RRSIG(SOA) and re-signing.

The RRSIG(SOA) should always use the full sig-validity-interval as its presence is used to signal that incremental signing has fully signed the zone.

Sort RRSIG(SOA) to the be the last RRset returned by dns_db_getsigningtime() when there are multiple RRsets with the same timestamp.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information