When transitioning from NSEC3 to NSEC the added records where not being signed because the wrong time was being used to determine if a key should be used or not. Check that these records are actually signed. (cherry picked from commit bdb42d3838)
bdb42d3838
rndc nta -dump