I'm 100% sure, I got the ps4-updatelist.xml download link from sony's server. Also, two days ago I used the file to reinstall FW on my console.
I always prefer to download the file from the original source, also the download is faster than from slow mirrors 🤣🤣...