Key Table - 密钥表 —— 密钥标识、算法、长度、存储位置、生成时间、关联证书与保护方式（仅元数据，严禁包含私钥）

Parent node: PKI - PKI 与证书运行态监控子树 —— 通过标量与表对象暴露证书、信任点、CRL、OCSP、密钥与 CA 连接状态 (1.3.6.1.4.1.59719.6.1)

Technical information

Description

English:
Key table. Lists the key pairs managed by the system, including the key identifier, algorithm, length, storage location, generation time, associated certificate and protection mode.
Security constraint: this table exposes key metadata only and shall never contain private key material; implementations must ensure that no object under this node can return private key bytes, and the protection mode shall record whether the key is stored in a hardware security module, a trusted platform module or a software keystore.
Status: registered but unused. No key table has been implemented; when implementing, define the rotation policy and expose the next rotation time. The unused state shall be re-verified at each revision of this file.
Recommendation: correlate the key identifier with the certificate table (1.3.6.1.4.1.59719.6.1.2) so that a key compromise revocation can identify all affected certificates immediately.
See also: 1.3.6.1.4.1.59719.6.1.2, 1.3.6.1.4.1.59719.0.3.50, 1.3.6.1.4.1.59719.5.1.230.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
密钥表。列举系统管理的密钥对，包含密钥标识、算法、长度、存储位置、生成时间、关联证书与保护方式。
安全约束：本表仅暴露密钥元数据，严禁包含私钥内容；实现必须保证本节点下任何对象都不能返回私钥字节，保护方式应记录密钥存放于硬件安全模块、可信平台模块还是软件密钥库。
状态：已注册但未使用。尚无密钥表被实现；实现时应定义轮换策略并暴露下次轮换时间。本文件每次修订时须重新核验该未使用状态。
建议：密钥标识应与证书表（1.3.6.1.4.1.59719.6.1.2）关联，使密钥泄露导致的吊销可立即定位全部受影响证书。
关联节点：1.3.6.1.4.1.59719.6.1.2、1.3.6.1.4.1.59719.0.3.50、1.3.6.1.4.1.59719.5.1.230。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

Alternative Identifiers

RDAP
OID-IP: Text, JSON, XML (Documentation)
REST API (Documentation)