the culprit is that attempts to index packages for 386 fails. It is not clear that this aborts the entire indexing process, which it now seems to do. Adding [ arch=amd64 ] in sources.list to the deb lines results in an apt update that succeeds 100% and after which updateable packages are listed
The Package was corrupted so the actual size of the package differ form the one available in repodata. As the actual size of package and the one in repodata differs yum fail to download the package.
Try to delete and again download the problematic package in the local repository.
Regenerate repodata for local repository:
# createrepo --update /path/to/rpms