anchor.diff:  % Sign RRSet
   -spec(sign_rrset(binary(), [dns:rr()], [dns:rr()], [erldns:keyset()]) -> [dns:rr()]).
   sign_rrset(Name, Records, DnsKeyRRs, KeySets) ->
  -  lager:debug("Signing RRSet for zone (name: ~p)", [Name]),
  +  % lager:debug("Signing RRSet for zone (name: ~p)", [Name]),
     KeyRRSigRecords = lists:flatten(lists:map(erldns_dnssec:key_rrset_signer(Name, DnsKeyRRs), KeySets)),
     ZoneRecords = get_zone_records(Name),
     RRSigRecords = rewrite_soa_rrsig_ttl(ZoneRecords, lists:flatten(lists:map(erldns_dnssec:zone_rrset_signer(Name, lists:filter(fun(RR) -> (RR#dns_rr.type =/= ?DNS_TYPE_DNSKEY) end, Records)), KeySets))),
     verify_rrset(DnsKeyRRs, KeyRRSigRecords),
     RRSigRecords.
  -	
  +
   % Verify RRSet
   -spec(verify_rrset([dns:rr()], [dns:rr()]) -> boolean()).
   verify_rrset(DnsKeyRRs, KeyRRSigRecords) ->
  
positive.code:     [] -> false;
      KSKs -> 
        case KeyRRSigRecords of
  	 [] -> false;
  	  _ ->
  	      % lager:debug("KSKs: ~p", [KSKs]),
  	      KSKDnskey = lists:last(KSKs),
  	      RRSig = lists:last(KeyRRSigRecords),
  	      VerifyResult = dnssec:verify_rrsig(RRSig, DnsKeyRRs, [KSKDnskey], []),
  	      VerifyResult
        end
    end.
  
  
negative.code: 			  TypedRecords = build_typed_index(Records ++ 
  							   SignedRRSet ++ 
  							   RRSigRecs),
  			  
                            % put zone_records_typed records first then create the records in zone_records
                            put_zone_records_typed_entry(ZoneName, RRFqdn, maps:next(maps:iterator(TypedRecords))),
                            rebuild_zone_records_named_entry(ZoneName, RRFqdn),
                            update_zone_records_and_digest(ZoneName, get_zone_records(ZoneName), Digest),
                            write_rrset_sync_counter({ZoneName, RRFqdn, Type, Counter}),
  
                            % lager:debug("DNSKEY RRSIGS at end of PUT (records: ~p)", [lists:filter(erldns_records:match_type_covered(?DNS_TYPE_DNSKEY_NUMBER), get_records_by_name_and_type(ZoneName, ?DNS_TYPE_RRSIG_NUMBER))]),
  
                            lager:debug("RRSet update completed for FQDN: ~p, Type: ~p", [RRFqdn, Type]);
                      _ -> % if zone is not in cache, do fetch zone and ignore the RRset update 
                        lager:debug("Zone: ~p not in cache, initiating fetch_zone", [ZoneName]),
                        erldns_zoneclient:fetch_zone(ZoneName),
                        lager:debug("Zone fetch for ~p completed", [ZoneName])
                        %  {error, zone_not_found}
                    end
    end.
  
  put_zone_records_entry(_, none) ->
    ok;
  