It takes two seconds to look at the digital signature and see that it's legit. Also uppercase is the proper casing, it's the Microsoft Update Catalog and uupdump that dumb things down and use lowercase all over the place.