# Manual RRDP sync (APNIC-focused)

This directory contains **manual, command-line** scripts to reproduce the workflow described in:

- `specs/develop/20260226/apnic_rrdp_delta_analysis_after_manifest_revalidation_fix_20260227T022606Z.md`

They are meant for **hands-on validation / acceptance runs**, not for CI.

## Prerequisites

- Rust toolchain (`cargo`)
- `rsync` available on PATH (for rsync fallback/objects)
- Network access (RRDP over HTTPS)

## What the scripts do

### `full_sync.sh`

- Creates a fresh RocksDB directory
- Runs a **full serial** validation from a TAL URL (default: APNIC RFC7730 TAL)
- Writes:
  - run log
  - audit report JSON
  - run meta JSON (includes durations)
  - short summary Markdown (includes durations)
  - RocksDB key statistics (`db_stats --exact`)
  - RRDP repo state dump (`rrdp_state_dump`)

### `delta_sync.sh`

- Copies an existing “baseline snapshot DB” to a new DB directory (so the baseline is not modified)
- Runs another validation against the copied DB (RRDP will prefer **delta** when available)
- Produces the same artifacts as `full_sync.sh`
- Additionally generates a Markdown **delta analysis** report by comparing:
  - base vs delta report JSON
  - base vs delta `rrdp_state_dump` TSV
  - and includes a **duration comparison** (base vs delta) if the base meta JSON is available

## Usage

Run from `rpki/`:

```bash
./scripts/manual_sync/full_sync.sh
```

After you have a baseline run, run delta against it:

```bash
./scripts/manual_sync/delta_sync.sh target/live/manual_sync/apnic_full_db_YYYYMMDDTHHMMSSZ \
  target/live/manual_sync/apnic_full_report_YYYYMMDDTHHMMSSZ.json
```

If the baseline was produced by `full_sync.sh`, the delta script will auto-discover the base meta JSON
next to the base report (by replacing `_report.json` with `_meta.json`) and include base durations in
the delta analysis report.

## Configuration (env vars)

Both scripts accept overrides via env vars:

- `TAL_URL` (default: APNIC TAL URL)
- `HTTP_TIMEOUT_SECS` (default: 1800)
- `RSYNC_TIMEOUT_SECS` (default: 1800)
- `VALIDATION_TIME` (RFC3339; default: now UTC)
- `OUT_DIR` (default: `rpki/target/live/manual_sync`)
- `RUN_NAME` (default: auto timestamped)

Example:

```bash
TAL_URL="https://tal.apnic.net/tal-archive/apnic-rfc7730-https.tal" \
HTTP_TIMEOUT_SECS=1800 RSYNC_TIMEOUT_SECS=1800 \
./scripts/manual_sync/full_sync.sh
```