~ # ctr image pull <http://docker.io/library/hello-world:latest|docker.io/library/hello-world:latest> --http-dump
INFO[0000] HEAD /v2/library/hello-world/manifests/latest HTTP/1.1
INFO[0000] Host: <http://registry-1.docker.io|registry-1.docker.io>
INFO[0000] User-Agent: containerd/v1.7.23-k3s2
INFO[0000] Accept: application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, */*
INFO[0000]
INFO[0000] trying next host                              error="failed to do request: Head \"<https://registry-1.docker.io/v2/library/hello-world/manifests/latest>\": tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match <http://registry-1.docker.io|registry-1.docker.io>" host=<http://registry-1.docker.io|registry-1.docker.io>
ctr: failed to resolve reference "<http://docker.io/library/hello-world:latest|docker.io/library/hello-world:latest>": failed to do request: Head "<https://registry-1.docker.io/v2/library/hello-world/manifests/latest>": tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match <http://registry-1.docker.io|registry-1.docker.io>
~ # ctr image pull <http://docker.io/library/hello-world:latest|docker.io/library/hello-world:latest> --http-trace
INFO[0000] trying next host                              error="failed to do request: Head \"<https://registry-1.docker.io/v2/library/hello-world/manifests/latest>\": tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match <http://registry-1.docker.io|registry-1.docker.io>" host=<http://registry-1.docker.io|registry-1.docker.io>
ctr: failed to resolve reference "<http://docker.io/library/hello-world:latest|docker.io/library/hello-world:latest>": failed to do request: Head "<https://registry-1.docker.io/v2/library/hello-world/manifests/latest>": tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match <http://registry-1.docker.io|registry-1.docker.io>
~ # ctr image pull <http://docker.io/library/hello-world:latest|docker.io/library/hello-world:latest> --http-trace -k
<http://docker.io/library/hello-world:latest|docker.io/library/hello-world:latest>: resolving      |--------------------------------------|
elapsed: 9.9 s                        total:   0.0 B (0.0 B/s)
INFO[0010] trying next host                              error="failed to do request: Head \"<https://registry-1.docker.io/v2/library/hello-world/manifests/latest>\": EOF" host=<http://registry-1.docker.io|registry-1.docker.io>
ctr: failed to resolve reference "<http://docker.io/library/hello-world:latest|docker.io/library/hello-world:latest>": failed to do request: Head "<https://registry-1.docker.io/v2/library/hello-world/manifests/latest>": EOF