10. 参考文献
10. 参考文献
本节列出本文档引用的规范性和资料性参考文献. 为便于核验, 作者姓名, RFC 题名, DOI, 日期和出版信息保持英文原文形式; 中文说明用于标明引用类别和用途. 这些资料主要涉及 RPKI 资源证书, signed object 模板, RRDP, manifest 处理以及 RPKI 信任锚和仓库结构.
规范性引用定义本文更新所依赖的 RPKI 对象格式和验证行为, 包括资源证书 profile, signed object template, RRDP publish 元素, manifest 结构以及 BCP 14 要求用语. 资料性引用提供 RPKI 架构, 仓库结构, CA key rollover, RPKI certificate tree validation 实现经验和 Trust Anchor Locator 背景.
读者在实现本文更新时, 应重点关注 [RFC9286] 的 manifestNumber 和 manifest filename 处理, [RFC8182] 的 RRDP publish URI, 以及 [RFC6487] 和 [RFC6488] 对 RPKI resource certificate 与 signed object 的约束. [RFC6480], [RFC6481], [RFC6489], [RFC8488] 和 [RFC8630] 则有助于理解 RPKI 仓库, 信任锚和 CA rollover 的部署背景.
10.1. 规范性引用
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997.
[RFC6487] Huston, G., Michaelson, G., and R. Loomans, "A Profile for X.509 PKIX Resource Certificates", RFC 6487, DOI 10.17487/RFC6487, February 2012.
[RFC6488] Lepinski, M., Chi, A., and S. Kent, "Signed Object Template for the Resource Public Key Infrastructure (RPKI)", RFC 6488, DOI 10.17487/RFC6488, February 2012.
[RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017.
[RFC8182] Bruijnzeels, T., Muravskiy, O., Weber, B., and R. Austein, "The RPKI Repository Delta Protocol (RRDP)", RFC 8182, DOI 10.17487/RFC8182, July 2017.
[RFC9286] Austein, R., Huston, G., Kent, S., and M. Lepinski, "Manifests for the Resource Public Key Infrastructure (RPKI)", RFC 9286, DOI 10.17487/RFC9286, June 2022.
10.2. 资料性引用
[RFC6480] Lepinski, M. and S. Kent, "An Infrastructure to Support Secure Internet Routing", RFC 6480, DOI 10.17487/RFC6480, February 2012.
[RFC6481] Huston, G., Loomans, R., and G. Michaelson, "A Profile for Resource Certificate Repository Structure", RFC 6481, DOI 10.17487/RFC6481, February 2012.
[RFC6489] Huston, G., Michaelson, G., and S. Kent, "Certification Authority (CA) Key Rollover in the Resource Public Key Infrastructure (RPKI)", BCP 174, RFC 6489, DOI 10.17487/RFC6489, February 2012.
[RFC8488] Muravskiy, O. and T. Bruijnzeels, "RIPE NCC's Implementation of Resource Public Key Infrastructure (RPKI) Certificate Tree Validation", RFC 8488, DOI 10.17487/RFC8488, December 2018.
[RFC8630] Huston, G., Weiler, S., Michaelson, G., Kent, S., and T. Bruijnzeels, "Resource Public Key Infrastructure (RPKI) Trust Anchor Locator", RFC 8630, DOI 10.17487/RFC8630, August 2019.