ftp TLS fails

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

Hello
with netbsd-10 from oct, 2 ftp fails to connect to https sites:
tchatcha:/chroot/usr/pkgsrc-2023Q3/pkgsrc/sysutils/xenkernel418>ftp -o /tmp/o https://ftp.netbsd.org/
Trying [2001:470:a085:999::21]:443 ...
ftp: Can't connect to `2001:470:a085:999::21:443': No route to host
Trying 199.233.217.201:443 ...
FFFFFFFFFFFFFFFF:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
ftp: Can't connect to `ftp.netbsd.org:https'


I have a ca-certificates.crt in /etc/openssl/certs/, I tried to re-run
certctl but it didn't help.
I see the same issue with downloads.xen.org

It seems that not all roots are installed ?

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--