---
name: "pki---keyid"
section: "1"
platform: "linux"
package: "strongswan"
version: "6.1.0-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/pki---keyid"
---

# pki---keyid(1)

Calculate key identifiers of a key or certificate

## NAME

pki --keyid - Calculate key identifiers of a key or certificate

## SYNOPSIS

**pki --keyid** \[**--in** *file*\|***--keyid*** *hex*\] \[**--type** *type*\] \[**--id** *id-type*\] \[**--format** *format*\] \[**--debug** *level*\]

**pki --keyid** **--options** *file*

**pki --keyid** **-h** \| **--help**

## DESCRIPTION

This sub-command of [**pki**(1)](/pki/1.md) calculates key identifiers of private keys and certificates.

## OPTIONS

- **-h, --help**

  Print usage information with a summary of the available options.

- **-v, --debug** *level*

  Set debug level, default: 1.

- **-+, --options** *file*

  Read command line options from *file*.

- **-i, --in** *file*

  Input file. If not given the input is read from *STDIN*.

- **-x, --keyid** *hex*

  Smartcard or TPM private key object handle in hex format with an optional 0x prefix.

- **-t, --type** *type*

  Type of input. One of *priv* (private key), *rsa* (RSA private key), *ecdsa* (ECDSA private key), *pub* (public key), *pkcs10* (PKCS#10 certificate request), *x509* (X.509 certificate), defaults to *priv*.

- **-I, --id** *id-type*

  Type of identifier. One of *all* (all identifiers), *spk* (SHA-1 hash of subjectPublicKey), *spki* (SHA-1 hash of subjectPublicKeyInfo), defaults to *all*.

- **-f, --format** *format*

  Output format. One of *pretty* (user-readable output), *hex* (hexadecimal encoding), *base64* (Base64 encoding), *bin* (raw binary data), defaults to *pretty*.

## EXAMPLES

Calculate key identifiers of an RSA private key:

```
  $ pki --keyid --in key.der
  subjkey (SHA-1 of subjectPublicKey):
               6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1...
  keyid (SHA-1 of subjectPublicKeyInfo):
               6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1...
```

Calculate key identifiers of an X.509 certificate:

```
  $ pki --keyid --in cert.der --type x509
  subjkey (SHA-1 of subjectPublicKey):
               6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1...
  keyid (SHA-1 of subjectPublicKeyInfo):
               6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1...
```

Calculate keyid in simple hex encoding of an X.509 certificate:

```
  $ pki --keyid --in cert.der --type x509 --id spki --format hex
  6e55dc7e9ca558d95be3c71314e1...
```

## SEE ALSO

[**pki**(1)](/pki/1.md)