You were right. For some reason these two repos (updates and updates-testing) don’t like cacher, regardless of http://HTTPS///. When routed through cacher, even http:// only won’t make it to these two repos (base url or meta link).
@unman, any idea?