Update:
There is nothing wrong with the DNSSEC entries for the domain archive.raspberrypi.org
It tuns out even dnsmasq 2.76-5 has a problem with DNSSEC, thus the false ABONDONED message.
There is a solution, you can read about it here.
Apologies for the insinuation the domain entries would be incorrect.