pkcs11-list — list PKCS#11 objects
      pkcs11-list 
       [-P]
       [-m ]
       [module-s ]
       [-i slotID]
       [-l label]
       [-p ]
    PIN
      pkcs11-list
      lists the PKCS#11 objects with ID or
      label or by default all objects.
      The object class, label, and ID are displayed for all
      keys.  For private or secret keys, the extractability
      attribute is also displayed, as either true,
      false, or never.
    
List only the public objects. (Note that on some PKCS#11 devices, all objects are private.)
moduleSpecify the PKCS#11 provider module. This must be the full path to a shared library object implementing the PKCS#11 API for the device.
slotOpen the session with the given PKCS#11 slot. The default is slot 0.
IDList only key objects with the given object ID.
labelList only key objects with the given label.
PINSpecify the PIN for the device. If no PIN is provided on the command line, pkcs11-list will prompt for it.
BIND 9.12.1-P2