<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<!-- generated by https://github.com/cabo/kramdown-rfc version 1.6.38 (Ruby 3.2.1) -->
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" ipr="trust200902" docName="draft-ietf-core-comi-14" category="std" consensus="true" submissionType="IETF" tocInclude="true" sortRefs="true" symRefs="true" version="3">
  <!-- xml2rfc v2v3 conversion 3.17.4 -->
  <front>
    <title abbrev="CORECONF">CoAP Management Interface (CORECONF)</title>
    <seriesInfo name="Internet-Draft" value="draft-ietf-core-comi-14"/>
    <author initials="M. V." surname="Veillette" fullname="Michel Veillette" role="editor">
      <organization>Trilliant Networks Inc.</organization>
      <address>
        <postal>
          <street>610 Rue du Luxembourg</street>
          <city>Granby</city>
          <region>Quebec</region>
          <code>J2J 2V2</code>
          <country>Canada</country>
        </postal>
        <email>michel.veillette@trilliant.com</email>
      </address>
    </author>
    <author initials="P." surname="van der Stok" fullname="Peter van der Stok" role="editor">
      <organization abbrev="consultant">consultant</organization>
      <address>
        <phone>+31-492474673 (Netherlands), +33-966015248 (France)</phone>
        <email>stokcons@bbhmail.nl</email>
        <uri>www.vanderstok.org</uri>
      </address>
    </author>
    <author initials="A. P." surname="Pelov" fullname="Alexander Pelov">
      <organization>Acklio</organization>
      <address>
        <postal>
          <street>2bis rue de la Chataigneraie</street>
          <city>Cesson-Sevigne</city>
          <code>35510</code>
          <country>France</country>
        </postal>
        <email>a@ackl.io</email>
      </address>
    </author>
    <author initials="A." surname="Bierman" fullname="Andy Bierman">
      <organization>YumaWorks</organization>
      <address>
        <postal>
          <street>685 Cochran St.</street>
          <street>Suite #160</street>
          <city>Simi Valley</city>
          <region>CA</region>
          <code>93065</code>
          <country>USA</country>
        </postal>
        <email>andy@yumaworks.com</email>
      </address>
    </author>
    <author initials="C." surname="Bormann" fullname="Carsten Bormann" role="editor">
      <organization>Universität Bremen TZI</organization>
      <address>
        <postal>
          <street>Postfach 330440</street>
          <city>Bremen</city>
          <code>D-28359</code>
          <country>Germany</country>
        </postal>
        <phone>+49-421-218-63921</phone>
        <email>cabo@tzi.org</email>
      </address>
    </author>
    <date year="2023" month="July" day="10"/>
    <area>Applications</area>
    <workgroup>CoRE</workgroup>
    <abstract>
      <?line 105?>

<t>This document describes a network management interface for constrained devices
and networks, called CoAP Management Interface (CORECONF). The Constrained Application
Protocol (CoAP) is used to access datastore and data node resources specified
in YANG, or SMIv2 converted to YANG. CORECONF uses the YANG to CBOR mapping and converts
YANG identifier strings to numeric identifiers for payload size reduction.
CORECONF extends the set of YANG based
protocols, NETCONF and RESTCONF, with the capability to manage constrained devices
and networks.</t>
    </abstract>
    <note removeInRFC="true">
      <name>About This Document</name>
      <t>
        The latest revision of this draft can be found at <eref target="https://core-wg.github.io/comi/draft-ietf-core-comi.html"/>.
        Status information for this document may be found at <eref target="https://datatracker.ietf.org/doc/draft-ietf-core-comi/"/>.
      </t>
      <t>
        Discussion of this document takes place on the
        core Working Group mailing list (<eref target="mailto:core@ietf.org"/>),
        which is archived at <eref target="https://mailarchive.ietf.org/arch/browse/core/"/>.
        Subscribe at <eref target="https://www.ietf.org/mailman/listinfo/core/"/>.
      </t>
      <t>Source for this draft and an issue tracker can be found at
        <eref target="https://github.com/core-wg/comi"/>.</t>
    </note>
  </front>
  <middle>
    <?line 116?>

<section anchor="introduction">
      <name>Introduction</name>
      <t>The Constrained Application Protocol (CoAP) <xref target="RFC7252"/> is designed for
Machine to Machine (M2M) applications such as smart energy, smart city, and building control.
Constrained devices need to be managed in an automatic fashion to handle
the large quantities of devices that are expected in
future installations. Messages between devices need to be as small and
infrequent as possible. The implementation
complexity and runtime resources need to be as small as possible.</t>
      <t>This draft describes the CoAP Management Interface (CORECONF) which uses CoAP methods
to access structured data defined in YANG <xref target="RFC7950"/>. This draft is
complementary to <xref target="RFC8040"/> which describes a REST-like interface
called RESTCONF, which uses HTTP methods to access structured data
defined in YANG.</t>
      <t>The use of standardized data models specified in a standardized language, such
as YANG, promotes interoperability between devices and applications from
different manufacturers.</t>
      <t>CORECONF and RESTCONF are intended to work in a stateless client-server fashion.
They use a single round-trip to complete a single editing transaction, where
NETCONF needs multiple round trips.</t>
      <t>To promote small messages, CORECONF uses a YANG to CBOR mapping
<xref target="RFC9254"/> and numeric identifiers <xref target="I-D.ietf-core-sid"/>
to minimize CBOR payloads and URI length.</t>
      <section anchor="terminology">
        <name>Terminology</name>
        <t>The following terms are defined in the YANG data modeling language <xref target="RFC7950"/>: action, anydata, anyxml, client, container, data model, data node, identity, instance identifier, leaf, leaf-list, list, module, RPC, schema node, server, submodule.</t>
        <t>The following terms are defined in <xref target="RFC6241"/>: configuration data, datastore, state data.</t>
        <t>The following term is defined in <xref target="I-D.ietf-core-sid"/>: YANG schema item identifier (YANG SID, often shortened to simply SID).</t>
        <t>The following terms are defined in the CoAP protocol <xref target="RFC7252"/>: Confirmable Message, Content-Format, Endpoint.</t>
        <t>The following terms are defined in this document:</t>
        <dl>
          <dt>data node resource:</dt>
          <dd>
            <t>a CoAP resource that models a YANG data node.</t>
          </dd>
          <dt>datastore resource:</dt>
          <dd>
            <t>a CoAP resource that models a YANG datastore.</t>
          </dd>
          <dt>event stream resource:</dt>
          <dd>
            <t>a CoAP resource used by clients to observe YANG notifications.</t>
          </dd>
          <dt>notification instance:</dt>
          <dd>
            <t>An instance of a schema node of type notification, specified in a YANG module
implemented by the server. The instance is generated in the server at the occurrence
of the corresponding event and reported by an event stream resource.</t>
          </dd>
          <dt>list instance identifier:</dt>
          <dd>
            <t>Handle used to identify a YANG data node that is an instance of a YANG "list",
specified with the values of the key leaves of the list.</t>
          </dd>
          <dt>single instance identifier:</dt>
          <dd>
            <t>Handle used to identify a specific data node which can be instantiated only
once. This includes data nodes defined at the root of a YANG module and
data nodes defined within a container. This excludes data nodes defined
within a list or any children of these data nodes.</t>
          </dd>
          <dt>instance-identifier:</dt>
          <dd>
            <t>List instance identifier or single instance identifier.</t>
          </dd>
          <dt>instance-value:</dt>
          <dd>
            <t>The value assigned to a data node instance. Instance-values are serialized into
the payload according to the rules defined in <xref section="4" sectionFormat="of" target="RFC9254"/>.
In a yang-instances data item, the reference SID applying to the
instance-value is provided by the SID in the corresponding instance-identifier.</t>
          </dd>
        </dl>
        <t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>
        <?line -18?>

</section>
      <section anchor="example-syntax">
        <name>Example syntax</name>
        <t>CBOR is used to encode CORECONF request and response payloads. The CBOR syntax
of the YANG payloads is specified in <xref target="RFC9254"/>, based on <xref target="RFC8949"/>
and <xref target="RFC8742"/>.
The payload examples are
notated in Diagnostic notation (defined in <xref section="8" sectionFormat="of" target="RFC8949"/> and
<xref section="G" sectionFormat="of" target="RFC8610"/>), which
can be automatically converted to CBOR.</t>
      </section>
    </section>
    <section anchor="comi-architecture">
      <name>CORECONF Architecture</name>
      <t>This section describes the CORECONF architecture to use CoAP for reading and
modifying the content of datastore(s) used for the management of the instrumented
node.</t>
      <figure anchor="archit">
        <name>Abstract CORECONF architecture</name>
        <artset>
          <artwork type="svg" align="left"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" height="384" width="536" viewBox="0 0 536 384" class="diagram" text-anchor="middle" font-family="monospace" font-size="13px">
              <path d="M 8,32 L 8,64" fill="none" stroke="black"/>
              <path d="M 8,112 L 8,144" fill="none" stroke="black"/>
              <path d="M 8,192 L 8,272" fill="none" stroke="black"/>
              <path d="M 80,144 L 80,184" fill="none" stroke="black"/>
              <path d="M 128,192 L 128,272" fill="none" stroke="black"/>
              <path d="M 256,64 L 256,104" fill="none" stroke="black"/>
              <path d="M 320,192 L 320,368" fill="none" stroke="black"/>
              <path d="M 336,256 L 336,288" fill="none" stroke="black"/>
              <path d="M 336,320 L 336,352" fill="none" stroke="black"/>
              <path d="M 440,144 L 440,184" fill="none" stroke="black"/>
              <path d="M 512,256 L 512,288" fill="none" stroke="black"/>
              <path d="M 512,320 L 512,352" fill="none" stroke="black"/>
              <path d="M 528,32 L 528,64" fill="none" stroke="black"/>
              <path d="M 528,112 L 528,144" fill="none" stroke="black"/>
              <path d="M 528,192 L 528,368" fill="none" stroke="black"/>
              <path d="M 8,32 L 528,32" fill="none" stroke="black"/>
              <path d="M 8,64 L 528,64" fill="none" stroke="black"/>
              <path d="M 8,112 L 528,112" fill="none" stroke="black"/>
              <path d="M 8,144 L 528,144" fill="none" stroke="black"/>
              <path d="M 8,192 L 128,192" fill="none" stroke="black"/>
              <path d="M 320,192 L 528,192" fill="none" stroke="black"/>
              <path d="M 128,208 L 152,208" fill="none" stroke="black"/>
              <path d="M 296,208 L 312,208" fill="none" stroke="black"/>
              <path d="M 136,224 L 152,224" fill="none" stroke="black"/>
              <path d="M 296,224 L 320,224" fill="none" stroke="black"/>
              <path d="M 136,254 L 168,254" fill="none" stroke="black"/>
              <path d="M 136,258 L 168,258" fill="none" stroke="black"/>
              <path d="M 288,254 L 312,254" fill="none" stroke="black"/>
              <path d="M 288,258 L 312,258" fill="none" stroke="black"/>
              <path d="M 336,256 L 512,256" fill="none" stroke="black"/>
              <path d="M 8,272 L 128,272" fill="none" stroke="black"/>
              <path d="M 336,288 L 512,288" fill="none" stroke="black"/>
              <path d="M 336,320 L 512,320" fill="none" stroke="black"/>
              <path d="M 336,352 L 512,352" fill="none" stroke="black"/>
              <path d="M 320,368 L 528,368" fill="none" stroke="black"/>
              <polygon class="arrowhead" points="448,184 436,178.4 436,189.6 " fill="black" transform="rotate(90,440,184)"/>
              <polygon class="arrowhead" points="320,256 308,250.4 308,261.6 " fill="black" transform="rotate(0,312,256)"/>
              <polygon class="arrowhead" points="320,208 308,202.4 308,213.6 " fill="black" transform="rotate(0,312,208)"/>
              <polygon class="arrowhead" points="304,224 292,218.4 292,229.6 " fill="black" transform="rotate(180,296,224)"/>
              <polygon class="arrowhead" points="264,104 252,98.4 252,109.6 " fill="black" transform="rotate(90,256,104)"/>
              <polygon class="arrowhead" points="160,208 148,202.4 148,213.6 " fill="black" transform="rotate(0,152,208)"/>
              <polygon class="arrowhead" points="144,256 132,250.4 132,261.6 " fill="black" transform="rotate(180,136,256)"/>
              <polygon class="arrowhead" points="144,224 132,218.4 132,229.6 " fill="black" transform="rotate(180,136,224)"/>
              <polygon class="arrowhead" points="88,184 76,178.4 76,189.6 " fill="black" transform="rotate(90,80,184)"/>
              <g class="text">
                <text x="160" y="52">SMIv2</text>
                <text x="240" y="52">specification</text>
                <text x="340" y="52">(optional)</text>
                <text x="400" y="52">(2)</text>
                <text x="196" y="132">YANG</text>
                <text x="272" y="132">specification</text>
                <text x="352" y="132">(1)</text>
                <text x="36" y="180">Client</text>
                <text x="348" y="180">Server</text>
                <text x="88" y="212">Request</text>
                <text x="180" y="212">CoAP</text>
                <text x="244" y="212">request(3)</text>
                <text x="380" y="212">Indication</text>
                <text x="88" y="228">Confirm</text>
                <text x="180" y="228">CoAP</text>
                <text x="248" y="228">response(3)</text>
                <text x="372" y="228">Response</text>
                <text x="488" y="228">(4)</text>
                <text x="212" y="260">Security</text>
                <text x="264" y="260">(7)</text>
                <text x="396" y="276">Datastore(s)</text>
                <text x="488" y="276">(5)</text>
                <text x="368" y="340">Event</text>
                <text x="432" y="340">stream(s)</text>
                <text x="488" y="340">(6)</text>
              </g>
            </svg>
          </artwork>
          <artwork type="ascii-art" align="left"><![CDATA[
+----------------------------------------------------------------+
|                SMIv2 specification (optional) (2)              |
+------------------------------+---------------------------------+
                               |
                               v
+----------------------------------------------------------------+
|                     YANG specification  (1)                    |
+--------+--------------------------------------------+----------+
         |                                            |
 Client  v                              Server        v
+--------------+                       +-------------------------+
|      Request +--> CoAP request(3) -->|  Indication             |
|      Confirm |<-- CoAP response(3)<--+  Response         (4)   |
|              |                       |                         |
|              |<==== Security (7) ===>| +---------------------+ |
+--------------+                       | | Datastore(s)    (5) | |
                                       | +---------------------+ |
                                       |                         |
                                       | +---------------------+ |
                                       | | Event stream(s) (6) | |
                                       | +---------------------+ |
                                       +-------------------------+
]]></artwork>
        </artset>
      </figure>
      <t><xref target="archit"/> is a high-level representation of the main elements of the CORECONF management
architecture. The different numbered components of <xref target="archit"/> are discussed according to the component number.</t>
      <dl>
        <dt>(1) YANG specification:</dt>
        <dd>
          <t>contains a set of named and versioned modules.</t>
        </dd>
        <dt>(2) SMIv2 specification:</dt>
        <dd>
          <t>Optional part that consists of a named module which, specifies a set of variables and "conceptual tables". There
is an algorithm to translate SMIv2 specifications to YANG specifications.</t>
        </dd>
        <dt>(3) CoAP request/response messages:</dt>
        <dd>
          <t>The CORECONF client sends request messages to and receives response messages
from the CORECONF server.</t>
        </dd>
        <dt>(4) Request, Indication, Response, Confirm:</dt>
        <dd>
          <t>Processes performed by the CORECONF clients and servers.</t>
        </dd>
        <dt>(5) Datastore:</dt>
        <dd>
          <t>A resource used to access configuration data, state data, RPCs, and actions. A CORECONF server may support a single unified datastore or multiple datastores as those defined by Network Management Datastore Architecture (NMDA) <xref target="RFC8342"/>.</t>
        </dd>
        <dt>(6) Event stream:</dt>
        <dd>
          <t>A resource used to get real-time notifications. A CORECONF server may support multiple Event streams serving different purposes such as normal monitoring, diagnostic, syslog, security monitoring.</t>
        </dd>
        <dt>(7) Security:</dt>
        <dd>
          <t>The server <bcp14>MUST</bcp14> prevent unauthorized users from reading or writing any CORECONF
resources. CORECONF relies on security protocols such as DTLS <xref target="RFC6347"/><xref target="RFC9147"/> or OSCORE <xref target="RFC8613"/> to secure CoAP communications.</t>
        </dd>
      </dl>
      <section anchor="major-differences">
        <name>Major differences between RESTCONF and CORECONF</name>
        <t>CORECONF is a RESTful protocol for small devices where saving bytes to
transport a message is very important. Contrary to RESTCONF, many design
decisions are motivated by the
saving of bytes. Consequently, CORECONF is not a RESTCONF over CoAP protocol,
but differs more significantly from RESTCONF.</t>
        <section anchor="major-differences-coap">
          <name>Differences due to CoAP and its efficient usage</name>
          <ul spacing="normal">
            <li>CORECONF uses CoAP/UDP as transport protocol and CBOR as payload format
<xref target="RFC9254"/>. RESTCONF uses HTTP/TCP as transport
protocol and JSON or XML as payload formats.</li>
            <li>CORECONF uses the methods FETCH and iPATCH to access data nodes.
RESTCONF uses instead the HTTP method PATCH and the HTTP method GET with the "fields" Query parameter.</li>
            <li>RESTCONF uses the HTTP methods HEAD, and OPTIONS, which are not supported by CoAP.</li>
            <li>CORECONF does not support "insert" query parameter (first, last, before, after)
and the "point" query parameter which are supported by RESTCONF.</li>
            <li>CORECONF does not support the "start-time" and "stop-time" query parameters
to retrieve past notifications.</li>
          </ul>
        </section>
        <section anchor="major-differences-cbor">
          <name>Differences due to the use of CBOR</name>
          <ul spacing="normal">
            <li>CORECONF encodes YANG identifier strings as numbers, where RESTCONF does not.</li>
            <li>CORECONF also differs in the handling of default values, only 'report-all' and 'trim' options are supported.</li>
          </ul>
        </section>
      </section>
      <section anchor="id-compression">
        <name>Compression of YANG identifiers</name>
        <t>In the YANG specification, items are identified with a name string. In order
to significantly reduce the size of identifiers used in CORECONF, numeric
 identifiers called YANG Schema Item iDentifier (YANG SID or simply SID) are used instead.</t>
        <section anchor="instance-identifier">
          <name>Instance-identifiers</name>
          <t>Instance-identifiers are used to uniquely identify data node instances within a datastore. This YANG built-in type is defined in <xref section="9.13" sectionFormat="of" target="RFC7950"/>. An instance-identifier is composed of the data node identifier (i.e., a SID) and, for data nodes within list(s), the keys used to index within these list(s).</t>
          <t>In CORECONF, instance-identifiers are carried in the payload of FETCH
and PATCH requests.
They are encoded in CBOR
based on the rules defined in <xref section="6.13.1" sectionFormat="of" target="RFC9254"/>.</t>
        </section>
      </section>
      <section anchor="media-type">
        <name>Media-Types</name>
        <t>CORECONF uses Media-Types based on the YANG to CBOR mapping specified
in <xref target="RFC9254"/>.</t>
        <t>The following new Media-Types based on CBOR sequences <xref target="RFC8742"/> are defined in this document:</t>
        <dl>
          <dt>application/yang-identifiers+cbor-seq:</dt>
          <dd>
            <t>This Media-Type represents a CBOR YANG document containing a list of instance-identifiers used to target specific data node instances within a datastore.</t>
          </dd>
          <dt/>
          <dd>
            <t>FORMAT: CBOR sequence of instance-identifiers</t>
          </dd>
          <dt/>
          <dd>
            <t>The message payload of Media-Type 'application/yang-identifiers+cbor-seq' is encoded using a CBOR sequence.
Each item of this CBOR sequence contains an instance-identifier encoded as defined in <xref section="6.13.1" sectionFormat="of" target="RFC9254"/>.</t>
          </dd>
          <dt>application/yang-instances+cbor-seq:</dt>
          <dd>
            <t>This Media-Type represents a CBOR YANG document containing a list of data node instances.
Each data node instance is identified by its associated instance-identifier.</t>
          </dd>
          <dt/>
          <dd>
            <t>FORMAT: CBOR sequence of CBOR maps of instance-identifier, instance-value</t>
          </dd>
          <dt/>
          <dd>
            <t>The message payload of Media-Type 'application/yang-instances+cbor-seq' is encoded using a CBOR sequence.
Each item within this CBOR sequence contains a CBOR map carrying an instance-identifier and associated instance-value.
Instance-identifiers are encoded using the rules defined in <xref section="6.13.1" sectionFormat="of" target="RFC9254"/>, instance-values are encoded using the rules
defined in <xref section="4" sectionFormat="of" target="RFC9254"/>.
The reference SID applying to the instance-value is provided by the
SID in the instance-identifier.</t>
          </dd>
          <dt/>
          <dd>
            <t>When present in an iPATCH request payload, this Media-Type carry a list of data node instances to be replaced, created, or deleted.
For each data node instance D, for which the instance-identifier is the same as a data node instance I, in the targeted datastore resource: the value of D replaces the value of I.  When the value of D is null, the data node instance I is removed.  When the targeted datastore resource does not contain a data node instance with the same instance-identifier as D, a new instance is created with the same instance-identifier and value as D (unless the value of D is null).</t>
          </dd>
        </dl>
        <t>The different Media-Type usages are summarized in the table below:</t>
        <table align="left">
          <name>Summary of Media-Type Usages</name>
          <thead>
            <tr>
              <th align="left">Method</th>
              <th align="left">Resource</th>
              <th align="left">Media-Type</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">FETCH request</td>
              <td align="left">datastore</td>
              <td align="left">application/yang-identifiers+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">FETCH response</td>
              <td align="left">datastore</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">iPATCH request</td>
              <td align="left">datastore</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">GET response</td>
              <td align="left">event stream</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">POST request</td>
              <td align="left">rpc, action</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">POST response</td>
              <td align="left">rpc, action</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
          </tbody>
        </table>
      </section>
      <section anchor="unified-datastore">
        <name>Unified datastore</name>
        <t>CORECONF supports a simple datastore model consisting of a single unified datastore. This datastore provides access to both configuration and operational data. Configuration updates performed on this datastore are reflected immediately or with a minimal delay as operational data.</t>
        <t>Alternatively, CORECONF servers <bcp14>MAY</bcp14> implement a more complex datastore model such as the Network Management Datastore Architecture (NMDA) as defined by <xref target="RFC8342"/>. Each datastore supported is implemented as a datastore resource.</t>
        <t>Characteristics of the unified datastore are summarized in the table below:</t>
        <table align="left">
          <name>Characteristics of the Unified Datastore</name>
          <thead>
            <tr>
              <th align="left">Name</th>
              <th align="left">Value</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">Name</td>
              <td align="left">unified</td>
            </tr>
            <tr>
              <td align="left">YANG modules</td>
              <td align="left">all modules</td>
            </tr>
            <tr>
              <td align="left">YANG nodes</td>
              <td align="left">all data nodes ("config true" and "config false")</td>
            </tr>
            <tr>
              <td align="left">Access</td>
              <td align="left">read-write</td>
            </tr>
            <tr>
              <td align="left">How applied</td>
              <td align="left">changes applied in place immediately or with a minimal delay</td>
            </tr>
            <tr>
              <td align="left">Protocols</td>
              <td align="left">CORECONF</td>
            </tr>
            <tr>
              <td align="left">Defined in</td>
              <td align="left">"ietf-coreconf"</td>
            </tr>
          </tbody>
        </table>
      </section>
    </section>
    <section anchor="coap-interface">
      <name>CoAP Interface</name>
      <t>This document specifies a Management Interface. CoAP endpoints that
implement the CORECONF management protocol, support
at least one discoverable management resource of resource type (rt): core.c.ds.
The path of the discoverable management resource is left to implementers to
select (see <xref target="discovery"/>).</t>
      <t>YANG data node instances are accessible by performing FETCH and iPATCH
operations on the datastore resource.</t>
      <t>CORECONF also supports event stream resources used to observe notification instances.
Event stream resources can be discovered using resource type (rt): core.c.ev.</t>
      <t>The description of the CORECONF management interface is shown in the table below:</t>
      <table align="left" anchor="tbl-resources">
        <name>Resources, example paths, and resource types (rt)</name>
        <thead>
          <tr>
            <th align="left">CoAP resource</th>
            <th align="left">Example path</th>
            <th align="left">rt</th>
          </tr>
        </thead>
        <tbody>
          <tr>
            <td align="left">Datastore resource</td>
            <td align="left">/c</td>
            <td align="left">core.c.ds</td>
          </tr>
          <tr>
            <td align="left">Default event stream resource</td>
            <td align="left">/s</td>
            <td align="left">core.c.ev</td>
          </tr>
        </tbody>
      </table>
      <t>The path values in the table are example ones. On discovery, the server makes
the actual path values known for these resources.</t>
      <t>The methods used by CORECONF are:</t>
      <table align="left" anchor="tbl-methods">
        <name>CoAP Methods in CORECONF</name>
        <thead>
          <tr>
            <th align="left">Operation</th>
            <th align="left">Description</th>
          </tr>
        </thead>
        <tbody>
          <tr>
            <td align="left">FETCH</td>
            <td align="left">Retrieve specific data nodes within a datastore resource</td>
          </tr>
          <tr>
            <td align="left">iPATCH</td>
            <td align="left">Idempotently create, replace, and delete data node(s) within a datastore resource</td>
          </tr>
          <tr>
            <td align="left">POST</td>
            <td align="left">Invoke an RPC or action</td>
          </tr>
          <tr>
            <td align="left">GET</td>
            <td align="left">Retrieve the datastore resource or event stream resource</td>
          </tr>
          <tr>
            <td align="left">PUT</td>
            <td align="left">Create or replace a datastore resource</td>
          </tr>
          <tr>
            <td align="left">DELETE</td>
            <td align="left">Delete a datastore resource</td>
          </tr>
        </tbody>
      </table>
      <section anchor="data-retrieval">
        <name>Data Retrieval</name>
        <t>One or more data nodes can be retrieved by the client.
The operation is mapped to the FETCH method defined in <xref section="2" sectionFormat="of" target="RFC8132"/>.</t>
        <t>There are two additional query parameters for the FETCH method:</t>
        <table align="left" anchor="tbl-query-fetch">
          <thead>
            <tr>
              <th align="left">query parameters</th>
              <th align="left">Description</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">c</td>
              <td align="left">Control selection of configuration and non-configuration data nodes (GET and FETCH)</td>
            </tr>
            <tr>
              <td align="left">d</td>
              <td align="left">Control retrieval of default values.</td>
            </tr>
          </tbody>
        </table>
        <section anchor="content">
          <name>Using the 'c' query parameter</name>
          <t>The 'c' (content) option controls how descendant nodes of the
requested data nodes will be processed in the reply.</t>
          <t>The allowed values are:</t>
          <table align="left" anchor="tbl-c-values">
            <name>Values for the 'c' query parameter</name>
            <thead>
              <tr>
                <th align="left">Value</th>
                <th align="left">Description</th>
              </tr>
            </thead>
            <tbody>
              <tr>
                <td align="left">c</td>
                <td align="left">Return only configuration descendant data nodes</td>
              </tr>
              <tr>
                <td align="left">n</td>
                <td align="left">Return only non-configuration descendant data nodes</td>
              </tr>
              <tr>
                <td align="left">a</td>
                <td align="left">Return all descendant data nodes</td>
              </tr>
            </tbody>
          </table>
          <t>This option is only allowed for GET and FETCH methods on datastore and
data node resources.  A 4.02 (Bad Option) error is returned if used for other
methods or resource types.</t>
          <t>If this query parameter is not present, the default value is "a" (the quotes
are added for readability, but they are not part of the payload).</t>
        </section>
        <section anchor="dquery">
          <name>Using the 'd' query parameter</name>
          <t>The 'd' (with-defaults) option controls how the default values of the
descendant nodes of the requested data nodes will be processed.</t>
          <t>The allowed values are:</t>
          <table align="left" anchor="tbl-d-values">
            <name>Values for the 'd' query parameter</name>
            <thead>
              <tr>
                <th align="left">Value</th>
                <th align="left">Description</th>
              </tr>
            </thead>
            <tbody>
              <tr>
                <td align="left">a</td>
                <td align="left">All data nodes are reported. Defined as 'report-all' in <xref section="3.1" sectionFormat="of" target="RFC6243"/>.</td>
              </tr>
              <tr>
                <td align="left">t</td>
                <td align="left">Data nodes set to the YANG default are not reported. Defined as 'trim' in <xref section="3.2" sectionFormat="of" target="RFC6243"/>.</td>
              </tr>
            </tbody>
          </table>
          <t>If the target of a GET or FETCH method is a data node that represents a leaf
that has a default value, and the leaf has not been given a value by any
client yet, the server <bcp14>MUST</bcp14> return the default value of the leaf.</t>
          <t>If the target of a GET method is a data node that represents a
container or list that has child resources with default values,
and these have not been given a value yet,</t>
          <ul empty="true">
            <li>
              <t>The server <bcp14>MUST NOT</bcp14> return the child resource if <tt>d</tt>=<tt>t</tt>.</t>
            </li>
          </ul>
          <ul empty="true">
            <li>
              <t>The server <bcp14>MUST</bcp14> return the child resource if <tt>d</tt>=<tt>a</tt>.</t>
            </li>
          </ul>
          <t>If this query parameter is not present, the default value is "t" (the quotes are
added for readability, but they are not part of the payload).</t>
        </section>
        <section anchor="fetch">
          <name>FETCH</name>
          <t>The FETCH method is used to retrieve one or more instance-values.
The FETCH request payload contains the list of instance-identifiers of the data node instances requested.</t>
          <t>The return response payload contains a list of data node instance-values in the same order as requested.
A CBOR null is returned for each data node requested by the client, not supported by the server or not currently instantiated.</t>
          <t>For compactness, indexes of the list instance identifiers returned by the FETCH response <bcp14>SHOULD</bcp14> be elided, only the SID is provided.
This approach may also help reduce implementation complexity since the format of each entry within the CBOR sequence of the FETCH response is identical to the format of the corresponding GET response.</t>
          <artwork><![CDATA[
FORMAT:
  FETCH <datastore resource>
        (Content-Format: application/yang-identifiers+cbor-seq)
  CBOR sequence of instance-identifiers

  2.05 Content (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of SID, instance-value
]]></artwork>
          <section anchor="fetch-example">
            <name>FETCH examples</name>
            <t>This example uses the current-datetime leaf from module ietf-system <xref target="RFC7317"/>
and the interface list from module ietf-interfaces <xref target="RFC8343"/>.
In this example the value of current-datetime (SID 1723) and the interface
list (SID 1533) instance identified with name="eth0" are queried.</t>
            <artwork><![CDATA[
REQ: FETCH </c>
     (Content-Format: application/yang-identifiers+cbor-seq)
1723,            / current-datetime (SID 1723) /
[1533, "eth0"]   / interface (SID 1533) with name = "eth0" /

RES: 2.05 Content
     (Content-Format: application/yang-instances+cbor-seq)

{
  1723 : "2014-10-26T12:16:31Z" / current-datetime (SID 1723) /
},
{
  1533 : {
     4 : "eth0",              / name (SID 1537) /
     1 : "Ethernet adaptor",  / description (SID 1534) /
     5 : 1880,                / type (SID 1538), identity /
                              / ethernetCsmacd (SID 1880) /
     2 : true,                / enabled (SID 1535) /
    11 : 3             / oper-status (SID 1544), value is testing /
  }
}

]]></artwork>
          </section>
        </section>
      </section>
      <section anchor="data-editing">
        <name>Data Editing</name>
        <t>CORECONF allows datastore contents to be created, modified and deleted using
CoAP methods.</t>
        <section anchor="DataOrdering">
          <name>Data Ordering</name>
          <t>A CORECONF server <bcp14>MUST</bcp14> preserve the relative order of all user-ordered list
and leaf-list entries that are received in a single edit request.
As per <xref target="RFC9254"/>, these YANG data node types are encoded as CBOR
arrays, so messages will preserve their order.</t>
        </section>
        <section anchor="post-operation">
          <name>POST</name>
          <t>The CoAP POST operation is used in CORECONF for the
invocation of "ACTION" and "RPC" resources.
Refer to <xref target="rpc"/> for details on "ACTION" and "RPC" resources.</t>
        </section>
        <section anchor="ipatch-operation">
          <name>iPATCH</name>
          <t>One or multiple data node instances are replaced with the idempotent
CoAP iPATCH method <xref target="RFC8132"/>.</t>
          <t>There are no query parameters for the iPATCH method.</t>
          <t>The processing of the iPATCH command is specified by Media-Type 'application/yang-instances+cbor-seq'.
In summary, if the CBOR patch payload contains a data node instance that is not present
in the target, this instance is added. If the target contains the specified instance,
the content of this instance is replaced with the value of the payload.
A null value indicates the removal of an existing data node instance.</t>
          <artwork><![CDATA[
FORMAT:
  iPATCH <datastore resource>
         (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value

  2.04 Changed
]]></artwork>
          <section anchor="ipatch-example">
            <name>iPATCH example</name>
            <t>In this example, a CORECONF client requests the following operations:</t>
            <ul spacing="normal">
              <li>Set "/ietf-system:system/ntp/enabled" (SID 1755) to true.</li>
              <li>Remove the server "tac.nrc.ca" from the "/ietf-system:system/ntp/server" (SID 1756) list.</li>
              <li>Add/set the server "NTP Pool server 2" to the list "/ietf-system:system/ntp/server" (SID 1756).</li>
            </ul>
            <artwork><![CDATA[
REQ: iPATCH </c>
     (Content-Format: application/yang-instances+cbor-seq)
{
  1755 : true                   / enabled (SID 1755) /
},
{
  [1756, "tac.nrc.ca"] : null   / server (SID 1756) /
},
{
  1756 : {                      / server (SID 1756) /
    3 : "tic.nrc.ca",           / name (SID 1759) /
    4 : true,                   / prefer (SID 1760) /
    5 : {                       / udp (SID 1761) /
      1 : "132.246.11.231"      / address (SID 1762) /
    }
  }
}

RES: 2.04 Changed
]]></artwork>
            <t>A data node resource is deleted using an iPATCH with a null value, as seen in this example.</t>
          </section>
        </section>
      </section>
      <section anchor="datastore-access">
        <name>Full datastore access</name>
        <t>The methods GET, PUT, POST, and DELETE can be used to request, replace, create,
and delete a whole datastore respectively.</t>
        <artwork><![CDATA[
FORMAT:
  GET <datastore resource>

  2.05 Content (Content-Format: application/yang-data+cbor; id=sid)
  CBOR map of SID, instance-value
]]></artwork>
        <artwork><![CDATA[
FORMAT:
  PUT <datastore resource>
      (Content-Format: application/yang-data+cbor; id=sid)
  CBOR map of SID, instance-value

  2.04 Changed
]]></artwork>
        <artwork><![CDATA[
FORMAT:
  POST <datastore resource>
       (Content-Format: application/yang-data+cbor; id=sid)
  CBOR map of SID, instance-value

  2.01 Created
]]></artwork>
        <artwork><![CDATA[
FORMAT:
  DELETE <datastore resource>

  2.02 Deleted
]]></artwork>
        <t>The content of the CBOR map represents the complete datastore of the server
at the GET indication of after a successful processing of a PUT or POST request.</t>
        <section anchor="datastore-example">
          <name>Full datastore examples</name>
          <t>The example uses the interface list from module ietf-interfaces <xref target="RFC8343"/> and
the clock container from module ietf-system <xref target="RFC7317"/>.
We assume that the datastore contains two modules ietf-system (SID 1700) and
ietf-interfaces (SID 1500); they contain the 'interface' list (SID 1533) with
one instance and the 'clock' container (SID 1721). After invocation of GET, a
CBOR map with data nodes from these two modules is returned:</t>
          <artwork><![CDATA[
REQ:  GET </c>

RES: 2.05 Content
     (Content-Format: application/yang-data+cbor; id=sid)
{
  1721 : {                      / Clock (SID 1721) /
    2: "2016-10-26T12:16:31Z",  / current-datetime (SID 1723) /
    1: "2014-10-05T09:00:00Z"   / boot-datetime (SID 1722) /
  },
  1533 : [
    {                           / interface (SID 1533) /
       4 : "eth0",              / name (SID 1537) /
       1 : "Ethernet adaptor",  / description (SID 1534) /
       5 : 1880,                / type (SID 1538), identity: /
                                / ethernetCsmacd (SID 1880) /
       2 : true,                / enabled (SID 1535) /
      11 : 3             / oper-status (SID 1544), value is testing /
    }
  ]
}
]]></artwork>
        </section>
      </section>
      <section anchor="event-stream">
        <name>Event stream</name>
        <t>Event notification is an essential function for the management of servers.
CORECONF allows notifications specified in YANG <xref target="RFC5277"/> to be reported to a list
of clients. The path for the default event stream can be discovered as
described in <xref target="coap-interface"/>. The server <bcp14>MAY</bcp14> support additional event
stream resources to address different notification needs.</t>
        <t>Reception of notification instances is enabled with the CoAP Observe
<xref target="RFC7641"/> function. Clients subscribe to the notifications by sending a
GET request with an "Observe" option to the stream resource.</t>
        <t>Each response payload carries one or multiple notifications. The number of
notifications reported, and the conditions used to remove notifications
from the reported list are left to implementers.
When multiple notifications are reported, they <bcp14>MUST</bcp14> be ordered starting from
the newest notification at index zero. Note that this could lead to
notifications being sent multiple times, which increases the probability for
the client to receive them, but it might potentially lead to messages that
exceed the MTU of a single CoAP packet. If such cases could arise, implementers
should make sure appropriate fragmentation is available - for example the one
described in <xref target="block"/>.</t>
        <t>The format of notifications is a CBOR sequence, where each item in
the sequence is a single notification as described in <xref section="4.2.1" sectionFormat="of" target="RFC9254"/>.
(Accordingly, a notification without any content is an empty CBOR
sequence, i.e., zero bytes.)</t>
        <artwork><![CDATA[
FORMAT:
  GET <stream-resource> Observe(0)

  2.05 Content (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value
]]></artwork>
        <t>The sequence of data node instances may contain identical items which have
been generated at different times.</t>
        <t>An example implementation is:</t>
        <ul empty="true">
          <li>
            <t>Every time an event is generated, the generated notification instance is
appended to the chosen stream(s). After an aggregation period, which may be
limited by the maximum number of notifications supported,
the content of the instance is sent to all clients observing the modified stream.</t>
          </li>
        </ul>
        <section anchor="event-stream-example">
          <name>Notify Examples</name>
          <t>Let suppose the server generates the example-port-fault event as defined below.</t>
          <sourcecode type="yang"><![CDATA[
module example-port {
  yang-version 1.1;
  namespace "https://example.com/ns/example-port";
  prefix "port";

  notification example-port-fault {   // SID 60010
    description
      "Event generated if a hardware fault is detected";
    leaf port-name {                  // SID 60011
      type string;
    }
    leaf port-fault {                 // SID 60012
      type string;
    }
  }
}
]]></sourcecode>
          <t>In this example the default event stream resource path /s is an example
location discovered with a request similar to <xref target="discovery-ex-es"/>. By executing a
GET with Observe 0 on the default event stream resource the client receives the
following response:</t>
          <artwork><![CDATA[
REQ:  GET </s> Observe(0)

RES:  2.05 Content
      (Content-Format: application/yang-instances+cbor-seq)
      Observe(12)

{
  60010 : {             / example-port-fault (SID 60010) /
    1 : "0/4/21",       / port-name (SID 60011) /
    2 : "Open pin 2"    / port-fault (SID 60012) /
  }
},
{
  60010 : {             / example-port-fault (SID 60010) /
    1 : "1/4/21",       / port-name (SID 60011) /
    2 : "Open pin 5"    / port-fault (SID 60012) /
  }
}

]]></artwork>
          <t>In the example, the request returns a success response with the contents
of the last two generated events. Consecutively the server will regularly
notify the client when a new event is generated.</t>
        </section>
        <section anchor="the-f-query-parameter">
          <name>The 'f' query parameter</name>
          <t>The 'f' (filter) option is used to indicate which subset of all possible notifications is of interest.  If not present, all notifications supported by the event stream are reported.</t>
          <t>When not supported by a CORECONF server, this option shall be ignored, all events notifications are reported independently of the presence and content of the 'f' (filter) option.</t>
          <t>When present, this option contains a comma-separated list of notification SIDs. For example, the following request returns notifications 60010 and 60020.</t>
          <artwork><![CDATA[
REQ:  GET </s?f=60010,60020> Observe(0)
]]></artwork>
          <t><cref anchor="simplify1">This is one place where SIDs are used in the URI.  Do we want to replace this with FETCH as well?</cref></t>
        </section>
      </section>
      <section anchor="rpc">
        <name>RPC statements</name>
        <t>The YANG "action" and "RPC" statements specify the execution of a Remote
Procedure Call (RPC) in the server.  It is invoked using a POST method to
an "Action" or "RPC" resource instance.</t>
        <t>The request payload contains the values assigned to the input container when specified.
The response payload contains the values of the output container when specified.
Both the input and output containers are encoded in CBOR using the rules defined in
<xref section="4.2.1" sectionFormat="of" target="RFC9254"/>.</t>
        <t>The returned success response code is 2.05 Content.</t>
        <artwork><![CDATA[
FORMAT:
  POST <datastore resource>
         (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value

  2.04 (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value
]]></artwork>
        <section anchor="rpc-example">
          <name>RPC Example</name>
          <t>This example is based on <xref section="3.6.1" sectionFormat="of" target="RFC8040"/>, abbreviated and
annotated with SIDs as follows:</t>
          <sourcecode type="yang"><![CDATA[
module example-ops {
  yang-version 1.1;
  namespace "https://example.com/ns/example-ops";
  prefix "ops";

  rpc reboot {                          // SID 61000
    description "Reboot operation.";
    input {                             // SID 61009
      leaf delay {                      // SID 61001
        type uint32;
        units "seconds";
        default 0;
        description
          "Number of seconds to wait before initiating the
           reboot operation.";
      }
    }
  }
}
]]></sourcecode>
          <t>This example invokes the 'reboot' RPC  (SID 61000),
of the server instance with name equal to "myserver".</t>
          <artwork><![CDATA[
REQ:  POST </c>
      (Content-Format: application/yang-instances+cbor-seq)

{ 61000:
  {
    1 : 77
  }
}
RES:  2.04 Changed
      (Content-Format: application/yang-instances+cbor-seq)

{ 61000:
  null
}
]]></artwork>
          <t><cref anchor="empty-correct">Is this the correct empty return for an RPC without output?
Note that we always have to send a yang-instances (or at least a
yang-identifiers) for the input side to find the right RPC.</cref></t>
        </section>
        <section anchor="action-example">
          <name>Action Example</name>
          <t>The example is based on the YANG action "reset" as defined in <xref section="7.15.3" sectionFormat="of" target="RFC7950"/>
and annotated below with SIDs.</t>
          <sourcecode type="yang"><![CDATA[
module example-server-farm {
  yang-version 1.1;
  namespace "urn:example:server-farm";
  prefix "sfarm";

  import ietf-yang-types {
    prefix "yang";
  }

  list server {                        // SID 60000
    key name;
    leaf name {                        // SID 60001
      type string;
    }
    action reset {                     // SID 60002
      input {                          // SID 60008
        leaf reset-at {                // SID 60003
          type yang:date-and-time;
          mandatory true;
        }
      }
      output {                         // SID 60009
        leaf reset-finished-at {       // SID 60004
          type yang:date-and-time;
          mandatory true;
        }
      }
    }
  }
}
]]></sourcecode>
          <t>This example invokes the 'reset' action  (SID 60002),
of the server instance with name equal to "myserver".</t>
          <artwork><![CDATA[
REQ:  POST </c>
      (Content-Format: application/yang-instances+cbor-seq)

{ [60002, "myserver"]:
  {
    0 : { / SID 60002 XXX does this need to be input? /
      1 : "2016-02-08T14:10:08Z09:00" / reset-at (SID 60003) /
    }
  }
}
RES:  2.04 Changed
         (Content-Format: application/yang-instances+cbor-seq)

{ [60002, "myserver"]:
  {
    0 : { / SID 60002 XXX does this need to be output? /
      2 : "2016-02-08T14:10:08Z" / reset-finished-at (SID 60004)/
    }
  }
}
]]></artwork>
        </section>
      </section>
    </section>
    <section anchor="block">
      <name>Use of Block-wise Transfers</name>
      <t>The CoAP protocol provides reliability by acknowledging the UDP datagrams.
However, when large pieces of data need to be transported, datagrams get
fragmented, thus creating constraints on the resources in the client, server
and intermediate routers. The block option <xref target="RFC7959"/> allows the transport
of the total payload in individual blocks of which the
size can be adapted to the underlying transport sizes such as: (UDP datagram
size ~64KiB, IPv6 MTU of 1280, IEEE 802.15.4 payload of 60-80 bytes). Each
block is individually acknowledged to guarantee reliability.</t>
      <t>Notice that the Block mechanism splits the data at fixed positions,
such that individual data fields may become fragmented. Therefore, assembly
of multiple blocks may be required to process complete data fields.</t>
      <t>Beware of race conditions. In case blocks are filled one at a time, care should
be taken that the whole and consistent data representation is sent in multiple blocks sequentially
without interruption. On the server, values might change, lists might get re-ordered,
extended or reduced. When these actions happen during the serialization of
the contents of the resource, the transported results do not correspond with
a state having occurred in the server; or worse the returned values are inconsistent.
For example: array length does not correspond with the actual number of items.
It may be advisable to use Indefinite-length CBOR arrays and maps,
which are foreseen for data streaming purposes.
(Note that the outer structure of yang-identifiers and yang-instances
is a CBOR sequence, which already behaves similar to an
indefinite-length encoded array.)</t>
    </section>
    <section anchor="discovery">
      <name>Application Discovery</name>
      <t>Two application discovery mechanisms are supported by CORECONF, the YANG library
data model as defined by <xref target="I-D.ietf-core-yang-library"/> and
the CORE resource discovery <xref target="RFC6690"/>.
Implementers may choose to implement one or the other or both.</t>
      <section anchor="yang-library">
        <name>YANG library</name>
        <t>The YANG library data model <xref target="I-D.ietf-core-yang-library"/> provides a high-level description of the resources available. The YANG library contains the
list of modules, features, and deviations supported by the CORECONF server.
From this information, CORECONF clients can infer the list of data nodes supported
and the interaction model to be used to access them. This module also contains
the list of datastores implemented.</t>
        <t>As described in <xref target="RFC6690"/>, the location of the YANG library can be found by
sending a GET request to
"/.well-known/core" including a resource type (RT) parameter with the value
"core.c.yl". Upon success, the return payload will contain the root resource
of the YANG library module.</t>
        <t>The following example assumes that the SID of the YANG library is 2351 (<tt>kv</tt> after
encoding as specified in <xref target="id-compression"/>) and that the server uses /c as
datastore resource path.</t>
        <artwork><![CDATA[
REQ: GET </.well-known/core?rt=core.c.yl>

RES: 2.05 Content (Content-Format: application/link-format)
</c/kv>;rt="core.c.yl"
]]></artwork>
      </section>
      <section anchor="resource-discovery">
        <name>Resource Discovery</name>
        <t>As some CoAP interfaces and services might not support the YANG library
interface and still be interested to discover resources that are available,
implementations <bcp14>MAY</bcp14> choose to support discovery of all available
resources using "/.well-known/core" as defined by <xref target="RFC6690"/>.</t>
        <section anchor="datastore-resource-discovery">
          <name>Datastore Resource Discovery</name>
          <t>The presence and location of (path to) each datastore implemented by the CORECONF server
can be discovered by sending a GET request to "/.well-known/core" including a
resource type (RT) parameter with the value "core.c.ds".</t>
          <t>Upon success, the return payload contains the list of datastore resources.</t>
          <t>Each datastore returned is further qualified using the "ds" Link-Format attribute.
This attribute is set to the SID assigned to the datastore identity.
When a unified datastore is implemented, the ds attribute is set to 1029 as
specified in <xref target="ietf-coreconf-sid"/>.
For other examples of datastores, see the Network Management Datastore Architecture (NMDA) <xref target="RFC7950"/>.</t>
          <sourcecode type="abnf"><![CDATA[
link-extension    = ( "ds" "=" sid )
                    ; SID assigned to the datastore identity
sid               = 1*DIGIT
]]></sourcecode>
          <t>The following example assumes that the server uses /c as datastore resource
path.</t>
          <figure anchor="discovery-ex-ds">
            <artwork align="left"><![CDATA[
REQ: GET </.well-known/core?rt=core.c.ds>

RES: 2.05 Content (Content-Format: application/link-format)
</c>; rt="core.c.ds";ds=1029
]]></artwork>
          </figure>
        </section>
        <section anchor="data-node-resource-discovery">
          <name>Data node Resource Discovery</name>
          <t>If implemented, the presence and location of (path to) each data node
implemented by the CORECONF server are discovered by sending a GET request to
"/.well-known/core" including a resource type (RT) parameter with the value
"core.c.dn".</t>
          <t>Upon success, the return payload contains the SID assigned to each data node
and their location.</t>
          <t>The example below shows the discovery of the presence and location of
data nodes. Data nodes '/ietf-system:system-state/clock/boot-datetime' (SID 1722)
and '/ietf-system:system-state/clock/current-datetime' (SID 1723) are returned.
The example assumes that the server uses /c as datastore resource path.</t>
          <artwork><![CDATA[
REQ: GET </.well-known/core?rt=core.c.dn>

RES: 2.05 Content (Content-Format: application/link-format)
</c/a6>;rt="core.c.dn",
</c/a7>;rt="core.c.dn"
]]></artwork>
          <t>Without additional filtering, the list of data nodes may become prohibitively
long. If this is the case implementations <bcp14>SHOULD</bcp14> support a way to obtain all
links using multiple GET requests (for example through some form of
pagination).</t>
        </section>
        <section anchor="event-stream-resource-discovery">
          <name>Event stream Resource Discovery</name>
          <t>The presence and location of (path to) each event stream implemented by the CORECONF server are
discovered by sending a GET request to "/.well-known/core" including a resource type (RT)
parameter with the value "core.c.es".</t>
          <t>Upon success, the return payload contains the list of event stream resources.</t>
          <t>The following example assumes that the server uses /s as the default event stream
resource.</t>
          <figure anchor="discovery-ex-es">
            <artwork align="left"><![CDATA[
REQ: GET </.well-known/core?rt=core.c.es>

RES: 2.05 Content (Content-Format: application/link-format)
</s>;rt="core.c.es"
]]></artwork>
          </figure>
        </section>
      </section>
    </section>
    <section anchor="error-handling">
      <name>Error Handling</name>
      <t>In case a request is received which cannot be processed properly, the CORECONF server <bcp14>MUST</bcp14> return an error response. This error response <bcp14>MUST</bcp14> contain a CoAP 4.xx or 5.xx response code.</t>
      <t>Errors returned by a CORECONF server can be broken into two categories, those associated with the CoAP protocol itself and those generated during the validation of the YANG data model constraints as described in <xref section="8" sectionFormat="of" target="RFC7950"/>.</t>
      <t>The following list of common CoAP errors should be implemented by CORECONF servers. This list is not exhaustive, other errors defined by CoAP and associated RFCs may be applicable.</t>
      <ul spacing="normal">
        <li>Error 4.01 (Unauthorized) is returned by the CORECONF server when the CORECONF client is not authorized to perform the requested action on the targeted resource (i.e., data node, datastore, rpc, action or event stream).</li>
        <li>Error 4.02 (Bad Option) is returned by the CORECONF server when one or more CoAP options are unknown or malformed.</li>
        <li>Error 4.04 (Not Found) is returned by the CORECONF server when the CORECONF client is requesting a non-instantiated resource (i.e., data node, datastore, rpc, action or event stream).</li>
        <li>Error 4.05 (Method Not Allowed) is returned by the CORECONF server when the CORECONF client is requesting a method not supported on the targeted resource. (e.g., GET on an rpc, PUT or POST on a data node with "config" set to false).</li>
        <li>Error 4.08 (Request Entity Incomplete) is returned by the CORECONF server if one or multiple blocks of a block transfer request is missing, see <xref target="RFC7959"/> for more details.</li>
        <li>Error 4.13 (Request Entity Too Large) may be returned by the CORECONF server during a block transfer request, see <xref target="RFC7959"/> for more details.</li>
        <li>Error 4.15 (Unsupported Content-Format) is returned by the CORECONF server when the Content-Format used in the request does not match those specified in <xref target="media-type"/>.</li>
      </ul>
      <t>The CORECONF server <bcp14>MUST</bcp14> also enforce the different constraints associated with the YANG data models implemented. These constraints are described in <xref section="8" sectionFormat="of" target="RFC7950"/>. These errors are reported using the CoAP error code 4.00 (Bad Request) and may have the following error container as payload. The YANG definition and associated .sid file are available in <xref target="ietf-coreconf-yang"/> and <xref target="ietf-coreconf-sid"/>. The error container is encoded using the encoding rules of a YANG data template as defined in <xref section="5" sectionFormat="of" target="RFC9254"/>.</t>
      <artwork><![CDATA[
+--rw error!
   +--rw error-tag             identityref
   +--rw error-app-tag?        identityref
   +--rw error-data-node?      instance-identifier
   +--rw error-message?        string
]]></artwork>
      <t>The following 'error-tag' and 'error-app-tag' are defined by the ietf-coreconf YANG module, these tags are implemented as YANG identity and can be extended as needed.</t>
      <ul spacing="normal">
        <li>
          <t>error-tag 'operation-failed' is returned by the CORECONF server when the operation request cannot be processed successfully.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'malformed-message' is returned by the CORECONF server when the payload received from the CORECONF client does not contain a well-formed CBOR content as defined in <xref target="RFC8949"/> or does not comply with the CBOR structure defined within this document.</li>
            <li>error-app-tag 'data-not-unique' is returned by the CORECONF server when the validation of the 'unique' constraint of a list or leaf-list fails.</li>
            <li>error-app-tag 'too-many-elements' is returned by the CORECONF server when the validation of the 'max-elements' constraint of a list or leaf-list fails.</li>
            <li>error-app-tag 'too-few-elements' is returned by the CORECONF server when the validation of the 'min-elements' constraint of a list or leaf-list fails.</li>
            <li>error-app-tag 'must-violation' is returned by the CORECONF server when the restrictions imposed by a 'must' statement are violated.</li>
            <li>error-app-tag 'duplicate' is returned by the CORECONF server when a client tries to create a duplicate list or leaf-list entry.</li>
          </ul>
        </li>
        <li>
          <t>error-tag 'invalid-value' is returned by the CORECONF server when the CORECONF client tries to update or create a leaf with a value encoded using an invalid CBOR datatype or if the 'range', 'length', 'pattern' or 'require-instance' constrain is not fulfilled.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'invalid-datatype' is returned by the CORECONF server when CBOR encoding does not follow the rules set by the YANG Build-In type or when the value is incompatible with it (e.g., a value greater than 127 for an int8, undefined enumeration).</li>
            <li>error-app-tag 'not-in-range' is returned by the CORECONF server when the validation of the 'range' property fails.</li>
            <li>error-app-tag 'invalid-length' is returned by the CORECONF server when the validation of the 'length' property fails.</li>
            <li>error-app-tag 'pattern-test-failed' is returned by the CORECONF server when the validation of the 'pattern' property fails.</li>
          </ul>
        </li>
        <li>
          <t>error-tag 'missing-element' is returned by the CORECONF server when the operation requested by a CORECONF client fails to comply with the 'mandatory' constraint defined. The 'mandatory' constraint is enforced for leafs and choices, unless the node or any of its ancestors have a 'when' condition or 'if-feature' expression that evaluates to 'false'.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'missing-key' is returned by the CORECONF server to further qualify a missing-element error. This error is returned when the CORECONF client  tries to create or list instance, without all the 'key' specified or when the CORECONF client  tries to delete a leaf listed as a 'key'.</li>
            <li>error-app-tag 'missing-input-parameter' is returned by the CORECONF server when the input parameters of an RPC or action are incomplete.</li>
          </ul>
        </li>
        <li>error-tag 'unknown-element' is returned by the CORECONF server when the CORECONF client  tries to access a data node of a YANG module not supported, of a data node associated with an 'if-feature' expression evaluated to 'false' or to a 'when' condition evaluated to 'false'.</li>
        <li>error-tag 'bad-element' is returned by the CORECONF server when the CORECONF client  tries to create data nodes for more than one case in a choice.</li>
        <li>
          <t>error-tag 'data-missing' is returned by the CORECONF server when a data node required to accept the request is not present.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'instance-required' is returned by the CORECONF server when a leaf of type 'instance-identifier' or 'leafref' marked with require-instance set to 'true' refers to an instance that does not exist.</li>
            <li>error-app-tag 'missing-choice' is returned by the CORECONF server when no nodes exist in a mandatory choice.</li>
          </ul>
        </li>
        <li>error-tag 'error' is returned by the CORECONF server when an unspecified error has occurred.</li>
      </ul>
      <t>For example, the CORECONF server might return the following error.</t>
      <artwork><![CDATA[
RES:  4.00 Bad Request
     (Content-Format: application/yang-data+cbor; id=sid)
{
  1024 : {
    4 : 1011,        / error-tag (SID 1028) /
                     /   = invalid-value (SID 1011) /
    1 : 1018,        / error-app-tag (SID 1025) /
                     /   = not-in-range (SID 1018) /
    2 : 1740,        / error-data-node (SID 1026) /
                     /   = timezone-utc-offset (SID 1740) /
    3 : "maximum value exceeded" / error-message (SID 1027) /
  }
}
]]></artwork>
      <t><cref anchor="simplify2">I don't quite know how to use application/yang-instances+cbor-seq here, if we don't have an instance?</cref></t>
    </section>
    <section anchor="security-considerations">
      <name>Security Considerations</name>
      <t>For secure network management, it is important to restrict access to configuration variables
only to authorized parties. CORECONF re-uses the security mechanisms already available to CoAP,
this includes DTLS <xref target="RFC6347"/><xref target="RFC9147"/> and OSCORE <xref target="RFC8613"/> for protected access to
resources, as well as suitable authentication and authorization mechanisms, for
example those defined in ACE OAuth <xref target="RFC9200"/>.</t>
      <t>All the security considerations of <xref target="RFC7252"/>, <xref target="RFC7959"/>, <xref target="RFC8132"/> and
<xref target="RFC7641"/> apply to this document as well. The use of NoSec (<xref section="9" sectionFormat="of" target="RFC7252"/>), when OSCORE
is not used, is <bcp14>NOT RECOMMENDED</bcp14>.</t>
      <t>In addition, mechanisms for authentication and authorization may need to be
selected if not provided with the CoAP security mode.</t>
      <t>As <xref target="RFC9254"/> and <xref target="RFC4648"/> are used for payload and SID
encoding, the security considerations of those documents also need to be
well-understood.</t>
    </section>
    <section anchor="iana-considerations">
      <name>IANA Considerations</name>
      <section anchor="resource-type-rt-link-target-attribute-values-registry">
        <name>Resource Type (rt=) Link Target Attribute Values Registry</name>
        <t>This document adds the following resource type to the "Resource Type (rt=) Link Target Attribute Values", within the "Constrained RESTful Environments (CoRE) Parameters" registry.</t>
        <table align="left">
          <thead>
            <tr>
              <th align="left">Value</th>
              <th align="left">Description</th>
              <th align="left">Reference</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">core.c.ds</td>
              <td align="left">YANG datastore</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">core.c.dn</td>
              <td align="left">YANG data node</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">core.c.yl</td>
              <td align="left">YANG module library</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">core.c.es</td>
              <td align="left">YANG event stream</td>
              <td align="left">RFC XXXX</td>
            </tr>
          </tbody>
        </table>
        <t>// RFC Ed.: replace RFC XXXX with this RFC number and remove this note.</t>
      </section>
      <section anchor="coap-content-formats-registry">
        <name>CoAP Content-Formats Registry</name>
        <t>This document adds the following Content-Format to the "CoAP Content-Formats", within the "Constrained RESTful Environments (CoRE) Parameters" registry.</t>
        <table align="left">
          <thead>
            <tr>
              <th align="left">Media Type</th>
              <th align="left">Content Coding</th>
              <th align="left">ID</th>
              <th align="left">Reference</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">application/yang-identifiers+cbor-seq</td>
              <td align="left"> </td>
              <td align="left">TBD2</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">application/yang-instances+cbor-seq</td>
              <td align="left"> </td>
              <td align="left">TBD3</td>
              <td align="left">RFC XXXX</td>
            </tr>
          </tbody>
        </table>
        <t>// RFC Ed.: replace TBD1, TBD2 and TBD3 with assigned IDs and remove this note.
// RFC Ed.: replace RFC XXXX with this RFC number and remove this note.</t>
      </section>
      <section anchor="media-types-registry">
        <name>Media Types Registry</name>
        <t>This document adds the following media types to the "Media Types" registry.</t>
        <table align="left">
          <thead>
            <tr>
              <th align="left">Name</th>
              <th align="left">Template</th>
              <th align="left">Reference</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">yang-identifiers+cbor-seq</td>
              <td align="left">application/yang-identifiers+cbor-seq</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">yang-instances+cbor-seq</td>
              <td align="left">application/yang-instances+cbor-seq</td>
              <td align="left">RFC XXXX</td>
            </tr>
          </tbody>
        </table>
        <t>Each of these media types share the following information:</t>
        <ul spacing="normal">
          <li>Subtype name: &lt;as listed in table&gt;</li>
          <li>Required parameters: N/A</li>
          <li>Optional parameters: N/A</li>
          <li>Encoding considerations: binary</li>
          <li>Security considerations: See the Security Considerations section of RFC XXXX</li>
          <li>Interoperability considerations: N/A</li>
          <li>Published specification: RFC XXXX</li>
          <li>Applications that use this media type: CORECONF</li>
          <li>Fragment identifier considerations: N/A</li>
          <li>Additional information:</li>
        </ul>
        <artwork><![CDATA[
*  Deprecated alias names for this type: N/A

*  Magic number(s): N/A

*  File extension(s): N/A

*  Macintosh file type code(s): N/A
]]></artwork>
        <ul spacing="normal">
          <li>Person &amp; email address to contact for further information: iesg&amp;ietf.org</li>
          <li>Intended usage: COMMON</li>
          <li>Restrictions on usage: N/A</li>
          <li>Author: Michel Veillette</li>
          <li>Change Controller: IESG</li>
          <li>Provisional registration?  No</li>
        </ul>
        <t>// RFC Ed.: replace RFC XXXX with this RFC number and remove this note.</t>
      </section>
      <section anchor="yang-namespace-registration">
        <name>YANG Namespace Registration</name>
        <t>This document registers the following XML namespace URN in the "IETF XML
Registry", following the format defined in <xref target="RFC3688"/>:</t>
        <t>URI: please assign urn:ietf:params:xml:ns:yang:ietf-coreconf</t>
        <t>Registrant Contact: The IESG.</t>
        <t>XML: N/A, the requested URI is an XML namespace.</t>
        <t>Reference:    RFC XXXX</t>
        <t>// RFC Ed.: please replace XXXX with RFC number and remove this note</t>
      </section>
    </section>
  </middle>
  <back>
    <references>
      <name>References</name>
      <references>
        <name>Normative References</name>
        <reference anchor="RFC3688">
          <front>
            <title>The IETF XML Registry</title>
            <author fullname="M. Mealling" initials="M." surname="Mealling"/>
            <date month="January" year="2004"/>
            <abstract>
              <t>This document describes an IANA maintained registry for IETF standards which use Extensible Markup Language (XML) related items such as Namespaces, Document Type Declarations (DTDs), Schemas, and Resource Description Framework (RDF) Schemas.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="81"/>
          <seriesInfo name="RFC" value="3688"/>
          <seriesInfo name="DOI" value="10.17487/RFC3688"/>
        </reference>
        <reference anchor="RFC4648">
          <front>
            <title>The Base16, Base32, and Base64 Data Encodings</title>
            <author fullname="S. Josefsson" initials="S." surname="Josefsson"/>
            <date month="October" year="2006"/>
            <abstract>
              <t>This document describes the commonly used base 64, base 32, and base 16 encoding schemes. It also discusses the use of line-feeds in encoded data, use of padding in encoded data, use of non-alphabet characters in encoded data, use of different encoding alphabets, and canonical encodings. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="4648"/>
          <seriesInfo name="DOI" value="10.17487/RFC4648"/>
        </reference>
        <reference anchor="RFC5277">
          <front>
            <title>NETCONF Event Notifications</title>
            <author fullname="S. Chisholm" initials="S." surname="Chisholm"/>
            <author fullname="H. Trevino" initials="H." surname="Trevino"/>
            <date month="July" year="2008"/>
            <abstract>
              <t>This document defines mechanisms that provide an asynchronous message notification delivery service for the Network Configuration protocol (NETCONF). This is an optional capability built on top of the base NETCONF definition. This document defines the capabilities and operations necessary to support this service. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="5277"/>
          <seriesInfo name="DOI" value="10.17487/RFC5277"/>
        </reference>
        <reference anchor="RFC6241">
          <front>
            <title>Network Configuration Protocol (NETCONF)</title>
            <author fullname="R. Enns" initials="R." role="editor" surname="Enns"/>
            <author fullname="M. Bjorklund" initials="M." role="editor" surname="Bjorklund"/>
            <author fullname="J. Schoenwaelder" initials="J." role="editor" surname="Schoenwaelder"/>
            <author fullname="A. Bierman" initials="A." role="editor" surname="Bierman"/>
            <date month="June" year="2011"/>
            <abstract>
              <t>The Network Configuration Protocol (NETCONF) defined in this document provides mechanisms to install, manipulate, and delete the configuration of network devices. It uses an Extensible Markup Language (XML)-based data encoding for the configuration data as well as the protocol messages. The NETCONF protocol operations are realized as remote procedure calls (RPCs). This document obsoletes RFC 4741. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6241"/>
          <seriesInfo name="DOI" value="10.17487/RFC6241"/>
        </reference>
        <reference anchor="RFC6243">
          <front>
            <title>With-defaults Capability for NETCONF</title>
            <author fullname="A. Bierman" initials="A." surname="Bierman"/>
            <author fullname="B. Lengyel" initials="B." surname="Lengyel"/>
            <date month="June" year="2011"/>
            <abstract>
              <t>The Network Configuration Protocol (NETCONF) defines ways to read and edit configuration data from a NETCONF server. In some cases, part of this data may not be set by the NETCONF client, but rather a default value known to the server is used instead. In many situations the NETCONF client has a priori knowledge about default data, so the NETCONF server does not need to save it in a NETCONF configuration datastore or send it to the client in a retrieval operation reply. In other situations the NETCONF client will need this data from the server. Not all server implementations treat this default data the same way. This document defines a capability-based extension to the NETCONF protocol that allows the NETCONF client to identify how defaults are processed by the server, and also defines new mechanisms for client control of server processing of default data. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6243"/>
          <seriesInfo name="DOI" value="10.17487/RFC6243"/>
        </reference>
        <reference anchor="RFC8949">
          <front>
            <title>Concise Binary Object Representation (CBOR)</title>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="P. Hoffman" initials="P." surname="Hoffman"/>
            <date month="December" year="2020"/>
            <abstract>
              <t>The Concise Binary Object Representation (CBOR) is a data format whose design goals include the possibility of extremely small code size, fairly small message size, and extensibility without the need for version negotiation. These design goals make it different from earlier binary serializations such as ASN.1 and MessagePack.</t>
              <t>This document obsoletes RFC 7049, providing editorial improvements, new details, and errata fixes while keeping full compatibility with the interchange format of RFC 7049. It does not create a new version of the format.</t>
            </abstract>
          </front>
          <seriesInfo name="STD" value="94"/>
          <seriesInfo name="RFC" value="8949"/>
          <seriesInfo name="DOI" value="10.17487/RFC8949"/>
        </reference>
        <reference anchor="RFC8610">
          <front>
            <title>Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures</title>
            <author fullname="H. Birkholz" initials="H." surname="Birkholz"/>
            <author fullname="C. Vigano" initials="C." surname="Vigano"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <date month="June" year="2019"/>
            <abstract>
              <t>This document proposes a notational convention to express Concise Binary Object Representation (CBOR) data structures (RFC 7049). Its main goal is to provide an easy and unambiguous way to express structures for protocol messages and data formats that use CBOR or JSON.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8610"/>
          <seriesInfo name="DOI" value="10.17487/RFC8610"/>
        </reference>
        <reference anchor="RFC8742">
          <front>
            <title>Concise Binary Object Representation (CBOR) Sequences</title>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <date month="February" year="2020"/>
            <abstract>
              <t>This document describes the Concise Binary Object Representation (CBOR) Sequence format and associated media type "application/cbor-seq". A CBOR Sequence consists of any number of encoded CBOR data items, simply concatenated in sequence.</t>
              <t>Structured syntax suffixes for media types allow other media types to build on them and make it explicit that they are built on an existing media type as their foundation. This specification defines and registers "+cbor-seq" as a structured syntax suffix for CBOR Sequences.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8742"/>
          <seriesInfo name="DOI" value="10.17487/RFC8742"/>
        </reference>
        <reference anchor="RFC7252">
          <front>
            <title>The Constrained Application Protocol (CoAP)</title>
            <author fullname="Z. Shelby" initials="Z." surname="Shelby"/>
            <author fullname="K. Hartke" initials="K." surname="Hartke"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <date month="June" year="2014"/>
            <abstract>
              <t>The Constrained Application Protocol (CoAP) is a specialized web transfer protocol for use with constrained nodes and constrained (e.g., low-power, lossy) networks. The nodes often have 8-bit microcontrollers with small amounts of ROM and RAM, while constrained networks such as IPv6 over Low-Power Wireless Personal Area Networks (6LoWPANs) often have high packet error rates and a typical throughput of 10s of kbit/s. The protocol is designed for machine- to-machine (M2M) applications such as smart energy and building automation.</t>
              <t>CoAP provides a request/response interaction model between application endpoints, supports built-in discovery of services and resources, and includes key concepts of the Web such as URIs and Internet media types. CoAP is designed to easily interface with HTTP for integration with the Web while meeting specialized requirements such as multicast support, very low overhead, and simplicity for constrained environments.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7252"/>
          <seriesInfo name="DOI" value="10.17487/RFC7252"/>
        </reference>
        <reference anchor="RFC7950">
          <front>
            <title>The YANG 1.1 Data Modeling Language</title>
            <author fullname="M. Bjorklund" initials="M." role="editor" surname="Bjorklund"/>
            <date month="August" year="2016"/>
            <abstract>
              <t>YANG is a data modeling language used to model configuration data, state data, Remote Procedure Calls, and notifications for network management protocols. This document describes the syntax and semantics of version 1.1 of the YANG language. YANG version 1.1 is a maintenance release of the YANG language, addressing ambiguities and defects in the original specification. There are a small number of backward incompatibilities from YANG version 1. This document also specifies the YANG mappings to the Network Configuration Protocol (NETCONF).</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7950"/>
          <seriesInfo name="DOI" value="10.17487/RFC7950"/>
        </reference>
        <reference anchor="RFC7959">
          <front>
            <title>Block-Wise Transfers in the Constrained Application Protocol (CoAP)</title>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="Z. Shelby" initials="Z." role="editor" surname="Shelby"/>
            <date month="August" year="2016"/>
            <abstract>
              <t>The Constrained Application Protocol (CoAP) is a RESTful transfer protocol for constrained nodes and networks. Basic CoAP messages work well for small payloads from sensors and actuators; however, applications will need to transfer larger payloads occasionally -- for instance, for firmware updates. In contrast to HTTP, where TCP does the grunt work of segmenting and resequencing, CoAP is based on datagram transports such as UDP or Datagram Transport Layer Security (DTLS). These transports only offer fragmentation, which is even more problematic in constrained nodes and networks, limiting the maximum size of resource representations that can practically be transferred.</t>
              <t>Instead of relying on IP fragmentation, this specification extends basic CoAP with a pair of "Block" options for transferring multiple blocks of information from a resource representation in multiple request-response pairs. In many important cases, the Block options enable a server to be truly stateless: the server can handle each block transfer separately, with no need for a connection setup or other server-side memory of previous block transfers. Essentially, the Block options provide a minimal way to transfer larger representations in a block-wise fashion.</t>
              <t>A CoAP implementation that does not support these options generally is limited in the size of the representations that can be exchanged, so there is an expectation that the Block options will be widely used in CoAP implementations. Therefore, this specification updates RFC 7252.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7959"/>
          <seriesInfo name="DOI" value="10.17487/RFC7959"/>
        </reference>
        <reference anchor="RFC7641">
          <front>
            <title>Observing Resources in the Constrained Application Protocol (CoAP)</title>
            <author fullname="K. Hartke" initials="K." surname="Hartke"/>
            <date month="September" year="2015"/>
            <abstract>
              <t>The Constrained Application Protocol (CoAP) is a RESTful application protocol for constrained nodes and networks. The state of a resource on a CoAP server can change over time. This document specifies a simple protocol extension for CoAP that enables CoAP clients to "observe" resources, i.e., to retrieve a representation of a resource and keep this representation updated by the server over a period of time. The protocol follows a best-effort approach for sending new representations to clients and provides eventual consistency between the state observed by each client and the actual resource state at the server.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7641"/>
          <seriesInfo name="DOI" value="10.17487/RFC7641"/>
        </reference>
        <reference anchor="RFC8132">
          <front>
            <title>PATCH and FETCH Methods for the Constrained Application Protocol (CoAP)</title>
            <author fullname="P. van der Stok" initials="P." surname="van der Stok"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="A. Sehgal" initials="A." surname="Sehgal"/>
            <date month="April" year="2017"/>
            <abstract>
              <t>The methods defined in RFC 7252 for the Constrained Application Protocol (CoAP) only allow access to a complete resource, not to parts of a resource. In case of resources with larger or complex data, or in situations where resource continuity is required, replacing or requesting the whole resource is undesirable. Several applications using CoAP need to access parts of the resources.</t>
              <t>This specification defines the new CoAP methods, FETCH, PATCH, and iPATCH, which are used to access and update parts of a resource.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8132"/>
          <seriesInfo name="DOI" value="10.17487/RFC8132"/>
        </reference>
        <reference anchor="RFC8040">
          <front>
            <title>RESTCONF Protocol</title>
            <author fullname="A. Bierman" initials="A." surname="Bierman"/>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <author fullname="K. Watsen" initials="K." surname="Watsen"/>
            <date month="January" year="2017"/>
            <abstract>
              <t>This document describes an HTTP-based protocol that provides a programmatic interface for accessing data defined in YANG, using the datastore concepts defined in the Network Configuration Protocol (NETCONF).</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8040"/>
          <seriesInfo name="DOI" value="10.17487/RFC8040"/>
        </reference>
        <reference anchor="RFC9254">
          <front>
            <title>Encoding of Data Modeled with YANG in the Concise Binary Object Representation (CBOR)</title>
            <author fullname="M. Veillette" initials="M." role="editor" surname="Veillette"/>
            <author fullname="I. Petrov" initials="I." role="editor" surname="Petrov"/>
            <author fullname="A. Pelov" initials="A." surname="Pelov"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="M. Richardson" initials="M." surname="Richardson"/>
            <date month="July" year="2022"/>
            <abstract>
              <t>YANG (RFC 7950) is a data modeling language used to model configuration data, state data, parameters and results of Remote Procedure Call (RPC) operations or actions, and notifications.</t>
              <t>This document defines encoding rules for YANG in the Concise Binary Object Representation (CBOR) (RFC 8949).</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="9254"/>
          <seriesInfo name="DOI" value="10.17487/RFC9254"/>
        </reference>
        <reference anchor="I-D.ietf-core-sid">
          <front>
            <title>YANG Schema Item iDentifier (YANG SID)</title>
            <author fullname="Michel Veillette" initials="M." surname="Veillette">
              <organization>Trilliant Networks Inc.</organization>
            </author>
            <author fullname="Alexander Pelov" initials="A." surname="Pelov">
              <organization>Acklio</organization>
            </author>
            <author fullname="Ivaylo Petrov" initials="I." surname="Petrov">
              <organization>Google Switzerland GmbH</organization>
            </author>
            <author fullname="Carsten Bormann" initials="C." surname="Bormann">
              <organization>Universität Bremen TZI</organization>
            </author>
            <author fullname="Michael Richardson" initials="M." surname="Richardson">
              <organization>Sandelman Software Works</organization>
            </author>
            <date day="1" month="March" year="2023"/>
            <abstract>
              <t>   YANG Schema Item iDentifiers (YANG SID) are globally unique 63-bit
   unsigned integers used to identify YANG items, as a more compact
   method to identify YANG items that can be used for efficiency and in
   constrained environments (RFC 7228).  This document defines the
   semantics, the registration, and assignment processes of YANG SIDs
   for IETF managed YANG modules.  To enable the implementation of these
   processes, this document also defines a file format used to persist
   and publish assigned YANG SIDs.


   // The present version (-20) is intended to address all IESG
   // feedback.  It has significantly progressed from -16, which was the
   // original submission to the IESG.

              </t>
            </abstract>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-ietf-core-sid-20"/>
        </reference>
        <reference anchor="I-D.ietf-core-yang-library">
          <front>
            <title>Constrained YANG Module Library</title>
            <author fullname="Michel Veillette" initials="M." surname="Veillette">
              <organization>Trilliant Networks Inc.</organization>
            </author>
            <author fullname="Ivaylo Petrov" initials="I." surname="Petrov">
              <organization>Acklio</organization>
            </author>
            <date day="11" month="January" year="2021"/>
            <abstract>
              <t>   This document describes a constrained version of the YANG library
   that provides information about the YANG modules, datastores, and
   datastore schemas used by a constrained network management server
   (e.g., a CORECONF server).

              </t>
            </abstract>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-ietf-core-yang-library-03"/>
        </reference>
        <reference anchor="RFC2119">
          <front>
            <title>Key words for use in RFCs to Indicate Requirement Levels</title>
            <author fullname="S. Bradner" initials="S." surname="Bradner"/>
            <date month="March" year="1997"/>
            <abstract>
              <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="2119"/>
          <seriesInfo name="DOI" value="10.17487/RFC2119"/>
        </reference>
        <reference anchor="RFC8174">
          <front>
            <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
            <author fullname="B. Leiba" initials="B." surname="Leiba"/>
            <date month="May" year="2017"/>
            <abstract>
              <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="8174"/>
          <seriesInfo name="DOI" value="10.17487/RFC8174"/>
        </reference>
      </references>
      <references>
        <name>Informative References</name>
        <reference anchor="RFC6347">
          <front>
            <title>Datagram Transport Layer Security Version 1.2</title>
            <author fullname="E. Rescorla" initials="E." surname="Rescorla"/>
            <author fullname="N. Modadugu" initials="N." surname="Modadugu"/>
            <date month="January" year="2012"/>
            <abstract>
              <t>This document specifies version 1.2 of the Datagram Transport Layer Security (DTLS) protocol. The DTLS protocol provides communications privacy for datagram protocols. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery. The DTLS protocol is based on the Transport Layer Security (TLS) protocol and provides equivalent security guarantees. Datagram semantics of the underlying transport are preserved by the DTLS protocol. This document updates DTLS 1.0 to work with TLS version 1.2. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6347"/>
          <seriesInfo name="DOI" value="10.17487/RFC6347"/>
        </reference>
        <reference anchor="RFC6690">
          <front>
            <title>Constrained RESTful Environments (CoRE) Link Format</title>
            <author fullname="Z. Shelby" initials="Z." surname="Shelby"/>
            <date month="August" year="2012"/>
            <abstract>
              <t>This specification defines Web Linking using a link format for use by constrained web servers to describe hosted resources, their attributes, and other relationships between links. Based on the HTTP Link Header field defined in RFC 5988, the Constrained RESTful Environments (CoRE) Link Format is carried as a payload and is assigned an Internet media type. "RESTful" refers to the Representational State Transfer (REST) architecture. A well-known URI is defined as a default entry point for requesting the links hosted by a server. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6690"/>
          <seriesInfo name="DOI" value="10.17487/RFC6690"/>
        </reference>
        <reference anchor="RFC8343">
          <front>
            <title>A YANG Data Model for Interface Management</title>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <date month="March" year="2018"/>
            <abstract>
              <t>This document defines a YANG data model for the management of network interfaces. It is expected that interface-type-specific data models augment the generic interfaces data model defined in this document. The data model includes definitions for configuration and system state (status information and counters for the collection of statistics).</t>
              <t>The YANG data model in this document conforms to the Network Management Datastore Architecture (NMDA) defined in RFC 8342.</t>
              <t>This document obsoletes RFC 7223.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8343"/>
          <seriesInfo name="DOI" value="10.17487/RFC8343"/>
        </reference>
        <reference anchor="RFC7317">
          <front>
            <title>A YANG Data Model for System Management</title>
            <author fullname="A. Bierman" initials="A." surname="Bierman"/>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <date month="August" year="2014"/>
            <abstract>
              <t>This document defines a YANG data model for the configuration and identification of some common system properties within a device containing a Network Configuration Protocol (NETCONF) server. This document also includes data node definitions for system identification, time-of-day management, user management, DNS resolver configuration, and some protocol operations for system management.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7317"/>
          <seriesInfo name="DOI" value="10.17487/RFC7317"/>
        </reference>
        <reference anchor="RFC8342">
          <front>
            <title>Network Management Datastore Architecture (NMDA)</title>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <author fullname="J. Schoenwaelder" initials="J." surname="Schoenwaelder"/>
            <author fullname="P. Shafer" initials="P." surname="Shafer"/>
            <author fullname="K. Watsen" initials="K." surname="Watsen"/>
            <author fullname="R. Wilton" initials="R." surname="Wilton"/>
            <date month="March" year="2018"/>
            <abstract>
              <t>Datastores are a fundamental concept binding the data models written in the YANG data modeling language to network management protocols such as the Network Configuration Protocol (NETCONF) and RESTCONF. This document defines an architectural framework for datastores based on the experience gained with the initial simpler model, addressing requirements that were not well supported in the initial model. This document updates RFC 7950.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8342"/>
          <seriesInfo name="DOI" value="10.17487/RFC8342"/>
        </reference>
        <reference anchor="RFC8613">
          <front>
            <title>Object Security for Constrained RESTful Environments (OSCORE)</title>
            <author fullname="G. Selander" initials="G." surname="Selander"/>
            <author fullname="J. Mattsson" initials="J." surname="Mattsson"/>
            <author fullname="F. Palombini" initials="F." surname="Palombini"/>
            <author fullname="L. Seitz" initials="L." surname="Seitz"/>
            <date month="July" year="2019"/>
            <abstract>
              <t>This document defines Object Security for Constrained RESTful Environments (OSCORE), a method for application-layer protection of the Constrained Application Protocol (CoAP), using CBOR Object Signing and Encryption (COSE). OSCORE provides end-to-end protection between endpoints communicating using CoAP or CoAP-mappable HTTP. OSCORE is designed for constrained nodes and networks supporting a range of proxy operations, including translation between different transport protocols.</t>
              <t>Although an optional functionality of CoAP, OSCORE alters CoAP options processing and IANA registration. Therefore, this document updates RFC 7252.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8613"/>
          <seriesInfo name="DOI" value="10.17487/RFC8613"/>
        </reference>
        <reference anchor="RFC9147">
          <front>
            <title>The Datagram Transport Layer Security (DTLS) Protocol Version 1.3</title>
            <author fullname="E. Rescorla" initials="E." surname="Rescorla"/>
            <author fullname="H. Tschofenig" initials="H." surname="Tschofenig"/>
            <author fullname="N. Modadugu" initials="N." surname="Modadugu"/>
            <date month="April" year="2022"/>
            <abstract>
              <t>This document specifies version 1.3 of the Datagram Transport Layer Security (DTLS) protocol. DTLS 1.3 allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery.</t>
              <t>The DTLS 1.3 protocol is based on the Transport Layer Security (TLS) 1.3 protocol and provides equivalent security guarantees with the exception of order protection / non-replayability. Datagram semantics of the underlying transport are preserved by the DTLS protocol.</t>
              <t>This document obsoletes RFC 6347.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="9147"/>
          <seriesInfo name="DOI" value="10.17487/RFC9147"/>
        </reference>
        <reference anchor="RFC9200">
          <front>
            <title>Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)</title>
            <author fullname="L. Seitz" initials="L." surname="Seitz"/>
            <author fullname="G. Selander" initials="G." surname="Selander"/>
            <author fullname="E. Wahlstroem" initials="E." surname="Wahlstroem"/>
            <author fullname="S. Erdtman" initials="S." surname="Erdtman"/>
            <author fullname="H. Tschofenig" initials="H." surname="Tschofenig"/>
            <date month="August" year="2022"/>
            <abstract>
              <t>This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments called ACE-OAuth. The framework is based on a set of building blocks including OAuth 2.0 and the Constrained Application Protocol (CoAP), thus transforming a well-known and widely used authorization solution into a form suitable for IoT devices. Existing specifications are used where possible, but extensions are added and profiles are defined to better serve the IoT use cases.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="9200"/>
          <seriesInfo name="DOI" value="10.17487/RFC9200"/>
        </reference>
      </references>
    </references>
    <?line 1339?>

<section anchor="ietf-coreconf-yang">
      <name>ietf-coreconf YANG module</name>
      <sourcecode markers="true" name="ietf-coreconf@2023-07-10.yang"><![CDATA[
module ietf-coreconf {
  yang-version 1.1;

  namespace "urn:ietf:params:xml:ns:yang:ietf-coreconf";
  prefix coreconf;

  import ietf-datastores {
    prefix ds;
  }

  import ietf-restconf {
    prefix rc;
    description
      "This import statement is required to access
       the yang-data extension defined in RFC 8040.";
    reference "RFC 8040: RESTCONF Protocol";
  }

  organization
    "IETF Core Working Group";

  contact
    "Michel Veillette
     <mailto:michel.veillette@trilliantinc.com>

     Alexander Pelov
     <mailto:alexander@ackl.io>

     Peter van der Stok
     <mailto:consultancy@vanderstok.org>

     Andy Bierman
     <mailto:andy@yumaworks.com>";

  description
    "This module contains the different definitions required
     by the CORECONF protocol.

     Copyright (c) 2019 IETF Trust and the persons identified as
     authors of the code.  All rights reserved.

     Redistribution and use in source and binary forms, with or
     without modification, is permitted pursuant to, and subject to
     the license terms contained in, the Simplified BSD License set
     forth in Section 4.c of the IETF Trust's Legal Provisions
     Relating to IETF Documents
     (https://trustee.ietf.org/license-info).

     This version of this YANG module is part of RFC XXXX;
     see the RFC itself for full legal notices.";

  revision 2023-07-10 {
     description
      "Initial revision.";
    reference
      "[I-D.ietf-core-comi] CoAP Management Interface";
  }

  identity unified {
    base ds:datastore;
    description
      "Identifier of the unified configuration and operational
       state datastore.";
  }

  identity error-tag {
    description
      "Base identity for error-tag.";
  }

  identity operation-failed {
    base error-tag;
    description
      "Returned by the CORECONF server when the operation request
       can't be processed successfully.";
  }

  identity invalid-value {
    base error-tag;
    description
      "Returned by the CORECONF server when the CORECONF client tries
       to update or create a leaf with a value encoded using an
       invalid CBOR datatype or if the 'range', 'length',
       'pattern' or 'require-instance' constrain is not
       fulfilled.";
  }

  identity missing-element {
    base error-tag;
    description
      "Returned by the CORECONF server when the operation requested
       by a CORECONF client fails to comply with the 'mandatory'
       constraint defined. The 'mandatory' constraint is
       enforced for leafs and choices, unless the node or any of
       its ancestors have a 'when' condition or 'if-feature'
       expression that evaluates to 'false'.";
  }

  identity unknown-element {
    base error-tag;
    description
      "Returned by the CORECONF server when the CORECONF client tries
       to access a data node of a YANG module not supported, of a
       data node associated with an 'if-feature' expression
       evaluated to 'false' or to a 'when' condition evaluated
       to 'false'.";
  }

  identity bad-element {
    base error-tag;
    description
      "Returned by the CORECONF server when the CORECONF client tries
       to create data nodes for more than one case in a choice.";
  }

  identity data-missing {
    base error-tag;
    description
      "Returned by the CORECONF server when a data node required to
       accept the request is not present.";
  }

  identity error {
    base error-tag;
    description
      "Returned by the CORECONF server when an unspecified error has
      occurred.";
  }

  identity error-app-tag {
    description
      "Base identity for error-app-tag.";
  }

  identity malformed-message {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the payload received
       from the CORECONF client don't contain a well-formed CBOR
       content as defined in [RFC8949] or don't
       comply with the CBOR structure defined within this
       document.";
  }

  identity data-not-unique {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'unique' constraint of a list or leaf-list fails.";
  }

  identity too-many-elements {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'max-elements' constraint of a list or leaf-list fails.";
  }

  identity too-few-elements {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'min-elements' constraint of a list or leaf-list fails.";
  }

  identity must-violation {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the restrictions
       imposed by a 'must' statement are violated.";
  }

  identity duplicate {
    base error-app-tag;
    description
      "Returned by the CORECONF server when a client tries to create
       a duplicate list or leaf-list entry.";
  }

  identity invalid-datatype {
    base error-app-tag;
    description
      "Returned by the CORECONF server when CBOR encoding is
       incorect or when the value encoded is incompatible with
       the YANG Built-In type. (e.g., value greater than 127
       for an int8, undefined enumeration).";
  }

  identity not-in-range {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'range' property fails.";
  }

  identity invalid-length {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'length' property fails.";
  }

  identity pattern-test-failed {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'pattern' property fails.";
  }

  identity missing-key {
    base error-app-tag;
    description
      "Returned by the CORECONF server to further qualify a
       missing-element error. This error is returned when the
       CORECONF client tries to create or list instance, without all
       the 'key' specified or when the CORECONF client tries to
       delete a leaf listed as a 'key'.";
  }

  identity missing-input-parameter {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the input parameters
       of a RPC or action are incomplete.";
  }

  identity instance-required {
    base error-app-tag;
    description
      "Returned by the CORECONF server when a leaf of type
       'instance-identifier' or 'leafref' marked with
       require-instance set to 'true' refers to an instance
       that does not exist.";
  }

  identity missing-choice {
    base error-app-tag;
    description
      "Returned by the CORECONF server when no nodes exist in a
       mandatory choice.";
  }

  rc:yang-data coreconf-error {
    container error {
      description
        "Optional payload of a 4.00 Bad Request CoAP error.";

      leaf error-tag {
        type identityref {
          base error-tag;
        }
        mandatory true;
        description
          "The enumerated error-tag.";
      }

      leaf error-app-tag {
        type identityref {
          base error-app-tag;
        }
        description
          "The application-specific error-tag.";
      }

      leaf error-data-node {
        type instance-identifier;
        description
          "When the error reported is caused by a specific data node,
           this leaf identifies the data node in error.";
      }

      leaf error-message {
        type string;
        description
          "A message describing the error.";
      }
    }
  }
}
]]></sourcecode>
    </section>
    <section anchor="ietf-coreconf-sid">
      <name>ietf-coreconf .sid file</name>
      <artwork><![CDATA[
{
  "assignment-ranges": [
    {
      "entry-point": 1000,
      "size": 100
    }
  ],
  "module-name": "ietf-coreconf",
  "module-revision": "2023-07-10",
  "items": [
    {
      "namespace": "module",
      "identifier": "ietf-coreconf",
      "sid": 1000
    },
    {
      "namespace": "identity",
      "identifier": "bad-element",
      "sid": 1001
    },
    {
      "namespace": "identity",
      "identifier": "data-missing",
      "sid": 1002
    },
    {
      "namespace": "identity",
      "identifier": "data-not-unique",
      "sid": 1003
    },
    {
      "namespace": "identity",
      "identifier": "duplicate",
      "sid": 1004
    },
    {
      "namespace": "identity",
      "identifier": "error",
      "sid": 1005
    },
    {
      "namespace": "identity",
      "identifier": "error-app-tag",
      "sid": 1006
    },
    {
      "namespace": "identity",
      "identifier": "error-tag",
      "sid": 1007
    },
    {
      "namespace": "identity",
      "identifier": "instance-required",
      "sid": 1008
    },
    {
      "namespace": "identity",
      "identifier": "invalid-datatype",
      "sid": 1009
    },
    {
      "namespace": "identity",
      "identifier": "invalid-length",
      "sid": 1010
    },
    {
      "namespace": "identity",
      "identifier": "invalid-value",
      "sid": 1011
    },
    {
      "namespace": "identity",
      "identifier": "malformed-message",
      "sid": 1012
    },
    {
      "namespace": "identity",
      "identifier": "missing-choice",
      "sid": 1013
    },
    {
      "namespace": "identity",
      "identifier": "missing-element",
      "sid": 1014
    },
    {
      "namespace": "identity",
      "identifier": "missing-input-parameter",
      "sid": 1015
    },
    {
      "namespace": "identity",
      "identifier": "missing-key",
      "sid": 1016
    },
    {
      "namespace": "identity",
      "identifier": "must-violation",
      "sid": 1017
    },
    {
      "namespace": "identity",
      "identifier": "not-in-range",
      "sid": 1018
    },
    {
      "namespace": "identity",
      "identifier": "operation-failed",
      "sid": 1019
    },
    {
      "namespace": "identity",
      "identifier": "pattern-test-failed",
      "sid": 1020
    },
    {
      "namespace": "identity",
      "identifier": "too-few-elements",
      "sid": 1021
    },
    {
      "namespace": "identity",
      "identifier": "too-many-elements",
      "sid": 1022
    },
    {
      "namespace": "identity",
      "identifier": "unified",
      "sid": 1029
    },
    {
      "namespace": "identity",
      "identifier": "unknown-element",
      "sid": 1023
    },
    {
      "namespace": "data",
      "identifier": "/ietf-coreconf:error",
      "sid": 1024
    },
    {
      "namespace": "data",
      "identifier": "/ietf-coreconf:error/error-app-tag",
      "sid": 1025
    },
    {
      "namespace": "data",
      "identifier": "/ietf-coreconf:error/error-data-node",
      "sid": 1026
    },
    {
      "namespace": "data",
      "identifier": "/ietf-coreconf:error/error-message",
      "sid": 1027
    },
    {
      "namespace": "data",
      "identifier": "/ietf-coreconf:error/error-tag",
      "sid": 1028
    }
  ]
}
]]></artwork>
    </section>
    <section numbered="false" anchor="acknowledgments">
      <name>Acknowledgments</name>
      <t>We are very grateful to <contact fullname="Bert Greevenbosch"/> who was one of the original authors
of the CORECONF specification.</t>
      <t><contact fullname="Mehmet Ersue"/> and <contact fullname="Bert Wijnen"/> explained the encoding aspects of PDUs transported
under SNMP.
<contact fullname="Koen Zandberg"/>'s implementation input motivated massively simplifying
(and fixing) the URI construction for GET/PUT/POST requests.</t>
      <t>The draft has further benefited from comments (alphabetical order) by
<contact fullname="Rodney Cummings"/>,
<contact fullname="Dee Denteneer"/>,
<contact fullname="Esko Dijk"/>,
<contact fullname="Klaus Hartke"/>,
<contact fullname="Michael van Hartskamp"/>,
<contact fullname="Tanguy Ropitault"/>,
<contact fullname="Jürgen Schönwälder"/>,
<contact fullname="Anuj Sehgal"/>,
<contact fullname="Zach Shelby"/>,
<contact fullname="Hannes Tschofenig"/>,
<contact fullname="Michael Verschoor"/>,
and
<contact fullname="Thomas Watteyne"/>.</t>
    </section>
    <section anchor="contributors" numbered="false" toc="include" removeInRFC="false">
      <name>Contributors</name>
      <contact initials="I. I." surname="Petrov" fullname="Ivaylo Petrov">
        <organization>Acklio</organization>
        <address>
          <postal>
            <street>1137A avenue des Champs Blancs</street>
            <city>Cesson-Sevigne</city>
            <code>35510</code>
            <country>France</country>
          </postal>
          <email>ivaylo@ackl.io</email>
        </address>
      </contact>
    </section>
  </back>
  <!-- ##markdown-source:
H4sIAAAAAAAAA819W3vbRpbgO35FDf19I6lDUiJ1sczETmRJTtTt20hy0t3Z
zBeQhCS0QYANgJLZiua37MP8hn3ap+0/tudWNwCUKFnujHY2bQKoqlOnTp17
nep0OsHlQG0GwTgbpeEkGqhxHp6VnTgqzzqjLI/gP5O4k4RlVJTBKCwHqijH
wShLiygtZsVAzaMiKMo8CicDdXR4+ioo4zKBfvazvffqTZiG59EkSkt1lJZR
fhaOIrW6/+74cP/d21drQTgc5hEAoJ8EIXQ0UHvTaRLDYDEME1ydY2fHh8Fl
lM6iQaDUJIyTgULovkM4u1l+Dk/P4/JiNuTnnavzdQQcHjPoA9W6KMtpMVhf
l/dd/r4bZ/TletO8uxflJGkFQTgrL7J8EHRUnMKU33TVj/B/UZwkUVlGMEie
4ZSjcVxmOfxkTL6JRxdR4n0HkA7UaQ4P4hBw8jYqr7L8YwHIGXXhNeIxAlh3
ehvqeBap8Uy9nn2KJsNsRlMcxeV8oL7Pw3Q4x1Gjc8DQQP3HLBpGI3yfjWHc
P/b/qPo/9un3LC1zaLIP6zAO4UnEuJsQaN1LDdp3pYapC/PW83zfVZdhqsZR
rk7K7OOieb6PYGXVb9Vvaa5IKLOkhI7hiV5t7+H0Ikuhk9ZXm73O1rP+1tOt
naebahVQcxHlSZiOi7W2+mpzs/NsZ2ejt93f2lWrrwADo2itZSdUwJjY7XfD
4QU+6aYJvJzl8UBdXV11ATSADD8iYpH57XVxiu+jJLs0k9lLok/0sXlO89gb
fUzizFmi/jAuVI5rFAGJqf2LsAzj8zTKwzgyK7UfFUWWdk6iS3wVPLFL9jKP
yhCf6UVb2dze7m2suIvGs7RzDL8LAQogWAf+l3GUT8LUgp+O585Dgv0vs0n4
E5KZBR/+1VE7u9uwsUYXMAysWZeerZzM4jJST3o7DAtN4ySexOrHEEjFpbr9
PQv8s82NnW0P+A8new7kANV3cwCDqF1IjAHeD2FZolS9zBDktE5jNIUPaXwJ
6xeX//zvEnEHHEWd/vXIWY/3WVECd7lQm5sbW1sbBnb+2EB60Onvbm4/cyH9
npA1t6T41dazzla/1+n3djs7m8/6PTuRUTjMviv/ERMVIReEfTOclQ5vOOri
/8GWyB2iOroM50lmnzaTVK+3+XRPhcTmgKwKJKrJtFAvYReMiiZKuQ+RLSCq
mEAzlBWkuA4lYBtp5PjV/ubO7u5AfZok0Ck/2drZgifDsIj493b/6dOBSked
NCvjM36209/qwbOoBBTZR5v02dWYH+w+23oGGB3SKuNv4HrwezxO5PfTrT5s
7Ojv/PNpf7uPrCOcyu9n2/D5PEzPzW/obphko49XsYbt6Q7CkQ2LKL+UR7u9
TegHILuQ3xtb0E8OMsLC+qy/vcV9dwS+o85B18qGIh4Pag/p8yQe5iHgOYjT
swomdza3AE/jMil6fXmy82xDXu5uAnYE5s3eU/sUYE0nxLoZRYDDrMDxBNKe
6XRTw74B8wE528lQbAVBp9MBzgtEFo7KIDi9AL4Fwn5GQhmobAQUDLQW4mrh
9gTpamR2bGQ2TIbYNvQSp9EYGl7GI5D8sLN1w6IN2wN4xHgp0d9VpxcRfGm7
dIR+8D7PymyUJdAA+lpTAPOsgG/KDGYG48IUgN8CP88jZC70S6WwPXAhQVjC
J6qYRqP4LI7GsBbqL3tvv2/DvlMnb44u+zgV4Ccl94jvukYFwYEKBcKHnuP7
/ZfvjgEr02mcntNo0roI6It4DHPEgXLcyfBNgY1SQHAej5y3BSFxitstHKsi
/gcCO56NcMLdwAwffQJ2OGYIiqhU2RkDghtuHEwFMYDst4en1AAhOj48oR9t
dQVaDbUdhdNwGCfAIhAcXtQ7l7DL5DKJYRdGAfASWLo8EyDV9ZPY+XmDxLRw
CVV1Ca+vZRPf3OByAuUhuxojUoI3wLihAwRU/3P1Tf/NmgodRVAVM2DvIfzv
JMxLFYGsPZ+35ReywjahYjiLkzGuFHHnLAHU1icNE+a1H0aCmjEQO7RXsGcy
3LYjdRYWFzgR+OoCOgZ8IFqTMAc8/n0GyktcxtATrI/utAQlQIEGC2sItFdS
n8HZrJzBIxAOJewOnkpXvQEahlELAKC8iqK0CTCeapLgtJCf5NHfZ7id4Pk0
K4p4mES8i+LJNKGdxpsHxCv8/oQrjwjJgfPHE3dnNI7hdKq5BGrEDosoabXv
3trq6gLUS95H9P0EdLlsXAR298J6ABEBXmTrjqMzWh7ZqUIswOFvbnCKBpi4
kNnRbHMibfoWuTgQFo/scjXcGcCVP0aWmQXCppxNYwH+4fTUAKwWAhxUAO7y
XoAekB5gpdNxmI9hi8v8JsCaEoclEbH534GQP58BWttE5wGsB/Ms2PGTDEwY
hj+bgoYp27pKOrjY3oY5g6bBOD47i3JcKyD0GcwfZ5HjTjcsx+UgRL84FOjA
RCQkEzS4ZZQgNkZJDB12SKrmeqN0EQVzwgF8CzswAZoDtWPcAa44xa546Urn
PWp5uFdhe6ZFSGwFVwPgDTR7Q2It1ATshXiqe1TYI07hNNP4ETKeyL5qV/h5
2MjNg+vrjpHyQD7EChsY9/V1Tf7f3CA5T+IUdGPg5NSr8HZeiQ/HRyqJ0vPy
AuB88kSdgpoZp1mSnc+BkZb2l/DRsyxJsitCBrwraB0cKjMCydITfqupxt0x
KP0Zk6DW4uf0D1Dh2rJwbeKNyBDzttNf24rRtkwfmSpxLtAZHYy0YWbhGf8X
NlcBPfJ/oZ9ZAq2P3+8DHYONOdH9Ma0gcQ/5o+5S06ZpoTaJ00IFLT6f5Sxg
eGZGD2gzfdKDxr5Z6jg9N6zpgHEskIMlNHHF+yq9PDk6AE3iDI2W4iIDJSLl
jVIgG57j67Xl5mb4qRbqroxEnwfMFlRI4MhaXLTxYYlb7xUpl211mI6nGWzX
ZUd0lL9BENTVpkEA1MNQ6Ucs1oSDhQ4RYsMud8Ka2AM6oYbQSXSJHIr9SLf2
Q2rgcC6UTCxa1HvulIwQzQG7aM/Y34aUseM9+xN5duiSKz4o59PI661dZd80
HhMzqN5GCDN8rL4hzYuMNruoUOeou4SlpQJhpIAh/JWNRrMcODaZaQgJanMZ
PCmmWUqqDWOLhHs0zXIZErSXRjQCFnB3Nm1kRMQPpNwY/VpezmtLzUsYI3er
YI6+a+EYrTbaswZNRhm9DJMZ60r46yOICWAdl/YJtgUwAxEL94ZUhhw50LJM
HwGwQ91hGRPSszRBaz+DAUS5iNNRMkOL2zS3rEIWJc+y0pktLztpZqqpFc6c
iMRwWhkq+rRwKOjJNKMFA3MBGLcChTgZAz0IsorIaQtI08jq+Mh6vWDJsdfF
aHb7o0XDrk71CoKWKFo7akYOsnWbLiiEbmvmQEDecZiQlgOsCl0eiFFtCYGG
leVE1tApoRowW2HVJxFbIFuIA1dko9fqCBFGzzQYgl3k323uMiIdCKYK7JmU
pLkdEDevBzUSOfDky3hs9zK2k93q78UG9CMlnwqdg/oECkHrzYeT01ab/1e9
fUf/Pj78jw9Hx4cH+O+TH/Zevzb/COSLkx/efXh9YP9lW+6/e/Pm8O0BN4an
ynsUtN7s/aXF9lDr3fvTo3dv9163ahKAFoftAFIup3mE+yMsAq1BE/pf7r//
f/+7twXL8G8gnvq93jNQlfjHbu/pFqndUcqj4d6Sn4CqeQCojsKc+CVoZ2CT
xmAFgXaGdsdFdpUq1PUAX3/4GTHzy0B9MxxNe1sv5AFO2HuoceY9JJzVn9Qa
MxIbHjUMY7DpPa9g2od37y/eb4135+E33yZo23Z6u9++CEgrPPwUotxQxRzY
xCdQDCN+0OEHoBuSZun4P4CKcccZ9ZaswkJLAyTLwuytQrws2AV3GAjDJSZm
9NW4Ypr4anGbfQ8qE3UMHXeg/uKA8GER/R234amzo2UOtPlRAGtRdxCH52lW
oHFNT3FHrzbu813c52YoYrPX13tAS7DnPqnv9dudHqi7a2K/BcLrjQUPFDf3
PT2ICNycwROLv70c+GsZkVkE+KdwV+g8uxFruBDQKvawsaHcbmAoNINIc0Gn
D4jjsTiPApAcILOI+xAvIX2OvAhaHVot1ni1sSl+5HjkZPmQ6eQz1jYC0cOC
/4I/FYbF5XnwVecz/74KflOVP/acaUkrq5dN8X/DZE2t9tf873+7C4q7gfwq
qAKhqmPc8cHlF0EF/bGl4KFDrfbWmj51UHEvcJyPHVQ0g7MYQ/ukKgMubv/y
hJXQRYj7akGzxRMyiDsWFgWfvtDqPD1Z3VxT8Ow3lOFjg0QPeulCjCH12zed
jrEIiNdBH98QdMea+em/1a01twvT5yJMLcRMvYtvnsMfYAwUdfTErD5dU/AA
JtKMja/qm2EROn+D/3fgcgKcyPYaPr+L1m0Xi6FYuouFb/6lUPymDh2LBtGx
uvOvxsVtBI4sN7geqCfM/hXlPjxf2ZNwS7N4WIFf5G7vgFJ8nj5vJdFZ2QI5
AwKQv2MXeagu4vOLTgJGXYKGHlC89vFqOTAB00JFbHcaY8oMauVG4I7PSoH1
C6azyTBCzyb657JUd+UAQ26EuBjNChRLNYXdtJOuUBghJ6xzSLQmxCLC+Ul8
A4OkY1JgKMiboTrABlZBXYFkaRA+2Nc7ET+geuQlG6gY4gDTp2BjjbsWa43U
BGvGOxBchmChDBNxorZGaBtOyxl0XNLjFuGMgm5sAIfJeQZb/2JCOEDvJeaZ
NIFZ6BBT5THNDPifyw/XjQKn/Zja/DJryn4PgBtjRFr301+TWUZ64CiK0byu
9QcTQK+wTyfip0CAgGUKt247PLltmGtbc2IE7H2eoXMcxplGOYY7rblUgZfx
yuPwzIGlGTZH7piKi8e63pu8ftbVR77Ggo0PdnuC0rtXnRtshbkqZlN0lljv
8yxljdd6sEDhMp5m87RAa6W8yArrS4NZSu6OGwwxE/KVytW3bw72JACGEV1U
lwEDwMhc5rYACedAoPA66VAMx/du3TFPMxN3mIK+xM1rGcB0lk8zXEYdYaMk
gAS2TYpJGPBxG77Wujtgf14k2Tn6dEX+2Q9pZiANtWjU9CvgkU0HjIwAmqWc
V0WOAZhvzhELoy3DYlzlHB9AN4jJEVM2lNV17aCEwnGpBcsES83EDk5fn4hP
eXPr6c0N2C8cOwcmB8O9O8HuZKV26Ck6drE/0eaB1U2AbJw9DEbcm/Bv0Fjj
c+RE9WxUBcjTgHr9ZIItOk6LGyccE+u41dkssb5hNAY4xqHjPRQnUUVIqzmc
l7T/A2JGQuey67FHwP4cfZTwArO8yJGcSwTNBsIwEUZCs8EYuFVBDAzZ/wQo
7zK0zs1AxgXmSUNTjwVHKJO5E36JkZxKmRE9yZASPMd3OxjOSkFgAUPhtAAE
InXsjulCd0DxlCdgTVp8j2dkdFGniOoYOE50Bs2JWc4ICQ1Y72A6CaD+D5Vo
Efaz/uHgPW18g0+zFLSYaFNj0FRsXs72ANr0beeunbYJL66f7vs9Y+qR2/cf
T969RXL885vX9SGQ6KrwkiogMctXh6f7PzAS3u/hP/2cCe02VBXA0KKEfUdd
OTFQxX1gd9U33x+eWgdvCxhpMi5amIsIRAXiGARvSULlD5WRKv0ATg73DpiB
s8vkRAdkke6QdoShMe3h2vgoGGdR4X6nWjAZsPlb6u8+MGoVJBcFq0L87zA6
o7hReAbv1jA/UWbZopBKvbmFyoPIocvboKKeQXDlJfHyFqsaIC+m8rsyHMpq
WLs8KvMYGCa8AElfDW8s2AilDUYToTbSPhKoBzK7ljjw3JTWgpKBFLxCgrR2
ZfVsfRyESZGZbS3eU8qlEM4B4jQEISXhgTZ7D1c4pgHKcbJCOFqB4Scril0N
hY9/jq3ugwIKMqEQzbgCf4GJK2NM6NUfwbSPnJCqp5i1yW3Mw5g+JJTB+qTg
A33dsEvHUR5Q9M/lV5TYE3FsB8PDAJQLDwl3wIdGVFtHnQPvM8lT4KgjR6eO
KCR5UA9JslvfRCAJfBmGNrbQylHdW03oqT8mHDV8bDpGJ1caA9HCkCYUUw8J
FDaoYQN+HAvhvKZZnJQdJA4MuFVjtNoh+Kzb2xSvn04LcQJ4DoDYA9kj5LFk
g8gBygnmxt2oC5tf0JWO2yRinbCMwI2hmFVMQpbQlXXFxuk4+qQ/48iMfNwl
ArPL2wAoY3IU5nlsA4Ga1QPgxMfJycosWHT9QtIsKM2I9itTEuzywLhp74ii
7AAyu716KIWVmQhUvc4pLAYSxoR+4dK4GgrxcfdDb+TGvDkvG68iI6ux6zS6
au6dHdmkZCBhae/zXWFuJylmneNEdhW+QhiwG/huwGRph7ZWN6pkNDrHRHUA
RWxZUlElZnfWvNiaZkrMHyubApa3bhgE7tW74zd7pwMfC4sGDETx1iqgQ1nO
/FaWQs0KbipNbLOCZ+tBgfrEIWZfU8oEbTto4gNq7f7mjasHCO9LtfU5aEx+
gcVtWC8z+fo7RJwjREBZQM00LIpsFEtUpCl6eMta601VLFh4h9eQVH0wHdRw
eF8qMHzxFkow0yFGOGdTr5E6yL5vwBtNkqPAC1isD/LtrBH6aSazKlpv7RpT
ApaOXp/eFZ6+OzgNvTjh6UUk9dMFGKRC8ZLsGnuiRdNGm9fMIQ9anNs3gcSR
YU8l4SiCPkZgxpf4DxSqEab9jXG6r+BntGCzHLAIZjV7wVRw+qRWoSIWFo1Z
COqorZHB7Nbz8ZjsIpuZgnM60LAX/vOjrmLUVb5Gu3aWJO2qhmFgwC/yaALW
7tjt4haIrM0gO6R5dsboIhw0bpYCcRmSIHVZkazJMj2gM1ZSPmCyq7OUEj+b
cbCmEx6sS8khnhm7Jlltn0zCXBJBBBuY3jaMQPIDj/4N2pFtad33xxo3/NPp
9xanP3TEZrCmbGhp0U0dLSX4vJ7Ek7pETzXWKTBVtttn9IS2d27jXb/5iV/3
6en9u5NTiyZomk9HbfGk3g8m6UkD9eCergfKjYtITKV1QrQzrwiuD0RcGDwB
1fVDzZ97/UR8vB3zzNVjxYykQADl7zlNKVdRRxPEXl3sOdZZ6qa5sOhC+16Q
PWaw63xvNqXMYEq3hDEoeZVd7Oab2XSMR1gdH3umVVx7Boa4yFkipw4mpLaX
aJkhP2XTlXKVcYwoCee4rWsDB8FeUkZ5SqeWPCeeeO7Vm72/2ERH7BMHl/MG
Ndxppyvu83t7yx0tEISc6zu3uha3tr4YVLacLEwjHXwui5nvFyGG58DiRoe2
CZzV4wHLMa23yEUdnvUjccj7/P3W0IuG5n69ONmJBe06TIrXP+/XC1vBSvfi
WMarLSZjVeYz7ciSJ2dhUkStNeplj0nfzAgd+x106S+NHOzlh+yKeQfh4jc1
ugDmgRtLnsGikNxeiuyZU5m4AMNlyPxef9jTgVXzqKeWySdHdLSW7mkBz1tA
p5rPmR1E/I+93/ZADuYyhdOOOfZyUz3858ZBm470dLnHSFLM+XxTYLf/gliz
9errrRmEJeb7ou6YciAZQwC0iZxmRguCWdq0cWTyq3m5xuf6u6PuuNDJZrC8
2sFzV5cwbUQsOW0Mh8gpXlJEyDXVahHhIQrd0/zmBrWaSga01XaRMTBnj4kX
zDV7RklRdcEHhtMW2kfSzJY8v6kRTo1J3dajoNPfGzPdAVmHzc0lW05P2Fgx
t6A+uhRXDefATd1MhCZCsMdHY53uuYCD+jn+1e1hsiRpzZGRlJVtWFel3ebr
I787Q0l2F5MbuhHR2L5obB9d6r37pBwmHYvapq2s9diirdMjaTYSufaQXhDW
W3IuiOYsNqeHPT5oyF3Bviq66l1qlnPedg8WTMKPYJXiAzz+RekSttOPKS6M
5BoWzjlBWWwdptEnL5yclogW752mbkxdcijjcf6sCs7IP9bxkLoLrclztpCq
/BFENacRjsbRZJqVFMgUk6mtjUNeLrZn7cCYmHTb0EY9ljkcpZfZRzw9gMkL
lOY/+kyMaaNAj2Cw1MxscMxmar91hPcf7Aj7hBhF2a0sf++H9eYRDg5fH54e
8ggHkRwW/LxuvRH0ZtVE3Sh16YyrfOBEaXBHopmB3EYjGPbS9ROEr5PrB/DV
u5RTSRBkhzqF5eqInkmW4RwZFmtGVCDPROe5uI3hFe8Cib42Opj6OjG6t9nX
fnXRYkH9VuEYj1uSvl+NNZpcY3cQ2t21L7/EJufFH9UecppCBrYESWmRN3Ub
Ks3STj1PSGuruDHwK5obq6Y1tdoOZRayHqHs3n9WmuAIjZ0zrDuhKml/GJf7
YDyIK6OVWuAZVTnKExeZgN+syqM1CYzq8+6FAkFLEhoUNywyxEhgMR2IpR+N
fa4J6v2QbFbK5zKGDu7suYiBEKMz0VhZ9yeRB9s6Pk1QvuyIsYobZZanHNqt
LJGF0QGGGqcNjRvWuLED7iH0e+C8mQWf6zUaGd9uA1f4kV/pfdKwTC2tYcuC
4L8QcI05bOqRohGtQq+mnkXDwUykvT211d3oq9WX4VgyH9dUlOdZzq5GnCiu
3Zk9PZBhEaXADJNXFA0MU0qspkpykrYj/mLxcrqbAb9ohS21im/+PsMj6gFp
xeOxDI7mnpxVbytM8Cl14JJ6xoxNUR7F8bzGIUhvN4ybdsOYHunNAJ+sovTt
CHxF85aozcBsigWbRS23We6/P77cH5J+yP9Se77Nzi4iyZowhmtY+PkWnjiR
OIgU70HXS/OIpYx4YEfDvFoRW2xDCeL16jdDwokeFRj6DTDYPTu+z56tExPu
2aMzxzHPbj7cptDIk7ixH2ygZGMvhIin4QN6fMGuJ5fY2ia7CD+jLxAPQ8wS
PI9BFYMGvK/oJO88kETfeVR6qjxlUPJeb9iT+jgtDNFdOLEl5xOYo6uICgr9
mMnRkVTHmCRfSyWbJ5AJF5jzw/Zp03RxgkHwopYlikftnHn6IyKT+3X86/Nf
y1+7TY3vbhj++tnMr/SYHx12+0zmh7yPae76CakKwuKqdKhNf5MbljkKZyVQ
2XV6qAT6bCBWn8FemL5Qz6QxrhDDJYURCu6rZxHdqO/iOGLHt3QpPkU5Vsgf
nJH2OHKM0SdP+J3Vw4uWi3vqdrueWuhsM+iG4nB0EB/tQPcEOUz0FdXDmkzB
cAPTu2hzLpB/oL3pfLUDqgxYCS/JgVQQMFGCIV5JijNHkG3wt8vKBpgIeYYz
xtRvchxdRMlUZ6D5pYGUUxoIRKxkqHFeKUJOmIuwUJyT1VTPQWgA2+Q5jPDM
RFbpt6ydmnYDWF0+uhhIzgMGianzb+p23wtzaGfVr4QxWC6gh1meS6bPKNXv
bmzrghvLjFcLZzWO5iVwUC2RSsIG4YJ4gWYG5jytcIWOPND6pvYCmfRaIVsM
ekV0boBkDiVRy1EY8lMX8wITNbjqyGbvqRzq5ci7dt0RJdeamveFic2gcOa0
SgckL2BcA2sVSbr3tL+5pmoDc80K/mJ7E76o7yYJZGNO5vMWMMeNFjFY5OYx
7VLG5fHhfww0Sa2PhIQeSj8IbdtVgNZvndZ68DNC31YM3y/UwCLXmZ6Zinou
H0NjgP1k4BHi0tA3UGNwDa0RLjVQrf5Gb6vT2+j0d057/UFvZ7DZ+2vrztnc
tLkTABk6uWZotrA/AtnDDE6VJqRn+RR7oBc9bHGIxkkKmglIyilsc2y97vmW
dcMt03AbGvZ2dzcqA2FD9ldLi901W8JIt134t64iAWW/mISjsfQCw5hx+zAu
Brsaxo1SdMeOzdDbulEPZ7lZ+Rr9Ox08vjQrdIutLQDWqBVYrRg5JPZxE9wE
lh+wfn0oJbPE7SQVtG686AFYIm50WDwFOkfHZObQUfRYjt5Jjg5HAQK3bptO
M8fR36Es5uHxt/4Jw9fPIunDPhyeYIMqodiyiHTUSEF+49GfDj3BMmiw64kL
mdpSJJBit7yeHG/TVdRsKTEt60E/oHh5rZABq6PVujbkc3fzuULOWAN7Ng/n
INxBqJojdmT/ubOKc56OoIn8vNdPpllRdowzz9RKBKzSB56br5oOrg2WIE4v
s5E58Nna28fjERJvPX6/33J99ceYQ8b18PLp6OaGs5kjULkScjDc3pphFy/4
9ZN4GqKcceHXPk33eFxTVExngNkko9j405msZBRRZ1l81B2WabbYSen1IGqn
2OOSqeF8hUe2KBbnFrkA5eu+6Y8k3DgZAKuinVndiJDVpOc2JG/pIkqOfRF4
uWqSfeembZFV0VW+Oefp7m71Dm7XDkq/vESt1/pCeTakTAdVbdKyhUHxmVDR
Myi9jR2lWHzqk2TKNNQFCmo6nqzOrUreF9K6lkqbJf1vC2swp+fRWLjwE2eX
aBXH7BarlVW0IEzFqx7g1en8oinr1HcbKR4gCH9QJ7DUrXVHXRvw/6yn5XRd
RE9Ly+htkD10HhlTYqn5MSUgupZNqwxH3TQfdUdhy54FXjgEt7Ij7KzpYl3Y
/d54vE6uHqf/t6fA4zLy2dODfksbBMTN7zFS11XgNL3cR4NroA1Wgba3RZ43
awOeRCesGs3nZ4Ss7WHxF+iLtgi2lUk76LJKE/xEpWmREtLUFN+QugaWlR6v
7bVyNKyn2890m61F+gq1mVLCsW61Y9Sc7cXgQavZeGqa9IxmxLoc8O9uf2un
2+t1+5u9lm4CnAuPXJlmfd3sRms3WsGt7jRgO3UnOB8PcvQUJ4lZH9AyvIqL
TKHDKfa3I1cAAuNqJh5S8btzthLrVfSow49u/Dg4mK5tjIS2SZKzX0/ClhLg
s+4ZOUlvgscSTQ6cIHKori6ypBKkxfLBlIPXwDjRdG7kmvc3WbEX2htfg5B+
XsRjwzsxJf9W+7QCFEaGb2HlXwiUZiZdBQ31rdvEzBcFrieB8gXACeHcsp59
iYPrDk6rYj2ykDjuW5b+Um/XKXBw5vDqQGobIkXFtgAPSnM8Eou69Yx2gBxE
d/SrkFYc1DE3f1irkZWN5bgv7NZyXRhR3YPxMP8Dxc7YxZeNPtrai8u4PrrB
T1TfcDYRJc3PnLDq1lVmEirdroTFbWyscb3uCpRi68Hrr9kVrFP8KTBhPlxR
VbcH8rUA/btGd9OukhWa5YozTW2q99a6ao+W0LcgiHWFgaEXdtvbqI1WB4rI
n6b1Wg48pwrzIpTID3dUNOwtcVP0bhOW+7TCdsIiV/rs2dipeTbad3tqSJg5
npGN7dONZ4ONDfi/v7Zo0GGWNTQWoXbTto6Rn6mzRaKUZ9DoBTKuivv7VD7D
q/Iwv8rgTsfKUq6VhzlXHsO9wmrIL6CGWB+Lly15/YSSpDr8E3gVv/UzLelA
I0aCMTqQqLNZypHL5up9pgZO1V3jnez3yzHakvh41woXJRnaaC4XYyXHCTpZ
ueAOF3miPD8NyLgpzbGeBlot/3l9Xckjvul68ba9v9jKOjbBiAYJalmnZWZ0
QqcAlYtPqvcOkuQ4whJMwriac1v5QCITiDFiycXwTm58Yf6+g+XDzcJ0pSAe
VoUZ8jy1geKvwXBOZZZIzQw4YMHhM1Y1U9WSYVo630C6qddfpiML9YgYHf4u
TPROu1YqVX4Q2Vx3AVAR+DBqGrDh5RFGWPil1UPJCPRaBsb0M2REkgddL02p
0iAe8QRbM4xecgFXfmXv31BcfdA7Vb5AXNKtBITt6CqqlLTAast8qv4fUZ51
1Vus7C/SmA72zxLyDOK0KpgYRnTMHOnJAIlsutDVROIUtW+tYIA6M9QXKeAV
JDYwyBgjDyN+OeHwbQzdxucXpWJPVkzFRQUSp/4WZshHn0Z0wQb0+Ob0g3du
iKvehKOPUUn+HDoiMyKgeG5hHmORLRfzQXFBrzCJFxqgpYIhv2mOsUjAZnhu
43vIjC7DOKEE4Q5HQ51IDBBadW/ThUnOGXwdsvORG5uzutqpoiuAROa8b5wG
rFqK1yUu7Lz9NS5UBQhzQLbb7/aC2iHZ1T1dcQ4PJYV+b7gZs1nJlbJFLxae
PJnC4pIj10LNVR+QuqRu0VqzgcV72CR1v9AsZXVj7V8UG1zGS2VNArebJtcs
Roe1ymkjtVzqhPcHJmkEnKBh6tOHpcOmaTfhIbHUEFUlvByj1+oFylAsLIU6
kqlJ75a954QKO0ojd8e7Xl4gJs1NJJzNkRV48YKuB6n1XCzJd36eR+fcCWgB
cTbWOx/nPoygtySexE6sfxJ+iieziWWuVSGskwPa0LbmTvVP+RfCOajMtcgX
PpmhU9lMtIWB18bS24wKpxxaI8nVORw76XUk6QqF58/TaGS2pstHU0aXK+7d
83R47EJ8a3yBmlhGbmOK7RHtSk1G1ev2vg74RrtiimqruVFT+1XA3lxPi3W3
m9bXVNwKRv6EZZXoAXbirngDzKg5r69TxsPOxkZvg5Q1R4cVFbDF+phznwLy
2oswH1+hROK+yGdU0slIgkZxNJxGI1W6QU13xu7JWKQGc+Wfr43u6PZlIV/Y
V/+2vm6MHtoURG9U3oxfjPS89UIzPm4XJNr0c7Q7cZNpVaaAHZGEEjcyh0eA
6jpRgYreyzn0Fo1mpdWCqAfhhmrDHGi6FT5HupralBjgso5vrRwNGuzLwue+
ZGo22JoP5sP4pwfo9SVOTnRXs0DXm6h11dCpMSPREttY31rv94z9tu6QnGlh
DVds8W6KJRqAQ/dbTovKINrc1G7lzwe093BAt5cCNHAJO7JhESfJVjwMhXU6
WX3Z3mkngWxdxR7ruJGnwnIAoj9djRDpFr2oLr+k+C0IihmQfTJnJdLNC6Pb
C6R2Ql10SZCX8o7PatmkkpAML1bPYjxKvebkgjtVoyiEJsIJjRDJzsTAstzB
Vte/SCOALtHPplB39DIUse0C4aWlnbczvWzggHX7Wj5cWA3pS2xS5lRchJwK
HZ+nWU42SCKGX9WcdYcjBZ+kOiXW6XAjzUS8WxU524BQDbOTomkBcyKwFPyF
fY5LZGycqkEJBAsU88oqy+1KVK5Ko/7keAMi3PCv/ka3iYN9e/acPmvTJx4/
463x839SBQKgxd4v/i8pXBSznchHrVj3RrjdQm8E9YdjrFhykKkr+CzU5gw3
IyTRbpIjqvArSpJv2fWBZ9GosC5Xk75+gnkETNJ8ww+fUnMzCJzP2WMhpMYi
Q3zJFIQso4DKBY+plCoSyir0sGYSPeWqJHVE+y2mA3K2zBB5mSVhACw/tL33
BBhYNT+bwQ06nzoMpjHpVSePO/fasGY3nZWOY5V4gvHJdKXfRQmuTsdCwWCg
3N7hy0wnS9DIVBei0qZoqvl2S1WjoGJXNVTOsum6qJZW2S7dMwKL4UrahnjU
nfGV/wlh/N/bRCOpgRvs0GQNwO5alMgZF+6VK/YoxI6sor6tGFOa+FJ1roqF
gYcw1Teu0EZnHlEIMyu0/75R789gVp+v9kMvntbPv7Fq83QExIE+9Ns841pd
7m1s1NR+2Onc3qRJdEWl521zm8Pd6/mZ0CZp71wZYlGkwTbqGYIm/X0G4niz
/7V5OEuxtlurwNIP46JlX2jVeMN9VDVl8K/11hii0gtdwBnGpdSqhWnGmIIu
W971vucLEKPtFN/C8KmNmC2zrRXuZ4VoVVQ5XIm1duCFDivVqEhXhF3Cyd+t
yVySOfwcXGEVJoPjwWmsDBMyn2ujxT59KjM05oGNCz/WaJhcYHD483+Sg6lD
ie2j8pf6k4E6KljmmgT4USluKTklcUZ3vBG2tSOL+f63BLT1f17hCbOrcF7w
YRoqS44l8aoXn61mdI8gl9sIqZNqNvOazaOjXVPEY+oQBAd7LXNydAJMou2y
qHVYFysCC2K4cVM5UDng3kJ1rWwtrPH4tNvb7vqFXilXwjI1cl5Y1nabG4Np
EKySfLIMW4PlGEjTgdPU42WFPAmU1FLnEDD1zGmkTJD6e3xBHeDtHqx8yv5Z
yKqsu0D4H94ih2A6votFbotaD3c4L2RVaFEW9Od0pr0Xd/Jap82u4VEEOI3U
CRtaO202Hb5GgCMWBxh27YR4m3CsccF/mNwZguYxpxiifXMT+P8r+tRiuB0Q
njWBDfQaFxfR2IXfabP1JcBenm0DhCumjsSqWbP/YYz7ZwKq7Yz0i2Xj7MVw
CE79+c9/5qKIxEWde8uJBr/1c9Ao7r/R72zsnva2Br2NwcbuXymAj8caDOUZ
1GxWc9EWCo7/CRMWqWBm3F80YztZl17NrLfW1hsIC49ck3r7EsNBnasYfp3i
9QRnXB+co0ROEru5r8DUucP7N8zN5HOgRKwrk0Tjc22f4H0KaCWc5+EE+PYP
2VVELgUyhRJMalbTOBqx0cQhDDt9c1cCuhlML3g7SqAjYBxXmEmVSxwVi/dB
Q6pdpatim0i0vsxTDgPqjKh0zG4WKSWG941T+JNcPoQG7WXQN27TBYUcw6f0
bHOrg+y7EiRXYoxEDL+k4xhwhnuOOqQJm6KnARWM13cZYg6HNUtn6TjKpTas
uZYCvzc3nAzUqotn7uy/drb+FL9sq6P3lzs6JNnrY7LH0eHhodrd6KPY3XJr
A+9sdHY3OEK2xhX3Ap48Geca/sRdZwbzfBYCZGUUuQQB3ATDHCMns4oIDUx6
rOYWFxOwhZNY0tZo7eEzkKDQ5zQrOJzdDmiOnEBvUUhf8+0TEugBe8TGRTFx
ng4VyF0PRRFNhskcF8eEiWUVuDX5C+KcZyNJb34mnYwGk3oZUZwBC5aFIzf0
TncDYFxX903hiJjK+aMXBw+yUICsjUkAkeIQb4CEHn6kQrGCJs4NFZ8YVqKM
dPWKyoVgOgQVp7V5ya0sFLIOtJZJRJ7P2JmGlaOsiGhr5wUHvLneHt/wrp/x
rUT60E47iD6VHKajk8948hTQrkveFpG+mQl0V4znqfEs11xB3w2sc9TcYwtO
IQbetW1/h0V0rhsrPgDPlLq5+pAp582FclPUhVxWwzdrV+7d/pqqBWZ5oQ8p
iUPEKfQcpxb93cDxFIIgwDNCoCak55hLZwv4eoBQx1J7y0YbKfraDY5KTXrh
+DIuKHYvN4gepaQmw4cdGYHvnaFzSUQW6IpoB/ZmEiRzSno2lxmwxxenr+95
6garbmIFCRe+5mPGNTgBtqrRQIP5gi5ozgogSBI8/45zuqBrvp0wU5gGcW1W
5uAVTgxD8iCR9qyEVQc6MoU5pKZEH8gjrGrkfGfeWc5SuTDErWDWtvZJEg/x
NiQuvMLlS6sVSI86B11T3pFVfmnlJJ7S/VG2nrMFm+6c2nm2QYdk3RKEFJi/
yCiq66Tc6KQgWh5MocMfWEGWbzzxgLYuWnminGncAbitU+veNthQ4M8pb6cz
TFgoegO7PtBAO9slj7StzkAwA30Vuooauq2agxW1u+lecboSiR/OUonxrpba
PXMjqh9PR+EuonqhAWco/6yzaM6MM9Y5KvfQYS6QlPnVt7/jaXs946A6ntwd
51SkxdyJWu6LoQumxsRJ161Sp9YKzjJQBABTgUlPU256WpkFrfUuOvY7VNtv
Hdcdb//Gm+f580qRx+PTNfeaI+88WNCScofzpNVVH6YY+GFPcdthl0Z3oPCa
m9ucZ5ktxBk0zYqxWbsFRNs5nJNdWG5Ft9009IOu6s3tnlr99ePlr5zCHhBj
oTnXrriuXAl0o8+gh95xJspIXx9RVmS9DB3G3b14D4d7qsj/Ni+fGyw2JUvf
bl8kcfqxw0S/FoAVtv7x8sXX0KWzMuZ8mi2YbngmUV2BShEfv7RJ6fpSRrpO
jiV79cYqj9HYlGVqWUopJB2X5O2imZ6b9alP7hrW0Q781CEuLW35oAbBclAJ
kJoeArcSKq5wE803VJHWTNicaeYlbULbaTUu6W7OVcq5KLM1W2+Ee3JLUDdz
s6CedOvmmlY2c+PEnM0c3GMzq5apfYom/p27ubFATH0fFDrF1X2ly5EV6myW
kwRDNwNvQBu1auGlca+RwJnyQTUugTuCQqLrm+jfrOKaslJ0U0YlbOcsguSo
S9pq2FDb268WLkV+msfrbfSfIQeochC32HOniMdIV6902TV77sUTCGhqsqL5
sBtE5forfd37MD0LiD+QCl5IebHnapUx23reQv+uWnM8T/bv6yWxGGAX/t9z
1fvDwdH3R6c6wLUk866x1QZyCu7PVsfF57PVF18rh6liCGdcPMelt9c8exlS
SCzNFzmbcgmUhNnEWo7O6sR3H1ZDPQd3sxpzdfPdfOaLKA3j9P58pkqTlUmL
2hbnBkddPwDBIQKsNy3+BFeG3IZoW3YRDHinmN1Kw5FlOmQSrdMRrHXvXNCK
czCIgL2zefVY0op7Lil0mGnXm+eD9pZWWe61udJH0FnCHU9nAcJo8/On1efC
UX7Sid32UAnnANF9xAu0e8cDBJbNRTyMOQMsSDK6sVHXQZCQHHpoqoqIVOCy
t0VfhXOus85X8iQJMVytdhhvi7ObCrXqp97n2ez8gnUwxAnS2jQ8j1MaUld+
844efa4+4mV7LccngsfRRxr4RHCnPhJ9hj7SXB9/eXvC2zaFvrGkKaHVqFr3
E07R5wunwtskgK0FMilaKJMCIDCqFfuDvoD1+gkVj+3oG1m5cAXtCZsgTGc/
pdwO+3ZGFIz16wXjeRT0TLcbacstyYjpyQSGqf7GJrX/kJvYW7DIcNnqfvqE
XpBt/F8vSwnVT2zvV9erpS9q+3mYZx+pLAAqPFdgwgPfPc/wKBbCjxaIc9Oc
f7DMxD3isoiSMzEZsYlNQXW8m0Dk8bhuzzvuGTdGsfhgzK5/92mVtPVOwGxH
vCaTru1ghMjhoWHNLqne7SPrwIUL2YkZfboIZwUy0LZWablTx6YyV247KANA
jTddaHpIBv4fhAS38Fz86gfn/vc1r4rjAh51pe9QqxZT0XeM2+vk0XfPF3K4
ScboYZQq4pXL2AzPkmthjUhpWxna9m60qlTQX/OnV6nSvOzk3DqehFn30uNZ
ylc14AdhwndB+aNuKXTsqlfoH/psjArOmKdj8W23BOajI2xbrcrdbziDPS6m
/LhzkPxRP815ESF01WrUPYeJUSlg4ls0GbfsQeZf0EecQu5BamnTke5Dqsx1
F4SisNdDrlB3lOoI01JTjs9qZ0ZtJDGUMGUp8VuXlU9iquDANqgbwDwz1xVw
xTAP4N5mDeDTLFOvEWdrNmx2O8zCFRdBd1+QtpF/2GX0Rek96cZr6yVTa9SZ
uM6ESn0xx694A5yrkm/0hYiNkpDcxhF6seVkjD1i50uDugyqSA/fu4zeeBKI
Th95tKRIkcbC4L18feussYKFk4OBljeY0Ql5rElMai5Zar4CJg11DjSIO11k
zAYSJDIUy8UODhK66IQACyDyPYlNrhiMcXBQZoGXhsarwlO73hbBNw5kTq+m
/WVXASy5aYIBxkUJbdsNWdekuX3V6eRXDMK/oW/G+d0pw3PP16LdMHl0Vv0U
xCt+/u0Sn1K5SGRU8nFD8nK1iZxrNr1zBplz6tQu7ooBfYXwvuLBt+Jd0S0b
0lsY9+I6XacRGkr41b/Vjz411T0pOM6KnQlDh5w7I/LRYnXF5Md2zoB+ovHK
vTiFrdqoGUOTMmyL5lD9JqyT5iFDrRjxrTF8PzC0NWQUc3OWvyoCGy6UJTNF
LpKk2K0+bFMlYayq82wLOTFGkm1HsBZzRyum8K+JHOse3Muf9YVzzbgQsiw7
szQGnN4PE3X9ekV3Y9kgb1rWkXOnruiZSJUGoMos60zCFEwqprvis8GahJ+c
zj4buLPo6hFhi9PHgm0C9kLnMs4SGuF+kGEIKY8lUwTTawttx1G3K/a0ETEF
HoW2eBNZzdiWvgdBhaYABJebzaRcGyp5urcGbERYL73KZ+KU8MxnQO6Hhuoe
NtDwRbA4uIGLslPlSC87VCoXtKOVS5DwRsXNRl6ZLNcVTFdyTO9ZaasVzsXA
f03DEu+BXcHPViQfyuR9OBSiDS9gdZzc1LwWGhl69OXxQUAbEWyYEIsdJhoS
y6hsSz8kHF7O4mTcweOmMtkr/wZvSiOg+v0lnbYkFMal1vk1Ms8Jz5hKAIjs
9Z/qdH3YG7ttysZjbhelwOBy48xrQAEyONhljOvP3a/SCztdsH7J4v2oUS9r
+7kj626WGVqIqIMVlx4kbRvGN4RZA8DbfWLmaKb2mUK+5k2SjUlDE5uoyMQV
k9vtcVOhFlY+F3xDOihZBnyXBW5wjtOPLrKYro90rmIns5NIcs75ZPgpfFSi
Dk8aOPBOnNiKzU2kPR2fdSQXZwWUJp0DwS5RvPpsxgUlMrVC9uvKAmYvaP4Y
zZdCMZrDXih4TvfzemvFY3hOQbfnhVyyxrT1nTWmILKtFJMkvEwEt7XisluY
sO3elO0k3otDRHLVNPV3O6Yobb1jvOH3I0w+d+GUw+ayy/4Vkjpbkb0J1Y0h
LqSHbYzFOJEMKdcZYg0lSZby3C5tfm8/rxq7MK9FRKrpc+zQJ2XKZU3U3vR1
FSvDcPzYGBEidGsrancGCRN033D0ifQO2ttVsEgzFsq5jxbjX32jU5lxjaal
59Xwy5AvEiBiJeq+7gMJbRHk3VRkvcHgZA0DPwODdUVNwvyjpoCq2qEdait4
XGZFUQVjJj6nZhAxMKMmUEHy2zckY375OaWZLCf1zatnT/I0ryP98x5oS4HF
W67EPBAv3dLZy3L9kFeroNoTJ3M512BV3DA2gIVnXsiP47hxPrd250Z/y9wO
gv/qbfR6prjjuoMbjnNv9HfXFtWSXKdcE0+d1q1sTZIej7FbG0Ovtx5n+45x
XDXNDLPrlj7pPd3aqA1jXCtmoJ07BsIw/z+ACXRm5aiTnZ0hcUvQf2vDK/yt
i1SJek+15bDk+7rvozEjP7VVV6qVJfq/+L8G6gg2S7pSgjiOgVuhbOCrEjn7
fIkzTgqPVtBtCFeR9MV6h92U32Lo8SQC2kVvDdZlgf0vRe6ZkrFQC974IPlQ
tmBmG3VyztMCsWGKWbCZaPJys8q9opdhHqNnsAj46qzMDQzhzWsx5neYHQM8
xpQdLjSYbvq45LJbjyP0iJ5QvGKBDYlkhizh4PT1ieQYbm49vbm5vu6My6To
SWFi9e6EssPZs7JDj1EoYEiRqlPZCdncxrau0UEJrLBKfPU3zIdLuFlHqUyR
n1jw21Td0GYioOPacfPs7R+qd3vQlsF61t/g+OKe6EgGISNv3ZCps6++v93H
1GXHcd92r/SgxHi3CifS1JwzzRzXkJ4l68YzPov2NgOqUavWmfpMu6xp0DU5
OsZoDUSYofe+jTSD9wfiCr95c/j24PCgS8FtnUvSdheYjLo7MRrOnfNoAd9H
HFHFMZahfClbJVxs6Ymj1HtF5Uoa8VHDpLZ2tnbxty7nQqQhjj78CLa3yWZu
37U2ss6C3YJDDg745ASk02RgK9AVKk/U0d7bvdr2dBOK6aqU1bx8vkYJm+qU
LyLZMwmTct3mcXQOspETVrw1Ho+r1134qSKSf9i674ittntdXWtfm1MYij48
OcXq5YfpZZxnKWMDBNvx4Zp6bzRpLB7DMHftna3813xzK16wTiEbudzd5AzS
OxMf4NQr3eLVPh7v/LPyWqR+C9bbbmsxT2wLUa11AvyCFpEDlZcrUx3jelC9
mnp9nT44HHcHpoiQaSGkDkuMj+RYE5Jqri8d4T0Z8ZEV2hC+SnEvWqmE6TSx
NHX72ARBVwUxNS7++80k9uyzu+o3BRK5TitLXTSHV1dXuz99edCvrfEyMlot
6G3zQesPDUGZI2Bwsakfttl0ziaVnGmkg8ekJ7so9yIjCtPKnV+ahpyuKiv/
Fs/HN6/2qY793fZXXfzbFnxZwvAJ4LZFX5Y4bicCyuxnD1wRefgrLsK8GuV1
jmfJFUbqZDYk/o7FBgbqf30TFtpvgjsUNZoX8uWxNlitl2Og3q7vyWtOp6HT
1E2vD7Wj2BeIAzWMUzonx9A0i80BvOC5LNBVUd5qZ6RGmHR5hAdgyG8oB+Cr
XVsY38+GCZ3K144nXp5BtUvn9KOkKs4K2QJ2BQZGi5VWr+TUs3Pj7C2w7NnM
2uqq0fsDPGI84spSSYwxVayWItVjMIWWQJD+qMWb8DweydZdLdb8l6/iREK0
6MepvX4TjjAjr7jgID9RDMYy3A8RgbDosAj/rqIJ6OOmmnwpJ/FGJcGn/Yzu
vBTo/ef/jlHnbpafO0uXcsAEjA5E6Js3794acnQiUjCofONgkHTEgXoTjy6i
RP0YYRSkLCN5zWUkSC7ksEEi+PLo8OR7PRPUGQvGvzAdAvRbrPvzuLKXZP9b
U+vm2BmtyjIZEvKtePv6z29eO9VyPhy/1TkyraPD01f4OtBcuNV22nEvJLKr
4eXNnV1QeYHePhwfDdQUaxZFIkUUVuPBpRrQVi8GnybJAKiXaqp4iQOBHjYk
yUskMCAzAlEN0wfIaMm8cqMABQwq9XK9qdHVA8KyB0iadmO6KyLQ6oWxi3LH
egRB0Ol01DAcfUSle2EOBF4rV89pEa/NN/vvDg7Vy8Pvj96evODt0vK+/q6/
0d/sbDzt9Da6VIMocC+/MeM1V0Wql0VaaiHcQkn6Wa1SknMw1quUNC5MlST3
c13ozv84H3G5nIaC0Fwqk3uw4WLJBHRdoUWh3TNIFcabZfmTS624prsbWxu6
qFpuZHpLvxqQZkkOhfeSI2wLPwG7AVuTLUnqgPfMPloHP2X5R7oRO89mUy4t
JYyMv6yxFgL6G2R+ZTaY0NvupX77HfCrBHg1MP90hJX5XjB/VXtJ9ClEgw8Y
aJJd+r2E+uV3QJZJN850q/eUs38ZIjZydVJmH/2GKFtmCaoU8+8uQ7EnPyJ7
NeOm47l6CXJoEqaVQeHNd/PZJESnT0Gw8vSry9pyz1x7JwBs4pxNG7NLzcNV
Xa06g7srAO5n0zkXPFsdran+Ru+ZosU5zWdFaW7VmJLUKdy7p0OhIPYTmFoV
lI+O+E64jhoV1ESn7FiPeAzyu2ALVvsaZhwJELMXn7DKQpyzYGsGqIjb6zgW
F5QfyUn4mG68ncQl8rbpLC9m7C/js/bFbPg3LD5XZoEhetAvIsygx2o3hcmD
Q4JnVnnCjkKc68uTA7DA+fMiEv8wwIZR81TZMqMjjQWLwpVCvY7OQcQZcVdo
NCRSyTDjzw+0u0Lcz7rOZIndRFFXS+51AbyDwn1NY5WIRPOxTM75uAwVERTm
pau+SdUtfSATH0teP+sQsIYJwZ5S9ZqiK4UsI56IslxWX4XdwJKOqGZjYlrV
mIj+8Ge/UANsiPgXtpqdE6JH+gi25S4mE06fcWVYsAgf8NWBYbkLmeaRVRZl
+XRPvmOVqtLq6HiYaAbKJVbMMN0GyKzH/3oREC8pGqYb0PEp3aipx2oinztp
03DhjI8fnAygJz0K0de9OO+vAWQ/iPFl4G1MHjKS7oE5RLr9/VOJdMv7ZhTp
djaxqAGf1cyBfxEF2LJwD84KMUR03+QQ3fDBOSJmKR+SKmJGXyZjpJE/edkH
v9MWeGCygu7hITkLBnEPS11wgL8Fu04Ww++E2QclPTTMxE18+AJTWZAhoSdy
d6LEIgH3JWBdkAwgnZiUgIUyV0fA7y13pWEj462mr9cnLq0/n+aque5GMixO
eUfBvDjf3eG9DWnvP0vW+y+c9A5d2e/vm/huOIbOf19E6jb7/QsispZNaWTz
fTPmG6ZRy5f/XSbysBz7BdNxM+x/n9k8KCu/abt6OflfcC5uAr9RNJbP42/a
Hibv/stAvSjl38iCJTL/b9H0jY78ZaD3s+Mtw8H8Tyo1X098N9eHNCTAG0nu
ZtGXOoveHIhtTo03fHmJDPkGjHmJV7/HbmvOqb9lbaVy5e8B64Is/AZgG3Lw
fxeIF+Xt32LVYdn7Rwe1KQNdA/mwRHTdeuGpnWXS0d2dd5+sdD2I0TTuyE2/
Bd2VzPQvSCXVNHYNPIm1W5PZG3djJT35iwkKN5fZ0PW9Upp1q4dkNlsKqSc4
37KqbGN9IZw05EKbvVRNibYw5qOBjbaY6JZrP9kT2e7T5ktzWk5KgCleHtYS
mp2T6+LDxT9a0qprkrCMMts5Su28ajbv8O/G/GvR1Q4Lbv1Bj4+Wj9rGs6YX
d12H2Dfs7gO1t/g+5LdA6OSSdHTqwrKw2vzoKrT1/XMnunRZcVMySF8riMV/
Z0bXNDDayiROLxweIBDN0E71ebk82VLM4rn5JrCZmXvZyi2T2dN3h+syDabu
QHVk/V9M7Ob47+Hbg5MX5gIHP7JriyVU48hYAEHCyAhyi+PtKPFY+ypaA/Uz
jaZn1CI9tzPNQKlrYaL9xoZGZQvvF+BnBsBf8GWLHWl0iSi896PTLfcLHRZp
0X0WOp7Cn1CB9Do8JjqNbbibloHIUlLzuAL2WGbCYLdvGUDvqEVDOH63hgF6
nz+A6w5rGKH/SCNYL0TDIJuPMIi2pBq63/r87mnDNHS9/Uhda7bZMMTOYw3R
3P3Tz+++piY1DLP7GMP4dm/DKM8ebxQ2g+pj9B5hU3uxuoYhHmFb17yoDcM8
wt72VcGGMR5ha1dMp4ZBHmGDL7BUGgZ7hC3vWKENAzzChvedcg1jPMKud50q
DSM8woavRuEbRnmEDd/gxagP1H+EXV/1+zaM8ggbv+YsbxjmETa+5HA0dP4I
S1IJ5TYMsgRbQTGxaIB1T3MbLJDu/SX4yn1HWb9D3PeXYC8PHNPYSQ2jLsFz
HjjqQvHTX4IHPXDMZswKR4L//mKOr+JNQOaOMU4Pux7MUk6xjdCW+YkrwlGF
73O0ofF8T5mp6+vrl1Fequ/zCI89DbNidHFzc4N3aqmrkK9Tl3ynLI+xGnOi
k/n0PSXW7+Em63eDAPp+E12AAFKHeTGLbsxJPh7yp/hvaZTi0+jTNOG0OrLq
7HUk0CFfcPX+4EPh3mkV0Lk8dfL2zfsujvOnDOzdv0LvMN9z6HKlqJSsFo/a
JCvjS/IgTNCmw6rXSp/1xaptqwjgWfwJ/r1GwGACNIeVZuxuQ9/994en6+8/
wP9/d2LLWUvB2XEenpV0FF07UYdRGp3FpS5BhvVnKV62GibTi3AY4YHKRNE1
YWt4YQ1M5zgbp9Fc7c8meCdVARNq4+ODKFIHEYZkoyjXDw+Lj5k6iP/2UT/4
UwIWvvohzMuPkX6GCbJhlFCWKr4pPoaTqX55CrJvNlfH2TQusZyzfv7Hf/7f
/BzwejK6+Of/Sa/++d/J2A67l87+pk6ii/Mw0Y/+imdgTi6iZDjXj34I0zQq
1ClQVXYWpfF5FaAfoxzfZdwvH4S9Pr3IYHnUTyjS5ilOohv8fx5SV6GG+wAA

-->

</rfc>
