No, RRSIG should never be looked up manually. You just send query with
DO bit enabled and expect to receive all RRSIGs for all records in the
reply. If the server fails to include RRSIG, but manual query would
work, it should be fixed on server side.
If your change has modified only this problem,
> OK, but as you rightly pointed out a couple of messages ago, all these
> operations are performed before the service dnsmasq restart.
>
> Because of this I have performed an additional test to complete the
> picture:
>
> my usual 650K list of domains is now unzipped and I have simply scripted
>
