pki --pkcs7

pki --pkcs7 --sign|--verify|--encrypt|--decrypt|--show
            [--in file] [--cert file]+ [--key file]
            [--digest md5|sha1|sha224|sha256|sha384|sha512|sha3_224|sha3_256|sha3_384|sha3_512]
            [--rsa-padding pkcs1|pss]

pki --pkcs7 --help

--sign            (-s)  create PKCS#7 signed-data
--verify          (-u)  verify PKCS#7 signed-data
--encrypt         (-e)  create PKCS#7 enveloped-data
--decrypt         (-d)  decrypt PKCS#7 enveloped-data
--show            (-p)  show info about PKCS#7, print certificates
--in              (-i)  input file, default: stdin
--key             (-k)  path to private key for sign/decrypt
--cert            (-c)  path to certificate for sign/verify/encrypt
--digest          (-g)  digest for signature creation, default: key-specific
--rsa-padding     (-R)  padding for RSA signatures, default: pkcs1
--debug           (-v)  set debug level, default: 1
--options         (-+)  read command line options from file----
--help            (-h)  show usage information