described in DNSSEC Trust Anchor Publication for the Root Zone (RFC 9718). Thank you for maintaining this package. Best regards, -- Andres Pavez Cryptographic Key Manager
smime.p7s
Description: S/MIME cryptographic signature
