From n@arifumi.net Sun Dec 2 17:14:20 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85FD121F8946 for ; Sun, 2 Dec 2012 17:14:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.376 X-Spam-Level: X-Spam-Status: No, score=-102.376 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, J_CHICKENPOX_15=0.6, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5ujHVDlWJZvi for ; Sun, 2 Dec 2012 17:14:19 -0800 (PST) Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id A06AF21F8948 for ; Sun, 2 Dec 2012 17:14:19 -0800 (PST) Received: by mail-vb0-f44.google.com with SMTP id fc26so1271434vbb.31 for ; Sun, 02 Dec 2012 17:14:18 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:x-originating-ip:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :x-gm-message-state; bh=ozX4khfBuiIsRsv0mgHi+aBHuZtY6u8YjqDa3Sxg4aQ=; b=dFcMaFfBvHx4vA4AP9yjb+Hufa0Jxp1J9KPpnlP2XgwjATM6L3YBI+uhnGkwHcWEOM L4meclvoXqbiznFw3fH765Wt4WhRBeFldZaTES0HFlWq0bW0Fd7rdrJrwS+Mw1+LOxPR 6gcBtIpx+fpvMgWsP/fJ9OzsEaw/xTp3w1WXP3/j2RhOCJWtoQpr+BwHIHAV+AcgMmwQ PK4vjmmn+fPVDMSrNB2AsN7jXPqn9qgJDeS7W0qKesqpkhnDvt2SYwa/9zswjMupWGv2 o8y+N429+JsJCAXX8GD7b0oavAFsuOYaK+QCO6stXgjBmmj6kPbTiA1z/Ah9+wHiwY8W b5KQ== MIME-Version: 1.0 Received: by 10.52.73.228 with SMTP id o4mr6361810vdv.104.1354497258576; Sun, 02 Dec 2012 17:14:18 -0800 (PST) Sender: n@arifumi.net Received: by 10.58.44.66 with HTTP; Sun, 2 Dec 2012 17:14:18 -0800 (PST) X-Originating-IP: [192.68.248.65] In-Reply-To: <060901cdccad$0093b0e0$4001a8c0@gateway.2wire.net> References: <20121114061846.5357.32947.idtracker@ietfa.amsl.com> <060901cdccad$0093b0e0$4001a8c0@gateway.2wire.net> Date: Mon, 3 Dec 2012 10:14:18 +0900 X-Google-Sender-Auth: fbpaqyqeO7sg062R355dwGWLgfA Message-ID: Subject: Re: I-D Action: draft-ietf-6man-addr-select-opt-07.txt From: Arifumi Matsumoto To: "t.petch" Content-Type: multipart/alternative; boundary=bcaec5016295f25b5904cfe87723 X-Gm-Message-State: ALoCoQlkZhZ28+7oGIuVPpwFMlxJcwpBwX00ijqXdSdx3koq29wzSPhNW3EPrchSrNOfxWgJZiqa Cc: "ipv6@ietf.org 6man" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Dec 2012 01:14:20 -0000 --bcaec5016295f25b5904cfe87723 Content-Type: text/plain; charset=ISO-8859-1 Thank you, all. Tom, I'll compile those changes in the next revision. Chairs, can this item go to the next step after including above changes ? 2012/11/27 t.petch > Hi > > If I did comment, my comments have not been actioned so I probably did > not comment:-) > > In Abstract, suggest > /allow nodes to select appropriate address/allow nodes to select an > appropriate address/ > > and s.2 > /POLICY TABLE OPITONS/POLICY TABLE OPTIONS/ > > I think that that is all I had but will check again. > > Tom Petch > > ----- Original Message ----- > From: "Arifumi Matsumoto" > To: > Sent: Tuesday, November 27, 2012 5:05 AM > > > All, > > > > I have not received any comments on this revision. > > Please confirm that this revision reflects the concerns you raised > during > > the WGLC. > > > > Thanks. > > > > > > 2012/11/14 > > > > > > > > A New Internet-Draft is available from the on-line Internet-Drafts > > > directories. > > > This draft is a work item of the IPv6 Maintenance Working Group of > the > > > IETF. > > > > > > Title : Distributing Address Selection Policy > using > > > DHCPv6 > > > Author(s) : Arifumi Matsumoto > > > Tomohiro Fujisaki > > > Tim Chown > > > Filename : draft-ietf-6man-addr-select-opt-07.txt > > > Pages : 10 > > > Date : 2012-11-13 > > > > > > Abstract: > > > RFC 6724 defines default address selection mechanisms for IPv6 > that > > > allow nodes to select appropriate address when faced with > multiple > > > source and/or destination addresses to choose between. The RFC > 6724 > > > allowed for the future definition of methods to administratively > > > configure the address selection policy information. This > document > > > defines a new DHCPv6 option for such configuration, allowing a > site > > > administrator to distribute address selection policy overriding > the > > > default address selection parameters and policy table, and thus > > > control the address selection behavior of nodes in their site. > > > > > > > > > The IETF datatracker status page for this draft is: > > > https://datatracker.ietf.org/doc/draft-ietf-6man-addr-select-opt > > > > > > There's also a htmlized version available at: > > > http://tools.ietf.org/html/draft-ietf-6man-addr-select-opt-07 > > > > > > A diff from the previous version is available at: > > > http://www.ietf.org/rfcdiff?url2=draft-ietf-6man-addr-select-opt-07 > > > > > > > > > Internet-Drafts are also available by anonymous FTP at: > > > ftp://ftp.ietf.org/internet-drafts/ > > > > > > -------------------------------------------------------------------- > > > IETF IPv6 working group mailing list > > > ipv6@ietf.org > > > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > > > -------------------------------------------------------------------- > > > > > > > > ------------------------------------------------------------------------ > -------- > > > > -------------------------------------------------------------------- > > IETF IPv6 working group mailing list > > ipv6@ietf.org > > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > > -------------------------------------------------------------------- > > > > > --bcaec5016295f25b5904cfe87723 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Thank you, all.

Tom, I'll compile those changes in the next revi= sion.

Chairs,
can this item go to the next step after including a= bove changes ?


2012/11/27 t.= petch <ietfc@btconnect.com>
Hi

If I did comment, my comments have not been actioned so I probably did
not comment:-)

In Abstract, suggest
/allow nodes to select appropriate address/allow nodes to select an
appropriate address/

and s.2
/POLICY TABLE OPITONS/POLICY TABLE OPTIONS/

I think that that is all I had but will check again.

Tom Petch

----- Original Message -----
From: "Arifumi Matsumoto" <arifumi@nttv6.net>
To: <ipv6@ietf.org>
Sent: Tuesday, November 27, 2012 5:05 AM

> All,
>
> I have not received any comments on this revision.
> Please confirm that this revision reflects the concerns you raised
during
> the WGLC.
>
> Thanks.
>
>
> 2012/11/14 <internet-dr= afts@ietf.org>
>
> >
> > A New Internet-Draft is available from the on-line Internet-Draft= s
> > directories.
> > =A0This draft is a work item of the IPv6 Maintenance Working Grou= p of
the
> > IETF.
> >
> > =A0 =A0 =A0 =A0 Title =A0 =A0 =A0 =A0 =A0 : Distributing Address = Selection Policy
using
> > DHCPv6
> > =A0 =A0 =A0 =A0 Author(s) =A0 =A0 =A0 : Arifumi Matsumoto
> > =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Tomohiro Fuji= saki
> > =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Tim Chown
> > =A0 =A0 =A0 =A0 Filename =A0 =A0 =A0 =A0: draft-ietf-6man-addr-se= lect-opt-07.txt
> > =A0 =A0 =A0 =A0 Pages =A0 =A0 =A0 =A0 =A0 : 10
> > =A0 =A0 =A0 =A0 Date =A0 =A0 =A0 =A0 =A0 =A0: 2012-11-13
> >
> > Abstract:
> > =A0 =A0RFC 6724 defines default address selection mechanisms for = IPv6
that
> > =A0 =A0allow nodes to select appropriate address when faced with<= br> multiple
> > =A0 =A0source and/or destination addresses to choose between. =A0= The RFC
6724
> > =A0 =A0allowed for the future definition of methods to administra= tively
> > =A0 =A0configure the address selection policy information. =A0Thi= s
document
> > =A0 =A0defines a new DHCPv6 option for such configuration, allowi= ng a
site
> > =A0 =A0administrator to distribute address selection policy overr= iding
the
> > =A0 =A0default address selection parameters and policy table, and= thus
> > =A0 =A0control the address selection behavior of nodes in their s= ite.
> >
> >
> > The IETF datatracker status page for this draft is:
> > https://datatracker.ietf.org/doc/draft-ietf-6= man-addr-select-opt
> >
> > There's also a htmlized version available at:
> > http://tools.ietf.org/html/draft-ietf-6man-addr-= select-opt-07
> >
> > A diff from the previous version is available at:
> > http://www.ietf.org/rfcdiff?url2=3Ddraft= -ietf-6man-addr-select-opt-07
> >
> >
> > Internet-Drafts are also available by anonymous FTP at:
> > ftp://ftp.ietf.org/internet-drafts/
> >
> > -----------------------------------------------------------------= ---
> > IETF IPv6 working group mailing list
> > ipv6@ietf.org
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6=
> > -----------------------------------------------------------------= ---
> >
>


---------------------------------------------------------------= ---------
--------


> -------------------------------------------------------------------- > IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6<= br> > -------------------------------------------------------------------- >



--bcaec5016295f25b5904cfe87723-- From jouni.nospam@gmail.com Mon Dec 3 14:29:02 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 136BC21F8805 for ; Mon, 3 Dec 2012 14:29:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7G8sEXTeyzMj for ; Mon, 3 Dec 2012 14:29:01 -0800 (PST) Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 3A1FE21F8625 for ; Mon, 3 Dec 2012 14:29:01 -0800 (PST) Received: by mail-lb0-f172.google.com with SMTP id y2so2899010lbk.31 for ; Mon, 03 Dec 2012 14:29:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=CPDcZxuJVRyluaCAd/0dB0y06K8RmjnKBS3CGCexgl0=; b=D7xZ9SqB6gzAXkNUI72O0ekitMGaf04SWNJvO79a3jKjMhWcfhwi7BeGaPLV19lClo AjEcQNdo712tfrGhexlce2CMRgrsmU+PYBCnXeAy5coF0c0u2J+TOhiIgXoQ9/Ib286E lnuQboF6YNpVMtqJpknYuL1M3/mRyzA2seFCBfKgaxXIrB7YXBt2fAJY6ZSdEEazgAXj FMacvXUXaSNTx2tcnNhx9sr9cv6ixJsp0I8ib8uY8uROiJ3OI/mzAxoAlqmPEEy73eQW G0JeH6NxvI7XVGc7KTg+w4ctOQeDlavxdP5wNnx/3D/xCtS5p7cJpW+jl7nub6ZmMPgn jw8w== Received: by 10.152.109.145 with SMTP id hs17mr11153808lab.5.1354573740019; Mon, 03 Dec 2012 14:29:00 -0800 (PST) Received: from [188.117.15.109] ([188.117.15.109]) by mx.google.com with ESMTPS id ma15sm5890323lab.4.2012.12.03.14.28.57 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 03 Dec 2012 14:28:59 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Updated Efficient-nd posted From: Jouni Korhonen In-Reply-To: Date: Tue, 4 Dec 2012 00:28:56 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <82AE325D-BD5B-4932-9E40-D2FD5535BBDB@gmail.com> <150178BC-6127-4A25-AC77-7D2DBEFB42C8@gmail.com> To: Samita Chakrabarti X-Mailer: Apple Mail (2.1499) Cc: Bob Hinden , 6man Mailing List , Erik Nordmark , Fredrik Garneij X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Dec 2012 22:29:02 -0000 Hi Samita, sorry for delay.. my emails have been a bit in limbo. On Nov 28, 2012, at 10:13 PM, Samita Chakrabarti = wrote: [snip] (I'll just skip this part for the time being..) >>> Thanks. I am just trying to get my head around this. Current = statements for=20 >>> usability in cellular just seem superficial at the moment. For = example, currently >> I cannot agree Section 16.4. (when it comes to = cellular). >=20 > =3D=3D=3D> So, is your point that this document is NOT applicable for = cellular networks? Do you want us to modify the text in 16.4 or remove = cellaur part in 16.4? At the current state I do not see how the optimisation in this I-D would = make the situation any better what we have today in this particular = environment. Neither the "reduce number of signalings" or "tracking the = nodes" imho hold.=20 > I am not quite clear what exactly you're trying to accomplish. The = document is referring cellular networks as an example. I am after a proper use case or a justification for the statement that = the I-D will bring me great benefit in cellular (=3D=3DLTE) network. If = there is no such then referring cellular as an example is not quite = right, specifically when the I-D aims for a standards track document. If = there is one, I am happy to see it documented. - Jouni >=20 > -Samita >=20 >=20 >=20 >=20 >>=20 >>=20 >> On Nov 22, 2012, at 2:04 AM, Samita Chakrabarti wrote: >>=20 >>> Hello All: >>>=20 >>> As a follow-up from the IETF85 6man meeting presentation on=20 >>> Efficient-nd draft, we have posted a new version of the document = which incorporated comments from Carsten Bormann in the list on = editorial changes and some more clarification and editorial changes = based on individual comments. >>>=20 >>> More comments are welcome in improving the document. >>>=20 >>> Regards, >>> -Samita >>>=20 >>=20 >=20 From otroan@employees.org Thu Dec 6 03:21:04 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2693F21F8778; Thu, 6 Dec 2012 03:21:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VIi3umNYId4o; Thu, 6 Dec 2012 03:21:03 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id B652C21F8774; Thu, 6 Dec 2012 03:21:02 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArEHAGF+wFCQ/khL/2dsb2JhbABEg0e6YBZzgh4BAQQBOj8FCwtGVwaIHQYMwg2QG2EDklCET48rgnQ X-IronPort-AV: E=McAfee;i="5400,1158,6917"; a="78854465" Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-2.cisco.com with ESMTP; 06 Dec 2012 11:21:01 +0000 Received: from dhcp-10-61-106-143.cisco.com (dhcp-10-61-106-143.cisco.com [10.61.106.143]) by ams-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qB6BL0Ap022171 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 6 Dec 2012 11:21:01 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Review of draft "Prefix Assignment in DHCPv6" From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> Date: Thu, 6 Dec 2012 12:20:59 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> To: Sheng Jiang X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2012 11:21:04 -0000 Sheng, > Back in Atlanta, in DHC WG meeting, you said you would review the = document. Could you give the comments? I knew that would come back and haunt me. ;) comments below. also included dhc and 6man >> Draft: Prefix Assignment in DHCPv6 >> Presenter: Sheng Jiang >> URL: http://tools.ietf.org/html/draft-ietf-dhc-host-gen-id-04 >> Slot: 5 min >=20 >> ** Ole will review the document and maybe bring it up on 6man >=20 > Many thanks and best regards, in arbitrary order: - draft-ietf-mif-dhcpv6-route-option also supports prefix discovery = using DHCP - a host wanting a particular address, why can it not use the "hint" = option in a vanilla IA_NA? - a prefix on a link must always be coordinated with the onlink router, = so I don't understand the argument of why the "L-flag" isn't needed - we shouldn't create new DHCPv6 options with T1/T2 timers. those should = be put in a separate option - what do you do if the prefix length is different from /64? in general I think the use case presented is already supported by DHCPv6 = address assignment; the client puts the addresses it desire as hints in the IA_NA option in DHCPv6 requests. I think the argument given in the draft for operators wanting a = DHCPv6-managed network without ND is flawed. ND is required for router discovery, neighbour discovery etc anyway. and = a router on the link must be configured with the onlink prefix regardless. while we can clearly make this work, I don't think it is justified to = create a duplicate mechanism for prefix discovery. section 3.2 RFC1958. cheers, Ole From sander@steffann.nl Thu Dec 6 08:02:38 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7380121F85F4; Thu, 6 Dec 2012 08:02:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.748 X-Spam-Level: X-Spam-Status: No, score=-0.748 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, MIME_8BIT_HEADER=0.3, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JE81iUsZ5W-D; Thu, 6 Dec 2012 08:02:37 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id F411F21F85DB; Thu, 6 Dec 2012 08:02:36 -0800 (PST) Received: from [10.87.180.41] (unknown [80.187.201.44]) by mail.sintact.nl (Postfix) with ESMTP id 411D42005; Thu, 6 Dec 2012 17:02:25 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Review of draft "Prefix Assignment in DHCPv6" From: Sander Steffann In-Reply-To: Date: Thu, 6 Dec 2012 17:02:15 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <11DACE08-3FB5-44B5-B578-9E82F61F8FD7@steffann.nl> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> To: =?iso-8859-1?Q?Ole_Tr=F8an?= X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2012 16:02:38 -0000 Hi Ole, > in general I think the use case presented is already supported by = DHCPv6 address assignment; the client puts > the addresses it desire as hints in the IA_NA option in DHCPv6 = requests. >=20 > I think the argument given in the draft for operators wanting a = DHCPv6-managed network without ND is flawed. > ND is required for router discovery, neighbour discovery etc anyway. = and a router on the link must be configured > with the onlink prefix regardless. >=20 > while we can clearly make this work, I don't think it is justified to = create a duplicate mechanism for prefix discovery. I fully agree. Those are my thought as well. Thank you for writing them = down :-) Sander From samita.chakrabarti@ericsson.com Thu Dec 6 19:31:41 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8329821F8543 for ; Thu, 6 Dec 2012 19:31:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RETB67hsHxUm for ; Thu, 6 Dec 2012 19:31:41 -0800 (PST) Received: from imr3.ericy.com (imr3.ericy.com [198.24.6.13]) by ietfa.amsl.com (Postfix) with ESMTP id E014221F8542 for ; Thu, 6 Dec 2012 19:31:40 -0800 (PST) Received: from eusaamw0712.eamcs.ericsson.se ([147.117.20.181]) by imr3.ericy.com (8.13.8/8.13.8) with ESMTP id qB73VMCZ002362 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 6 Dec 2012 21:31:37 -0600 Received: from EUSAAHC006.ericsson.se (147.117.188.90) by eusaamw0712.eamcs.ericsson.se (147.117.20.181) with Microsoft SMTP Server (TLS) id 8.3.279.1; Thu, 6 Dec 2012 22:31:24 -0500 Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.02.0318.001; Thu, 6 Dec 2012 22:31:24 -0500 From: Samita Chakrabarti To: Jouni Korhonen Subject: RE: Updated Efficient-nd posted Thread-Topic: Updated Efficient-nd posted Thread-Index: AQHNyMEp2/2MA87Aa0quEyA2V+bMXZf+lcyggAkj4RiABQlFgA== Date: Fri, 7 Dec 2012 03:31:23 +0000 Message-ID: References: <82AE325D-BD5B-4932-9E40-D2FD5535BBDB@gmail.com> <150178BC-6127-4A25-AC77-7D2DBEFB42C8@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.135] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: Bob Hinden , 6man Mailing List , Erik Nordmark X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Dec 2012 03:31:41 -0000 Hi Jouni, Please see in-line below.=20 -----Original Message----- From: Jouni Korhonen [mailto:jouni.nospam@gmail.com]=20 Sent: Monday, December 03, 2012 2:29 PM To: Samita Chakrabarti Cc: 6man Mailing List; Bob Hinden; Ole Tr=F8an; Erik Nordmark; Fredrik Garn= eij Subject: Re: Updated Efficient-nd posted Hi Samita, sorry for delay.. my emails have been a bit in limbo. SC=3D=3D=3D> Same here. No worries. On Nov 28, 2012, at 10:13 PM, Samita Chakrabarti wrote: [snip] (I'll just skip this part for the time being..) >>> Thanks. I am just trying to get my head around this. Current=20 >>> statements for usability in cellular just seem superficial at the momen= t. For example, currently >> I cannot agree Section 16.4. (when it comes to= cellular). >=20 > =3D=3D=3D> So, is your point that this document is NOT applicable for cel= lular networks? Do you want us to modify the text in 16.4 or remove cellau= r part in 16.4? At the current state I do not see how the optimisation in this I-D would ma= ke the situation any better what we have today in this particular environme= nt. Neither the "reduce number of signalings" or "tracking the nodes" imho= hold.=20 > I am not quite clear what exactly you're trying to accomplish. The docume= nt is referring cellular networks as an example. I am after a proper use case or a justification for the statement that the = I-D will bring me great benefit in cellular (=3D=3DLTE) network. If there i= s no such then referring cellular as an example is not quite right, specifi= cally when the I-D aims for a standards track document. If there is one, I = am happy to see it documented. - Jouni SC=3D=3D=3D=3D=3D=3D> I understand your concern. Given that this is an IETF= generic document, it makes sense to remove the cellular/LTE reference from= this document. Will do that in the next revision. =20 Also I agree with you that the usecase in cellular or other areas that do n= ot directly fall under generic LAN concept should be documented separately. The "usecases" section will be either removed or shortened in the next rev= ision and they should be documented separately with more detail understandi= ng. Thanks again for your comments on the cellular network usage regarding effi= cient-nd. -Samita From jouni.nospam@gmail.com Thu Dec 6 23:53:35 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C22A21F8959 for ; Thu, 6 Dec 2012 23:53:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mz+D9Uianyn0 for ; Thu, 6 Dec 2012 23:53:34 -0800 (PST) Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 7929421F893E for ; Thu, 6 Dec 2012 23:53:34 -0800 (PST) Received: by mail-lb0-f172.google.com with SMTP id y2so217653lbk.31 for ; Thu, 06 Dec 2012 23:53:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=NpbDgqAhl9SRA6nZqYroc+U/3K8UYw/BiSeMHyb1Ikk=; b=wbI7Zte9B4S1fy1bPSH7LOHRRD0vjEX8eXmx1f0MoZvas3FWjwLsNG+3XoVs4T5OqN kqUAfC3lbeI5DLZR6i98hwFuj/eYlfbisKeQSooFUmSs+ZWA/u4DMkxwoHkRFC1cD3Xu sKrxoCmajtfM6gUSp1AGiJdph5hXV6EwnebAN734XRRVkRE9w4oj4LzKpHCGmwsYrL+C oEqJhC6nT4dWD9bBZ1IQWqPvqgq+fRJtr9E9IP0BVLp7Uv/GxHEoaQOQvamrixEaj76w 5VJaL83z4s1141P5dPv1xvguz1PF6OZOAgwRi73R1DWWdUsA4w9KMFjSkPfFPcAYgvfj MpUg== Received: by 10.112.42.197 with SMTP id q5mr2179913lbl.9.1354866813481; Thu, 06 Dec 2012 23:53:33 -0800 (PST) Received: from [10.224.163.80] ([194.100.72.162]) by mx.google.com with ESMTPS id sr6sm1272652lab.4.2012.12.06.23.53.29 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 06 Dec 2012 23:53:32 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Updated Efficient-nd posted From: Jouni Korhonen In-Reply-To: Date: Fri, 7 Dec 2012 09:53:28 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <82AE325D-BD5B-4932-9E40-D2FD5535BBDB@gmail.com> <150178BC-6127-4A25-AC77-7D2DBEFB42C8@gmail.com> To: Samita Chakrabarti X-Mailer: Apple Mail (2.1499) Cc: Bob Hinden , 6man Mailing List , Erik Nordmark X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Dec 2012 07:53:35 -0000 Hi Samita, On Dec 7, 2012, at 5:31 AM, Samita Chakrabarti = wrote: [snip] >=20 > SC=3D=3D=3D=3D=3D=3D> I understand your concern. Given that this is an = IETF generic document, it makes sense to remove the cellular/LTE = reference from this document. Will do that in the next revision. =20 >=20 > Also I agree with you that the usecase in cellular or other areas that = do not directly fall under generic LAN concept should be documented = separately. > The "usecases" section will be either removed or shortened in the next = revision and they should be documented separately with more detail = understanding. >=20 > Thanks again for your comments on the cellular network usage regarding = efficient-nd. And of course I am willing to help if/when needed. - Jouni >=20 > -Samita >=20 From suresh.krishnan@ericsson.com Fri Dec 7 16:16:40 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B9E121F85B2 for ; Fri, 7 Dec 2012 16:16:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5m4pZnt7RXzd for ; Fri, 7 Dec 2012 16:16:39 -0800 (PST) Received: from imr3.ericy.com (imr3.ericy.com [198.24.6.13]) by ietfa.amsl.com (Postfix) with ESMTP id B11B421F8504 for ; Fri, 7 Dec 2012 16:16:39 -0800 (PST) Received: from eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) by imr3.ericy.com (8.13.8/8.13.8) with ESMTP id qB80GcnS010150 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 7 Dec 2012 18:16:39 -0600 Received: from [142.133.112.133] (147.117.20.214) by smtps-am.internal.ericsson.com (147.117.20.32) with Microsoft SMTP Server (TLS) id 8.3.279.1; Fri, 7 Dec 2012 19:16:37 -0500 Message-ID: <50C28653.6030109@ericsson.com> Date: Fri, 7 Dec 2012 19:14:11 -0500 From: Suresh Krishnan User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: IETF IPv6 Mailing List , 6man chairs <6man-chairs@tools.ietf.org>, Softwire chairs , INT ADs Subject: Mail from softwire working group about 4rd X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Dec 2012 00:16:40 -0000 Hi all, The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) describes a solution for providing IPv4 connectivity over IPv6. The draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 Addresses. It uses a 4rd specific mark called the V octet in the first 8 bits of the Interface Identifier. There were some concerns raised in softwire about whether such addresses are actually compatible with the IPv6 addressing architecture. Whether this is actually compatible with the IPv6 addressing architecture is outside the scope of the softwire wg. Hence we would like to hear the 6man wg's perspective on this. I would like to request the wg to please go over the NOTE in Section 4.5 page 18, which explains the issue, and over IANA Considerations Section 6, and chime in on whether this is acceptable from a 6man perspective. Thanks Suresh From steenjj@gmail.com Fri Dec 7 16:51:13 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88A1021F876C for ; Fri, 7 Dec 2012 16:51:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.203 X-Spam-Level: X-Spam-Status: No, score=-2.203 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zoNX4caS84MZ for ; Fri, 7 Dec 2012 16:51:13 -0800 (PST) Received: from mail-qc0-f172.google.com (mail-qc0-f172.google.com [209.85.216.172]) by ietfa.amsl.com (Postfix) with ESMTP id 958E521F8BD0 for ; Fri, 7 Dec 2012 16:51:12 -0800 (PST) Received: by mail-qc0-f172.google.com with SMTP id b25so561308qca.31 for ; Fri, 07 Dec 2012 16:51:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=references:mime-version:in-reply-to:content-type :content-transfer-encoding:message-id:cc:x-mailer:from:subject:date :to; bh=cskSbx2tZ8hI6zJsMQYSA+Wff2uVg9WDxxWDIkHdZXg=; b=Nd3GJwk8nvLzxyRBWs4OFSVAjtTRLgj+npNYZhi4XlSLyG/U0rY2X+TSX/HKTiF4y0 FNwRbtpSdMCX1pfsXYLuNATXbx+BOoGYtjWgJFks3VmNlWYwevvTfP05IVvj++hEts7j wTVd/E/bG6yVQda20AmVaCwjHrqSj38hz13xjnOJg2emqoanyA+0MdvvYGlODPwZXp3N RrOu7OcDAHhvqrP6rDUzfNiCugCfHBli7U87nFaytw/tZopwtBdWxOgd+p588oGrhV4J unepxqXe/BeXjgnIPKR/1vkXLLQMPAHGV88bf0KyRGoRsvOAX4fQt1xF7R1d+jnRAq0s iQKg== Received: by 10.49.118.162 with SMTP id kn2mr13936579qeb.65.1354927871273; Fri, 07 Dec 2012 16:51:11 -0800 (PST) Received: from [10.133.87.48] (mobile-198-228-199-073.mycingular.net. [198.228.199.73]) by mx.google.com with ESMTPS id p11sm8693259qaz.16.2012.12.07.16.51.09 (version=SSLv3 cipher=OTHER); Fri, 07 Dec 2012 16:51:09 -0800 (PST) References: <50C28653.6030109@ericsson.com> Mime-Version: 1.0 (1.0) In-Reply-To: <50C28653.6030109@ericsson.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: X-Mailer: iPhone Mail (10A403) From: Jon Steen Subject: Re: Mail from softwire working group about 4rd Date: Fri, 7 Dec 2012 19:51:02 -0500 To: Suresh Krishnan Cc: 6man chairs <6man-chairs@tools.ietf.org>, INT ADs , IETF IPv6 Mailing List , Softwire chairs X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Dec 2012 00:51:13 -0000 So who is looking at LISP? Sent from my iPhone On Dec 7, 2012, at 7:14 PM, Suresh Krishnan w= rote: > Hi all, >=20 > The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) > describes a solution for providing IPv4 connectivity over IPv6. The > draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 > Addresses. It uses a 4rd specific mark called the V octet in the first 8 > bits of the Interface Identifier. There were some concerns raised in > softwire about whether such addresses are actually compatible with the > IPv6 addressing architecture. Whether this is actually compatible with > the IPv6 addressing architecture is outside the scope of the softwire > wg. Hence we would like to hear the 6man wg's perspective on this. I > would like to request the wg to please go over the NOTE in Section 4.5 > page 18, which explains the issue, and over IANA Considerations Section > 6, and chime in on whether this is acceptable from a 6man perspective. >=20 > Thanks > Suresh > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From internet-drafts@ietf.org Fri Dec 7 23:52:35 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C0F421F870A; Fri, 7 Dec 2012 23:52:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.527 X-Spam-Level: X-Spam-Status: No, score=-102.527 tagged_above=-999 required=5 tests=[AWL=0.072, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3zdqVH15uaZo; Fri, 7 Dec 2012 23:52:34 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9CB0D21F85D3; Fri, 7 Dec 2012 23:52:23 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Subject: I-D Action: draft-ietf-6man-uri-zoneid-06.txt X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121208075223.1719.5377.idtracker@ietfa.amsl.com> Date: Fri, 07 Dec 2012 23:52:23 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Dec 2012 07:52:35 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the IPv6 Maintenance Working Group of the IET= F. Title : Representing IPv6 Zone Identifiers in Address Literals a= nd Uniform Resource Identifiers Author(s) : Brian Carpenter Stuart Cheshire Robert M. Hinden Filename : draft-ietf-6man-uri-zoneid-06.txt Pages : 10 Date : 2012-12-07 Abstract: This document describes how the Zone Identifier of an IPv6 scoped address, as defined in RFC 4007, can be represented in a literal IPv6 address and in a Uniform Resource Identifier that includes such a literal address. It updates RFC 3986 accordingly. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-6man-uri-zoneid There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-6man-uri-zoneid-06 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-6man-uri-zoneid-06 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From brian.e.carpenter@gmail.com Sat Dec 8 00:08:09 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF15D21F860D for ; Sat, 8 Dec 2012 00:08:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.658 X-Spam-Level: X-Spam-Status: No, score=-101.658 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eOWNSCbkZGSd for ; Sat, 8 Dec 2012 00:08:09 -0800 (PST) Received: from mail-wi0-f174.google.com (mail-wi0-f174.google.com [209.85.212.174]) by ietfa.amsl.com (Postfix) with ESMTP id 5507021F85D4 for ; Sat, 8 Dec 2012 00:08:02 -0800 (PST) Received: by mail-wi0-f174.google.com with SMTP id hm9so115066wib.13 for ; Sat, 08 Dec 2012 00:08:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:content-type:content-transfer-encoding; bh=a9sQfnfRZ8oK/aUMBtixOLUJeEOYD0z+O5ZFXnUzXOs=; b=LngofT7u4BKktXNE5UgBNciYF/H4L/7BYV3XAEZ4MCZh0BecNvlTtCPTsKngXe5oi8 iARNdY2Rz0s5hsriVj85YuGFgkgabULEUkoHQGnQfHOmWd3kXr992gvbXx+gusw0Wzfq tvMpmVLnfq3jDAe+3fAAYHIOrm6j3+ZmtL2DLnRDsDw6NdIiGp876M1/OLHhSi9IUwYX myGk5FzpChLkJqBK10jKr3CQOdYfCfViO50xdcG5E5Z54PKr4zCfZ43DqKSDnfrxDfIj 7JbmGfoZNQk9u8XxneRCLNPe2oeWpGwYGIRluT/aFVUq4vglNHqq6IZ8m2OPvFywl/gi +kdQ== Received: by 10.216.141.15 with SMTP id f15mr3088000wej.116.1354954081414; Sat, 08 Dec 2012 00:08:01 -0800 (PST) Received: from [192.168.1.65] (host-2-102-217-203.as13285.net. [2.102.217.203]) by mx.google.com with ESMTPS id fv2sm1220520wib.4.2012.12.08.00.07.59 (version=SSLv3 cipher=OTHER); Sat, 08 Dec 2012 00:08:00 -0800 (PST) Message-ID: <50C2F570.1070004@gmail.com> Date: Sat, 08 Dec 2012 08:08:16 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: 6man Subject: draft-ietf-6man-uri-zoneid-06 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: ylafon@w3.org, martin.thomson@gmail.com, radiaperlman@gmail.com X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Dec 2012 08:08:10 -0000 This draft has been updated following IETF Last Call and IESG comments. The various A-Ds are happy with the changes, but some of changes are non-trivial so should be reviewed by the WG. The draft is at https://datatracker.ietf.org/doc/draft-ietf-6man-uri-zoneid/ and the diffs are at http://tools.ietf.org/rfcdiff?url2=draft-ietf-6man-uri-zoneid-06.txt This rest of this note discusses the changes between -05 and -06 that are not simple editorial corrections or clarifications. They are arranged according to the reviewer who brought each issue up. Martin Thomson (Gen-ART review): >> we also recommend that URI parsers accept bare "%" signs >> (i.e., a "%" not followed by two valid hexadecimal characters). This >> makes it easy for a user to copy and paste a string such as >> "fe80::a%en1" from the output of a "ping" command and have it work. >> >> Even though 01 is " two valid hexadecimal characters", U+01 is not a >> valid URI character at that position. Thus, the range of inferred >> zone IDs is (potentially) larger than the text implies. s/valid/valid and meaningful/ Martin also suggested >> Software that accepts URIs with unescaped portions can permit the >> entry of IPv6 addresses with an unescaped zone separator. but that doesn't seem to be clear for tricky cases like %ee. Radia Perlman (Security directorate review): >> And also, with my preference for specifying mandatory behavior rather than >> recommendation... >> perhaps saying something like >> >> " A MUST NOT contain ASCII characters classified >> in RFC 3986 as "reserved". MUST NOT doesn't work because of pre-existing implementations that allow reserved characters. Reworded for clarity, and added However, the syntax below does allow such characters to be percent-encoded, for compatibility with existing devices that use them. >> Again, >> "The rules in [RFC5952 ] SHOULD be >> applied in producing URIs." >> Why not MUST be applied? RFC 5952 itself is one long SHOULD, so we don't think that saying MUST makes sense. >> similarly >> >> "To limit this risk, implementations SHOULD NOT allow use of this >> format except for well-defined usages such as sending to link local >> addresses under prefix fe80::/10." >> >> I'd think it would be better to say MUST NOT, and also, to specify what it >> should >> do if it receives such a thing. Agree on this MUST NOT. The problem with specifying receiver behaviour, according to Yves Lafon, is that filtering incoming URIs "would be a significant change to implementations". His advice is to strip the ZoneID from outgoing HTTP requests. This is now a MUST. Radia again: > I think it would be good to have an explicit discussion in the WG, not on > the entire draft, but on specifically, whether the syntax should be > standardized so that the same syntax works the same on all implementations, > or whether there is some reason why it's important for implementers to have > flexibility in how they interpret the string, and it's not so important > that URIs work differently with different implementations. I'd be more > convinced that people want it this way if there was discussion on the > mailing list, focusing people exactly on this issue. (and I'm also curious > about why the flexibility is important). It isn't that flexibility is important; it's that this flexibility exists de facto in the real world of browsers. The problem is that browser behaviour in interpreting the user input string is not standardised by anybody. To hammer on that particular screw, the tool we have available is the URI syntax. This is not ideal. We've changed the text of section 3 to try and make this clear. Stephen Farrell (IESG): > - 2nd para of section 3 says that browsers "should" accept a > bare % as input. I don't know if you mean that "should" as a > 2119 SHOULD or not. > > - Same place: Do you need to say that the browser MUST properly > escape that if it sends the URI anywhere, that is, that the URI > emitted MUST conform to this spec and include e.g., "%25eth0" > and not just "%eth0"? That section has been reworded to avoid any normative language, because we cannot realistically give instructions to browser writers. Also (see above) we now clarify that such URIs should never be *sent* anywhere. > - Idle curiosity: anyone know if its possible to use a % > character in an interface name on any common OS? We've made it clear that if this case happens, it has to be escaped as %25. Yves Lafon (Apps Area review): > Does it mean that such URIs can be present in an HTML document or that > they MAY allow bare "%" signs when the URI is pasted in the address bar? > (Those are two different use cases, and browsers may have different code paths for both). Both cases now mentioned. > An HTTP server or proxy MUST ignore any ZoneID attached to an > incoming URI, as it only has local significance at the sending host. > > A proxy can be considered as a sending host, so does it mean that a the receiving end MUST strip all ZoneID before processing the request? (and it would be a significant change to implementations), or could this be resolved by mandating Web browser to strip ZoneID prior to sending the request as it is only significant for the sending host and as it is the implementation that needs to be updated to recognize the new syntax? Good point, we switched the responsibility to the sender. Barry Leiba (IESG): > -- Section 3, second paragraph -- > As discussed in the AppsDir review thread, maybe it would help to add > something like this at the end of the paragraph?: > > Such bare "%" signs are for user interface convenience, and must be > turned into properly escaped characters ("%25" encodes "%" in URIs) > before the URI is used in any protocol. Yes > I think it would be useful to also say something about what happens if, > say, instead of "en1", there's a ZoneID called "ee1". A URI parser > encountering "fe80::a%ee1" would have to decide whether to interpret the > "%" as "%25", or whether to interpret "%ee" as a percent-escaped 0xEE > character. Advice would be useful; lacking useful advice, a warning that > this could happen would at least help a little. Called out the %ee1 example for clarity. Brian + co-authors From internet-drafts@ietf.org Sun Dec 9 22:35:23 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E503521F8E23; Sun, 9 Dec 2012 22:35:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.528 X-Spam-Level: X-Spam-Status: No, score=-102.528 tagged_above=-999 required=5 tests=[AWL=0.071, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5e9OYeFunpcV; Sun, 9 Dec 2012 22:35:21 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 624D221F8DE9; Sun, 9 Dec 2012 22:34:52 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Subject: I-D Action: draft-ietf-6man-nd-extension-headers-02.txt X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121210063452.31978.83819.idtracker@ietfa.amsl.com> Date: Sun, 09 Dec 2012 22:34:52 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Dec 2012 06:35:23 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the IPv6 Maintenance Working Group of the IET= F. Title : Security Implications of IPv6 Fragmentation with IPv6 Ne= ighbor Discovery Author(s) : Fernando Gont Filename : draft-ietf-6man-nd-extension-headers-02.txt Pages : 13 Date : 2012-12-09 Abstract: This document analyzes the security implications of using IPv6 Extension Headers with Neighbor Discovery (ND) messages. It updates RFC 4861 such that use of the IPv6 Fragmentation Header is forbidden in all Neighbor Discovery messages, thus allowing for simple and effective counter-measures for Neighbor Discovery attacks. Finally, it discusses the security implications of using IPv6 fragmentation with SEcure Neighbor Discovery (SEND), and formally updates RFC 3971 to provide advice regarding how the aforementioned security implications can be prevented. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-6man-nd-extension-headers There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-6man-nd-extension-headers-02 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-6man-nd-extension-headers-02 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From xiayangsong@huawei.com Sun Dec 9 17:38:24 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC6AF21F8D18; Sun, 9 Dec 2012 17:38:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.699 X-Spam-Level: X-Spam-Status: No, score=-5.699 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_22=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V5-sVxw4Y4uG; Sun, 9 Dec 2012 17:38:24 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id 9066221F8D17; Sun, 9 Dec 2012 17:38:23 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id AMI12242; Mon, 10 Dec 2012 01:38:22 +0000 (GMT) Received: from LHREML401-HUB.china.huawei.com (10.201.5.240) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Mon, 10 Dec 2012 01:37:38 +0000 Received: from SZXEML431-HUB.china.huawei.com (10.72.61.39) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.1.323.3; Mon, 10 Dec 2012 01:38:21 +0000 Received: from SZXEML539-MBS.china.huawei.com ([169.254.5.165]) by szxeml431-hub.china.huawei.com ([10.72.61.39]) with mapi id 14.01.0323.003; Mon, 10 Dec 2012 09:38:10 +0800 From: Xiayangsong To: =?iso-8859-1?Q?Ole_Tr=F8an?= , Sheng Jiang Subject: RE: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: AQHN06PpGGmwQfROEkan4/fgoay/YpgRQcKg Date: Mon, 10 Dec 2012 01:38:09 +0000 Message-ID: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> In-Reply-To: Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.103.48] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Mon, 10 Dec 2012 00:34:28 -0800 Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Dec 2012 01:38:24 -0000 Hi Ole Thank you your review. Please see my inline response. Thanks Frank -----Original Message----- From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] On Behalf Of O= le Tr?an Sent: Thursday, December 06, 2012 7:21 PM To: Sheng Jiang Cc: WG; IPv6 List Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Sheng, > Back in Atlanta, in DHC WG meeting, you said you would review the documen= t. Could you give the comments? I knew that would come back and haunt me. ;) comments below. also included dhc and 6man >> Draft: Prefix Assignment in DHCPv6 >> Presenter: Sheng Jiang >> URL: http://tools.ietf.org/html/draft-ietf-dhc-host-gen-id-04 >> Slot: 5 min >=20 >> ** Ole will review the document and maybe bring it up on 6man >=20 > Many thanks and best regards, in arbitrary order: - draft-ietf-mif-dhcpv6-route-option also supports prefix discovery using D= HCP Frank=3D>Our draft is about prefix for a host's address formulation. - a host wanting a particular address, why can it not use the "hint" option= in a vanilla IA_NA? Frank=3D>This draft is about prefix which is a part of address. - a prefix on a link must always be coordinated with the onlink router, so = I don't understand the argument of why the "L-flag" isn't needed Frank=3D>we can discuss further. - we shouldn't create new DHCPv6 options with T1/T2 timers. those should be= put in a separate option Frank=3D>Please give me a link so that I could check the "SHOULDN'T" rule. - what do you do if the prefix length is different from /64? Frank=3D>We can discuss later. in general I think the use case presented is already supported by DHCPv6 ad= dress assignment; the client puts the addresses it desire as hints in the IA_NA option in DHCPv6 requests. Frank=3D>I would like to highlight that we should give an option a clear de= finition.=20 Wild usage of existing option is a double sword. I think the argument given in the draft for operators wanting a DHCPv6-mana= ged network without ND is flawed. ND is required for router discovery, neighbour discovery etc anyway. and a = router on the link must be configured with the onlink prefix regardless. Frank=3D> ND is not mandatory for network deployments. AFASIK, ND is optio= nal, while DHCPv6 is mandatory for WiMAX network.=20 while we can clearly make this work, I don't think it is justified to creat= e a duplicate mechanism for prefix discovery. section 3.2 RFC1958. Frank=3D>I don't believe this is "a duplicate mechanism" for "THE SAME THIN= G".=20 cheers, Ole _______________________________________________ dhcwg mailing list dhcwg@ietf.org https://www.ietf.org/mailman/listinfo/dhcwg From otroan@employees.org Mon Dec 10 02:52:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 738DF21F8BE6; Mon, 10 Dec 2012 02:52:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NnYNPp7jpzuO; Mon, 10 Dec 2012 02:52:27 -0800 (PST) Received: from ams-iport-3.cisco.com (ams-iport-3.cisco.com [144.254.224.146]) by ietfa.amsl.com (Postfix) with ESMTP id 35EDE21F8E56; Mon, 10 Dec 2012 02:52:26 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AtcHAAy+xVCQ/khN/2dsb2JhbABEg0iCKLkBFnOCHwEFeRALRlcGiCQMtgKQIWEDlyKET4pdgnQ X-IronPort-AV: E=McAfee;i="5400,1158,6921"; a="10290500" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-3.cisco.com with ESMTP; 10 Dec 2012 10:52:25 +0000 Received: from [10.61.105.36] (dhcp-10-61-105-36.cisco.com [10.61.105.36]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBAAqO8E029491 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Mon, 10 Dec 2012 10:52:24 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: Date: Mon, 10 Dec 2012 11:52:24 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <53F1D668-4D8A-440F-BAB3-6E970BBD26B6@employees.org> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> To: Xiayangsong X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Dec 2012 10:52:28 -0000 > - we shouldn't create new DHCPv6 options with T1/T2 timers. those = should be put in a separate option > Frank=3D>Please give me a link so that I could check the "SHOULDN'T" = rule. wouldn't go as far as claiming it is a "SHOULD NOT". = http://tools.ietf.org/html/draft-ietf-dhc-dhcpv6-stateful-issues-03#sectio= n-4.3 if we were to create new IA options I do think we should fix this = though. preferably in rfc3315bis. cheers, Ole= From xiayangsong@huawei.com Mon Dec 10 03:37:59 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95B6921F8E5E; Mon, 10 Dec 2012 03:37:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.999 X-Spam-Level: X-Spam-Status: No, score=-5.999 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hvHyFDDnILlp; Mon, 10 Dec 2012 03:37:59 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id 15ECE21F8E66; Mon, 10 Dec 2012 03:37:56 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id AMI60822; Mon, 10 Dec 2012 11:37:56 +0000 (GMT) Received: from LHREML406-HUB.china.huawei.com (10.201.5.243) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Mon, 10 Dec 2012 11:37:11 +0000 Received: from SZXEML456-HUB.china.huawei.com (10.82.67.199) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.1.323.3; Mon, 10 Dec 2012 11:37:55 +0000 Received: from SZXEML539-MBS.china.huawei.com ([169.254.5.165]) by szxeml456-hub.china.huawei.com ([10.82.67.199]) with mapi id 14.01.0323.003; Mon, 10 Dec 2012 19:37:42 +0800 From: Xiayangsong To: =?iso-8859-1?Q?Ole_Tr=F8an?= Subject: RE: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: AQHN06PpGGmwQfROEkan4/fgoay/YpgRQcKggAAZuQCAAI6XkA== Date: Mon, 10 Dec 2012 11:37:42 +0000 Message-ID: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <53F1D668-4D8A-440F-BAB3-6E970BBD26B6@employees.org> In-Reply-To: <53F1D668-4D8A-440F-BAB3-6E970BBD26B6@employees.org> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.103.48] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Mon, 10 Dec 2012 04:19:04 -0800 Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Dec 2012 11:37:59 -0000 Hi Ole I read the texts you pointed to. I believe this inconvenience needs more systematical way to fix, which is beyond the scope of the draft. Thanks Frank -----Original Message----- From: Ole Tr=F8an [mailto:otroan@employees.org]=20 Sent: Monday, December 10, 2012 6:52 PM To: Xiayangsong Cc: Sheng Jiang; WG; IPv6 List Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" > - we shouldn't create new DHCPv6 options with T1/T2 timers. those should = be put in a separate option > Frank=3D>Please give me a link so that I could check the "SHOULDN'T" rul= e. wouldn't go as far as claiming it is a "SHOULD NOT". http://tools.ietf.org/html/draft-ietf-dhc-dhcpv6-stateful-issues-03#section= -4.3 if we were to create new IA options I do think we should fix this though. p= referably in rfc3315bis. cheers, Ole From internet-drafts@ietf.org Tue Dec 11 00:38:44 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2066421F8793; Tue, 11 Dec 2012 00:38:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.4 X-Spam-Level: X-Spam-Status: No, score=-102.4 tagged_above=-999 required=5 tests=[AWL=-0.060, BAYES_00=-2.599, SARE_SUB_OBFU_Z=0.259, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TzZK9sXDtTBy; Tue, 11 Dec 2012 00:38:43 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A15AD21F878B; Tue, 11 Dec 2012 00:38:43 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Subject: I-D Action: draft-ietf-6man-udpzero-08.txt X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121211083843.29785.53438.idtracker@ietfa.amsl.com> Date: Tue, 11 Dec 2012 00:38:43 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 08:38:44 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the IPv6 Maintenance Working Group of the IET= F. Title : Applicability Statement for the use of IPv6 UDP Datagram= s with Zero Checksums Author(s) : Godred Fairhurst Magnus Westerlund Filename : draft-ietf-6man-udpzero-08.txt Pages : 37 Date : 2012-12-11 Abstract: This document provides an applicability statement for the use of UDP transport checksums with IPv6. It defines recommendations and requirements for the use of IPv6 UDP datagrams with a zero UDP checksum. It describes the issues and design principles that need to be considered when UDP is used with IPv6 to support tunnel encapsulations and examines the role of the IPv6 UDP transport checksum. An appendix presents a summary of the trade-offs that were considered in evaluating the safety of the update to RFC 2460 that updates use of the UDP checksum with IPv6. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-6man-udpzero There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-6man-udpzero-08 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-6man-udpzero-08 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From internet-drafts@ietf.org Tue Dec 11 00:47:26 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 158C221F84FC; Tue, 11 Dec 2012 00:47:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.529 X-Spam-Level: X-Spam-Status: No, score=-102.529 tagged_above=-999 required=5 tests=[AWL=0.070, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mfPk7Bn3Nrso; Tue, 11 Dec 2012 00:47:21 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7233C21F86C5; Tue, 11 Dec 2012 00:47:21 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Subject: I-D Action: draft-ietf-6man-udpchecksums-06.txt X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121211084721.24272.17540.idtracker@ietfa.amsl.com> Date: Tue, 11 Dec 2012 00:47:21 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 08:47:26 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the IPv6 Maintenance Working Group of the IET= F. Title : IPv6 and UDP Checksums for Tunneled Packets Author(s) : Marshall Eubanks AmericaFree.TV LLC P.F. Chimento Magnus Westerlund Filename : draft-ietf-6man-udpchecksums-06.txt Pages : 12 Date : 2012-12-11 Abstract: This document provides an update of the Internet Protocol version 6 (IPv6) specification (RFC2460) to improve the performance in the use case when a tunnel protocol uses UDP with IPv6 to tunnel packets. The performance improvement is obtained by relaxing the IPv6 UDP checksum requirement for suitable tunneling protocol where header information is protected on the "inner" packet being carried. This relaxation removes the overhead associated with the computation of UDP checksums on IPv6 packets used to carry tunnel protocols. The specification describes how the IPv6 UDP checksum requirement can be relaxed for the situation where the encapsulated packet itself contains a checksum. The limitations and risks of this approach are described, and restrictions specified on the use of the method. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-6man-udpchecksums There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-6man-udpchecksums-06 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-6man-udpchecksums-06 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From magnus.westerlund@ericsson.com Tue Dec 11 00:54:29 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59E4621F8797 for ; Tue, 11 Dec 2012 00:54:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.12 X-Spam-Level: X-Spam-Status: No, score=-106.12 tagged_above=-999 required=5 tests=[AWL=-0.130, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4, SARE_SUB_OBFU_Z=0.259, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H+uZXsgHcC4i for ; Tue, 11 Dec 2012 00:54:28 -0800 (PST) Received: from mailgw2.ericsson.se (mailgw2.ericsson.se [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id 39DA221F8792 for ; Tue, 11 Dec 2012 00:54:28 -0800 (PST) X-AuditID: c1b4fb25-b7fb26d000006129-da-50c6f4c2f90f Received: from esessmw0184.eemea.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw2.ericsson.se (Symantec Mail Security) with SMTP id CC.BD.24873.2C4F6C05; Tue, 11 Dec 2012 09:54:26 +0100 (CET) Received: from [127.0.0.1] (153.88.115.8) by esessmw0184.eemea.ericsson.se (153.88.115.82) with Microsoft SMTP Server id 8.3.279.1; Tue, 11 Dec 2012 09:54:24 +0100 Message-ID: <50C6F4C0.5070502@ericsson.com> Date: Tue, 11 Dec 2012 09:54:24 +0100 From: Magnus Westerlund User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "ipv6@ietf.org" Subject: Re: I-D Action: draft-ietf-6man-udpzero-08.txt References: <20121211083843.29785.53438.idtracker@ietfa.amsl.com> In-Reply-To: <20121211083843.29785.53438.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrJJMWRmVeSWpSXmKPExsUyM+Jvje6hL8cCDD63mlu8PPueyYHRY8mS n0wBjFFcNimpOZllqUX6dglcGbP/djAXXJeqOPb5PnsD42zRLkZODgkBE4m1X36xQthiEhfu rWfrYuTiEBI4ySix9NZbKGc5o8TWGX+Yuxg5OHgFtCVObY4DaWARUJXY8biVGcRmE7CQuPmj kQ3EFhXwlZi15xcTiM0rIChxcuYTFhBbREBZYkb3ObAaYQFzicuTTrGCjBQScJR4e1sTJMwp 4CTRuHo9E8Q9khKLpnWCtTIL6ElMudrCCGHLSzRvnQ22VgjomoamDtYJjIKzkGybhaRlFpKW BYzMqxjZcxMzc9LLjTYxAoPv4JbfqjsY75wTOcQozcGiJM5rvXWPv5BAemJJanZqakFqUXxR aU5q8SFGJg5OqQbGQKmm/58dV5SZuRrsvD0natvPsvMPzp0Qm+3g7rEiXHbdzrUpv2ZGin6Z 9XHWPLWPca+3ycTeeXP8fYuH8Cnrs4lvwt1UPsdsWT298fDqpIUyKXESalPL6x9t7rTMypgv WbFYi0nfTdflqKqk2+54Se+wI0/uf34XzLvzZuXMaa1n1V9v/rdzixJLcUaioRZzUXEiAHAc Rn8MAgAA X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 08:54:29 -0000 WG, Sorry for not meeting my promise to ensure this was available before the end of November. The editing and reviewing to get the two documents consistent took a bit longer than expected. These updates represent some major changes due to the restructuring into an applicability statement. This makes the Diff very unsuitable for a review. So I do hope that a number of the WG members can review both the documents. We need confirmation that we havne't screwed up something or changed the document beyond what there be consensus for. I will note that when making this into a AS we have generalized the limitations to not be as tunnel specific as they where. So this definitely needs review. They have also been split into clearer sender, and receiver node requirements as well as usage requirements. I will also remind you that these document will need to go through a new IETF last call due to the intended status change. I believe the intention is to do this jointly with the WG last call. Cheers Magnus On 2012-12-11 09:38, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the IPv6 Maintenance Working Group of the IETF. > > Title : Applicability Statement for the use of IPv6 UDP Datagrams with Zero Checksums > Author(s) : Godred Fairhurst > Magnus Westerlund > Filename : draft-ietf-6man-udpzero-08.txt > Pages : 37 > Date : 2012-12-11 > > Abstract: > This document provides an applicability statement for the use of UDP > transport checksums with IPv6. It defines recommendations and > requirements for the use of IPv6 UDP datagrams with a zero UDP > checksum. It describes the issues and design principles that need to > be considered when UDP is used with IPv6 to support tunnel > encapsulations and examines the role of the IPv6 UDP transport > checksum. An appendix presents a summary of the trade-offs that were > considered in evaluating the safety of the update to RFC 2460 that > updates use of the UDP checksum with IPv6. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-6man-udpzero > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-6man-udpzero-08 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-ietf-6man-udpzero-08 > > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > -- Magnus Westerlund ---------------------------------------------------------------------- Multimedia Technologies, Ericsson Research EAB/TVM ---------------------------------------------------------------------- Ericsson AB | Phone +46 10 7148287 Färögatan 6 | Mobile +46 73 0949079 SE-164 80 Stockholm, Sweden| mailto: magnus.westerlund@ericsson.com ---------------------------------------------------------------------- From magnus.westerlund@ericsson.com Tue Dec 11 00:57:57 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A20B21F877F for ; Tue, 11 Dec 2012 00:57:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.24 X-Spam-Level: X-Spam-Status: No, score=-106.24 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WkH13hTLJ8Kw for ; Tue, 11 Dec 2012 00:57:53 -0800 (PST) Received: from mailgw2.ericsson.se (mailgw2.ericsson.se [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id D4FFD21F8785 for ; Tue, 11 Dec 2012 00:57:52 -0800 (PST) X-AuditID: c1b4fb25-b7fb26d000006129-37-50c6f58f0d1a Received: from esessmw0184.eemea.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw2.ericsson.se (Symantec Mail Security) with SMTP id 8C.5E.24873.F85F6C05; Tue, 11 Dec 2012 09:57:52 +0100 (CET) Received: from [127.0.0.1] (153.88.115.8) by esessmw0184.eemea.ericsson.se (153.88.115.82) with Microsoft SMTP Server id 8.3.279.1; Tue, 11 Dec 2012 09:57:51 +0100 Message-ID: <50C6F58F.1000001@ericsson.com> Date: Tue, 11 Dec 2012 09:57:51 +0100 From: Magnus Westerlund User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: ipv6@ietf.org Subject: Re: I-D Action: draft-ietf-6man-udpchecksums-06.txt References: <20121211084721.24272.17540.idtracker@ietfa.amsl.com> In-Reply-To: <20121211084721.24272.17540.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrJJMWRmVeSWpSXmKPExsUyM+Jvje6Er8cCDOb0slq8PPueyYHRY8mS n0wBjFFcNimpOZllqUX6dglcGddm3WMueC1VcbfnPnsD42TRLkZODgkBE4kNV24zQthiEhfu rWfrYuTiEBI4ySjx/eAuJghnOaNE994rQA4HB6+AtsTnhXwgDSwCqhIN73qZQWw2AQuJmz8a 2UBsUQFfiVl7fjGB2LwCghInZz5hAbFFgOztD36A2cICNhI396xkBRkpJOAoceVLDkiYU8BJ Ys7VZhaIeyQlFk3rBLOZBfQkplxtYYSw5SWat84GWysEdE1DUwfrBEbBWUi2zULSMgtJywJG 5lWM7LmJmTnp5UabGIHBd3DLb9UdjHfOiRxilOZgURLntd66x19IID2xJDU7NbUgtSi+qDQn tfgQIxMHp1QDo6nxvIKKh6sjjlir3Yxo3q6RfUCjzHHqS5UHbLfmR7XM3nEy4toj96xZUVdT V5muThWcJu9o+23X1xqp2826Dhpfd5xv2Huo76zg+ygVWQutlNVHshYdn93o0Fzc1CEef/3K jhtph90EZjzy2rRcjCWjJ030VL6/0Orq7xVnemyOlyv+Plz6RomlOCPRUIu5qDgRAArkDgIM AgAA X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 08:57:57 -0000 WG, Sorry for not meeting my promise to ensure this was available before the end of November. The editing and reviewing to get the two documents consistent took a bit longer than expected. These updates represent some major changes due to the restructuring into an applicability statement of draft-ietf-6man-udpzero-08. This makes the Diff very unsuitable for a review. So I do hope that a number of the WG members can review both the documents. We need confirmation that we haven't screwed up something or changed the document beyond what there be consensus for. This document has massive changes in the discussion and in how the RFC2460 specification update is done. So please review. Cheers Magnus On 2012-12-11 09:47, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the IPv6 Maintenance Working Group of the IETF. > > Title : IPv6 and UDP Checksums for Tunneled Packets > Author(s) : Marshall Eubanks > AmericaFree.TV LLC > P.F. Chimento > Magnus Westerlund > Filename : draft-ietf-6man-udpchecksums-06.txt > Pages : 12 > Date : 2012-12-11 > > Abstract: > This document provides an update of the Internet Protocol version 6 > (IPv6) specification (RFC2460) to improve the performance in the use > case when a tunnel protocol uses UDP with IPv6 to tunnel packets. > The performance improvement is obtained by relaxing the IPv6 UDP > checksum requirement for suitable tunneling protocol where header > information is protected on the "inner" packet being carried. This > relaxation removes the overhead associated with the computation of > UDP checksums on IPv6 packets used to carry tunnel protocols. The > specification describes how the IPv6 UDP checksum requirement can be > relaxed for the situation where the encapsulated packet itself > contains a checksum. The limitations and risks of this approach are > described, and restrictions specified on the use of the method. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-6man-udpchecksums > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-6man-udpchecksums-06 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-ietf-6man-udpchecksums-06 > > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > > -- Magnus Westerlund ---------------------------------------------------------------------- Multimedia Technologies, Ericsson Research EAB/TVM ---------------------------------------------------------------------- Ericsson AB | Phone +46 10 7148287 Färögatan 6 | Mobile +46 73 0949079 SE-164 80 Stockholm, Sweden| mailto: magnus.westerlund@ericsson.com ---------------------------------------------------------------------- From brian.e.carpenter@gmail.com Tue Dec 11 02:54:44 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 278BC21F8803 for ; Tue, 11 Dec 2012 02:54:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.577 X-Spam-Level: X-Spam-Status: No, score=-103.577 tagged_above=-999 required=5 tests=[AWL=0.022, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G5m9wvYjMEfj for ; Tue, 11 Dec 2012 02:54:43 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id E87AE21F878B for ; Tue, 11 Dec 2012 02:54:42 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id w11so1631945bku.31 for ; Tue, 11 Dec 2012 02:54:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:content-type:content-transfer-encoding; bh=OcOdj6PPuzr7H36HlAm2u+x7yIM2aMzgSHu/VqmBPGU=; b=NlKUxtvjjs4I2uRRfi42BCUzjc3RkZZmTYR18Ib3ex+3qWd8gD8s1DplUzz7Xd8OI/ +Dn9TUamEDonsMCBBBx59FRsIC0eVEhzx1YLiy1P1PYDhfXw7r+W11x9tht1StEbBBjM uRYQVW2f2FJtYslTJky2pvvdBQFU+5Y9Uiy5SMImHfFQjNtmXGObj6e3+xh7KaPgE/8U 1wB8yFr9hxsx71ntZund1CHUt1nN/PT0ISIi+4JnVgEstghMAe5HQt9tY0nRmX1t5tIy 65ZZ+2WmeNmVqfr3na4knIjatHBU2+HMCOf25LwVChF4hYvaJ+cdc1d1bUIG8d5EMGVt hY0g== Received: by 10.204.11.208 with SMTP id u16mr6251190bku.81.1355223282069; Tue, 11 Dec 2012 02:54:42 -0800 (PST) Received: from [128.232.110.79] (c079.al.cl.cam.ac.uk. [128.232.110.79]) by mx.google.com with ESMTPS id r16sm4629286bkv.3.2012.12.11.02.54.39 (version=SSLv3 cipher=OTHER); Tue, 11 Dec 2012 02:54:40 -0800 (PST) Message-ID: <50C71109.5080205@gmail.com> Date: Tue, 11 Dec 2012 10:55:05 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Suresh Krishnan Subject: Re: Mail from softwire working group about 4rd Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: int-ads@tools.ietf.org, 6man , softwire-chairs@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 10:54:44 -0000 Hi Suresh, > The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) > describes a solution for providing IPv4 connectivity over IPv6. The > draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 > Addresses. It uses a 4rd specific mark called the V octet in the first 8 > bits of the Interface Identifier. There were some concerns raised in > softwire about whether such addresses are actually compatible with the > IPv6 addressing architecture. Whether this is actually compatible with > the IPv6 addressing architecture is outside the scope of the softwire > wg. Hence we would like to hear the 6man wg's perspective on this. I > would like to request the wg to please go over the NOTE in Section 4.5 > page 18, which explains the issue, and over IANA Considerations Section > 6, and chime in on whether this is acceptable from a 6man perspective. It certainly makes me nervous. The proposed format misuses the "g" bit, which is supposed to flag multicast. Can it be proved beyond doubt that such an address will never escape a context in which the V octet will only be interpreted 4rd-style? This is not clear to me from the draft. I would be less nervous if you could also set the OUI bits to a reserved value for this purpose. For this, the V octet has its "u" and "g" bits of [RFC4291] both set to 1, so that they differ from "u" = 0, reserved for Interface IDs that have local-scope, and also differs from "u" = 1 and "g"= 0, reserved for unicast Interface IDs using the EUI-64 format. Bits That should be "modified EUI-64 format" other than "u" and "g", are proposed to be 0, giving V = 0x03. 4rd is thus the first "future technology that can take advantage of interface identifiers with universal scope" [RFC4291]. I find that sentence hard to swallow. It's recycling the u and g bits but I don't see how it takes advantage of universal scope. I would just delete the sentence. As such, it needs to be endorsed by the 6man working group and IANA (Section 6). This sentence too can be deleted before RFC publication. o An IPv6 Interface-ID type reserved for 4rd (the V octet of Section 4.5). For this creation of new registry is suggested for Interface-ID types of unicast addresses that have neither local scope nor the universal scope of Modified EUI-64 format [RFC4291]). This registry is intended to be used for new Interface-ID types that may be useful in the future. I don't get this. The possible ug combinations are all theoretically valid today, aren't they? 11 means globally unique multicast. The only way you can protect them as a 4rd flag is by using a dummy OUI value, as far as I can see. I think that is what you should ask for (from IEEE, not IANA). Regards Brian Carpenter From despres.remi@laposte.net Tue Dec 11 06:36:02 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 643D921F8776 for ; Tue, 11 Dec 2012 06:36:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.949 X-Spam-Level: X-Spam-Status: No, score=-1.949 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8t9NqPcsec5k for ; Tue, 11 Dec 2012 06:36:01 -0800 (PST) Received: from smtp25.services.sfr.fr (smtp25.services.sfr.fr [93.17.128.120]) by ietfa.amsl.com (Postfix) with ESMTP id 7659721F8754 for ; Tue, 11 Dec 2012 06:36:00 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2511.sfr.fr (SMTP Server) with ESMTP id D93BA7000151; Tue, 11 Dec 2012 15:35:59 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2511.sfr.fr (SMTP Server) with ESMTP id 126FE7000111; Tue, 11 Dec 2012 15:35:59 +0100 (CET) X-SFR-UUID: 20121211143559756.126FE7000111@msfrf2511.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50C71109.5080205@gmail.com> Date: Tue, 11 Dec 2012 15:35:58 +0100 Message-Id: <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> References: <50C71109.5080205@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Cc: int-ads@tools.ietf.org, 6man , Suresh Krishnan , softwire-chairs@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 14:36:02 -0000 Hi Brian, Thank you for the quick comments on this issue. Let me explain more below. 2012-12-11 11:55, Brian E Carpenter : > Hi Suresh, >=20 >> The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) >> describes a solution for providing IPv4 connectivity over IPv6. The >> draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 >> Addresses. It uses a 4rd specific mark called the V octet in the = first 8 >> bits of the Interface Identifier. There were some concerns raised in >> softwire about whether such addresses are actually compatible with = the >> IPv6 addressing architecture. Whether this is actually compatible = with >> the IPv6 addressing architecture is outside the scope of the softwire >> wg. Hence we would like to hear the 6man wg's perspective on this. I >> would like to request the wg to please go over the NOTE in Section = 4.5 >> page 18, which explains the issue, and over IANA Considerations = Section >> 6, and chime in on whether this is acceptable from a 6man = perspective. >=20 > It certainly makes me nervous. The proposed format misuses the "g" = bit, > which is supposed to flag multicast. > Can it be proved beyond doubt that > such an address will never escape a context in which the V octet will > only be interpreted 4rd-style? No, but this is AFAIK acceptable: - If a 4rd packet enters, in a 4rd domain, a customer site that has no = 4rd CE will be routed in this site like any other IPv6 packet, based on = its IPv6 prefix. - It is guaranteed, however, that no properly configured interface will = ever be reached at this address. Reason is precisely that no properly = configured host may have an interface ID starting with the 4rd exclusive = /8 prefix. This prefix is so far called the V octet, for historical reasons, but = could IMHO be advantageously renamed to be more intuitive (e.g. 4rd IID = prefix). =20 > This is not clear to me from the draft. >=20 > I would be less nervous if you could also set the OUI bits to a = reserved > value for this purpose. Unfortunately, it proved to be impossible: this wouldn't have left 48 = bits for the IPv4 address and the 16-bit checksum-neutrality preserver. = Both have to fit in the IID. > For this, the V octet has its "u" and "g" bits of > [RFC4291] both set to 1, so that they differ from "u" =3D > 0, reserved for Interface IDs that have local-scope, and > also differs from "u" =3D 1 and "g"=3D 0, reserved for > unicast Interface IDs using the EUI-64 format. Bits >=20 > That should be "modified EUI-64 format" The proposed 4rd address format introduces, for unicast IPv6 addresses, = a new variant of the "modified EUI-64" IID format=20 It comes in addition to variants so far defined, namely: - One with u =3D 0, for the IID privacy option (RFC 4941).=20 - One with u =3D 1, for universal IIDs that embed IEEE OUIs and have g =3D= 0 or unicast addresses (Appendix A of RFC 4291). =20 This proposal is expected to be fully in line with the openness = expressed in RFC 4291 by saying "the use of the universal/local bit in = the Modified EUI-64 format identifier is to allow development of future = technology that can take advantage of interface identifiers with = universal scope". While reserved OUIs is one way to use this openness, reserved IID = prefixes having u=3Dg=3D1 is another.=20 >=20 > other than "u" and "g", are proposed to be 0, giving V =3D > 0x03. 4rd is thus the first "future technology that can > take advantage of interface identifiers with universal > scope" [RFC4291]. >=20 > I find that sentence hard to swallow. It's recycling the u and g bits > but I don't see how it takes advantage of universal scope. I would > just delete the sentence. OK. Deleting the sentence in the draft shouldn't be a problem at all.=20 It was intended as a clarification for 6man, but doesn't add any = technical content. >=20 > As such, it needs to be endorsed by > the 6man working group and IANA (Section 6). >=20 > This sentence too can be deleted before RFC publication. OK. >=20 > o An IPv6 Interface-ID type reserved for 4rd (the V octet of > Section 4.5). For this creation of new registry is suggested for > Interface-ID types of unicast addresses that have neither local > scope nor the universal scope of Modified EUI-64 format > [RFC4291]). This registry is intended to be used for new > Interface-ID types that may be useful in the future. >=20 > I don't get this. The possible ug combinations are all theoretically > valid today, aren't they? 11 means globally unique multicast. The only > way you can protect them as a 4rd flag is by using a dummy OUI value, > as far as I can see. I think that is what you should ask for (from > IEEE, not IANA). As explained above, "globally unique multicast" isn't suitable for a = globally unique _unicast_ address. If I may add a detail: the proposed new IANA registry would contain IID = prefixes that, in the context of IETF modified EUI-64, have universal = scope and don't embed IEEE OUIs. The first one would be the 4rd mark = 0300::/8. Others to come may have different lengths (but at least 8 to = include u and g bits) Best regards, RD >=20 > Regards > Brian Carpenter >=20 >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From bob.hinden@gmail.com Tue Dec 11 08:47:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D077F21F84C8 for ; Tue, 11 Dec 2012 08:47:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KnwL3HeP7mc4 for ; Tue, 11 Dec 2012 08:47:28 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id 1220B21F84C4 for ; Tue, 11 Dec 2012 08:47:27 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id w11so1841636bku.31 for ; Tue, 11 Dec 2012 08:47:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :cc:to:mime-version:x-mailer; bh=KhdA99+rVUhDDsS06d0gJXej08APO+mSeIMaUietcLw=; b=kV0Et3klzmO0ulmNZ50VwT9TygdvwHOsmWH/9WlcdpZ/B3hofGnRg9dOtFEEFB66va nAeScBAZINGECWKAFRoT3XC3IMz6Mr1sLKrqLJ/Z3GzzvOhmHONiGV6WXwZvNPN9Lnf+ 71fWwQLr0z+5VAOI/y5DoIu2zU6bjSo9UaCjw7YTf9mr0v97EnVbKjXIYcT5N02hqZ2S U0Zpqs4oHQ/TXGZV+rjih88qH0DFlf1PW7As//qujRXwuAcC35clbzb1WZsyw98l9F7a 22tzPMYuwIpYdshA60tE7IxfTLh1Iwm3iH6yn/hCHbF1FzzJR2/sWu78zWtQSqNKxh0T IjFg== Received: by 10.204.147.25 with SMTP id j25mr6482193bkv.36.1355244446860; Tue, 11 Dec 2012 08:47:26 -0800 (PST) Received: from [10.0.0.38] (c-24-130-151-138.hsd1.ca.comcast.net. [24.130.151.138]) by mx.google.com with ESMTPS id m20sm17654342bkw.4.2012.12.11.08.47.24 (version=SSLv3 cipher=OTHER); Tue, 11 Dec 2012 08:47:26 -0800 (PST) From: Bob Hinden Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Subject: 6MAN WG Last Call: Date: Tue, 11 Dec 2012 08:47:20 -0800 Message-Id: To: IPv6 List Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) Cc: Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 16:47:29 -0000 This message starts a one week 6MAN Working Group on advancing: Title : Representing IPv6 Zone Identifiers in Address = Literals and Uniform Resource Identifiers Author(s) : Brian Carpenter Stuart Cheshire Robert M. Hinden Filename : draft-ietf-6man-uri-zoneid-06.txt Pages : 10 Date : 2012-12-07 https://datatracker.ietf.org/doc/draft-ietf-6man-uri-zoneid/ as Proposed Standard. This last call is being done to confirm the = changes in the draft since the earlier last call. The authors believe = these changes will resolve the open IESG Discusses. Substantive comments and statements of support for advancing this = document should be directed to the mailing list. Editorial suggestions = can be sent to the authors. This last call will end on 18 December = 2012. Regards, Bob Hinden & Ole Tr=F8an=20 From bob.hinden@gmail.com Tue Dec 11 08:55:22 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F231B21F879E for ; Tue, 11 Dec 2012 08:55:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.47 X-Spam-Level: X-Spam-Status: No, score=-103.47 tagged_above=-999 required=5 tests=[AWL=-0.130, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, SARE_SUB_OBFU_Z=0.259, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XhGDO0Er0ih0 for ; Tue, 11 Dec 2012 08:55:21 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id ED30521F8778 for ; Tue, 11 Dec 2012 08:55:20 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id w11so1846662bku.31 for ; Tue, 11 Dec 2012 08:55:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :cc:to:mime-version:x-mailer; bh=nzcGoQDEVR6r2aXHW9QtpCjBQ/NZkumyaoeyVyAEgzU=; b=dtz5GRTbWZILbqGWXYoU5qUem97g4rP80ndgQlrz60R7yVp7nxdvddttvdrG/7ZDrF 0sWzSgOCrsaG017OYXknFqUs2kgBEkjVGVbiy0Mj+JguPlcuTHur95PGwZWWrl/jLWp8 XMcOVLBqn70sbvUQoeQcrSRS4SX93+/1RvUJnxW5JZu8eUK+ANchwxoKhq+sFkDZ2zge TvrO0xqNIyWeWsb6+yKzI+EipYkdhncNLEqQcv6rSWJn7pp3Fovg6Avk3quHE741UEbe ShQmiwOtyFWXHc9mFh0Lx7BGqD8r5Hz+ST17tem7sZL63oDtTOT1aqzJ+xVR5soqWRGk oBCQ== Received: by 10.204.127.11 with SMTP id e11mr6749512bks.0.1355244916166; Tue, 11 Dec 2012 08:55:16 -0800 (PST) Received: from [10.0.0.38] (c-24-130-151-138.hsd1.ca.comcast.net. [24.130.151.138]) by mx.google.com with ESMTPS id d16sm17673904bkw.2.2012.12.11.08.55.14 (version=SSLv3 cipher=OTHER); Tue, 11 Dec 2012 08:55:15 -0800 (PST) From: Bob Hinden Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Subject: 6MAN WG Last Call: Date: Tue, 11 Dec 2012 08:55:11 -0800 Message-Id: To: "ipv6@ietf.org Mailing List" Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) Cc: Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 16:55:22 -0000 All, This message starts a two week 6MAN Working Group on advancing: Title : Applicability Statement for the use of IPv6 = UDP Datagrams with Zero Checksums Author(s) : Godred Fairhurst Magnus Westerlund Filename : draft-ietf-6man-udpzero-08.txt Pages : 37 Date : 2012-12-11 https://datatracker.ietf.org/doc/draft-ietf-6man-udpzero/ as an Informational RFC. This last call is being done given the number = of changes and the time since the earlier last calls. The changes were = discussed at the Atlanta IETF 6man session. The authors believe these = changes will resolve the open IESG Discusses. Our AD will start a = concurrent IETF last call as well. Substantive comments and statements of support for advancing this = document should be directed to the mailing list. Editorial suggestions = can be sent to the authors. This last call will end on 26 December = 2012. Regards, Bob Hinden & Ole Tr=F8an=20 From bob.hinden@gmail.com Tue Dec 11 08:55:25 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C7C621F8887 for ; Tue, 11 Dec 2012 08:55:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.556 X-Spam-Level: X-Spam-Status: No, score=-103.556 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0wi+W0kMSknr for ; Tue, 11 Dec 2012 08:55:24 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id 7BB7021F87F5 for ; Tue, 11 Dec 2012 08:55:24 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id w11so1846662bku.31 for ; Tue, 11 Dec 2012 08:55:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :cc:to:mime-version:x-mailer; bh=hKIgGD65m5dAoFdIQJUJht3N3xRBcLW9Zg+TUaAQfyU=; b=HYDwviSLnBPYpyRXfaMr6bhqoNvC/ODJypqZ9H9tRuvtEKJlV8oVnC3hlwzItMvV8y h4a62+AKmWXJDDnGmZJIniktZ4oil/uG6CJfL6Y1y9kmoyRaegY9Fn0ZD7OtyGWQLMqC plnAgo+OnWeQApzvIqerq7/Xtr8zrKupz1okkyII5WAjPHZvOjOjeKnQVnx5xESXqA3e pz1jReSlmUhVT1p7rBowqzCJvZ4+hOsnpbn+wytigN3Trl9Cw21ypBpivLI7EW6ZslXR 3e2P+HVNCA00ZTzfDIf0x4/26sp299rAJkmlWol6z6/Ici75tHRiKzAY/RU+lRABVUCz 0Ukg== Received: by 10.205.138.5 with SMTP id iq5mr6459162bkc.72.1355244924159; Tue, 11 Dec 2012 08:55:24 -0800 (PST) Received: from [10.0.0.38] (c-24-130-151-138.hsd1.ca.comcast.net. [24.130.151.138]) by mx.google.com with ESMTPS id d16sm17673904bkw.2.2012.12.11.08.55.21 (version=SSLv3 cipher=OTHER); Tue, 11 Dec 2012 08:55:23 -0800 (PST) From: Bob Hinden Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Subject: 6MAN WG Last Call: Date: Tue, 11 Dec 2012 08:55:21 -0800 Message-Id: To: IPv6 List Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) Cc: Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 16:55:25 -0000 All, This message starts a two week 6MAN Working Group on advancing: Title : IPv6 and UDP Checksums for Tunneled Packets Author(s) : Marshall Eubanks P.F. Chimento Magnus Westerlund Filename : draft-ietf-6man-udpchecksums-06.txt Pages : 12 Date : 2012-12-11 https://datatracker.ietf.org/doc/draft-ietf-6man-udpchecksums/ as Proposed Standard. This last call is being done given the number of = changes and the time since the earlier last calls. The changes were = discussed at the Atlanta IETF 6man session. The authors believe these = changes will resolve the open IESG Discusses. Our AD will start a = concurrent IETF last call as well. Substantive comments and statements of support for advancing this = document should be directed to the mailing list. Editorial suggestions = can be sent to the authors. This last call will end on 26 December = 2012. Regards, Bob Hinden & Ole Tr=F8an=20= From bob.hinden@gmail.com Tue Dec 11 16:18:31 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4906B1F0CB1 for ; Tue, 11 Dec 2012 16:18:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.427 X-Spam-Level: X-Spam-Status: No, score=-103.427 tagged_above=-999 required=5 tests=[AWL=-0.128, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UrXNes+gywsS for ; Tue, 11 Dec 2012 16:18:30 -0800 (PST) Received: from mail-ye0-f172.google.com (mail-ye0-f172.google.com [209.85.213.172]) by ietfa.amsl.com (Postfix) with ESMTP id 911101F0CB0 for ; Tue, 11 Dec 2012 16:18:22 -0800 (PST) Received: by mail-ye0-f172.google.com with SMTP id r14so16009yen.31 for ; Tue, 11 Dec 2012 16:18:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=D5E1QAXvKMe0ZrvLR2XvMo5sczhacbQ4jQB+SRXSG7Q=; b=IK0R3uPI2MOcyw1Gfn+5HchmUwmHG0OHfaKe/ijCtH8/4+D7DvpXdpke+qBxH5SlmU saKYOMoFGzmj7KpFh60dD/OlFdFI6/tfc4QZmKCAHdO1UYt1qzo6TlaJvn8HZtZSxPWj eD/HIqKppOrG4fDaOoqfN87MyW5fywWhvt1j3clS+trFilPlY5az0QaMeP+1oOtgxaXD lcLHWNVpmT7X2m9GFHmKVQSOkpvH/auuTRduvnHkDENNoSGLgMa7PNVqLwOmoxGhHrD2 HUAP3NImJxgfe7Yu07e0fBUHzrlSuBrAffYHgzhm/8kCdWZct360jwzqnaKKM2FgoLlq xWHA== Received: by 10.236.137.208 with SMTP id y56mr30486969yhi.58.1355271502097; Tue, 11 Dec 2012 16:18:22 -0800 (PST) Received: from [172.16.224.219] ([209.97.127.34]) by mx.google.com with ESMTPS id z11sm30346747anj.13.2012.12.11.16.18.16 (version=SSLv3 cipher=OTHER); Tue, 11 Dec 2012 16:18:20 -0800 (PST) Subject: Re: Mail from softwire working group about 4rd Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=iso-8859-1 From: Bob Hinden In-Reply-To: <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> Date: Tue, 11 Dec 2012 16:18:15 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= X-Mailer: Apple Mail (2.1283) Cc: 6man , Bob Hinden , Suresh Krishnan , softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 00:18:31 -0000 R=E9mi, Like Brian, I am also trying to understand this. =20 My initial personal conclusion to answer Suresh's question, I don't = think this is compatible with the IPv6 address architecture. =20 It proposes to change how interface IDs are constructed (the use of the = "g" and "i" bits in the modified EUI-64) and sets up a new IANA registry = (it's not clear to me what else would need to be registered). This like = a very large change for a document that is intended for Experimental = status. Making these changes would seem to me more reasonable after the = experiment is completed. =20 Given this is a tunneling based solution, why not just add a destination = header that includes the information you need to make this approach = stateless? Then you wouldn't have to change the way IPv6 interface = identifiers are created and avoid any unintended consequenses. Further, I thought we already had solutions to providing IPv4 = connectivity over IPv6 (there are some large operators doing this = today). The rhetorical question is why do we need more? Thanks, Bob On Dec 11, 2012, at 6:35 AM, R=E9mi Despr=E9s wrote: > Hi Brian, >=20 > Thank you for the quick comments on this issue. > Let me explain more below. >=20 > 2012-12-11 11:55, Brian E Carpenter : >=20 >> Hi Suresh, >>=20 >>> The 4rd draft = (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) >>> describes a solution for providing IPv4 connectivity over IPv6. The >>> draft describes the method for mapping 4rd IPv4 addresses to 4rd = IPv6 >>> Addresses. It uses a 4rd specific mark called the V octet in the = first 8 >>> bits of the Interface Identifier. There were some concerns raised in >>> softwire about whether such addresses are actually compatible with = the >>> IPv6 addressing architecture. Whether this is actually compatible = with >>> the IPv6 addressing architecture is outside the scope of the = softwire >>> wg. Hence we would like to hear the 6man wg's perspective on this. I >>> would like to request the wg to please go over the NOTE in Section = 4.5 >>> page 18, which explains the issue, and over IANA Considerations = Section >>> 6, and chime in on whether this is acceptable from a 6man = perspective. >>=20 >> It certainly makes me nervous. The proposed format misuses the "g" = bit, >> which is supposed to flag multicast. >=20 >> Can it be proved beyond doubt that >> such an address will never escape a context in which the V octet will >> only be interpreted 4rd-style? >=20 > No, but this is AFAIK acceptable: > - If a 4rd packet enters, in a 4rd domain, a customer site that has no = 4rd CE will be routed in this site like any other IPv6 packet, based on = its IPv6 prefix. > - It is guaranteed, however, that no properly configured interface = will ever be reached at this address. Reason is precisely that no = properly configured host may have an interface ID starting with the 4rd = exclusive /8 prefix. >=20 > This prefix is so far called the V octet, for historical reasons, but = could IMHO be advantageously renamed to be more intuitive (e.g. 4rd IID = prefix). >=20 >> This is not clear to me from the draft. >>=20 >> I would be less nervous if you could also set the OUI bits to a = reserved >> value for this purpose. >=20 > Unfortunately, it proved to be impossible: this wouldn't have left 48 = bits for the IPv4 address and the 16-bit checksum-neutrality preserver. = Both have to fit in the IID. >=20 >> For this, the V octet has its "u" and "g" bits of >> [RFC4291] both set to 1, so that they differ from "u" =3D >> 0, reserved for Interface IDs that have local-scope, and >> also differs from "u" =3D 1 and "g"=3D 0, reserved for >> unicast Interface IDs using the EUI-64 format. Bits >>=20 >> That should be "modified EUI-64 format" >=20 > The proposed 4rd address format introduces, for unicast IPv6 = addresses, a new variant of the "modified EUI-64" IID format=20 > It comes in addition to variants so far defined, namely: > - One with u =3D 0, for the IID privacy option (RFC 4941).=20 > - One with u =3D 1, for universal IIDs that embed IEEE OUIs and have g = =3D 0 or unicast addresses (Appendix A of RFC 4291). =20 >=20 > This proposal is expected to be fully in line with the openness = expressed in RFC 4291 by saying "the use of the universal/local bit in = the Modified EUI-64 format identifier is to allow development of future = technology that can take advantage of interface identifiers with = universal scope". > While reserved OUIs is one way to use this openness, reserved IID = prefixes having u=3Dg=3D1 is another.=20 >=20 >=20 >>=20 >> other than "u" and "g", are proposed to be 0, giving V =3D >> 0x03. 4rd is thus the first "future technology that can >> take advantage of interface identifiers with universal >> scope" [RFC4291]. >>=20 >> I find that sentence hard to swallow. It's recycling the u and g bits >> but I don't see how it takes advantage of universal scope. I would >> just delete the sentence. >=20 > OK. > Deleting the sentence in the draft shouldn't be a problem at all.=20 > It was intended as a clarification for 6man, but doesn't add any = technical content. >=20 >>=20 >> As such, it needs to be endorsed by >> the 6man working group and IANA (Section 6). >>=20 >> This sentence too can be deleted before RFC publication. >=20 > OK. >=20 >>=20 >> o An IPv6 Interface-ID type reserved for 4rd (the V octet of >> Section 4.5). For this creation of new registry is suggested for >> Interface-ID types of unicast addresses that have neither local >> scope nor the universal scope of Modified EUI-64 format >> [RFC4291]). This registry is intended to be used for new >> Interface-ID types that may be useful in the future. >>=20 >> I don't get this. The possible ug combinations are all theoretically >> valid today, aren't they? 11 means globally unique multicast. The = only >> way you can protect them as a 4rd flag is by using a dummy OUI value, >> as far as I can see. I think that is what you should ask for (from >> IEEE, not IANA). >=20 > As explained above, "globally unique multicast" isn't suitable for a = globally unique _unicast_ address. >=20 > If I may add a detail: the proposed new IANA registry would contain = IID prefixes that, in the context of IETF modified EUI-64, have = universal scope and don't embed IEEE OUIs. The first one would be the = 4rd mark 0300::/8. Others to come may have different lengths (but at = least 8 to include u and g bits) >=20 > Best regards, > RD >=20 >=20 >=20 >=20 >>=20 >> Regards >> Brian Carpenter >>=20 >>=20 >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From jmh@joelhalpern.com Tue Dec 11 17:02:53 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C0A221F85D2 for ; Tue, 11 Dec 2012 17:02:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y5VDXrBisppd for ; Tue, 11 Dec 2012 17:02:52 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 9AD9321F85B3 for ; Tue, 11 Dec 2012 17:02:52 -0800 (PST) Received: from mailc2.tigertech.net (mailc2.tigertech.net [208.80.4.156]) by morbo.tigertech.net (Postfix) with ESMTP id 56AF4558A61 for ; Tue, 11 Dec 2012 17:02:52 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailc2.tigertech.net (Postfix) with ESMTP id 051821419AC; Tue, 11 Dec 2012 17:02:52 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at c2.tigertech.net Received: from [10.155.107.75] (unknown [129.192.170.160]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailc2.tigertech.net (Postfix) with ESMTPSA id DD93B1419AA; Tue, 11 Dec 2012 17:02:51 -0800 (PST) Message-ID: <50C7D7BA.3020904@joelhalpern.com> Date: Tue, 11 Dec 2012 20:02:50 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Bob Hinden Subject: Re: 6MAN WG Last Call: References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 01:02:53 -0000 This (and the companion document draft-ietf-6man-udpzero) seem ready for publication to me. I do have a minor questions. It is sufficiently minor that if necessary it may be ignored so publication can proceed. I section 5, bullet 3 talks about "tunnel protocol will not significantly increase the rate of corruption of the inner packet", and then talks about needing to use additional integrity verification if there is a risk of such increased corruption. My question is, what kind of encapsulating protocol would or could, by its nature, create such a risk? It is not at all clear to me what a protocol designer should be watching for. Yours, Joel On 12/11/2012 11:55 AM, Bob Hinden wrote: > All, > > This message starts a two week 6MAN Working Group on advancing: > > Title : IPv6 and UDP Checksums for Tunneled Packets > Author(s) : Marshall Eubanks > P.F. Chimento > Magnus Westerlund > Filename : draft-ietf-6man-udpchecksums-06.txt > Pages : 12 > Date : 2012-12-11 > > https://datatracker.ietf.org/doc/draft-ietf-6man-udpchecksums/ > > as Proposed Standard. This last call is being done given the number of changes and the time since the earlier last calls. The changes were discussed at the Atlanta IETF 6man session. The authors believe these changes will resolve the open IESG Discusses. Our AD will start a concurrent IETF last call as well. > > Substantive comments and statements of support for advancing this document should be directed to the mailing list. Editorial suggestions can be sent to the authors. This last call will end on 26 December 2012. > > Regards, > > Bob Hinden & Ole Trøan > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > From iesg-secretary@ietf.org Tue Dec 11 17:15:03 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9ACF021E80CA; Tue, 11 Dec 2012 17:15:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.327 X-Spam-Level: X-Spam-Status: No, score=-102.327 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, SARE_SUB_OBFU_Z=0.259, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2JRnNSLc77cW; Tue, 11 Dec 2012 17:15:03 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90F4F21E80BE; Tue, 11 Dec 2012 17:15:02 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce Subject: Last Call: (Applicability Statement for the use of IPv6 UDP Datagrams with Zero Checksums) to Informational RFC X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121212011502.17884.44083.idtracker@ietfa.amsl.com> Date: Tue, 11 Dec 2012 17:15:02 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ietf@ietf.org List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 01:15:03 -0000 The IESG has received a request from the IPv6 Maintenance WG (6man) to consider the following document: - 'Applicability Statement for the use of IPv6 UDP Datagrams with Zero Checksums' as Informational RFC The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2012-12-25. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document provides an applicability statement for the use of UDP transport checksums with IPv6. It defines recommendations and requirements for the use of IPv6 UDP datagrams with a zero UDP checksum. It describes the issues and design principles that need to be considered when UDP is used with IPv6 to support tunnel encapsulations and examines the role of the IPv6 UDP transport checksum. An appendix presents a summary of the trade-offs that were considered in evaluating the safety of the update to RFC 2460 that updates use of the UDP checksum with IPv6. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-6man-udpzero/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-6man-udpzero/ballot/ No IPR declarations have been submitted directly on this I-D. From iesg-secretary@ietf.org Tue Dec 11 17:15:55 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C57B021E80C7; Tue, 11 Dec 2012 17:15:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.456 X-Spam-Level: X-Spam-Status: No, score=-102.456 tagged_above=-999 required=5 tests=[AWL=0.143, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BVS9sdCgqXJB; Tue, 11 Dec 2012 17:15:55 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 480B421E8096; Tue, 11 Dec 2012 17:15:55 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce Subject: Last Call: (IPv6 and UDP Checksums for Tunneled Packets) to Proposed Standard X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121212011555.15698.49063.idtracker@ietfa.amsl.com> Date: Tue, 11 Dec 2012 17:15:55 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ietf@ietf.org List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 01:15:56 -0000 The IESG has received a request from the IPv6 Maintenance WG (6man) to consider the following document: - 'IPv6 and UDP Checksums for Tunneled Packets' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2012-12-25. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document provides an update of the Internet Protocol version 6 (IPv6) specification (RFC2460) to improve the performance in the use case when a tunnel protocol uses UDP with IPv6 to tunnel packets. The performance improvement is obtained by relaxing the IPv6 UDP checksum requirement for suitable tunneling protocol where header information is protected on the "inner" packet being carried. This relaxation removes the overhead associated with the computation of UDP checksums on IPv6 packets used to carry tunnel protocols. The specification describes how the IPv6 UDP checksum requirement can be relaxed for the situation where the encapsulated packet itself contains a checksum. The limitations and risks of this approach are described, and restrictions specified on the use of the method. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-6man-udpchecksums/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-6man-udpchecksums/ballot/ No IPR declarations have been submitted directly on this I-D. From magnus.westerlund@ericsson.com Tue Dec 11 23:44:22 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57FD821F842E for ; Tue, 11 Dec 2012 23:44:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.104 X-Spam-Level: X-Spam-Status: No, score=-106.104 tagged_above=-999 required=5 tests=[AWL=-0.114, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4, SARE_SUB_OBFU_Z=0.259, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5aCTzAdrqDs9 for ; Tue, 11 Dec 2012 23:44:21 -0800 (PST) Received: from mailgw1.ericsson.se (mailgw1.ericsson.se [193.180.251.45]) by ietfa.amsl.com (Postfix) with ESMTP id CE4C821F8A0A for ; Tue, 11 Dec 2012 23:44:20 -0800 (PST) X-AuditID: c1b4fb2d-b7f316d0000028db-73-50c835d39390 Received: from esessmw0256.eemea.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw1.ericsson.se (Symantec Mail Security) with SMTP id 59.DB.10459.3D538C05; Wed, 12 Dec 2012 08:44:19 +0100 (CET) Received: from [127.0.0.1] (153.88.115.8) by esessmw0256.eemea.ericsson.se (153.88.115.97) with Microsoft SMTP Server id 8.3.279.1; Wed, 12 Dec 2012 08:44:19 +0100 Message-ID: <50C835D2.3000209@ericsson.com> Date: Wed, 12 Dec 2012 08:44:18 +0100 From: Magnus Westerlund User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Bob Hinden Subject: Re: 6MAN WG Last Call: References: In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprALMWRmVeSWpSXmKPExsUyM+Jvje5l0xMBBhv/yFtsfb+PzeLl2fdM DkweO2fdZfdYsuQnUwBTFJdNSmpOZllqkb5dAlfG+1drWQuuC1TM7e5nbWDs4e1i5OSQEDCR +Dx7OhOELSZx4d56ti5GLg4hgZOMEnNOvoZyljNKvHrynxmkildAW+JE8zI2EJtFQFXi4MND 7CA2m4CFxM0fjWBxUQFfiVl7fjFB1AtKnJz5hAXEFgGqX97fD1bPLGAgcadxC2sXIweHsICD xIzfpiBhIQEbiVW77jOC2JwCthLHWzYyQxwnKbFoWicLRKuexJSrLYwQtrxE89bZzBC92hIN TR2sExiFZiHZPAtJyywkLQsYmVcxsucmZuaklxtuYgSG6sEtv3V3MJ46J3KIUZqDRUmclytp v7+QQHpiSWp2ampBalF8UWlOavEhRiYOTqkGRiUDcdduEa5v638JH8ieZHV5ivyqDEWWtnsl L0+cdawtEH8VL7n52da58zL8X9h937Ju1v4ou0rpGcsmn1v499WGDdKhgjqz1k6s+Phxw2/m /Qz8i884T512V3Hnvl1cJhu+Cr1/rP0h+Hvy4i0VMwVXJG6+uEhllsBvr/s5Dzb/1Txz3ubm +7bFSizFGYmGWsxFxYkA1co2dCMCAAA= Cc: "ipv6@ietf.org Mailing List" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 07:44:22 -0000 Bob and WG, This is no longer intended as an Informational RFC, it is supposed to be a Standards Track Applicability Statement. I have notified the ADs and the Chairs. But I would recommend everyone to please review this document as a Standards Track last call. Cheers Magnus On 2012-12-11 17:55, Bob Hinden wrote: > All, > > This message starts a two week 6MAN Working Group on advancing: > > Title : Applicability Statement for the use of IPv6 UDP Datagrams with Zero Checksums > Author(s) : Godred Fairhurst > Magnus Westerlund > Filename : draft-ietf-6man-udpzero-08.txt > Pages : 37 > Date : 2012-12-11 > > https://datatracker.ietf.org/doc/draft-ietf-6man-udpzero/ > > as an Informational RFC. This last call is being done given the number of changes and the time since the earlier last calls. The changes were discussed at the Atlanta IETF 6man session. The authors believe these changes will resolve the open IESG Discusses. Our AD will start a concurrent IETF last call as well. > > Substantive comments and statements of support for advancing this document should be directed to the mailing list. Editorial suggestions can be sent to the authors. This last call will end on 26 December 2012. > > Regards, > > Bob Hinden & Ole Trøan > > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > -- Magnus Westerlund ---------------------------------------------------------------------- Multimedia Technologies, Ericsson Research EAB/TVM ---------------------------------------------------------------------- Ericsson AB | Phone +46 10 7148287 Färögatan 6 | Mobile +46 73 0949079 SE-164 80 Stockholm, Sweden| mailto: magnus.westerlund@ericsson.com ---------------------------------------------------------------------- From otroan@employees.org Wed Dec 12 00:38:40 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02D8D21F88CF; Wed, 12 Dec 2012 00:38:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Rbw+wOpGNCc; Wed, 12 Dec 2012 00:38:39 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id C3C6D21F8884; Wed, 12 Dec 2012 00:38:38 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApEIADZByFCQ/khM/2dsb2JhbABFg0i7WhZzgh4BAQQBOj8QC0ZXBogeBrxAkC1hA6ZPgnQ X-IronPort-AV: E=Sophos;i="4.84,265,1355097600"; d="scan'208";a="79015421" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-2.cisco.com with ESMTP; 12 Dec 2012 08:38:37 +0000 Received: from dhcp-lys02-vla252-10-147-117-91.cisco.com (dhcp-lys02-vla252-10-147-117-91.cisco.com [10.147.117.91]) by ams-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qBC8caTh032367 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 12 Dec 2012 08:38:37 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Review of draft "Prefix Assignment in DHCPv6" From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> Date: Wed, 12 Dec 2012 09:38:34 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> To: Sheng Jiang X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 08:38:40 -0000 Sheng, >> I think the argument given in the draft for operators wanting a >> DHCPv6-managed network without ND is flawed. >> ND is required for router discovery, neighbour discovery etc anyway. = and a >> router on the link must be configured >> with the onlink prefix regardless. >>=20 >> while we can clearly make this work, I don't think it is justified to = create a >> duplicate mechanism for prefix discovery. >> section 3.2 RFC1958. >=20 > Hi, Ole, >=20 > Assuming all networks are using SLAAC is not right. >=20 > In WiMAX NWG IPv6 spec, Revision 6, see the attachment. >=20 > Stateful (DHCPv6) address configuration is supported. > Check Sections 5.11.11.4 and 5.11.12.2.=20 >=20 > Also, BBF document TR-177 supports stateful address configuration = using DHCPv6, check Section 4.2. >=20 > I also know a few ISP desire to use DHCPv6 in their networks. I make no assumption that all networks are using SLAAC for address = assignment. there is no conflict between using ND for prefix assignment and DHCPv6 = for address assignment. cheers, Ole= From magnus.westerlund@ericsson.com Wed Dec 12 00:44:09 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A970F21F8926 for ; Wed, 12 Dec 2012 00:44:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.227 X-Spam-Level: X-Spam-Status: No, score=-106.227 tagged_above=-999 required=5 tests=[AWL=0.022, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sz5pwkmVLsbl for ; Wed, 12 Dec 2012 00:44:09 -0800 (PST) Received: from mailgw2.ericsson.se (mailgw2.ericsson.se [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id A513721F8455 for ; Wed, 12 Dec 2012 00:44:08 -0800 (PST) X-AuditID: c1b4fb25-b7fb26d000006129-c9-50c843d69c28 Received: from esessmw0237.eemea.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw2.ericsson.se (Symantec Mail Security) with SMTP id C9.BB.24873.6D348C05; Wed, 12 Dec 2012 09:44:06 +0100 (CET) Received: from [127.0.0.1] (153.88.115.8) by esessmw0237.eemea.ericsson.se (153.88.115.91) with Microsoft SMTP Server id 8.3.279.1; Wed, 12 Dec 2012 09:44:05 +0100 Message-ID: <50C843D5.2040606@ericsson.com> Date: Wed, 12 Dec 2012 09:44:05 +0100 From: Magnus Westerlund User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Joel M. Halpern" Subject: Re: 6MAN WG Last Call: References: <50C7D7BA.3020904@joelhalpern.com> In-Reply-To: <50C7D7BA.3020904@joelhalpern.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprFLMWRmVeSWpSXmKPExsUyM+Jvje415xMBBn/O6Vpsfb+PzeLl2fdM Fh9PvWFyYPbYOesuu8eSJT+ZPM5N+c4YwBzFZZOSmpNZllqkb5fAlfHx8Fbmgm7uir/vTrE0 MDZwdjFyckgImEhMuDOTGcIWk7hwbz1bFyMXh5DASUaJv42zmCCc5YwSHasfADkcHLwC2hLH r1aCNLAIqEq83LKRCcRmE7CQuPmjkQ3EFhXwlZi15xdYnFdAUOLkzCcsILYIUOv+JR/A4swC DhIP5zxlB7GFBVwlNqy4BtYrJBAvcfjFU0YQm1NAX+LHvPesEMdJSiya1skC0asnMeVqCyOE LS/RvHU2M0SvtkRDUwfrBEahWUhWz0LSMgtJywJG5lWM7LmJmTnp5UabGIHhe3DLb9UdjHfO iRxilOZgURLntd66x19IID2xJDU7NbUgtSi+qDQntfgQIxMHp1QDo6Tk0sxTuUtjH8wvLgy5 c9c79fYcxaPS0oUmf+5+VdN/OPfklmb9dRueBHpfYZrnMl0ksbKrzinsv8RT9t//p7SHGZ7Y vTu+yjyBmTPX/rqw1zNlaQvtGzYRPczXnWUt7nN2GoVqXP65ZNIUJYOVq6XdXc+ebjfLOCko uWV6U2z55RZDd3cjJZbijERDLeai4kQAfUr/nC0CAAA= Cc: IPv6 List , Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 08:44:09 -0000 Thanks for the Review, On 2012-12-12 02:02, Joel M. Halpern wrote: > This (and the companion document draft-ietf-6man-udpzero) seem ready for > publication to me. > > I do have a minor questions. It is sufficiently minor that if necessary > it may be ignored so publication can proceed. > > I section 5, bullet 3 talks about "tunnel protocol will not > significantly increase the rate of corruption of the inner packet", and > then talks about needing to use additional integrity verification if > there is a risk of such increased corruption. My question is, what kind > of encapsulating protocol would or could, by its nature, create such a > risk? It is not at all clear to me what a protocol designer should be > watching for. The one think we have determined could cause increased corruption is tunnels that fragment. That is discussed in the document in Section 3.1.5 but not explicitly linked to this bullet. Cheers Magnus Westerlund ---------------------------------------------------------------------- Multimedia Technologies, Ericsson Research EAB/TVM ---------------------------------------------------------------------- Ericsson AB | Phone +46 10 7148287 Färögatan 6 | Mobile +46 73 0949079 SE-164 80 Stockholm, Sweden| mailto: magnus.westerlund@ericsson.com ---------------------------------------------------------------------- From magnus.westerlund@ericsson.com Wed Dec 12 00:46:07 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4328221F8925 for ; Wed, 12 Dec 2012 00:46:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.229 X-Spam-Level: X-Spam-Status: No, score=-106.229 tagged_above=-999 required=5 tests=[AWL=0.020, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DQkc7UFS+eKt for ; Wed, 12 Dec 2012 00:46:06 -0800 (PST) Received: from mailgw2.ericsson.se (mailgw2.ericsson.se [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id 3EC2621F8455 for ; Wed, 12 Dec 2012 00:46:06 -0800 (PST) X-AuditID: c1b4fb25-b7fb26d000006129-d3-50c8444d420b Received: from esessmw0191.eemea.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw2.ericsson.se (Symantec Mail Security) with SMTP id C7.1C.24873.D4448C05; Wed, 12 Dec 2012 09:46:05 +0100 (CET) Received: from [127.0.0.1] (153.88.115.8) by esessmw0191.eemea.ericsson.se (153.88.115.85) with Microsoft SMTP Server id 8.3.279.1; Wed, 12 Dec 2012 09:46:04 +0100 Message-ID: <50C84449.60705@ericsson.com> Date: Wed, 12 Dec 2012 09:46:01 +0100 From: Magnus Westerlund User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "ipv6@ietf.org" Subject: Fwd: Re: IPv6 UDP zero-checksum References: <50C766B8.6090104@cisco.com> In-Reply-To: <50C766B8.6090104@cisco.com> X-Enigmail-Version: 1.4.6 X-Forwarded-Message-Id: <50C766B8.6090104@cisco.com> Content-Type: multipart/mixed; boundary="------------020406040603080204030107" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrDKsWRmVeSWpSXmKPExsUyM+Jvja6vy4kAg18PJS1enn3P5MDosWTJ T6YAxigum5TUnMyy1CJ9uwSujDUrJjAX3NGsOLRxP0sD4wSVLkZODgkBE4k7KxeyQthiEhfu rWfrYuTiEBI4ySjx48tyFghnOaPEzJuTmECqeAU0JS70z2cEsVkEVCXeHlkB1s0mYCFx80cj G4gtKuArMWvPL6h6QYmTM5+wgNgiAsoSM7rPgdUIC2hILL57CaxXCMg+vfIxWA0n0Pxfd64z Q1wkKbFoWicLzKW7Pt8As5kFAiQuTv3ODNGrLdHQ1ME6gVFwFpJ1s5CUQdiaEq3bf7ND2PIS 29/OgYo7Szy6NReLuJfErr+nmWaBrU6QuLnrJtBMUFjsYpTYNn8+lLORUeLRmovss6AOvN6y jg0isZJJ4tzcq8wgDovAG2aJnft6oGYpS6zb+I8dJCEh0MoosfzlNlaIhIXExgc/wYqEBCok FsydywgxajWTxONvM5ghvtOQ+HV4PVARBzjwH5xWmQUOe0WJ+S9bwJ4WFYiVONd7AswWETCT eDhhP9sscHgrS8zbd5cVpBUcZhfsZ4GDW0di5dotbLOQght3eIHcfItdYsv3PlaIO6Ullt9e BfWYjcTdo4fYFzAqr2Jkz03MzEkvN9rECEyhB7f8Vt3BeOecyCFGaQ4WJXFe6617/IUE0hNL UrNTUwtSi+KLSnNSiw8xMnFwSjUwtnJe6VrPbDr724UTx9f8nVF87fmFzJzrzmm2609/eXFA paNf/MrSM3VTjpRcZSqSeXxna7vx4dTvz68Ki62aztCttzluYevDfedF/njXr/zUZTqvLrH8 jndTWtbt1eaH/J3Nc1Rt4o4fWC7Zs+zV6minikKO8HKVCwuzsriP5j+0z/Lp+h0kosRSnJFo qMVcVJwIAKC2OAJvAwAA X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 08:46:07 -0000 --------------020406040603080204030107 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Forwarded with permission from Eliot. /Magnus --------------020406040603080204030107 Content-Type: message/rfc822; name="Re: IPv6 UDP zero-checksum.eml" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="Re: IPv6 UDP zero-checksum.eml" X-Mozilla-Keys: Received: from esessmw0184.eemea.ericsson.se (153.88.115.81) by ESESSHC015.ericsson.se (153.88.183.63) with Microsoft SMTP Server (TLS) id 14.2.318.1; Tue, 11 Dec 2012 18:01:27 +0100 Received: from sesbmg11.ericsson.net (153.88.115.8) by esessmw0184.eemea.ericsson.se (153.88.115.83) with Microsoft SMTP Server id 8.3.279.1; Tue, 11 Dec 2012 18:01:25 +0100 X-AuditID: c1b4fb39-b7fa76d000000f89-b1-50c766e471c6 Received: from ams-iport-3.cisco.com (ams-iport-3.cisco.com [144.254.224.146]) (using TLS with cipher RC4-SHA (RC4-SHA/128 bits)) (Client did not present a certificate) by sesbmg11.ericsson.net (Symantec Mail Security) with SMTP id 4A.29.03977.5E667C05; Tue, 11 Dec 2012 18:01:25 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1223; q=dns/txt; s=iport; t=1355245285; x=1356454885; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=RvLpCsjgX9iVL6TkY2n0+aes4F9Ydrwnf87qVRQvnX0=; b=LldyLOTh8XVSY6wIk2szUrNJP7Ha6GZYFNCD0UWPAlz/mnSyFp9p1heV 52AzspddJC2gu1Z8ltZdyIeyvg3eu4CMf+5zWiRz4NJj1/kHJoHhFDtFm 27Z18fSEysLUgFGHpRpw7jgcZUNd66Gez1PLzkCEz3uZABrx/VywdoMt3 g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApwGAIlmx1CQ/khR/2dsb2JhbABFg0iCb7gOFnOCHwEBBCNVEQsaAgUWCwICCQMCAQIBRQYNCAEBiA2oQYJAkGuBIo5YgRMDlgeQSIJ0 X-IronPort-AV: E=McAfee;i="5400,1158,6923"; a="10328244" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-3.cisco.com with ESMTP; 11 Dec 2012 17:00:41 +0000 Received: from dhcp-10-55-83-244.cisco.com (dhcp-10-55-83-244.cisco.com [10.55.83.244]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBBH0fXq018523 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 11 Dec 2012 17:00:41 GMT Message-ID: <50C766B8.6090104@cisco.com> Date: Tue, 11 Dec 2012 18:00:40 +0100 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/17.0 Thunderbird/17.0 To: Magnus Westerlund Subject: Re: IPv6 UDP zero-checksum References: <50C6F741.4040105@ericsson.com> In-Reply-To: <50C6F741.4040105@ericsson.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprEKsWRWlGSWpSXmKPExsUy4d+DSbpP044HGNxYImJxaf09JgdGj19f r7IFMEZx2aSk5mSWpRbp2yVwZWw5dZWx4DhnxfV1h5kaGPexdzFyckgImEhcb1nHBmGLSVy4 tx7I5uIQEljJJNH2dxWYwyLwhlli574eJogqZYl1G/+xgyQkBFoZJZa/3MYKkbCQ2PjgJ1iR kECFxJUZXcxwox7v/QhWxCugIfHr8HqgIg6gsaoSD06rgITZBBQl5r9sYQGxRQViJc71nmCB KBeUODnzCZgtImAm8XDCfrBThYGOmLfvLivIGCEBbYmGC/YgYU4BHYmVa7dAfSMpsWhaJwtI CbOAusT6eUIgYWYBeYntb+cwT2AUnYVkwSyEqllIqhYwMq9iFC1OLU7KTTc01EstykwuLs7P 08tLLdnECAz8g1t+W+5gXLTE/BCjJAeTkijv1pTjAUJ8SfkplRmJxRnxRaU5qcWHGKU5WJTE eXfcXhIgJJCeWJKanZpakFoEk5Xh4FCS4N0F0ilYlJqeWpGWmVOCkGbi4DzEKMHBoyTCK5MK VMNbXJCYW5yZDpE/xajLMWdm+xNGIZa8/LxUKXHesyCDBECKMkrz4OaAkkr9////LzHKSgnz MjIwMAjxAN2Qm1mCkAclpVeM4hyMSsK8W5OBpvBk5pXAbXoFdAQT0BFrvh8DOaIkESEl1cDI u7JYeDXTDqM0Bt4Ih+8anRXdmm33fz1LeXj5RoumeGhPWeKxVKYeg2Z9e+uVeac9jA0P3Gzs yfN9fXO9hqLc11O9t4xVdIQXTt1pJLWxr6x/gWnBt6hzHU9iFv52PJHlVv5rbpnF96hmz7Vf J//XUzoj0m5TV3pPy26nwIWdku12OaobLyqxFGckGmoxFxUnAgCcu9QnJQMAAA== Return-Path: lear@cisco.com X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0 X-MS-Exchange-Organization-AuthSource: esessmw0184.eemea.ericsson.se X-MS-Exchange-Organization-AuthAs: Anonymous MIME-Version: 1.0 Hi Magnus, A few things to start with... First, having only a little to do with the doc, on my noisy little house line, I'm seeing an error rate of about 10^-7. It's not nothing, but compared to the DOS attacks I receive, (the other 10^7) it's not what I worry about ;-) The first paragraph of Section 3.1 seems rather dated. Quoting a study that took place 12 years ago relating to internal processing is probably stretching it a bit. I'm not saying it never happens, but it seems to be worth less text than you give it. Section 4: There is a style here to separate senders and receivers, but it's not really called out. You could eliminate a good number of the bullets by simply matching sender and receiver behavior in the same bullets. 1. Slight improvement on clarity: OLD: An IPv6 sending node MAY use a calculated RFC 2460 checksum for all datagrams that it sends. NEW: An IPv6 sending node MAY calculate a checksum for all datagrams it transmits, using the method described in Section 8.1 of [RFC2460]. (4) seems to require per-packet configuration. That wasn't your intent, I'm sure. I think it's well covered by 3, and would suggest simply remove it. Eliot --------------020406040603080204030107-- From magnus.westerlund@ericsson.com Wed Dec 12 00:46:46 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD0ED21F8946 for ; Wed, 12 Dec 2012 00:46:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.23 X-Spam-Level: X-Spam-Status: No, score=-106.23 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TIRHbx1VRlqB for ; Wed, 12 Dec 2012 00:46:45 -0800 (PST) Received: from mailgw1.ericsson.se (mailgw1.ericsson.se [193.180.251.45]) by ietfa.amsl.com (Postfix) with ESMTP id 1673921F89F7 for ; Wed, 12 Dec 2012 00:46:44 -0800 (PST) X-AuditID: c1b4fb2d-b7f316d0000028db-65-50c84473c5f8 Received: from esessmw0191.eemea.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw1.ericsson.se (Symantec Mail Security) with SMTP id EE.B6.10459.37448C05; Wed, 12 Dec 2012 09:46:44 +0100 (CET) Received: from [127.0.0.1] (153.88.115.8) by esessmw0191.eemea.ericsson.se (153.88.115.85) with Microsoft SMTP Server id 8.3.279.1; Wed, 12 Dec 2012 09:46:43 +0100 Message-ID: <50C84472.4010201@ericsson.com> Date: Wed, 12 Dec 2012 09:46:42 +0100 From: Magnus Westerlund User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "ipv6@ietf.org" Subject: Fwd: Re: IPv6 UDP zero-checksum References: <50C83A5A.9050002@ericsson.com> In-Reply-To: <50C83A5A.9050002@ericsson.com> X-Enigmail-Version: 1.4.6 X-Forwarded-Message-Id: <50C83A5A.9050002@ericsson.com> Content-Type: multipart/mixed; boundary="------------020909020109020201070808" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrIIsWRmVeSWpSXmKPExsUyM+JvjW6Jy4kAgym3WS1enn3P5MDosWTJ T6YAxigum5TUnMyy1CJ9uwSujJZf25gKditVTN98jL2B8bx0FyMnh4SAicSZFRvZIWwxiQv3 1rN1MXJxCAmcZJTY3XOFHcJZzijRM20JSxcjBwevgLbE2xvKIA0sAqoSJy5PYgWx2QQsJG7+ aGQDsUUFfCVm7fnFBGLzCghKnJz5hAXEFhFQlpjRfQ6sRlhAQ2Lx3UtgvUJAI2fNXgBWwymg I3H5eQ8bxEGSEoumdbJA2OYSjX2fwGxmgQCJjtk3GGF6G5o6WCcwCs5Csm4WkjIIW1Oidftv dghbXmL72znMELazxKNbc+HizVtnQ8W9JHb9Pc00C2x1gsTNXTdZIOZrS0xcuA5sJsj72ya8 YJ2F5P1ZSN5Hd48I0PzWs/tZIeZrSUw7/QxsjjAwWObtuwsWFxLwkLjwaTtYLyfQzb/uXGee hRQUs4AxwCygLrF+nhCykxcwiq5iZM9NzMxJLzfcxAhMFge3/NbdwXjqnMghRmkOFiVxXq6k /f5CAumJJanZqakFqUXxRaU5qcWHGJk4OKUaGGXyd9ZItEgH3NmZWvfb9I/sPR3XA7GL68Kl l574FTxhscUHz6S/U9le+2y6WGPxv/xJr/ptkYpJt3R693Z5+90TXeSzYNkU5/Yihb7gjszS HqVuhnmvl39RL2MKOf0vKvPh1EAZFRfBKwdlDPOu8Ek+O7U6y4xtpon97vzcv9+vLHqY+zDV S4mlOCPRUIu5qDgRAAOZ7sPkAgAA X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 08:46:47 -0000 --------------020909020109020201070808 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit My follow up on Elliot email. /Magnus --------------020909020109020201070808 Content-Type: message/rfc822; name="Re: IPv6 UDP zero-checksum.eml" Content-Transfer-Encoding: 8bit Content-Disposition: attachment; filename="Re: IPv6 UDP zero-checksum.eml" X-Mozilla-Keys: Message-ID: <50C83A5A.9050002@ericsson.com> Date: Wed, 12 Dec 2012 09:03:38 +0100 From: Magnus Westerlund User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Eliot Lear CC: Gorry Fairhurst Subject: Re: IPv6 UDP zero-checksum References: <50C6F741.4040105@ericsson.com> <50C766B8.6090104@cisco.com> In-Reply-To: <50C766B8.6090104@cisco.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Thanks Eliot, I CC my co-author. I would also request that you answer the last call on the 6man list with the comments that you think are suitable for that list. On 2012-12-11 18:00, Eliot Lear wrote: > Hi Magnus, > > A few things to start with... > > First, having only a little to do with the doc, on my noisy little house > line, I'm seeing an error rate of about 10^-7. It's not nothing, but > compared to the DOS attacks I receive, (the other 10^7) it's not what I > worry about ;-) Sure, but if your background error rate would be persistent at for example 10^-3 it would seriously reduced the maximum TCP flow rate. So, although DoS or simply attack traffic using up a certain percentage of your available connection, packet corruption rates will have persistent effects on your traffic. And Zero UDP checksum with IPv6 also have some other effects related to being able to avoid processing misdirected traffic. > > The first paragraph of Section 3.1 seems rather dated. Quoting a study > that took place 12 years ago relating to internal processing is probably > stretching it a bit. I'm not saying it never happens, but it seems to > be worth less text than you give it. I wished we had a study that would be more recent for the same field. However, when we discussed this on the mailing list we got some report that indicates that the UDP checksum error rates the reporter saw on their DNS server corruption rates higher than 10^-3. That indicates that in some parts of the Internet we still have significant corruption happening which isn't being link layers and detected by link layer CRCs. Yes, other parts definitely see much lower rates and your 10^-7 is probably not at all uncommon. > > Section 4: > > There is a style here to separate senders and receivers, but it's not > really called out. You could eliminate a good number of the bullets by > simply matching sender and receiver behavior in the same bullets. Yes, but there are some cases where there is important differences. But, maybe we should divide them up into Sender and Receiver. > > 1. Slight improvement on clarity: > > OLD: > > An IPv6 sending node MAY use a calculated RFC 2460 checksum for all > datagrams that it sends. > > NEW: > > An IPv6 sending node MAY calculate a checksum for all datagrams it > transmits, using the method described in Section 8.1 of [RFC2460]. Yes, that is a clear improvement. > > (4) seems to require per-packet configuration. That wasn't your intent, > I'm sure. I think it's well covered by 3, and would suggest simply > remove it. It is exactly intended to be "per-packet" configuration. So, no it is not redundant with 3. Possibly it should be baked into 3 to make clear that it does require per packet capabilities. cheers Magnus Westerlund ---------------------------------------------------------------------- Multimedia Technologies, Ericsson Research EAB/TVM ---------------------------------------------------------------------- Ericsson AB | Phone +46 10 7148287 Färögatan 6 | Mobile +46 73 0949079 SE-164 80 Stockholm, Sweden| mailto: magnus.westerlund@ericsson.com ---------------------------------------------------------------------- --------------020909020109020201070808-- From jiangsheng@huawei.com Wed Dec 12 00:50:52 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C71BB21F8951; Wed, 12 Dec 2012 00:50:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.424 X-Spam-Level: X-Spam-Status: No, score=-6.424 tagged_above=-999 required=5 tests=[AWL=-0.125, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FjuddNnclSa0; Wed, 12 Dec 2012 00:50:51 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id 26F8F21F894E; Wed, 12 Dec 2012 00:50:51 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml204-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id ANT42587; Wed, 12 Dec 2012 08:50:50 +0000 (GMT) Received: from LHREML404-HUB.china.huawei.com (10.201.5.218) by lhreml204-edg.china.huawei.com (172.18.7.223) with Microsoft SMTP Server (TLS) id 14.1.323.3; Wed, 12 Dec 2012 08:50:03 +0000 Received: from SZXEML429-HUB.china.huawei.com (10.72.61.37) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.1.323.3; Wed, 12 Dec 2012 16:50:48 +0800 Received: from SZXEML545-MBS.china.huawei.com ([169.254.2.174]) by SZXEML429-HUB.china.huawei.com ([10.72.61.37]) with mapi id 14.01.0323.003; Wed, 12 Dec 2012 16:49:21 +0800 From: Sheng Jiang To: =?utf-8?B?T2xlIFRyw7hhbg==?= Subject: RE: Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: Review of draft "Prefix Assignment in DHCPv6" Thread-Index: Ac3TeMv/pnhXVKXKQIm8jrwjt/ulh///z9SA//alzmCAEprOAP//ea5Q Date: Wed, 12 Dec 2012 08:49:21 +0000 Message-ID: <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> In-Reply-To: Accept-Language: en-GB, zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.111.98.140] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 08:50:52 -0000 Pi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+RnJvbTogT2xlIFRyw7hhbiBbbWFpbHRvOm90 cm9hbkBlbXBsb3llZXMub3JnXQ0KPlNlbnQ6IFdlZG5lc2RheSwgRGVjZW1iZXIgMTIsIDIwMTIg NDozOSBQTQ0KPlRvOiBTaGVuZyBKaWFuZw0KPkNjOiA8ZGhjd2dAaWV0Zi5vcmc+IFdHOyBJUHY2 IExpc3QNCj5TdWJqZWN0OiBSZTogUmV2aWV3IG9mIGRyYWZ0ICJQcmVmaXggQXNzaWdubWVudCBp biBESENQdjYiDQo+DQo+U2hlbmcsDQo+DQo+Pj4gSSB0aGluayB0aGUgYXJndW1lbnQgZ2l2ZW4g aW4gdGhlIGRyYWZ0IGZvciBvcGVyYXRvcnMgd2FudGluZyBhDQo+Pj4gREhDUHY2LW1hbmFnZWQg bmV0d29yayB3aXRob3V0IE5EIGlzIGZsYXdlZC4NCj4+PiBORCBpcyByZXF1aXJlZCBmb3Igcm91 dGVyIGRpc2NvdmVyeSwgbmVpZ2hib3VyIGRpc2NvdmVyeSBldGMgYW55d2F5LiBhbmQgYQ0KPj4+ IHJvdXRlciBvbiB0aGUgbGluayBtdXN0IGJlIGNvbmZpZ3VyZWQNCj4+PiB3aXRoIHRoZSBvbmxp bmsgcHJlZml4IHJlZ2FyZGxlc3MuDQo+Pj4NCj4+PiB3aGlsZSB3ZSBjYW4gY2xlYXJseSBtYWtl IHRoaXMgd29yaywgSSBkb24ndCB0aGluayBpdCBpcyBqdXN0aWZpZWQgdG8gY3JlYXRlIGENCj4+ PiBkdXBsaWNhdGUgbWVjaGFuaXNtIGZvciBwcmVmaXggZGlzY292ZXJ5Lg0KPj4+IHNlY3Rpb24g My4yIFJGQzE5NTguDQo+Pg0KPj4gSGksIE9sZSwNCj4+DQo+PiBBc3N1bWluZyBhbGwgbmV0d29y a3MgYXJlIHVzaW5nIFNMQUFDIGlzIG5vdCByaWdodC4NCj4+DQo+PiBJbiBXaU1BWCBOV0cgSVB2 NiBzcGVjLCBSZXZpc2lvbiA2LCBzZWUgdGhlIGF0dGFjaG1lbnQuDQo+Pg0KPj4gU3RhdGVmdWwg KERIQ1B2NikgYWRkcmVzcyBjb25maWd1cmF0aW9uIGlzIHN1cHBvcnRlZC4NCj4+IENoZWNrIFNl Y3Rpb25zIDUuMTEuMTEuNCBhbmQgNS4xMS4xMi4yLg0KPj4NCj4+IEFsc28sIEJCRiBkb2N1bWVu dCBUUi0xNzcgc3VwcG9ydHMgc3RhdGVmdWwgYWRkcmVzcyBjb25maWd1cmF0aW9uIHVzaW5nDQo+ REhDUHY2LCBjaGVjayBTZWN0aW9uIDQuMi4NCj4+DQo+PiBJIGFsc28ga25vdyBhIGZldyBJU1Ag ZGVzaXJlIHRvIHVzZSBESENQdjYgaW4gdGhlaXIgbmV0d29ya3MuDQo+DQo+SSBtYWtlIG5vIGFz c3VtcHRpb24gdGhhdCBhbGwgbmV0d29ya3MgYXJlIHVzaW5nIFNMQUFDIGZvciBhZGRyZXNzDQo+ YXNzaWdubWVudC4NCj4NCj50aGVyZSBpcyBubyBjb25mbGljdCBiZXR3ZWVuIHVzaW5nIE5EIGZv ciBwcmVmaXggYXNzaWdubWVudCBhbmQgREhDUHY2IGZvcg0KPmFkZHJlc3MgYXNzaWdubWVudC4N Cg0KU28sIGhvdyBjYW4geW91IGdldCBob3N0IGdlbmVyYXRlZCBhZGRyZXNzZXMsIGxpa2UgRVVJ NjQgYWRkcmVzcywgQ0dBLCBvciBQcml2YWN5IGFkZHJlc3M/IFBhcnRpY3VsYXIgZm9yIENHQSwg aG9zdCBoYXMgdG8gZ2V0IHByZWZpeCBmaXJzdCwgdGhlbiB1c2UgcHJlZml4IGFzIHBhcnQgb2Yg aW5wdXQgdG8gZ2VuZXJhdGUgaG9zdCBpZGVudGlmaWVyLg0KDQpPciB5b3UgYXJlIHNheWluZyBp biBESENQdjYtbWFuYWdlZCBuZXR3b3JrLCB5b3Ugc3RpbGwgdXNlIE5EIHRvIGFzc2lnbiBwcmVm aXguIEkgZG9uJ3QgdGhpbmsgdGhhdCBkZXBsb3ltZW50IGlzIGdvb2QgaWRlYS4NCg0KQ2hlZXJz LA0KDQpTaGVuZw0KDQo+Y2hlZXJzLA0KPk9sZQ0K From jouni.nospam@gmail.com Wed Dec 12 01:04:32 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DA3321F8953 for ; Wed, 12 Dec 2012 01:04:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZxLeMzaidysc for ; Wed, 12 Dec 2012 01:04:31 -0800 (PST) Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 67FEE21F8949 for ; Wed, 12 Dec 2012 01:04:31 -0800 (PST) Received: by mail-lb0-f172.google.com with SMTP id y2so367573lbk.31 for ; Wed, 12 Dec 2012 01:04:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=NLgd9Ik2/+evuuhWvhrTzvKkHON+TumTsb2nvVticuw=; b=bmUKz7irece5/71odXPQfvxxyrYgH/avN+X1w6kBsdLri8bDFYUYifzpROMKqd+PQr tzpLoWkZhbp/Nws0MG+t/XwA1scTKubyOzNnd3vBCzcL5tiwpV74pJb4Im/YxgQvpaj2 9dqR8kNR65muNwEhPvpln7pyAA6s8EZIi3T7jaodu5Ohnv9bKf/JNzcpK9zMk2Z8zER8 Ev3Bu8KkvKkt7X8K3/3J9HW5Q8H0QO0GrhZfB7U2ce0KRz2cRu5CLXEoLIRusAXTT1S+ e7LsdkCBQs05xxfTR05LGLrj1MDzlurZ1jmYjwkYuLom0LAPfUIugi4yJ08UjNfIeHG7 ybjA== Received: by 10.112.38.66 with SMTP id e2mr122738lbk.90.1355303070143; Wed, 12 Dec 2012 01:04:30 -0800 (PST) Received: from [192.168.250.94] ([194.100.71.98]) by mx.google.com with ESMTPS id b3sm10353771lbl.0.2012.12.12.01.04.26 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 01:04:28 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: Jouni Korhonen In-Reply-To: <50C28653.6030109@ericsson.com> Date: Wed, 12 Dec 2012 11:04:27 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <50C28653.6030109@ericsson.com> To: Suresh Krishnan X-Mailer: Apple Mail (2.1499) Cc: 6man chairs <6man-chairs@tools.ietf.org>, INT ADs , IETF IPv6 Mailing List , Softwire chairs X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 09:04:32 -0000 Hi, On Dec 8, 2012, at 2:14 AM, Suresh Krishnan = wrote: > Hi all, >=20 > The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) > describes a solution for providing IPv4 connectivity over IPv6. The > draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 > Addresses. It uses a 4rd specific mark called the V octet in the first = 8 V-octet was AFAIR first time discussed within the Softwire MAP design = team=20 and I had/expressed my concerns already that time. My argumentation was = that we cannot just redefine the u & g bit use without actually having it = verified against and reflected in RFC4291. Glad to see it happening now ;) IMHO the current language in RFC4291 does not give enough freedom to use u=3Dg=3D1, since such combination is not specifically left = unused/reserved (although u=3Dg=3D1 makes no sense for the current IPv6). IEEE allows = MAC addresses that have I/G set to 1 and U/L set to 0, which makes me rather uncomfortable with IETF using u=3Dg=3D1 for their own purposes. - Jouni > bits of the Interface Identifier. There were some concerns raised in > softwire about whether such addresses are actually compatible with the > IPv6 addressing architecture. Whether this is actually compatible with > the IPv6 addressing architecture is outside the scope of the softwire > wg. Hence we would like to hear the 6man wg's perspective on this. I > would like to request the wg to please go over the NOTE in Section 4.5 > page 18, which explains the issue, and over IANA Considerations = Section > 6, and chime in on whether this is acceptable from a 6man perspective. >=20 > Thanks > Suresh > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From otroan@employees.org Wed Dec 12 01:09:51 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5487621F887E; Wed, 12 Dec 2012 01:09:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xcx6ippgVWWU; Wed, 12 Dec 2012 01:09:50 -0800 (PST) Received: from ams-iport-4.cisco.com (ams-iport-4.cisco.com [144.254.224.147]) by ietfa.amsl.com (Postfix) with ESMTP id 842F521F8774; Wed, 12 Dec 2012 01:09:48 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApEIALlIyFCQ/khM/2dsb2JhbABFg0i7WhZzgh8BBTo/EAtGVwaIJLxTkC1hA6ZPgnQ X-IronPort-AV: E=Sophos;i="4.84,265,1355097600"; d="scan'208";a="10363690" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-4.cisco.com with ESMTP; 12 Dec 2012 09:09:44 +0000 Received: from dhcp-lys02-vla252-10-147-117-91.cisco.com (dhcp-lys02-vla252-10-147-117-91.cisco.com [10.147.117.91]) by ams-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qBC99h8o004334 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 12 Dec 2012 09:09:44 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Review of draft "Prefix Assignment in DHCPv6" From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> Date: Wed, 12 Dec 2012 10:09:43 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> To: Sheng Jiang X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 09:09:51 -0000 Sheng, >>>> I think the argument given in the draft for operators wanting a >>>> DHCPv6-managed network without ND is flawed. >>>> ND is required for router discovery, neighbour discovery etc = anyway. and a >>>> router on the link must be configured >>>> with the onlink prefix regardless. >>>>=20 >>>> while we can clearly make this work, I don't think it is justified = to create a >>>> duplicate mechanism for prefix discovery. >>>> section 3.2 RFC1958. >>>=20 >>> Hi, Ole, >>>=20 >>> Assuming all networks are using SLAAC is not right. >>>=20 >>> In WiMAX NWG IPv6 spec, Revision 6, see the attachment. >>>=20 >>> Stateful (DHCPv6) address configuration is supported. >>> Check Sections 5.11.11.4 and 5.11.12.2. >>>=20 >>> Also, BBF document TR-177 supports stateful address configuration = using >> DHCPv6, check Section 4.2. >>>=20 >>> I also know a few ISP desire to use DHCPv6 in their networks. >>=20 >> I make no assumption that all networks are using SLAAC for address >> assignment. >>=20 >> there is no conflict between using ND for prefix assignment and = DHCPv6 for >> address assignment. >=20 > So, how can you get host generated addresses, like EUI64 address, CGA, = or Privacy address? Particular for CGA, host has to get prefix first, = then use prefix as part of input to generate host identifier. >=20 > Or you are saying in DHCPv6-managed network, you still use ND to = assign prefix. I don't think that deployment is good idea. that's how the IPv6 protocols are designed. from the beginning. that's = how all DHCPv6 managed networks run today. I don't see the problem? cheers, Ole From despres.remi@laposte.net Wed Dec 12 02:08:31 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7599521F8894 for ; Wed, 12 Dec 2012 02:08:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.949 X-Spam-Level: X-Spam-Status: No, score=-1.949 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ugDZtiGbPsw6 for ; Wed, 12 Dec 2012 02:08:29 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.11]) by ietfa.amsl.com (Postfix) with ESMTP id 2133221F8887 for ; Wed, 12 Dec 2012 02:08:25 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2209.sfr.fr (SMTP Server) with ESMTP id 5113570001C1; Wed, 12 Dec 2012 11:08:24 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2209.sfr.fr (SMTP Server) with ESMTP id 7BB4A70000C9; Wed, 12 Dec 2012 11:08:23 +0100 (CET) X-SFR-UUID: 20121212100823506.7BB4A70000C9@msfrf2209.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Wed, 12 Dec 2012 11:08:23 +0100 Message-Id: <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> To: Bob Hinden X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org, 6man , Suresh Krishnan X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 10:08:31 -0000 Hi, Bob, Please see inline further explanations, and answers to your questions. =20 2012-12-12 01:18, Bob Hinden : > R=E9mi, >=20 > Like Brian, I am also trying to understand this. =20 >=20 > My initial personal conclusion to answer Suresh's question, I don't = think this is compatible with the IPv6 address architecture. =20 >=20 > It proposes to change how interface IDs are constructed (the use of = the "g" and "i" bits in the modified EUI-64) and sets up a new IANA = registry (it's not clear to me what else would need to be registered). =20= Note that it is just a backward-compatible extension, not a change that = would imply on anything existing today. It takes advantage of an unused combination of bits to introduce a = specific way "to allow development of future technology that can take = advantage of interface identifiers with universal scope", as envisaged = in RFC 4291 itself. Appendix A of RFC 4291 "provides examples on the creation of Modified = EUI-64 format-based interface identifiers". The two of them that apply = to links having universal scope IIDs (i.e. having u =3D 1) are based on = IEEE EUI-64 and IEEE EUI-48 at link layer. Both have g=3D0 (unicast = addresses) so that u=3Dg=3D1 remains as an escape pattern for new = universal-scope formats.=20 Advantage of this escape pattern over using a reserved OUI in the IEEE = EUI-64 format, a technique mentioned by Brian in his las t mil, is that = it leaves 62 free bits instead of 40. As 4rd needs 48 bits for its own = use (an IPv4 address and a 16-bit checksum neutrality preserver), it is = the first design that needs the escape pattern. It leaves plenty of = space for other uses of this pattern. =20 =20 > This like a very large change for a document that is intended for = Experimental status. Making these changes would seem to me more = reasonable after the experiment is completed. No change of RFC 41 is AFAIK needed: (a) RFC 5214, and RFC 4214 before it, already specify an IID format = that, being a backward-compatible use of RFC-4291 format, didn't lead to = a modification of RFC 4291. (b) IANA does list in its registries assigned numbers of experimental = RFCs. =20 > Given this is a tunneling based solution, why not just add a = destination header that includes the information you need to make this = approach stateless? Then you wouldn't have to change the way IPv6 = interface identifiers are created and avoid any unintended consequenses. All of this has been carefully reviewed in Softwire, and even more so by = the six co-authors of widely different origins. No alternative has been = found with the same desired combination of functional properties. > Further, I thought we already had solutions to providing IPv4 = connectivity over IPv6 (there are some large operators doing this = today). The rhetorical question is why do we need more? The need for a _stateless_ solution to assign _public_ IPv4 addresses = across IPv6-only domains, including shared IPv4 addresses, has been = abundantly discussed and approved in Softwire. While MAP-E is now the path chosen for standard track, the WG has found = enough complementary functional properties in two other solutions to = proceed with them on experimental track, 4rd and MAP-T. =20 Hoping to have given the expected clarifications and answers, Best regards, RD >=20 > Thanks, > Bob >=20 >=20 > On Dec 11, 2012, at 6:35 AM, R=E9mi Despr=E9s wrote: >=20 >> Hi Brian, >>=20 >> Thank you for the quick comments on this issue. >> Let me explain more below. >>=20 >> 2012-12-11 11:55, Brian E Carpenter : >>=20 >>> Hi Suresh, >>>=20 >>>> The 4rd draft = (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) >>>> describes a solution for providing IPv4 connectivity over IPv6. The >>>> draft describes the method for mapping 4rd IPv4 addresses to 4rd = IPv6 >>>> Addresses. It uses a 4rd specific mark called the V octet in the = first 8 >>>> bits of the Interface Identifier. There were some concerns raised = in >>>> softwire about whether such addresses are actually compatible with = the >>>> IPv6 addressing architecture. Whether this is actually compatible = with >>>> the IPv6 addressing architecture is outside the scope of the = softwire >>>> wg. Hence we would like to hear the 6man wg's perspective on this. = I >>>> would like to request the wg to please go over the NOTE in Section = 4.5 >>>> page 18, which explains the issue, and over IANA Considerations = Section >>>> 6, and chime in on whether this is acceptable from a 6man = perspective. >>>=20 >>> It certainly makes me nervous. The proposed format misuses the "g" = bit, >>> which is supposed to flag multicast. >>=20 >>> Can it be proved beyond doubt that >>> such an address will never escape a context in which the V octet = will >>> only be interpreted 4rd-style? >>=20 >> No, but this is AFAIK acceptable: >> - If a 4rd packet enters, in a 4rd domain, a customer site that has = no 4rd CE will be routed in this site like any other IPv6 packet, based = on its IPv6 prefix. >> - It is guaranteed, however, that no properly configured interface = will ever be reached at this address. Reason is precisely that no = properly configured host may have an interface ID starting with the 4rd = exclusive /8 prefix. >>=20 >> This prefix is so far called the V octet, for historical reasons, but = could IMHO be advantageously renamed to be more intuitive (e.g. 4rd IID = prefix). >>=20 >>> This is not clear to me from the draft. >>>=20 >>> I would be less nervous if you could also set the OUI bits to a = reserved >>> value for this purpose. >>=20 >> Unfortunately, it proved to be impossible: this wouldn't have left 48 = bits for the IPv4 address and the 16-bit checksum-neutrality preserver. = Both have to fit in the IID. >>=20 >>> For this, the V octet has its "u" and "g" bits of >>> [RFC4291] both set to 1, so that they differ from "u" =3D >>> 0, reserved for Interface IDs that have local-scope, and >>> also differs from "u" =3D 1 and "g"=3D 0, reserved for >>> unicast Interface IDs using the EUI-64 format. Bits >>>=20 >>> That should be "modified EUI-64 format" >>=20 >> The proposed 4rd address format introduces, for unicast IPv6 = addresses, a new variant of the "modified EUI-64" IID format=20 >> It comes in addition to variants so far defined, namely: >> - One with u =3D 0, for the IID privacy option (RFC 4941).=20 >> - One with u =3D 1, for universal IIDs that embed IEEE OUIs and have = g =3D 0 or unicast addresses (Appendix A of RFC 4291). =20 >>=20 >> This proposal is expected to be fully in line with the openness = expressed in RFC 4291 by saying "the use of the universal/local bit in = the Modified EUI-64 format identifier is to allow development of future = technology that can take advantage of interface identifiers with = universal scope". >> While reserved OUIs is one way to use this openness, reserved IID = prefixes having u=3Dg=3D1 is another.=20 >>=20 >>=20 >>>=20 >>> other than "u" and "g", are proposed to be 0, giving V =3D >>> 0x03. 4rd is thus the first "future technology that can >>> take advantage of interface identifiers with universal >>> scope" [RFC4291]. >>>=20 >>> I find that sentence hard to swallow. It's recycling the u and g = bits >>> but I don't see how it takes advantage of universal scope. I would >>> just delete the sentence. >>=20 >> OK. >> Deleting the sentence in the draft shouldn't be a problem at all.=20 >> It was intended as a clarification for 6man, but doesn't add any = technical content. >>=20 >>>=20 >>> As such, it needs to be endorsed by >>> the 6man working group and IANA (Section 6). >>>=20 >>> This sentence too can be deleted before RFC publication. >>=20 >> OK. >>=20 >>>=20 >>> o An IPv6 Interface-ID type reserved for 4rd (the V octet of >>> Section 4.5). For this creation of new registry is suggested for >>> Interface-ID types of unicast addresses that have neither local >>> scope nor the universal scope of Modified EUI-64 format >>> [RFC4291]). This registry is intended to be used for new >>> Interface-ID types that may be useful in the future. >>>=20 >>> I don't get this. The possible ug combinations are all theoretically >>> valid today, aren't they? 11 means globally unique multicast. The = only >>> way you can protect them as a 4rd flag is by using a dummy OUI = value, >>> as far as I can see. I think that is what you should ask for (from >>> IEEE, not IANA). >>=20 >> As explained above, "globally unique multicast" isn't suitable for a = globally unique _unicast_ address. >>=20 >> If I may add a detail: the proposed new IANA registry would contain = IID prefixes that, in the context of IETF modified EUI-64, have = universal scope and don't embed IEEE OUIs. The first one would be the = 4rd mark 0300::/8. Others to come may have different lengths (but at = least 8 to include u and g bits) >>=20 >> Best regards, >> RD >>=20 >>=20 >>=20 >>=20 >>>=20 >>> Regards >>> Brian Carpenter >>>=20 >>>=20 >>> -------------------------------------------------------------------- >>> IETF IPv6 working group mailing list >>> ipv6@ietf.org >>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>> -------------------------------------------------------------------- >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >=20 From brian.e.carpenter@gmail.com Wed Dec 12 03:45:18 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CEAA21F89CA for ; Wed, 12 Dec 2012 03:45:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.465 X-Spam-Level: X-Spam-Status: No, score=-101.465 tagged_above=-999 required=5 tests=[AWL=-0.074, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LeL0ju+ZO6DQ for ; Wed, 12 Dec 2012 03:45:17 -0800 (PST) Received: from mail-we0-f172.google.com (mail-we0-f172.google.com [74.125.82.172]) by ietfa.amsl.com (Postfix) with ESMTP id 658A021F886B for ; Wed, 12 Dec 2012 03:45:17 -0800 (PST) Received: by mail-we0-f172.google.com with SMTP id r3so256903wey.31 for ; Wed, 12 Dec 2012 03:45:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=l7LI2u2Ov6MnixFoKr0/v7WyMZyDGuaYz3W7eA/s+Yg=; b=yY3CjfLwGzUuKHSxG1TNHKHB7RuzJ6KgDx88eYWS0VI7ol7F3LpJK/xcmxl36Cp+/7 goksKEt307URYLyvXdy5urhLZWtjNV+yccfN++OdyGAy8uKcv0GAfgzvUTJSKcZ10G4u 7VyqHs3+jWz+CjYIwO6C+tNGEgkPKSLDlPX1gsWhAs0DYDQ/qpa5eRuhLhwszeZ1UAHp +zH1bQxIau993iyzCEOt2+KNJlZiaNQTxzn7IH3n8POdkD1z6bchEAIRXk2jnIFWzv+V fAN9cftkQabEj4aJCcQHpyjNRkgn+rEXn0n5XThs64SOMcprWkHuNzIn/DnCIsGIEiIr JLGA== Received: by 10.180.72.232 with SMTP id g8mr22404600wiv.0.1355312716617; Wed, 12 Dec 2012 03:45:16 -0800 (PST) Received: from [192.168.1.65] (host-2-102-219-7.as13285.net. [2.102.219.7]) by mx.google.com with ESMTPS id u6sm20885372wif.2.2012.12.12.03.45.10 (version=SSLv3 cipher=OTHER); Wed, 12 Dec 2012 03:45:15 -0800 (PST) Message-ID: <50C86E63.2050305@gmail.com> Date: Wed, 12 Dec 2012 11:45:39 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: =?UTF-8?B?UsOpbWkgRGVzcHLDqXM=?= Subject: u/g in general [was Mail from softwire working group about 4rd] References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> In-Reply-To: <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org, Bob Hinden , Suresh Krishnan , 6man X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 11:45:18 -0000 I think the only way to make progress on this question is to discuss two points in a much more general way: 1. Does the current mapping of the "u" bit in the modified EUI format have any value? 2. Does the current mapping of the "g" bit in the modified EUI format have any value? If the answer to these questions is "no" we could start by saying that they are *not* mapped from an IEEE EUI into a modified EUI, and then consider how to use them in future. Regards Brian From despres.remi@laposte.net Wed Dec 12 05:29:18 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C3FD21F894D for ; Wed, 12 Dec 2012 05:29:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.949 X-Spam-Level: X-Spam-Status: No, score=-1.949 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iEJgDOO9Un8c for ; Wed, 12 Dec 2012 05:29:17 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.11]) by ietfa.amsl.com (Postfix) with ESMTP id 932DA21F8909 for ; Wed, 12 Dec 2012 05:29:17 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id 40DED7000113; Wed, 12 Dec 2012 14:29:16 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id 5CCC470000A4; Wed, 12 Dec 2012 14:29:15 +0100 (CET) X-SFR-UUID: 20121212132915380.5CCC470000A4@msfrf2208.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Wed, 12 Dec 2012 14:29:16 +0100 Message-Id: References: <50C28653.6030109@ericsson.com> To: Jouni Korhonen X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Cc: 6man chairs <6man-chairs@tools.ietf.org>, INT ADs , IETF IPv6 Mailing List , Suresh Krishnan , Softwire chairs X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 13:29:18 -0000 Hi, Jouni, 2012-12-12 10:04, Jouni Korhonen : >=20 > Hi, >=20 >=20 > On Dec 8, 2012, at 2:14 AM, Suresh Krishnan = wrote: >=20 >> Hi all, >>=20 >> The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) >> describes a solution for providing IPv4 connectivity over IPv6. The >> draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 >> Addresses. It uses a 4rd specific mark called the V octet in the = first 8 >=20 > V-octet was AFAIR first time discussed within the Softwire MAP design = team=20 > and I had/expressed my concerns already that time. My argumentation = was that > we cannot just redefine the u & g bit use without actually having it = verified > against and reflected in RFC4291. Glad to see it happening now ;) > =20 > IMHO the current language in RFC4291 does not give enough freedom to = use > u=3Dg=3D1, since such combination is not specifically left = unused/reserved > (although u=3Dg=3D1 makes no sense for the current IPv6). > IEEE allows MAC > addresses that have I/G set to 1 and U/L set to 0, which makes me = rather > uncomfortable with IETF using u=3Dg=3D1 for their own purposes. IEEE indeed permits group addresses for multiple interfaces that share a = common address but, as we are in the context of IPv6 UNICAST addresses, = interface all our IEEE-address derived IIDs have g=3D0. IETF can take = advantage of this fact without risk to interfere with IEEE,=20 For more details, please see my last answer to Bob. Regards, RD =20 > - Jouni >=20 >=20 >> bits of the Interface Identifier. There were some concerns raised in >> softwire about whether such addresses are actually compatible with = the >> IPv6 addressing architecture. Whether this is actually compatible = with >> the IPv6 addressing architecture is outside the scope of the softwire >> wg. Hence we would like to hear the 6man wg's perspective on this. I >> would like to request the wg to please go over the NOTE in Section = 4.5 >> page 18, which explains the issue, and over IANA Considerations = Section >> 6, and chime in on whether this is acceptable from a 6man = perspective. >>=20 >> Thanks >> Suresh >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From despres.remi@laposte.net Wed Dec 12 05:59:16 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 205E821F8925 for ; Wed, 12 Dec 2012 05:59:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.019 X-Spam-Level: X-Spam-Status: No, score=-1.019 tagged_above=-999 required=5 tests=[AWL=-0.929, BAYES_20=-0.74, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q2iCyBBjiJCW for ; Wed, 12 Dec 2012 05:59:15 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.11]) by ietfa.amsl.com (Postfix) with ESMTP id 310321F0CB2 for ; Wed, 12 Dec 2012 05:59:14 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id C958E70001E9; Wed, 12 Dec 2012 14:59:13 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id A7AF47000135; Wed, 12 Dec 2012 14:59:13 +0100 (CET) X-SFR-UUID: 20121212135913686.A7AF47000135@msfrf2208.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: u/g in general [was Mail from softwire working group about 4rd] From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50C86E63.2050305@gmail.com> Date: Wed, 12 Dec 2012 14:59:13 +0100 Message-Id: <164D726C-2043-4B81-96F5-9E7E1E0600BF@laposte.net> References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> <50C86E63.2050305@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Cc: softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org, Bob Hinden , Suresh Krishnan , 6man X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 13:59:16 -0000 2012-12-12 12:45, Brian E Carpenter : > I think the only way to make progress on this question is to > discuss two points in a much more general way: >=20 > 1. Does the current mapping of the "u" bit in the modified EUI format = have any value? >=20 > 2. Does the current mapping of the "g" bit in the modified EUI format = have any value? >=20 > If the answer to these questions is "no" we could start by saying that = they > are *not* mapped from an IEEE EUI into a modified EUI, and then = consider > how to use them in future. Agreed that this issue introduces an opportunity to clarify the general = picture. Not sure however that the two proposed questions are clear enough = because today: - some IIDs have u =3D 0, and some have u =3D 1, - some IIDs have g =3D 0, and some have g =3D 1.=20 The only combination that isn't used is u=3Dg=3D1. A point that is relevant, I think, is that local-scope IIDs, having u =3D = 0, have any values in the 63 other bits. Despite the name "modified = EUI-64", these values aren't constrained in any way by the IEEE EUI-64 = format. The natural conclusion I see is that IETF is free to define any new IID = formats that have u=3Dg=3D1.=20 IEEE isn't concerned more than it was when IETF specified the privacy = option with u =3D 0. Would this be acceptable? Regards, RD =20 >=20 > Regards > Brian From bhamacher@westianet.com Tue Dec 11 14:04:16 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA02821E808D for ; Tue, 11 Dec 2012 14:04:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.002 X-Spam-Level: X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L9rfvvKgyK4t for ; Tue, 11 Dec 2012 14:04:16 -0800 (PST) Received: from mail.westianet.com (mail.westianet.com [207.177.9.225]) by ietfa.amsl.com (Postfix) with ESMTP id 142A821E808C for ; Tue, 11 Dec 2012 14:04:15 -0800 (PST) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CDD7EB.7562648C" Subject: MAC Address Tracking Date: Tue, 11 Dec 2012 16:04:14 -0600 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: MAC Address Tracking Thread-Index: Ac3X6yTbbaql7sYoT4OFc1C+qaduEQ== From: "Brian Hamacher" To: X-Mailman-Approved-At: Wed, 12 Dec 2012 07:26:25 -0800 X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Dec 2012 22:06:13 -0000 X-List-Received-Date: Tue, 11 Dec 2012 22:06:13 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CDD7EB.7562648C Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I am looking for a good way to track my users MAC Addresses. I have a test DHCPv6 server up and running ISC 4.1.1-P1. When I look through my DHCP logs as well as my leases file I do not see the client MAC Address anywhere. Do I need to enable an option to allow this to be logged? I am looking to figure out how I can track what user had what IP Address at any given time. The MAC Address is traditionally how I have done this. =20 Any thoughts would be appreciated. =20 Thank You =20 Brian =20 ------_=_NextPart_001_01CDD7EB.7562648C Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I am = looking for a good way to track my users MAC Addresses.  I have a = test DHCPv6 server up and running ISC 4.1.1-P1.  When I look = through my DHCP logs as well as my leases file I do not see the client = MAC Address anywhere.  Do I need to enable an option to allow this = to be logged?  I am looking to figure out how I can track what user = had what IP Address at any given time.  The MAC Address is = traditionally how I have done this.

 

Any thoughts = would be appreciated.

 

Thank = You

 

Brian

 

------_=_NextPart_001_01CDD7EB.7562648C-- From jiangsheng@huawei.com Tue Dec 11 18:17:00 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5DB421E80C1; Tue, 11 Dec 2012 18:17:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yniFvKrhrR1J; Tue, 11 Dec 2012 18:17:00 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id 3551321E80C0; Tue, 11 Dec 2012 18:16:57 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id ANT12380; Wed, 12 Dec 2012 02:16:56 +0000 (GMT) Received: from LHREML401-HUB.china.huawei.com (10.201.5.240) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Wed, 12 Dec 2012 02:16:05 +0000 Received: from SZXEML432-HUB.china.huawei.com (10.72.61.60) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.1.323.3; Wed, 12 Dec 2012 02:16:52 +0000 Received: from SZXEML545-MBS.china.huawei.com ([169.254.2.174]) by SZXEML432-HUB.china.huawei.com ([10.72.61.60]) with mapi id 14.01.0323.003; Wed, 12 Dec 2012 10:16:47 +0800 From: Sheng Jiang To: =?utf-8?B?T2xlIFRyw7hhbg==?= Subject: RE: Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: Review of draft "Prefix Assignment in DHCPv6" Thread-Index: Ac3TeMv/pnhXVKXKQIm8jrwjt/ulh///z9SA//alzmA= Date: Wed, 12 Dec 2012 02:16:46 +0000 Message-ID: <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> In-Reply-To: Accept-Language: en-GB, zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.111.98.140] Content-Type: multipart/mixed; boundary="_002_5D36713D8A4E7348A7E10DF7437A4B9239FD3DDEszxeml545mbschi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Wed, 12 Dec 2012 07:26:30 -0800 Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 02:17:00 -0000 --_002_5D36713D8A4E7348A7E10DF7437A4B9239FD3DDEszxeml545mbschi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PkkgdGhpbmsgdGhlIGFyZ3VtZW50IGdpdmVuIGluIHRoZSBkcmFmdCBmb3Igb3BlcmF0b3JzIHdh bnRpbmcgYQ0KPkRIQ1B2Ni1tYW5hZ2VkIG5ldHdvcmsgd2l0aG91dCBORCBpcyBmbGF3ZWQuDQo+ TkQgaXMgcmVxdWlyZWQgZm9yIHJvdXRlciBkaXNjb3ZlcnksIG5laWdoYm91ciBkaXNjb3Zlcnkg ZXRjIGFueXdheS4gYW5kIGENCj5yb3V0ZXIgb24gdGhlIGxpbmsgbXVzdCBiZSBjb25maWd1cmVk DQo+d2l0aCB0aGUgb25saW5rIHByZWZpeCByZWdhcmRsZXNzLg0KPg0KPndoaWxlIHdlIGNhbiBj bGVhcmx5IG1ha2UgdGhpcyB3b3JrLCBJIGRvbid0IHRoaW5rIGl0IGlzIGp1c3RpZmllZCB0byBj cmVhdGUgYQ0KPmR1cGxpY2F0ZSBtZWNoYW5pc20gZm9yIHByZWZpeCBkaXNjb3ZlcnkuDQo+c2Vj dGlvbiAzLjIgUkZDMTk1OC4NCg0KSGksIE9sZSwNCg0KQXNzdW1pbmcgYWxsIG5ldHdvcmtzIGFy ZSB1c2luZyBTTEFBQyBpcyBub3QgcmlnaHQuDQoNCkluIFdpTUFYIE5XRyBJUHY2IHNwZWMsIFJl dmlzaW9uIDYsIHNlZSB0aGUgYXR0YWNobWVudC4NCg0KU3RhdGVmdWwgKERIQ1B2NikgYWRkcmVz cyBjb25maWd1cmF0aW9uIGlzIHN1cHBvcnRlZC4NCkNoZWNrIFNlY3Rpb25zIDUuMTEuMTEuNCBh bmQgNS4xMS4xMi4yLiANCg0KQWxzbywgQkJGIGRvY3VtZW50IFRSLTE3NyBzdXBwb3J0cyBzdGF0 ZWZ1bCBhZGRyZXNzIGNvbmZpZ3VyYXRpb24gdXNpbmcgREhDUHY2LCBjaGVjayBTZWN0aW9uIDQu Mi4NCg0KSSBhbHNvIGtub3cgYSBmZXcgSVNQIGRlc2lyZSB0byB1c2UgREhDUHY2IGluIHRoZWly IG5ldHdvcmtzLg0KDQpCZXN0IHJlZ2FyZHMsDQoNClNoZW5nDQoNCj5jaGVlcnMsDQo+T2xlDQo+ DQoNCg== --_002_5D36713D8A4E7348A7E10DF7437A4B9239FD3DDEszxeml545mbschi_ Content-Type: application/msword; name="060928_NWG_Stage3_IPv6_Revision_6.doc" Content-Description: 060928_NWG_Stage3_IPv6_Revision_6.doc Content-Disposition: attachment; filename="060928_NWG_Stage3_IPv6_Revision_6.doc"; size=378880; creation-date="Mon, 12 Dec 2011 22:34:42 GMT"; modification-date="Wed, 04 Oct 2006 01:44:36 GMT" Content-Transfer-Encoding: base64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAAGAAAAsgAAAAAAAAAA EAAAwwAAAAEAAAD+////AAAAALAAAACxAAAA/AAAAIABAAAAAgAAfAIAAP////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////s pcEAcWAJBAAA+FK/AAAAAAAAEAAAAAAABgAAeTgBAA4AYmpianFQcVAAAAAAAAAAAAAAAAAAAAAA AAAJBBYAeEIBABM6AQATOgEA/nwAAAAAAAAPAAAAAAAAAAAAAAAAAAAAawAAAAAAAAD//w8AAAAA AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAAKQAAAAAAFgqAAAAAAAAWCoAAFgq AAAAAAAAWCoAAAAAAAB4LQAAAAAAAHgtAAAAAAAAeC0AACQAAAAAAAAAAAAAABQvAABEDwAASKsA AAAAAABIqwAAAAAAAEirAABQAAAAmKsAADQBAADMrAAAtAEAAFg+AAAAAAAArWUBAN4DAACMrgAA WgEAAOavAAAAAAAA5q8AAAAAAADmrwAAAAAAAOavAAAAAAAAbeUAAAYDAABz6AAA9AAAAGfpAAB8 AAAA3GQBAAIAAADeZAEAAAAAAN5kAQAAAAAA3mQBAAAAAADeZAEAAAAAAN5kAQAAAAAA3mQBACQA AACLaQEAaAIAAPNrAQBMAQAAAmUBADkAAAAAAAAAAAAAAAAAAAAAAAAAeC0AAAAAAADj6QAAAAAA AAAAAAAAAAAAAAAAAAAAAAAt5QAAQAAAAG3lAAAAAAAA4+kAAAAAAADj6QAAAAAAAAJlAQAAAAAA AAAAAAAAAABYKgAAAAAAAFgqAAAAAAAA5q8AAAAAAAAAAAAAAAAAAOavAABHNQAAO2UBADYAAADx 9AAAAAAAAPH0AAAAAAAA8fQAAAAAAADj6QAAegUAAFgqAABAAgAA5q8AAAAAAAB4LQAAAAAAAOav AAAAAAAA3GQBAAAAAAAAAAAAAAAAAPH0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA4+kAAAAAAADcZAEAAAAAAAAAAAAAAAAA8fQAAAAAAADx9AAA KgQAAMRWAQAsAwAAmCwAAOAAAAB4LQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4F8BAAAAAADmrwAAAAAAAICuAAAMAAAAsNYYpVbn xgEAAAAAAAAAAEirAAAAAAAAXe8AAAICAADwWQEANgEAAAAAAAAAAAAAqGEBADQDAABxZQEAPAAA AK1lAQAAAAAAJlsBALoEAAA/bQEAAAAAAF/xAAB8AwAAP20BAKQAAADgXwEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg XwEAgAAAAD9tAQAAAAAAAAAAAAAAAAB4LQAAAAAAAGBgAQBIAQAAAAAAAAAAAAAAAAAAAAAAAPH0 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4+kA AAAAAADj6QAAAAAAAOPpAAAAAAAAAmUBAAAAAAACZQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAA2/QAABYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPpAAAA AAAA4+kAAAAAAADj6QAAAAAAAK1lAQAAAAAA4+kAAAAAAADj6QAAAAAAAOPpAAAAAAAA4+kAAAAA AAAAAAAAAAAAAFg+AABEAgAAnEAAAEQgAADgYAAAZCgAAESJAAAEIgAAWD4AAAAAAACcQAAAAAAA AOBgAAAAAAAARIkAAAAAAACcLQAA5AAAAIAuAACQAAAAEC8AAAQAAABYKgAAAAAAAFgqAAAAAAAA WCoAAAAAAABYKgAAAAAAAFgqAAAAAAAAWCoAAAAAAAD/////AAAAAAIADAEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFByb2pl Y3QHV2lNQVggRm9ydW0gTmV0d29yayBXb3JraW5nIEdyb3VwBwdUaXRsZQdJUHY2IG9wZXJhdGlv biB3aXRoIHRoZSBQdFAgbGluayBtb2RlbAcHTnVtYmVyIGFuZCBGaWxlIE5hbWUHMDYwOTE1X05X R19TdGFnZTJfRmlndXJlIDdfNi5kb2MHB1NvdXJjZShzKQdDb21wYW55IG5hbWUocykgliBpbiBh bHBoYWJldGljYWwgb3JkZXINSHVhd2VpLCBOb2tpYSwgU2Ftc3VuZw0HbWFpbHRvOiATIEhZUEVS TElOSyAibWFpbHRvOmJhc2F2YXJhai5wYXRpbEBub2tpYS5jb20iIAEUYmFzYXZhcmFqLnBhdGls QG5va2lhLmNvbRUsIBMgSFlQRVJMSU5LICJtYWlsdG86amluY2hvZUBzYW1zdW5nLmNvbSIgARRq aW5jaG9lQHNhbXN1bmcuY29tFSwgEyBIWVBFUkxJTksgIm1haWx0bzpic2FyaWtheWFAaHVhd2Vp LmNvbSIgARRic2FyaWtheWFAaHVhd2VpLmNvbRUgBwdNZW1iZXJzaGlwB0FyZSBhbGwgcHJvcG9z aW5nIG9yZ2FuaXphdGlvbnMgbWVtYmVycyBvZiB0aGUgV2lNQVggRm9ydW0/IFllcyBbWCBdICBO byBbICBdBwdSZToHSVB2NiB1cGRhdGVzIHRvIHN0YWdlIDMgYmFzZWQgb24gdGhlIGNvbnNlbnN1 cyB0byBhZG9wdCB0aGUgcG9pbnQtdG8tcG9pbnQgbGluayBtb2RlbC4HB1JhdGlvbmFsB0NoYW5n ZXMgdG8gSVB2NiBvcGVyYXRpb24gYmFzZWQgb24gZWFjaCBNUyBiZWluZyBhbGxvY2F0ZWQgYSB1 bmlxdWUgcHJlZml4LgcHQ3VycmVudCBUZXh0IFNlY3Rpb24gTnVtYmVyB1NlYyA1LjExLjMHB05v dGljZSAHVGhpcyBkb2N1bWVudCBpcyBzdWJtaXR0ZWQgdG8gdGhlIFdpTUFYIEZvcnVtIGFzIGEg YmFzaXMgZm9yIGRpc2N1c3Npb24gYW5kIGlzIG5vdCBiaW5kaW5nIG9uIHRoZSBjb250cmlidXRp bmcgaW5kaXZpZHVhbChzKSBvciBvcmdhbml6YXRpb24ocykuIFRoZSBtYXRlcmlhbCBpbiB0aGlz IGRvY3VtZW50IGlzIHN1YmplY3QgdG8gY2hhbmdlIGluIGZvcm0gYW5kIGNvbnRlbnQgYWZ0ZXIg ZnVydGhlciBzdHVkeS4gVGhlIGNvbnRyaWJ1dG9yKHMpIHJlc2VydmUocykgdGhlIHJpZ2h0IHRv IGFkZCwgYW1lbmQgb3Igd2l0aGRyYXcgbWF0ZXJpYWwgY29udGFpbmVkIGhlcmVpbi4gBwdSZWxl YXNlIAdFYWNoIGNvbnRyaWJ1dG9yIGdyYW50cyBhIGZyZWUsIGlycmV2b2NhYmxlIGxpY2Vuc2Ug dG8gdGhlIFdpTUFYIEZvcnVtICB0byBpbmNvcnBvcmF0ZSBtYXRlcmlhbCBjb250YWluZWQgaW4g dGhpcyBjb250cmlidXRpb24sIGFuZCBhbnkgbW9kaWZpY2F0aW9ucyB0aGVyZW9mLCBpbiB0aGUg Y3JlYXRpb24gb2YgYSBXaU1BWCBGb3J1bSBwdWJsaWNhdGlvbiBhbmQgYXQgdGhlIFdpTUFYIEZv cnVtknMgc29sZSBkaXNjcmV0aW9uIHRvIHBlcm1pdCBvdGhlcnMgdG8gcmVwcm9kdWNlIGluIHdo b2xlIG9yIGluIHBhcnQgdGhlIHJlc3VsdGluZyBXSU1BWCBGb3J1bSBwdWJsaWNhdGlvbi4gVGhl IGNvbnRyaWJ1dG9yIGFsc28gYWNrbm93bGVkZ2VzIGFuZCBhY2NlcHRzIHRoYXQgdGhpcyBjb250 cmlidXRpb24gbWF5IGJlIG1hZGUgcHVibGljIGJ5IFdpTUFYIEZvcnVtLiBDb21wbGV0ZSBJUFIg YW5kIGNvcHlyaWdodCBydWxlcyBnb3Zlcm5pbmcgY29udHJpYnV0aW9ucyBzdWJtaXR0ZWQgdG8g dGhlIFdpTUFYIEZvcnVtIGFyZSBhdmFpbGFibGUgZnJvbSB0aGUgV2lNQVggRm9ydW0gYWRtaW5p c3RyYXRvci4gBwcMSVB2Ng01LjExLjEgSW50cm9kdWN0aW9uDVtKSF0gVGhpcyBpcyBjb3BpZWQg ZnJvbSB2ZXIwNA0NVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB0aGUgb3BlcmF0aW9uIG9mIElQdjYg b3ZlciB0aGUgSVB2NiBjb252ZXJnZW5jZSBzdWItbGF5ZXIgYmFzZWQgb24gSUVURnMgSVB2NiBS RkNzLiAgSVB2NiBpbiB0aGUgY2FzZSBvZiBJUHY2IENTIGluIFdpTUFYIHJ1bnMgZGlyZWN0bHkg b3ZlciB0aGUgTUFDIGxheWVyLiAgVGhlIGJlaGF2aW9yIG9mIGhvc3RzIGFuZCB0aGUgbmV0d29y ayBlbGVtZW50cyBpbmNsdWRpbmcgdGhlIGJhc2Ugc3RhdGlvbiBhbmQgdGhlIEFTTiBHVy9BUiBy ZWZlcnJlZCB0byBhcyBBUiBoZXJlYWZ0ZXIgYXJlIGV4cGxhaW5lZCBpbiB0aGlzIHNlY3Rpb24u DTUuMTEuMiA4MDIuMTZlIGFuZCBXaU1BWCBTdXBwb3J0IGZvciBJUHY2DVtKSF0gVGhpcyBpcyBj b3BpZWQgZnJvbSB2ZXIwNA0NSUVFRSBoYXMgZGVmaW5lZCBzZXZlcmFsIGNvbnZlcmdlbmNlIHN1 Yi1sYXllcnMgZm9yIDgwMi4xNmUuIElQIGFuZCBFdGhlcm5ldCBhcmUgdGhlIG1vc3QgcmVsZXZh bnQgb25lcyBmb3IgcnVubmluZyBJUHY2IG92ZXIgdGhlIC4xNiBsaW5rLiBXaU1BWCBoYXMgc3Bl Y2lmaWVkIElQIGFzIHRoZSBtYW5kYXRvcnkgY29udmVyZ2VuY2Ugc3ViLWxheWVyLiBJUHY0IGFu ZCBJUHY2IGhhdmUgYSBjb3JyZXNwb25kaW5nIElQIENTIG92ZXIgdGhlIE1BQyBsYXllci4gIFdo aWxlIElQdjYgY2FuIGJlIG9wZXJhdGVkIG92ZXIgdGhlIElQdjYgQ1MsIGl0IFNIT1VMRCBiZSBu b3RlZCB0aGF0IElQdjYgY2FuIGFsc28gYmUgb3BlcmF0ZWQgb3ZlciB0aGUgRXRoZXJuZXQgY29u dmVyZ2VuY2Ugc3ViLWxheWVyIGFzIHdlbGwuIElQdjYgb3ZlciBJUHY2IENTIGFuZCBFdGhlcm5l dCBDUyBhcmUgYm90aCBkZXNjcmliZWQgaW4gdGhlIGZvbGxvd2luZyBzZWN0aW9ucy4NVGhlIC4x NiBhaXIgaW50ZXJmYWNlIGlzIGFraW4gdG8gYW55IG90aGVyIHdpcmVsZXNzIGxpbmsgYW5kIHRy YW5zbWlzc2lvbiBvZiBJUCBvdmVyIGl0IGlzIHJ1ZGltZW50YXJ5LiBIb3dldmVyIHNvbWUgY29u c2lkZXJhdGlvbnMgYWJvdXQgdGhlIGxpbmsgbW9kZWwgbmVlZCB0byBiZSBhY2NvdW50ZWQgZm9y IGFuZCBvcHRpbWl6ZWQgYWNjb3JkaW5nbHkuIC4xNmUgaXRzZWxmIGRvZXMgbm90IGhhdmUgYW55 IHNwZWNpYWwgY2hhcmFjdGVyaXN0aWNzIHRoYXQgc3VwcG9ydHMgSVB2Ni4gVGhlIDgwMi4xNmUg bGluayBpcyBkZXNpZ25lZCBmb3Igc3VwcG9ydGluZyBJUCB0cmFmZmljIGluIGFuIG9wdGltYWwg bWFubmVyLiANODAyLjE2ZSBoYXMgc3BlY2lmaWVkIHNldmVyYWwgY29udmVyZ2VuY2Ugc3VibGF5 ZXJzIGZvciBzdXBwb3J0aW5nIElQdjYuIElQdjYgY2FuIGJlIG9wZXJhdGVkIG92ZXIgZWloZXIg dGhlIElQdjYgY29udmVyZ2VuY2Ugc3VibGF5ZXIgKENTKSBvciBjYW4gYmUgb3BlcmF0ZWQgb3Zl ciBFdGhlcm5ldCB3aGljaCBzaXRzIGFib3ZlIHRoZSBFdGhlcm5ldCBDUy4gIFRoZSBmcmFtZSBz dHJ1Y3R1cmUgb2YgSVB2Ni9FdGhlcm5ldCBDUyBpcyBzcGVjaWZpZWQgaW4gW1JlZjFdDUZ1bmN0 aW9uYWwgTW9kZWwNW0pIXSBUaGlzIGlzIGNvcGllZCBmcm9tIHZlcjA0DQ1UaGUgSVB2NiBjYXBh YmxlIE1TIGlzIGNvbm5lY3RlZCB2aWEgdGhlIEJTIHRvIGFuIElQdjYgYWNjZXNzIHJvdXRlciAo QVIpLiBUaGUgSVB2NiBhY2Nlc3Mgcm91dGVyIGZ1bmN0aW9uYWxpdHkgZXhpc3RzIGVpdGhlciBp biB0aGUgQVNOIEdXIGluIHRoZSBjYXNlIG9mIHByb2ZpbGVzIEEgYW5kIEMsIGFuZCBhcyBhbiBp bnRlZ3JhbCBwYXJ0IG9mIHRoZSBBU04gaW4gdGhlIGNhc2Ugb2YgcHJvZmlsZSBCLiBUaGlzIGFj Y2VzcyByb3V0ZXIgYWN0cyBhcyB0aGUgZmlyc3QgaG9wIHJvdXRlciBmcm9tIHRoZSBwZXJzcGVj dGl2ZSBvZiB0aGUgTVMuICBUaGUgbW9kZWwgaXMgaWxsdXN0cmF0ZWQgaW4gEyBSRUYgX1JlZjE0 MTg2NjM0MyBcaCABFEZpZ3VyZSA1HjU3FToNCBMgU0hBUEUgIFwqIE1FUkdFRk9STUFUIBQIARUB DUZpZ3VyZSATIFNUWUxFUkVGIDEgXHMgFDUVHhMgU0VRIEZpZ3VyZSBcKiBBUkFCSUMgXHMgMSAU NTcVIJYgSVB2NiBNb2RlbA0NSW4gdGhlIGZpZ3VyZSBhYm92ZSB0aGUgTVMgaXMgYXR0YWNoZWQg YXQgdGhlIElQIGxheWVyIHRvIHRoZSBJUHY2IGFjY2VzcyByb3V0ZXIgaW4gdGhlIEFTTiBHVy4g SVB2NiBwYWNrZXRzIGJldHdlZW4gdGhlIEJTIGFuZCBBU04gR1cgYXJlIHRyYW5zcG9ydGVkIG92 ZXIgYSB0dW5uZWxlZCBpbnRlcmZhY2UsIHJlZmVyZWQgdG8gYXMgdGhlIFI2IHJlZmVyZW5jZSBw b2ludCBpbiB0aGUgYXJjaGl0ZWN0dXJlLiBUaGlzIGlzIGFwcGxpY2FibGUgaW4gdGhlIGNhc2Ug b2YgUHJvZmlsZXMgQSBhbmQgQy4gSW4gdGhlIGNhc2Ugb2YgUHJvZmlsZSBCLCB0aGUgTVMgaXMg YXR0YWNoZWQgYXQgdGhlIElQIGxheWVyIHRvIGFuIElQdjYgYWNjZXNzIHJvdXRlciB3aGljaCBp cyBhIGZ1bmN0aW9uYWwgZW50aXR5IHdpdGhpbiB0aGUgc2NvcGUgb2YgYW4gQVNOLg1JUHY2IGxp bmsgbW9kZWwNW0pIXSBJIHJlLXdyb3RlIHRoaXMuIEkgZGVmaW5lZCB0aGUgbGluayBmb2xsb3dp bmcgM0dQUCBjYXNlIGluIFJGQyAzMzE0LiBLaW5kbHkgY2hlY2sgd2h0aGVyIHRoZSBsaW5rIGRl ZmluaXRpb24gaXMgb2suIEmSbGwgZ28gb3ZlciB0aGUgc2VjdGlvbiBvbmUgbW9yZSB0aW1lIHRv bW9ycm93LiANDVJGQyAyNDYxIGRlZmluZXMgbGluayBhcyBhIGNvbW11bmljYXRpb24gZmFjaWxp dHkgb3IgbWVkaXVtIG92ZXIgd2hpY2ggbm9kZXMgY2FuIGNvbW11bmljYXRlIGF0IHRoZSBsaW5r IGxheWVyLCBpLmUuLCB0aGUgbGF5ZXIgaW1tZWRpYXRlbHkgYmVsb3cgSVAuIFVzdWFsbHkgYSBs aW5rIGlzIGJvdW5kZWQgYnkgcm91dGVycyB0aGF0IGRlY3JlbWVudCBUVEwuICBXaGVuIGFuIE1T IG1vdmVzIHdpdGhpbiBhIGxpbmssIGl0IGNhbiBrZWVwIHVzaW5nIGl0cyBJUCBhZGRyZXNzZXMu IFRoaXMgaXMgYSBsYXllciAzIGRlZmluaXRpb24gYW5kIG5vdGUgdGhhdCB0aGUgZGVmaW5pdGlv biBpcyBub3QgaWRlbnRpY2FsIHdpdGggdGhlIGRlZmluaXRpb24gb2YgdGhlIHRlcm0gJyhMMikg bGluaycgaW4gSUVFRSA4MDIgc3RhbmRhcmRzLiBUaGlzIHNlY3Rpb24gcHJlc2VudHMgYSBtb2Rl bCBmb3IgdGhlIGxhc3QgbWlsZSBsaW5rLCBpLmUuIHRoZSBsaW5rIHRvIHdoaWNoIE1TcyBhdHRh Y2ggdGhlbXNlbHZlcyBieSBkZXNjcmliaW5nIHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgQWNjZXNz IFJvdXRlciwgT24tbGluayBuZWlnaGJvciBhbmQgUHJlZml4IGFzc2lnbm1lbnQuDQ1Gb3IgSVB2 NiBvcGVyYXRpb24sIHdlIHJlY29tbWVuZCBwb2ludC10by1wb2ludCBsaW5rIG1vZGVsLCBpLmUu ICdwZXIgTVMgcHJlZml4IG1vZGVsJyBmb2xsb3dpbmcgdGhlIDNHUFAgcHJlY2VkZW50IGluIFJG QyAzMzE0IFtSZWZ5XS4gSW4gV2lNQVgsIHRoZXJlIGV4aXN0cyBhIGNvbm5lY3Rpb24gKHNlcnZp Y2UgZmxvdykgYmV0d2VlbiBhbiBNUyBhbmQgdGhlIEFSICB2aWEgYSBCUywgb3ZlciB3aGljaCBw YWNrZXRzIGFyZSB0cmFuc2ZlcnJlZC4gDQ0ncGVyIE1TIHByZWZpeCBtb2RlbCcgZGVmaW5lcyB0 aGUgY29sbGVjdGlvbiBvZiBhbGwgc2VydmljZSBmbG93cyAgKHRyYW5zcG9ydCBjb25uZWN0aW9u cykgdG8gdGhlYSBzYW1lIE1TIGFzIGEgc2luZ2xlIGxpbmsuIEFSIHNob3VsZCB0cmVhdCB0aGUg Y29sbGVjdGlvbiBvZiBzZXJ2aWNlIGZsb3dzIHRvIGVhY2ggTVMgYXMgYSBzZXBhcmF0ZSB2aXJ0 dWFsIGxpbmsgYW5kIG1hbmFnZSBhIHZpcnR1YWwgaW50ZXJmYWNlIGZvciBlYWNoIHZpcnR1YWwg bGluay4NDUVhY2ggbGluayBoYXMgb25seSBhbiBNUyBhbmQgYW4gQVIuIEVhY2ggTVMgYmVsb25n cyB0byBhIGRpZmZlcmVudCBsaW5rLiBObyB0d28gTVNzIGJlbG9uZyB0AG8AIAB0AGgAZQAgAHMA YQBtAGUAIABsAGkAbgBrAC4AIABBACAAZABpAGYAZgBlAHIAZQBuAHQAIABwAHIAZQBmAGkAeAAg AHMAaABvAHUAbABkACAAYgBlACAAYQBzAHMAaQBnAG4AZQBkACAAdABvACAAYQAgAGQAaQBmAGYA ZQByAGUAbgB0ACAAbABpAG4AawAuACAAVABoAGkAcwAgAGwAaQBuAGsAIABpAHMAIABmAHUAbABs AHkAIABjAG8AbgBzAGkAcwB0AGUAbgB0ACAAdwBpAHQAaAAgAGEAIABzAHQAYQBuAGQAYQByAGQA IABJAFAAIABsAGkAbgBrACwAIAB3AGkAdABoAG8AdQB0ACAAZQB4AGMAZQBwAHQAaQBvAG4AIABh AG4AZAAgAGMAbwBuAGYAbwByAG0AcwAgAHcAaQB0AGgAIAAgAHQALgAgAFQAaABlACAAZABlAGYA aQBuAGkAdABpAG8AbgAgAG8AZgAgAGEAaQBzACAAYQBzACAAYQAgACAAcABvAGkAbgB0AC0AdABv AC0AcABvAGkAbgB0ACAAbABpAG4AawAgAGkAbgBhAHMAIABvAGYAIABSAEYAQwAgADIANAA2ADEA AjANAA0ATwBuAC0AbABpAG4AawAgAG4AZQBpAGcAaABiAG8AcgANAEluIGFueSBsaW5rLCB0aGVy ZSBhcmUgb25seSBhbiBNUyBhbmQgYW4gQVIuIE9uIGxpbmsgbmVpZ2hib3Igb2YgYW4gTVMgaXMg YWx3YXlzIGFuIEFSLiBMaW5rLXNjb3BlIG11bHRpY2FzdCBpcyBhbHNvIHN1cHBvcnRlZC4NDUlQ djYgcHJlZml4DVtKSF0gVGhpcyBzZWN0aW9uIG1heSBuZWVkIGZ1cnRoZXIgZGV0YWlscy4gSZJs bCBnbyBvdmVyIHRoZSBzZWN0aW9uIG9uZSBtb3JlIHRpbWUgdG9tb3Jyb3cNDUluIHRoaXMgbW9k ZWwsIGVhY2ggbGluayBiZXR3ZWVuIGFuIE1TIGFuZCB0aGUgQVIgaXMgYWxsb2NhdGVkIGEgc2Vw YXJhdGUsIHVuaXF1ZSA2NC1iaXQgcHJlZml4IG9yIHVuaXF1ZSBzZXQgb2YgcHJlZml4ZXMgYnkg dGhlIEFSLiBObyB0d28gTVNzIHNoYXJlIHRoZSBzYW1lIHByZWZpeC4gQmVhciBpbiBtaW5kIHRo YXQgYSBwcmVmaXggaXMgYXNzaWduZWQgbm90IHRvIGFuIE1TIGJ1dCB0byB0aGUgbGluayBiZXR3 ZWVuIHRoZSBNUyBhbmQgdGhlIEFSLiBBUlNOIEdXIG5vdGlmaWVzIGFuIGFzc2lnbmVkIHByZWZp eCBieSBzZW5kaW5nIHRoZSBwcmVmaXggaW4gYSBSb3V0ZXIgIEFkdmVydGlzZW1lbnQgKFJBKSBt ZXNzYWdlLg0NQW4gQVIgc2hvdWxkIG1hbmFnZSB0aGUgcG9vbCBvZiBwcmVmaXhlcyBhbmQgYXNz aWduIGFuIHVuaXF1ZSBwcmVmaXggb3IgYW4gdW5pcXVlIHNldCBvZiBwcmVmaXhlcyBmb3IgZWFj aCBNUy4gQW4gQVIgc2hvdWxkIGtlZXAgdHJhY2sgb2YgYSBwcmVmaXggb3IgYSBzZXQgb2YgcHJl Zml4ZXMgcGVyIGFuIE1TIGFuZCBhZHZlcnRpc2UgYW4gTVMgaXRzIHByZWZpeGVzIGFjY29yZGlu Z2x5LiBJZiBhbiBNUyBzZW5kcyBhbiBSUywgdGhlIEFSIHNob3VsZCByZXBseSBhbiBSQSB3aXRo IGEgcHJlZml4IHRoYXQgaXMgYXNzaWduZWQgZm9yIHRoZSBzb2xpY2l0aW5nIE1TICAocHJlY2lz ZWx5IHNwZWFraW5nIGEgcHJlZml4IHRoYXQgaXMgYXNzaWduZWQgb24gdGhlIGxpbmsgdG8gd2hp Y2ggdGhlICBzb2xpY2l0aW5nIE1TIGJlbG9uZ3MpLiBXaGVuIGFuIE1TIG1vdmVzIHdpdGhpbiBh biBBUiBhbmQgbWFrZXMgYSAgbmV3IGF0dGFjaG1lbnQsIHRoZSBBUiByZWNvZ25pemVzIGl0cyBw cmV2aW91cyBhdHRhY2htZW50IGFuZCAgYWR2ZXJ0aXNlIHRoZSBNUydzIGV4aXN0aW5nIHByZWZp eC4NDVdlIHJlY29tbWVuZCB0aGUgYWdncmVnYXRpb24gb2YgcHJlZml4ZXMuIEFSIG1heSBnZXQg YSA0OC1iaXQgcHJlZml4IGFuZCBhbGxvY2F0ZSA2NC1iaXQgc3ViIHByZWZpeGVzIHRvIE1Tcy4N DVRyYW5zcG9ydCBjb25uZWN0aW9uIGZvciBjb25maWd1cmluZyB0aGUgaG9zdA1bUmFqXSBFeHBs YWluIHRoZSBlc3RhYmxpc2htZW50IG9mIHRoZSBJU0YgYXMgaXMgaW4gdGhlIGN1cnJlbnQgc2Vj dGlvbi4gQWRkIGRldGFpbHMgYWJvdXQgdGhlIGdyYW51bGFyaXR5IG9mIHRoZSBHUkUgdHVubmVs IGJldHdlZW4gdGhlIEJTIGFuZCB0aGUgQVNOLUdXL0FSLg1bSkhdIFRoaXMgaXMgY29waWVkIGZy b20gdmVyMDQuIEkgZGlkbpJ0IG1lbnRpb24gdGhlIGdyYW51bGl0eSBiZWNhdXNlIEkgZG9uknQg a25vdyB3aGV0aGVyIHRvIHB1dCB0aGF0LiANVGhlIG1vYmlsZSBzdGF0aW9uIHBlcmZvcm1zIGlu aXRpYWwgbmV0d29yayBlbnRyeSBhcyBkZXNjcmliZWQgaW4gW1JlZmVyZW5jZSB0byBuZXR3b3Jr IGVudHJ5IHByb2NlZHVyZSBpbiBzZWN0aW9uIDUuNV0uICBUaGUgc3Vic2NyaWJlciBwcm9maWxl IGlzIGRvd25sb2FkZWQgdG8gdGhlIEFTTiBhcyBwYXJ0IG9mIHRoZSBzdWNjZXNmdWwgY29tcGxl dGlvbiBvZiB0aGUgbmV0d29yayBlbnRyeSBwcm9jZWR1cmUuICANT24gY29tcGxldGlvbiBvZiB0 aGUgbmV0d29yayBlbnRyeSBwcm9jZWR1cmUsIHRoZSB0aGUgaW5pdGlhbCBzZXJ2aWNlIGZsb3cg KElTRikgZm9yIElQdjYgQ1MgaXMgZXN0YWJsaXNoZWQgYnkgdGhlIG5ldHdvcmsuIFRoZSBJU0Yg ZXN0YWJsaXNobWVudCBwcm9jZWR1cmUgaXMgZGVzY3JpYmVkIGluIFtSZWZlcmVuY2UgdG8gSVNG IGluIFFvUyBzZWN0aW9uXS4gIFRoZSB0cmlnZ2VyIG9yIGRlY2lzaW9uIHRvIGVzdGFibGlzaCB0 aGUgSVB2NiBJU0YgaXMgYmFzZWQgb24gdGhlIHN1YnNjcmliZXJzIHByb2ZpbGUgYW5kIGNvbnRy b2xsZWQgYnkgdGhlIFNGQSBpbiB0aGUgQVNOLg1UaGUgZXN0YWJsaXNobWVudCBvZiB0aGUgSVNG IGVuYWJsZXMgdGhlIHNlbmRpbmcgYW5kIHJlY2VpdmluZyBvZiBJUHY2IHBhY2tldHMgYmV0d2Vl biB0aGUgTVMgYW5kIHRoZSBhY2Nlc3Mgcm91dGVyIGluIHRoZSBBU04gb3ZlciBJUHY2IENTLiBP biBjb21wbGV0aW9uIG9mIHRoZSBlc3RhYmxpc2htZW50IG9mIHRoZSBJU0YsIHJvdXRlciBhZHZl cnRpc2VtZW50cyBhbmQgYWRkcmVzcyBhc3NpZ25tZW50IHByb2NlZHVyZXMgYXJlIGluaXRpYXRl ZC4NQW5jaG9yIERhdGEgUGF0aCBGdW5jdGlvbg1bUmFqXUFzIGV4cGxhaW5lZCBpbiB0aGUgY3Vy cmVudCBkb2N1bWVudC4gQWRkIGZ1cnRoZXIgZGV0YWlscyBpZiBuZWVkZWQuDVtKSF0gVGhpcyBp cyBjb3BpZWQgZnJvbSB2ZXIwNC4NVGhlIElTRiB0cmlnZ2VycyB0aGUgY3JlYXRpb24gb2YgdGhl IEFuY2hvciBkYXRhIHBhdGggZnVuY3Rpb24gYXQgdGhlIEFjY2VzcyByb3V0ZXIgKEFSKS4gVGhl IEFuY2hvciBEUEYgaXMgcmVzcG9uc2libGUgZm9yIGJ1ZmZlcmluZyBJUHY2IHBhY2tldHMgZGVz dGluZWQgdG8gYW4gTVMgd2hlbiB0aGUgTVMgaXMgaW4gaWRsZSBtb2RlLiBUaGUgQW5jaG9yIERQ RiBpbnRlcmFjdHMgd2l0aCB0aGUgQW5jaG9yIHBhZ2luZyBjb250cm9sbGVyIGZ1bmN0aW9uIChB UENGKSBhcyBkZXNjcmliZWQgaW4gW1JlZiBQYWdpbmcgc2VjdGlvbl0uDVJvdXRlciBEaXNjb3Zl cnkNW1Jhal1VdGlsaXplIGN1cnJlbnQgdGV4dCBrZWVwaW5nIGluIG1pbmQgdGhlIFB0UCBsaW5r IG1vZGVsLg1bSkhdIEkgcmVhcnJhbmdlZCB0aGUgc2VjdGlvbnMgYnV0IGNvbnRlbnRzIGFyZSBq dXN0IGNvcGllZCBmcm9tIHZlcjA0LiBUaGUgc2VjdGlvbiBuZWVkcyBmdXJ0aGVyIGRldGFpbCB3 LnIudC4gcDJwIGxpbmsgbW9kZWwuIEmSbGwgdXBkYXRlIHRoaXMgdG9tb3Jyb3cuIA0NUm91dGVy IERpc2NvdmVyeSBkZWZpbmVzIGhvdyBhbiBNUyBsb2NhdGVzIHRoZSByb3V0ZXJzIHRoYXQgcmVz aWRlIG9uIGFuIGF0dGFjaGVkIGxpbmsuIEFmdGVyIGF0dGFjaGluZyB0byBhIG5ldyBCUywgYW4g TVMgbmVlZHMgdG8gZXN0YWJsaXNoIGFuIGluaXRpYWwgdHJhbnNwb3J0IGNvbm5lY3Rpb24gdGhh dCBjYW4gYmUgdXNlZCBmb3IgSVAgc2lnbmFsaW5nIHN1Y2ggYXMgUlMvIFJBIGFuZCBOUy8gTkEg bWVzc2FnZXMuIA1BbiBNUyBNQVkgc2VuZCBhbiBSUyAoUm91dGVyIFNvbGljaXRhdGlvbikgbWVz c2FnZSB0byBzb2xpY2l0IGFuIFJBIChSb3V0ZXIgQWR2ZXJ0aXNlbWVudCkgbWVzc2FnZSBmcm9t IEFTTiB0byBhY3F1aXJlIG5lY2Vzc2FyeSBpbmZvcm1hdGlvbiBhcyBzcGVjaWZpZWQgaW4gUkZD IDI0NjEuIFVwb24gcmVjZWl2aW5nIGFuIFJTIG1lc3NhZ2UsIHRoZSBBUkFTTiBNQVkgcmVwbHkg YW4gUkEgdG8gdGhlIHNvbGljaXRpbmcgTVMuIEJlY2F1c2Ugb25seSBvbmUgQVJTTi1HVyByZWNl aXZlcyB0aGUgUlMsIHRoZSBSQSBjYW4gYmUgc2VudCB3aXRob3V0IGFueSByYW5kb20gZGVsYXku DUFSU04gTUFZIHNlbmQgdW5zb2xpY2l0ZWQgUkFzIHBlcmlvZGljYWxseSBhcyBzcGVjaWZpZWQg aW4gUkZDIDI0NjEgb3IgaW1tZWRpYXRlbHkgYWZ0ZXIgdGhlIGluaXRpYWwgdHJhbnNwb3J0IGNv bm5lY3Rpb24gaGFzIGJlZW4gZXN0YWJsaXNoZWQgYXMgc3BlY2lmaWVkIGluIEZSRCAoRmFzdCBS b3V0ZXIgRGlzY292ZXJ5KSBiZWxvdyB0byBzcGVlZCB1cCBSb3V0ZXIgRGlzY292ZXJ5Lg1TY2Vu YXJpbzE6IFdoZW4gYW4gTVMgYXR0YWNoZXMgdG8gYSBuZXcgQlMNRlJEDRMgRU1CRUQgV29yZC5Q aWN0dXJlLjggIBQBFQ1GaWd1cmUgNS0xMSAeEyBTRVEgRmlndXJlIFwqIEFSQUJJQyBccyAxIBQy FSBSb3V0ZXIgRGlzY292ZXJ5IHVzaW5nIEZSRA1BbiBNUyBtYWtlcyBhIHJlZ2lzdHJhdGlvbiB0 byBBUlNOIGFjY29yZGluZyB0byA4MDIuMTZlLyBXaU1BWCBwcm9jZWR1cmUuDVRoZSBNUyBlc3Rh Ymxpc2hlcyB0aGUgaW5pdGlhbCBzZXJ2aWNlIGZsb3cgZm9yIHRoZSBob3N0IGNvbmZpZ3VyYXRp b24uDVRoZSBlc3RhYmxpc2htZW50IG9mIHRoZSBpbml0aWFsIHNlcnZpY2UgZmxvdyB0cmlnZ2Vy cyB0aGUgSVB2NiBBUiBpbiB0aGUgQVNOIHRvIHNlbmQgYW4gdW5zb2xpY2l0ZWQgUkEgdG8gdGhl IE1TDVJTLyBSQSBFeGNoYW5nZQ1BcyBleHBsYWluZWQgaW4gdGhlIGN1cnJlbnQgZG9jdW1lbnQu IEFkZCBmdXJ0aGVyIGRldGFpbHMgaWYgbmVlZGVkLg0TIEVNQkVEIFdvcmQuUGljdHVyZS44ICAU ARUNRmlndXJlIDUtMTEeEyBTRVEgRmlndXJlIFwqIEFSQUJJQyBccyAxIBQzFVJvdXRlciBkaXNj b3ZlcnkgdXNpbmcgUlMvUkEgZXhjaGFuZ2UNQW4gTVMgcGVyZm9ybXMgcmVnaXN0cmF0aW9uIHRv IGFuIEFSU04gYWNjb3JkaW5nIHRvIDgwMi4xNmUvIFdpTUFYIHByb2NlZHVyZXMuDVRoZSBNUyBl c3RhYmxpc2hlcyB0aGUgaW5pdGlhbCBzZXJ2aWNlIGZsb3cgd2hpY2ggaXMgdXNlZCBmb3IgdGhl IGhvc3QgY29uZmlndXJhdGlvbi4NVGhlIE1TIHNlbmRzIGFuIFJTIChSb3V0ZXIgU29saWNpdGF0 aW9uKSB3aXRoIHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzIHNldCB0byB0aGUgYWxsLXJvdXRlcnMg bXVsdGljYXN0IGFkZHJlc3MgYW5kIHVuc3BlY2lmaWVkIGFkZHJlc3MgYXMgdGhlIHNvdXJjZSBh ZGRyZXNzIHZpYSB0aGUgdHJhbnNwb3J0IGNvbm5lY3Rpb24gZXN0YWJsaXNoZWQgaW4gU3RlcDIu IFRoZSBSUyBpcyBkZWxpdmVyZWQgdG8gdGhlIElQdjYgQVIgaW4gdGhlIEFTTiBhcyBhIHVuaWNh c3QgbWVzc2FnZS4gRXZlbiB0aG91Z2ggdGhlIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXMgc2V0IHRv IHRoZSBhbGwtcm91dGVycyBtdWx0aWNhc3QgYWRkcmVzcywgdGhlIGNvbWJpbmF0aW9uIG9mIHRo ZSB0cmFuc3BvcnQgY29ubmVjdGlvbiBhbmQgdGhlIElTRiBjcmVhdGVzIGEgcG9pbnQgdG8gcG9p bnQgY29ubmVjdGlvbiBiZXR3ZWVuIHRoZSBNUyBhbmQgdGhlIEFSIGFuZCBoZW5jZSB0aGUgUlMg aXMgZGVsaXZlcmVkIGFzIGEgdW5pY2FzdCBtZXNzYWdlLg1UaGUgQVNOIHJlc3BvbmRzIHdpdGgg YW4gUkEgd2l0aCBhbGwtbm9kZXMgbXVsdGljYXN0IGFkZHJlc3Mgc2V0IGFzIHRoZSBkZXN0aW5h dGlvbiBJUCBhZGRyZXNzIGFuZCB0aGUgQVIgbGluayBsb2NhbCBhZGRyZXNzIGFzIHRoZSBzb3Vy Y2UgYWRkcmVzcyB2aWEgdGhlIElTRi90cmFuc3BvcnQgY29ubmVjdGlvbiBlc3RhYmxpc2hlZCBp biBTdGVwIDIuIFRoZSBSQSBpcyBkZWxpdmVyZWQgb25seSB0byB0aGUgTVMgd2l0aCB3aGljaCB0 aGUgSVNGIGlzIGFzc29jaWF0ZWQuIEl0IHNob3VsZCBiZSBub3RlZCB0aGF0IHRoZSBBUiBzZW5k cyB0aGUgUkEgdG8gdGhlIGFsbC1ub2RlcyBtdWx0aWNhc3QgYWRkcmVzcy4gQnV0IHRoZSBSQSBp cyBkZWxpdmVyZWQgdmlhIHRoZSBkYXRhLXBhdGggYXNzb2NpYXRlZCB3aXRoIHRoZSBJU0YgYW5k IGxpbmtzIGl0IHRvIGEgc2luZ2xlIE1TLiBUaGUgUkEgaXMgbm90IGRlbGl2ZXJlZCB0byBldmVy eSBNUyB0aGF0IGhhcyBhIGxpbmsgd2l0aCB0aGUgQVIuIFRoZSBBUiBoYXMgdG8gZGVsaXZlciB0 aGUgUkEgdG8gdGhlIERQRiBmcm9tIHdoaWNoIHRoZSBSUyB3YXMgcmVjZWl2ZWQgd2hpY2ggZW5z dXJlcyB0aGF0IHRoZSBSQSBpcyBkZWxpdmVyZWQgb25seSB0byB0aGUgTVMgdGhhdCBzZW50IHRo ZSBSUy4NDVNjZW5hcmlvMjogV2hlbiBhbiBNUyByZW1haW5zIGF0IHRoZSBjdXJyZW50IEJTDVBl cmlvZGljIFVuc29saWNpdGVkIFJBDUFuIEFSQVNOIE1BWSBzZW5kIHVuc29saWNpdGVkIFJBcyBw ZXJpb2RpY2FsbHkgYXMgc3BlY2lmaWVkIGluIFJGQzI0NjEgdG8gZmFjaWxpdGF0ZSB0aGUgaW50 ZXJvcGVyYXRpb24gd2l0aCB0aGUgc3RhbmRhcmQgYWJpZGluZyBNU3MuIEhvd2V2ZXIgZXZlbiB0 aGUgcGVyaW9kaWMgdW5zb2xpY2l0ZWQgUkFzIGFyZSByZWNvbW1lbmRlZCB0byBiZSBkZWxpdmVy ZWQgaW4gdW5pY2FzdC4gVGhlIHBlcmlvZCBiZXR3ZWVuIHRoZXNlIFJvdXRlciBBZHZlcnRpc2Vt ZW50cyBjYW4gYmUgaW5jcmVhc2VkIHRvIGEgc3VpdGFibGUgdmFsdWUgY29tcGFyYWJsZSB0byAo bGVzcyB0aGFuKSByb3V0ZXIgbGlmZXRpbWUgdG8gcmVkdWNlIHRoZSBvdmVyaGVhZCBvbiB0aGUg YWlyIGludGVyZmFjZS4gVGhlIGN1cnJlbnQgTWF4UnRyQWR2SW50ZXJ2YWwgYXMgZGVmaW5lZCBp biBSRkMyNDYxIGhhcyBhIE1heCB2YWx1ZSBvZiAxODAwIHNlY29uZHMgYW5kIGEgZGVmYXVsdCBv ZiA2MDAgc2Vjb25kcy4gVGhlIE1heCB2YWx1ZSBvZiAxODAwIHNlY29uZHMgbWF5IG5lZWQgdG8g YmUgY29uZmlndXJlZCB0byBhIGdyZWF0ZXIgdmFsdWUgaW4gYSBXaU1BWCBlbnZpcm9ubWVudCBh bmQgYSBjaGFuZ2UgdG8gdGhlIE1heCB2YWx1ZSByZXF1ZXN0ZWQgdG8gYmUgbWFkZSBpbiBSRkMy NDYxLg1SUy8gUkEgRXhjaGFuZ2UNQSBtb2JpbGUgc3RhdGlvbiB0aGF0IGlzIGF0dGFjaGVkIHRv IGFuIEFSIGFuZCBpcyBhd2FyZSBvZiB0aGUgQVKScyB1bmljYXN0IGFkZHJlc3MgbWF5IHNlbmQg cm91dGVyIHNvbGljaXRhdGlvbnMgcmFuZG9tbHkgb3IgaW50ZXJtaXR0ZW50bHkuICBUaGUgZmln dXJlIGJlbG93IHNob3dzIHN1Y2ggYSBzY2VuYXJpbzoNEyBFTUJFRCBXb3JkLlBpY3R1cmUuOCAg FAEVDUZpZ3VyZSA1LTExHhMgU0VRIEZpZ3VyZSBcKiBBUkFCSUMgXHMgMSAUNBUgUmFuZG9tIG9y IGludGVybWl0dGVudCBSUy9SQSBleGNoYW5nZQ1BbiBNUyBzZW5kcyBhbiBSUyB3aXRoIHRoZSBB UpJzIElQIGFkZHJlc3MgYXMgZGVzdGluYXRpb24gYWRkcmVzcyBhbmQgdGhlIE1TIGFkZHJlc3Mg YXMgc291cmNlIGFkZHJlc3MuDVRoZSBBUiBpbiBBU04gcmVjZWl2ZXMgdGhlIFJTIGFuZCByZXBs aWVzIGFuIFJBIHdpdGggdGhlIE1TIGFkZHJlc3MgYXMgZGVzdGluYXRpb24gYWRkcmVzcyBhbmQg QVJTTi1HVyBhZGRyZXNzIGFzIHNvdXJjZSBhZGRyZXNzDQ1Sb3V0ZXIgQWR2ZXJ0aXNlbWVudCBD b250ZW50DUVhY2ggTVMgYmVsb25ncyB0byBhIGRpZmZlcmVudCBsaW5rLiBBU04gR1cgc2hvdWxk IHNlbmQgZGlmZmVyZW50IE1TcyBkaWZmZXJlbnQgUkFzIGFjY29yZGluZ2x5LiBFc3BlY2lhbGx5 IGRpZmZlcmVudCBwcmVmaXhlcyBzaG91bGQgYmUgYWR2ZXJ0aXNlZCBmb3IgZGlmZmVyZW50IE1T cy4gDVJGQyAyNDYxIGFsbG93cyBhbiBBUiB0byBvbWl0IHNvbWUgaW5mb3JtYXRpb24gZnJvbSBh biBSQSBhdCBpdHMgb3duIGRpc2NyZXRpb24uIEZvciBleGFtcGxlLCBhbiBBUiBNQVkgYWR2ZXJ0 aXNlIGFuIFJBIHdpdGhvdXQgYW55IHByZWZpeCBpbmNsdWRlZC4gSG93ZXZlciwgaXQgaXMgcmVj b21tZW5kZWQgdGhhdCBhbnkgUkEsIHdoZXRoZXIgc29saWNpdGVkIG9yIHVuc29saWNpdGVkLCBT SE9VTEQgTk9UIG9taXQgc29tZSBvcHRpb25zIHN1Y2ggYXMgUElPIChQcmVmaXggSW5mb3JtYXRp b24gT3B0aW9uKSBhbmQgY29udGFpbiBhbGwgdGhlIGluZm9ybWF0aW9uLiBMLSBhbmQgQS1iaXRz IG9mIFBJTyBzaG91bGQgYmUgc2V0IHRvIGZvcmNlIHRoZSBzdGF0ZWxlc3MgYWRkcmVzcyBhdXRv Y29uZmlndXJhdGlvbiBhdCB0aGUgTVMuDVVwc3RyZWFtIFJvdXRlIEFkdmVydGlzZW1lbnQNSW4g cGVyLU1TIHByZWZpeCBtb2RlbCwgQVIgYWR2ZXJ0aXNlcyAvNjQgcHJlZml4ZXMgb2J0YWluZWQg ZnJvbSBhIC80OCBvciAvMzIgcHJlZml4LiBBUiBNVVNUIGFkdmVydGlzZSAvNDggb3IgLzMyIHJv dXRlIHVwc3RyZWFtIGluIG9yZGVyIHRvIGFjaGlldmUgdGhlIHJvdXRlIGFnZ3JlZ2F0aW9uLg0N QWRkcmVzcyByZXNvbHV0aW9uIA1bUmFqXSBFeHBsYWluIHRoYXQgdGhlcmUgaXMgbm8gYWRkcmVz cyBjb25mbGljdCBpbiBhIFB0UCBsaW5rIG1vZGVsLiBIb3dldmVyIERBRCBzdGlsbCBuZWVkcyB0 byBiZSBwZXJmb3JtZWQgYW5kIHN1cHBvcnRlZC4NW0pIXSBJIGNvbWJpbmVkIHRoZSBzZWN0aW9u IGZyb20gdmVyMDQgYW5kIEJlaGNldJJzIHdyaXRpbmcuIC4NDUFkZHJlc3MgcmVzb2x1dGlvbiBp cyB0aGUgcHJvY2VzcyBieSB3aGljaCBhbiBJUHY2IG5vZGUgZGV0ZXJtaW5lcyB0aGUgbGluay1s YXllciBhZGRyZXNzIG9mIGFuIG9uLWxpbmsgZGVzdGluYXRpb24gKGUuZy4sIGEgbmVpZ2hib3Ip IGdpdmVuIG9ubHkgdGhlIGRlc3RpbmF0aW9uJ3MgSVAgYWRkcmVzcy4gSW4gY2FzZSBvZiBJUHY2 IENTLCB0aGUgTUFDIGFkZHJlc3MgaXMgbm90IHVzZWQgZm9yIGRlbGl2ZXJpbmcgdGhlIGZyYW1l czsgaGVuY2UgdGhlIGFkZHJlc3MgcmVzb2x1dGlvbiBpcyBub3QgbmVlZGVkLiAgDUhvd2V2ZXIg YW4gTVMgaW1wbGVtZW50ZWQgYXMgcGVyIHRoZSBJUHY2IHNwZWNpZmljYXRpb24gbWF5IHBlcmZv cm0gYWRkcmVzcyByZXNvbHV0aW9uLiBFdmVuIGluIHN1Y2ggY2FzZXMsIGFkZHJlc3MgcmVzb2x1 dGlvbiBpcyBvbmx5IG5lZWRlZCBiZXR3ZWVuIGFuIEFSU04gR1cgYW5kIGFuIE1TIGFuZCBwZXJm b3JtZWQgYXMgb2YgUkZDIDI0NjEuICANQW4gaW50ZWxsaWdlbnQvZnV0dXJlIGltcGxlbWVudGF0 aW9uIE1BWSBjaG9vc2Ugbm90IHRvIGRvIHRoZSBhZGRyZXNzIHJlc29sdXRpb24gaWYgdGhlIGFj Y2VzcyB0ZWNobm9sb2d5IGlzIDgwMi4xNiB3aXRoIElQdjYgQ1MuDUluIHRoZSBwZXItTVMgc3Vi bmV0IHByZWZpeCBtb2RlbCwgdGhlcmUgbm9ybWFsbHkgaXMgbm8gYWRkcmVzcyBjb25mbGljdC4g SG93ZXZlciBkdXBsaWNhdGUgYWRkcmVzcyBkZXRlY3Rpb24gKERBRCkgc3RpbGwgbmVlZHMgdG8g YmUgcGVyZm9ybWVkLiBBUiBhbmQgTVMgY3JlYXRlIHRoZWlyIHJlc3BlY3RpdmUgbGluayBsb2Nh bCBhZGRyZXNzZXMgYW5kIHBlcmZvcm0gREFEIHdpdGhpbiB0aGUgbGluayBpbmRlcGVuZGVudGx5 Lg1OZXh0IEhvcA1bSkhdIFRoaXMgaXMgY29waWVkIGZyb20gdmVyMDQuDQ1OZXh0LWhvcCBkZXRl cm1pbmF0aW9uIGlzIGEgcHJvY2VzcyBmb3IgbWFwcGluZyBhbiBJUCBkZXN0aW5hdGlvbiBhZGRy ZXNzIGludG8gdGhlIElQIGFkZHJlc3Mgb2YgdGhlIG5laWdoYm9yIHRvIHdoaWNoIHRyYWZmaWMg Zm9yIHRoZSBkZXN0aW5hdGlvbiBTSE9VTEQgYmUgc2VudC4gSW4gV2lNQVggQXJjaGl0ZWN0dXJl LCB0aGUgbmV4dCBob3AgZm9yIGFuIE1TIGlzIGFsd2F5cyBhbiBBUlNOLg1BbiBpbnRlbGxpZ2Vu dC9mdXR1cmUgaW1wbGVtZW50YXRpb24gTUFZIGNob29zZSBub3QgdG8gZG8gdGhlIG5leHQtaG9w IGRldGVybWluYXRpb24gaWYgdGhlIGFjY2VzcyB0ZWNobm9sb2d5IGlzIDgwMi4xNiBieSBwcmV2 ZW50aW5nIHN1Y2ggcGFja2V0cyBmcm9tIGJlaW5nIHNlbnQgYnkgdGhlIGhvc3QuDU5VRA1bSkhd IFRoaXMgaXMgY29waWVkIGZyb20gdmVyMDQuDQ1BbiBNUyBtYXkgbG9zZSBjb21tdW5pY2F0aW9u IGxpbmsgd2l0aCBhbm90aGVyIGNvcnJlc3BvbmRpbmcgaG9zdCBvciB0byBpdHMgYWNjZXNzIHJv dXRlciBhdCBhbnkgdGltZS4gSWYgYSBwYXRoIGhhcyBmYWlsZWQsIGl0IGlzIHBvc3NpYmxlIHRv IHJlY292ZXIgZnJvbSBzdWNoIGEgZmFpbHVyZS4gUkZDMjQ2MSBzcGVjaWZpZXMgbmVpZ2hib3Ig dW5yZWFjaGFiaWxpdHkgZGV0ZWN0aW9uIChOVUQpIHRoYXQgaXMgYXBwbGljYWJsZSB0byBob3N0 cyBhbmQgcm91dGVycy4gTlVEIGlzIHVzZWQgdG8gdGVzdCB0aGUgcGF0aCBiZXR3ZWVuIGhvc3Rz LCBiZXR3ZWVuIGhvc3RzIGFuZCByb3V0ZXIgYW5kLCBiZXR3ZWVuIHJvdXRlcnMgYW5kIGhvc3Rz LiBSb3V0ZXItdG8tcm91dGVyIGNvbW11bmljYXRpb24gcGF0aCBpcyBub3QgY29uc2lkZXJlZCBo ZXJlLiANSW4gdGhlIGNhc2Ugb2YgV2lNQVggdGhlIE1TIGFuZCBCUyBhcmUgYXdhcmUgb2YgdGhl IGxpbmsgc3RhdGUgb3ZlciB0aGUgODAyLjE2IGFpciBpbnRlcmZhY2UuIFdoZW4gdGhlIE1TIGlz IGluIElkbGUgbW9kZSwgdGhlIGRhdGEgcGF0aCBiZXR3ZWVuIHRoZSBCUyBhbmQgQVJTTi1HVy9h Y2Nlc3Mgcm91dGVyIGlzIHRvcm4gZG93bi4gUGFnaW5nIGlzIHVzZWQgdG8gd2FrZSBhbiBJZGxl IG1vZGUgTVMgYW5kIGVzdGFibGlzaCBhIGRhdGEgcGF0aCBiZWZvcmUgcGFja2V0cyBkZXN0aW5l ZCB0byBhbiBNUyBjYW4gYmUgZGVsaXZlcmVkLiBIZW5jZSBOVUQgYXQgdGhlIElQIGxheWVyIGlz IG5vdCBhbHdheXMgcmVxdWlyZWQuIEEgaG9zdCBtYXkgaG93ZXZlciBwZXJmb3JtIE5VRC4gQnV0 IGlmIGFuIE1TIGlzIGluIElkbGUgbW9kZSwgTlVEIGJlY29tZXMgYSBzdWJvcHRpbWFsIG9wZXJh dGlvbi4gQSBXaU1BWC1saW5rIGF3YXJlIGhvc3QgbWF5IGJlIGRlc2lnbmVkIHRvIGF2b2lkIE5V RC4gQnV0IGZvciByZWd1bGFyIElQdjYgaG9zdHMgc3VjaCBhcyBsYXB0b3BzIHdpdGggZGF0YSBj YXJkcyBOVUQgU0hPVUxEc2hvdWxkIGJlIHN1cHBvcnRlZC4NUGF0aCBNVFUNW0pIXSBUaGlzIGlz IGNvcGllZCBmcm9tIHZlcjA0Lg0NUkZDMjQ2MCBzcGVjaWZpZXMgdGhhdCBldmVyeSBsaW5rIGlu IHRoZSBJbnRlcm5ldCBoYXMgYW4gTVRVIG9mIDEyODAgb2N0ZXRzIG9yIGdyZWF0ZXIuIFdoZW4g SVB2NiBpcyBydW4gb3ZlciBFdGhlcm5ldCB0aGUgTVRVIGlzIHNldCB0byAxNTAwIG9jdGV0cy4g VGhpcyBpcyBnZW5lcmFsbHkgdmlld2VkIGFzIHRoZSBvcHRpbWFsIE1UVSBmb3IgYSBob3N0IGdp dmVuIHRoZSBsaW5rIHR5cGVzIGluIHRoZSBjb3JlIG5ldHdvcmsuIA1UaGUgTVRVIGF0IHRoZSBs aW5rIGxheWVyIGZvciA4MDIuMTYvZSBpcyBzcGVjaWZpZWQgYXMgMTUyMiBvY3RldHMgW1JlZjFd LiBIZW5jZSB0aGUgSVB2NiBNVFUgc2hvdWxkIGJlIGxlc3MgdGhhbiB0aGUgbGluayBNVFUuIE1U VSBzZXR0aW5nIGlzIGltcG9ydGFudCBpbiBvcmRlciB0byBhdm9pZCBmcmFnbWVudGF0aW9uIG9m IHBhY2tldHMuIFdoZW4gYW4gTVMgc2VuZHMgYW4gSVB2NiBwYWNrZXQgb3ZlciBJUHY2IENTLCB0 aGUgcGFja2V0IGlzIGNhcnJpZWQgb3ZlciB0aGUgUjEgcmVmZXJlbmNlIHBvaW50LiBUaGUgcGFj a2V0IHNpemUgYXQgdGhlIElQdjYgQ1MgaXMgdGhlIHNpemUgb2YgdGhlIElQdjYgcGFja2V0IGFu ZCB0aGUgNiBvY3RldCAgTUFDIGhlYWRlci4gVGhlIE1BQyBoZWFkZXIgaXMgc3RyaXBwZWQgYXQg dGhlIEJTIGFuZCB0aGUgSVB2NiBwYWNrZXQgaXMgc2VudCB0byB0aGUgYWNjZXNzIHJvdXRlciB2 aWEgdGhlIFI2IHR1bm5lbCBpbiB0aGUgY2FzZSBvZiBQcm9maWxlcyBBIGFuZCBDIGFuZCBkZWxp dmVyZWQgdG8gdGhlIGFjY2VzcyByb3V0ZXIgZnVuY3Rpb24gaW4gdGhlIGNhc2Ugb2YgcHJvZmls ZSBCLiBXaGVuIHRoZSBJUHY2IHBhY2tldCBpcyB0cmFuc3BvcnRlZCBvdmVyIFI2LCBpdCBpcyBl bmNhcHN1bGF0ZWQgd2l0aCBhIEdSRSBoZWFkZXIgYW5kIGNhcnJpZWQgb3ZlciBJUHY0LiBIZW5j ZSBNVFUgYXQgdGhlIE1TIGFuZCBhY2Nlc3Mgcm91dGVyIG5lZWQgdG8gY29uc2lkZXIgdGhlIG92 ZXJoZWFkIG9mIHRoZSBSNiBhbmQgUjQgdHVubmVscy4gSW4gb3JkZXIgdG8gYXZvaWQgZnJhZ21l bnRhdGlvbiBpbiB2YXJpb3VzIHNjZW5hcmlvcyBzdWNoIGFzIElQc2VjIGluIHR1bm5lbCBtb2Rl IGFuZCBvdGhlcnMsIHRoZSByZWNvbW1lbmRhdGlvbiBmb3IgZGVmYXVsdCBNVFUgaXMgMTQwMCBv Y3RldHMgYXQgdGhlIE1TLiBUaGUgcmVjb21tZW5kYXRpb24gZm9yIGRlZmF1bHQgTVRVIHNpemUg aXMgMTI4MCBvY3RldHMgYXQgdGhlIE1TIGlmIEdSRSBpcyBjYXJyaWVkIG92ZXIgSVB2NiBbcmVm dF0uIE5vdGUgdGhhdCB0aGlzIGlzIGEgY29uZmlndXJhYmxlIHBhcmFtZXRlciBhbmQgb3BlcmF0 b3JzIG1heSBjaG9vc2UgdG8gb3ZlcnJpZGUgdGhlIGRlZmF1bHQgTVRVIGJhc2VkIG9uIG5ldHdv cmsgY29uZmlndXJhdGlvbiBhbmQgbGluayB0eXBlcy4gDVJGQzI0NjEgYWxzbyByZWNvbW1lbmRz IHRoYXQgSVB2NiBub2RlcyBpbXBsZW1lbnQgUGF0aCBNVFUgZGlzY292ZXJ5LiBXaU1BWFRoZSBo b3N0cyBjYW4gbGVhcm4gdGhlIFNEVSBzaXplIGZyb20gdGhlIEJTIHVzaW5nIERTQS1SRVEvUlNQ IG1lc3NhZ2VzIHdoZXJlIFRMViAxNiBpZGVudGlmaWVzIHRoZSBTRFUgc2l6ZS4gVGhpcyB2YWx1 ZSBTSE9VTEQgYmUgdXNlZCBhcyB0aGUgTVRVIHNpemUuDUlQdjYgQWRkcmVzc2luZyBmb3IgaG9z dHMNW1Jhal0gU2ltcGxpZnkgdGhpcyBzZWN0aW9uIGFzIGEgcmVzdWx0IG9mIHRoZSBQdFAgbGlu ayBtb2RlbC4gQ29tcGxldGUgYWxsIHRoZSBzdWJzZWN0aW9ucyBmb3IgdGhpcy4NW0pIXSBJIHJl d3JvdGUgdGhlIHNlY3Rpb24gd2hpY2ggaGFzIGJlY29tZSBtdWNoIHNpbXBsaWZpZWQuIEtpbmRs eSBjaGVjay4gDQ1UaGUgYWRkcmVzc2luZyBzY2hlbWUgZm9yIElQdjYgaG9zdHMgaW4gV2lNQVgg Zm9sbG93cyB0aGUgSUVURnMgcmVjb21tZW5kYXRpb24gZm9yIGhvc3RzIHNwZWNpZmllZCBpbiBS RkMgMjQ5NC4gVGhlIElQdjYgbm9kZSByZXF1aXJlbWVudHMgUkZDIHNwZWNpZmllcyBhIHNldCBv ZiBSRkNzIHRoYXQgYXJlIGFwcGxpY2FibGUgZm9yIGFkZHJlc3NpbmcuIFRoZXNlIGluY2x1ZGU6 DVRoZSBJUHY2IEFkZHJlc3NpbmcgQXJjaGl0ZWN0dXJlIJYgUkZDMzUxMyAoVXBkYXRlZCBieSBS RkMzODc5KQ1JUHY2IHN0YXRlbGVzcyBhZGRyZXNzIGF1dG9jb25maWd1cmF0aW9uIC0gUkZDMjQ2 Mg1Qcml2YWN5IEV4dGVuc2lvbnMgZm9yIEFkZHJlc3MgQ29uZmlndXJhdGlvbiBpbiBJUHY2IC0g UkZDIDMwNDENRGVmYXVsdCBBZGRyZXNzIFNlbGVjdGlvbiBmb3IgSVB2NiAtIFJGQyAzNDg0DVN0 YXRlZnVsIEFkZHJlc3MgQXV0b2NvbmZpZ3VyYXRpb24gLSAgREhDUHY2LCBSRkMtMzMxNQ1UaGUg bm9kZSByZXF1aXJlbWVudHMgUkZDICgyNDk0KSBzcGVjaWZpZXMgd2hpY2ggb2YgdGhlIGFib3Zl IGFkZHJlc3NpbmcgcmVsYXRlZCBSRkNzIGFyZSBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IGFuZCB3 aGljaCBhcmUgb3B0aW9uYWwuDUludGVyZmFjZSBJZGVudGlmaWVyIChJSUQpDVRoZSBNUyBoYXMg YSA0OC1iaXQgTUFDIGFkZHJlc3MgYXMgc3BlY2lmaWVkIGluIFtSZWYxXS4gVGhpcyBNQUMgYWRk cmVzcyBpcyB1c2VkIHRvIGdlbmVyYXRlIHRoZSA2NCBiaXQgaW50ZXJmYWNlIGlkZW50aWZpZXIg d2hpY2ggaXMgdXNlZCBieSB0aGUgTVMgZm9yIGFkZHJlc3MgYXV0b2NvbmZpZ3VyYXRpb24uIFRo ZSBJSUQgaXMgZ2VuZXJhdGVkIGJ5IHRoZSBNUyBhcyBzcGVjaWZpZWQgaW4gUkZDMjQ2NC4NSVB2 NiBhZGRyZXNzIGlzIGZvcm1lZCBieSBhZGRpbmcgYW4gSW50ZXJmYWNlIElkZW50aWZpZXIgKElJ RCkgdG8gdGhlIHByZWZpeCBsZWFybnQgZnJvbSBSb3V0ZXIgQWR2ZXJ0aXNlbWVudC4gVGhlIElJ RCBmb3JtcyB0aGUgbGVhc3Qgc2lnbmlmaWNhbnQgYml0cyBvZiB0aGUgSVB2NiBhZGRyZXNzIGFz IHNob3duIGJlbG93DRMgRU1CRUQgV29yZC5QaWN0dXJlLjggIBQBFQ1GaWd1cmUgNS0xMR4TIFNU WUxFUkVGIDEgXHMgFEVycm9yISBObyB0ZXh0IG9mIHNwZWNpZmllZCBzdHlsZSBpbiBkb2N1bWVu dC4VHhMgU0VRIEZpZ3VyZSBcKiBBUkFCSUMgXHMgMSAUNRUgSVB2NiBhZGRyZXNzIGZvcm1hdA1U aGUgbGVuZ3RoIG9mIHRoZSBJSUQgaXMgZml4ZWQgYW5kIG11c3QgYmUgNjQtYml0cyBmb3IgYWxs IG5vZGVzIGluIHRoZSBXSU1BWCBOZXR3b3JrLiANVGhlIElJRCBmb3IgODAyLjE2IGludGVyZmFj ZXMgaXMgYmFzZWQgb24gdGhlIEVVSS02NCBpZGVudGlmaWVyIGRlcml2ZWQgZnJvbSB0aGUgaW50 ZXJmYWNlJ3MgYnVpbHQtaW4gNDgtYml0IE1BQyBhZGRyZXNzLiBFVUktNjQgYml0IGlkZW50aWZp ZXIgaXMgZm9ybWVkIGJ5IGluc2VydGluZyAweEZGRkUgaW4gdGhlIE1BQyBhZGRyZXNzIGJldHdl ZW4gdGhlIGNvbXBhbnkgSUQgKGZpcnN0IDI0IGJpdHMpIGFuZCB0aGUgbWFudWZhY3R1cmVyIHNl bGVjdGVkIGV4dGVuc2lvbiBJRCAobGFzdCAyNCBiaXRzKS4gVGhlIElJRCBpcyB0aGVuIGZvcm1l ZCBmcm9tIHRoZSBFVUktNjQgYnkgaW52ZXJ0aW5nIHRoZSB1bml2ZXJzYWwvbG9jYWwgKHUvbCkg Yml0LiBUaGlzIGlzIHRoZSA3dGggYml0IG9mIHRoZSBtb3N0IHNpZ25pZmljYW50IG9jdGV0LiBJ bnZlcnRpbmcgdGhpcyBiaXQgd2lsbCBnZW5lcmFsbHkgY2hhbmdlIGEgMCB2YWx1ZSB0byBhIDEg bWVhbmluZyBnbG9iYWxseSB1bmlxdWUgSVB2NiBJSUQuDRMgRU1CRUQgV29yZC5QaWN0dXJlLjgg IBQBFQ1GaWd1cmUgNS0xMR4TIFNUWUxFUkVGIDEgXHMgFEVycm9yISBObyB0ZXh0IG9mIHNwZWNp ZmllZCBzdHlsZSBpbiBkb2N1bWVudC4VHhMgU0VRIEZpZ3VyZSBcKiBBUkFCSUMgXHMgMSAUNhUg SWxsdXN0cmF0aW9uIG9mIGZvcm1pbmcgdGhlIElJRA1Gb3IgYWRkcmVzc2VzIHRoYXQgYXJlIGJh c2VkIG9uIHByaXZhY3kgZXh0ZW5zaW9ucywgdGhlIE1TIG1heSBnZW5lcmF0ZSByYW5kb20gSUlE cyBhcyBzcGVjaWZpZWQgaW4gUkZDMzA0MS4NRHVwbGljYXRlIEFkZHJlc3MgRGV0ZWN0aW9uIChE QUQpDURBRCBpcyBwZXJmb3JtZWQgYXMgcGVyb2YgUkZDIDI0NjEsIDI0NjIuDVN0YXRlbGVzcyBh ZGRyZXNzIGF1dG8tY29uZmlndXJhdGlvbg1JZiBMLSBhbmQgQS1iaXRzIGluIFBJTyBhcmUgc2V0 IGFuZCBNLWZsYWcgbm90IHNldCBNUyBwZXJmb3JtcyBzU3RhdGVsZXNzIGFkZHJlc3MgYXV0by1j b25maWd1cmF0aW9uIGlzIHBlcmZvcm1lZCBhcyBwZXJvZiBSRkMgMjQ2MSwgMjQ2Mi4gVGhlIGFj Y2VzcyByb3V0ZXIgaW4gdGhlIEFTTiBpcyB0aGUgZGVmYXVsdCByb3V0ZXIgdGhhdCBhZHZlcnRp c2VzIGEgcHJlZml4IHRoYXQgaXMgdXNlZCBieSB0aGUgTVMgdG8gY29uZmlndXJlIGFuIGFkZHJl c3MuDVN0YXRlZnVsIGFkZHJlc3MgYXV0by1jb25maWd1cmF0aW9uDUlmIHRoZSBNLWZsYWcgaXMg c2V0IGluIHRoZSBSQSBtZXNzYWdlIGZyb20gdGhlIGFjY2VzcyByb3V0ZXIgdG8gdGhlIE1TLCB0 aGUgTVMgTUFZIHBlcmZvcm0sIHN0YXRlZnVsIGFkZHJlc3MgY29uZmlndXJhdGlvbi4gSWYgdGhl IE0tZmxhZyBpcyBzZXQsIEEgYml0IGluIHRoZSBQcmVmaXggSW5mb3JtYXRpb24gT3B0aW9uIE1V U1Qgbm90IGJlIHNldC4gRm9yIHRoaXMgcHVycG9zZSwgdGhlIE1TIFNIQUxMIHVzZSBESENQdjYg cHJvY2VkdXJlcyBhcyBkZWZpbmVkIGluIFJGQyAzMzE1LiBUaGUgTVMgU0hBTEwgc2VuZCB0aGUg REhDUCByZXF1ZXN0IG1lc3NhZ2UgdG8gdGhlIGFsbC1ub2RlcyBESENQIHNlcnZlciBvciBhbGwt bm9kZXMgREhDUCByZWxheSBhZGRyZXNzZXMuIFRoZSBBUlNOLUdXL0FTTiBhY3RzIGFzIHRoZSBE SENQLXNlcnZlciAocHJveHkpIG9yIERIQ1AtcmVsYXkgdG8gYXNzaXN0IHRoZSBNUyB0byBhY3F1 aXJlIGFuIElQdjYgYWRkcmVzcyBpbiBhIHN0YXRlZnVsIG1hbm5lci4gSWYgYWN0aW5nIGFzIGEg cmVsYXksIHRoZSBBUlNOLUdXIFNIQUxMIGZvbGxvdyB0aGUgcmVsYXkgcHJvY2VkdXJlcyBkZWZp bmVkIGluIFJGQzMzMTUuDQ1JZiBESENQIGlzIHVzZWQgZm9yIGFkZHJlc3MgY29uZmlnaWd1cmF0 aW9uICgnTT0xJyBpbiB0aGUgUm91dGVyIEFkdmVydGlzZW1lbnQpLCB0aGUgREhDUCBzZXJ2ZXIg bXVzdCBwcm92aWRlIGFkZHJlc3NlcyB3aXRoIGEgc2VwYXJhdGUgcHJlZml4IHBlciBtb2JpbGUg bm9kZS4gVGhlIHByZWZpeCBtdXN0IG9mIGNvdXJzZSBtYXRjaCB3aGF0ZXZlciBwcmVmaXggdGhl IEFSU04gR2F0ZXdheSBoYXMgYWR2ZXJ0aXNlZCB0byB0aGUgbW9iaWxlIG5vZGUgKGlmIGFueSku DUROUyBEaXNjb3ZlcnkNW0pIXSBUaGlzIGlzIGNvcGllZCBmcm9tIHZlcjA0Lg0NSW4gb3JkZXIg dG8gYmUgYWJsZSB0byB1c2UgdGhlIER5bmFtaWMgTmFtZSBTZXJ2aWNlIChETlMpLCB0aGUgTVMg aGFzIHRvIGJlIGNvbmZpZ3VyZWQgd2l0aCB0aGUgSVB2NiBETlMgc2VydmVyIGFkZHJlc3Nlcy4g Q3VycmVudGx5IHRoZXJlIGFyZSB0d28gbWVjaGFuaXNtcyBpbiB1c2UgaW4gdGhlIEludGVybmV0 IGZvciBkeW5hbWljYWxseSBjb25maWd1cmluZyB0aGUgRE5TIHNlcnZlciBhZGRyZXNzZXM6IFVz aW5nIHdlbGwta25vd24gYWRkcmVzc2VzIGZvciB0aGUgSVB2NiBETlMgc2VydmVycyBhbmQgZHlu YW1pY2FsbHkgY29uZmlndXJpbmcgdGhlIEROUyBzZXJ2ZXIgYWRkcmVzc2VzIHZpYSBEeW5hbWlj IEhvc3QgQ29uZmlndXJhdGlvbiBQcm90b2NvbCAoREhDUCkgZm9yIElQdjYgdXNpbmcgRE5TIENv bmZpZ3VyYXRpb24gb3B0aW9ucyBbUmVmelgsWV0uIA1DaG9vc2luZyB0aGUgcmlnaHQgRE5TIFNl cnZlciBjb25maWd1cmF0aW9uIG1ldGhvZCBpcyBkZXBlbmRlbnQgb24gdGhlIGFkZHJlc3MgYWxs b2NhdGlvbiBtZWNoYW5pc21zLiBJZiBzdGF0ZWZ1bCwgREhDUC1iYXNlZCwgYWRkcmVzcyBhdXRv LWNvbmZpZ3VyYXRpb24gaXMgdXNlZDsgdGhlIERIQ1B2NiBETlMgQ29uZmlndXJhdGlvbiBvcHRp b25zIFNIQUxMIGJlIHVzZWQuIEhvd2V2ZXIsIGlmd2hlbiB1c2luZyBzdGF0ZWxlc3MgYWRkcmVz cyBhdXRvLWNvbmZpZ3VyYXRpb24gaXMgdXNlZCwgd2VsbC1rbm93biBhZGRyZXNzZXMsIG9yIHN0 YXRlbGVzcyBESENQdjYgW1JlZnVaXSBTSEFMTCBiZSB1c2VkLg1UaGUgRE5TIFNlcnZlciBhZGRy ZXNzIFNIQUxMIGJlIGZyb20gdGhlIHNhbWUgbmV0d29yayBhcyB0aGUgTVOSZXMgSVAgYWRkcmVz cy4gVGhlIGluZm9ybWF0aW9uIGZvciB0aGUgRE5TIENvbmZpZ3VyYXRpb24gT3B0aW9ucyBpcyBz ZXQgdG8gdGhlIERIQ1AgcHJveHkgd2l0aCB0aGUgQUFBIHByb2NlZHVyZXMgYXMgZGVzY3JpYmVk IGluIHRoZSBzZWN0aW9uIFt0aGUgc3BlYyBhbmQgdGhlIHNlY3Rpb24gbnVtYmVyIHdoZXJlIHRo ZSBzdGFnZSAzIEFBQSBwcm9jZWR1cmVzIGFyZV0gSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIHNl bnRlbmNlIGFuZCBjb3VsZCBub3QgZml4IGl0Og1XZWxsIEtub3duIEFkZHJlc3NlcyBmb3IgRE5T IFNlcnZlciBEaXNjb3ZlcnkNW0pIXSBUaGlzIGlzIGNvcGllZCBmcm9tIHZlcjA0LiBJIHJlbWVt YmVyIFYmViBjb21tZW50cyBvbiB0aGlzLiBXZSBtYXkgbmVlZCB0byBjaGFuZ2UuIA0NQW4gTVMg dGhhdCB1c2VzIElQdjYgRE5TIFNlcnZlciBkaXNjb3ZlcnkgU0hBTEwgdXNlIHRoZSBmb2xsb3dp bmcgdGhyZWUgYWRkcmVzc2VzIGFzIHRoZSBwcmltYXJ5IEROUyBzZXJ2ZXIgYWRkcmVzcywgYW5k IHRoZSBzZWNvbmRhcnkgYWRkcmVzc2VzIHJlc3BlY3RpdmVseS4NZmVjMDowMDAwOjAwMDA6ZmZm Zjo6MSwgDWZlYzA6MDAwMDowMDAwOmZmZmY6OjINZmVjMDowMDAwOjAwMDA6ZmZmZjo6Mw1BbiBN UyB1c2luZyB3ZWxsLWtub3duIGFkZHJlc3NlcyBTSEFMTCBzZW5kIHRoZSBETlMgcXVlcmllcyB0 byBvbmUgb2YgdGhlc2UgYWRkcmVzc2VzLiANTVMgTUFZIHN1cHBvcnQgd2VsbC1rbm93biBhZGRy ZXNzZXMuIFRoZSBuZXR3b3JrIFNIQUxMIHN1cHBvcnQgd2VsbC1rbm93biBhZGRyZXNzZXMuDURI Q1B2NiBETlMgY29uZmlndXJhdGlvbiBvcHRpb25zDVtKSF0gVGhpcyBpcyBjb3BpZWQgZnJvbSB2 ZXIwNC4gSSByZW1lbWJlciBWJlYgY29tbWVudHMgb24gdGhpcy4gV2UgbWF5IG5lZWQgdG8gY2hh bmdlLiANDVRoZSBESENQdjYgRE5TIGNvbmZpZ3VyYXRpb24gb3B0aW9ucyBhcmUgZGVmaW5lZCBp biBbUmVmelldLiBUaGUgRE5TIHJlY3Vyc2l2ZSBuYW1lIHNlcnZlciBvcHRpb25zIFNIQUxMIGJl IHBvcHVsYXRlZCBieSB0aGUgbmV0d29ya5JzIG5hbWUgc2VydmVyIGFkZHJlc3Nlcy4gSW4gYWRk aXRpb24sIHRoZSBEb21haW4gc2VhcmNoIGxpc3Qgb3B0aW9uIE1BWSBiZSBwcmVzZW50IGFuZCBw b3B1bGF0ZWQgd2l0aCB0aGUgbmV0d29ya5JzIHNlYXJjaCBsaXN0Lg1UaGUgTVMgTUFZIHVzZSBE SENQdjYgRE5TIENvbmZpZ3VyYXRpb24gT3B0aW9ucyBbUmVmelldIJYgZWl0aGVyIHdpdGggREhD UHY2IFtSZWZ3WF0gd2hlbiBzdGF0ZWZ1bCBhZGRyZXNzIGNvbmZpZ3VyYXRpb24gaXMgdXNlZCwg b3IgU3RhdGVsZXNzIERIQ1B2NiBbUmVmdVpdIHdoZW4gc3RhdGVsZXNzIGFkZHJlc3MgYXV0by1j b25maWd1cmF0aW9uIGlzIHVzZWQuDVRoZSBuZXR3b3JrIFNIQUxMIHN1cHBvcnQgREhDUHY2IFtS ZWZ3WF0gYW5kIERIQ1B2NiBETlMgQ29uZmlndXJhdGlvbiBPcHRpb25zIFtSZWZ6WV0gd2hlbiBz dGF0ZWZ1bCBhZGRyZXNzIGF1dG8tY29uZmlndXJhdGlvbiwgaXMgdXNlZC4gVGhlIG5ldHdvcmsg U0hBTEwgc3VwcG9ydCBzdGF0ZWxlc3MgREhDUHY2IFtSZWZ1Wl0gd2l0aCB0aGUgRE5TIENvbmZp Z3VyYXRpb24gb3B0aW9ucyBbUmVmelldIHdoZW4gc3RhdGVsZXNzIGFkZHJlc3MgYXV0by1jb25m aWd1cmF0aW9uIGlzIHVzZWQuDVJBIE9wdGlvbg1bSkhdIFRoaXMgaXMgY29waWVkIGZyb20gdmVy MDQuIEkgcmVtZW1iZXIgViZWIGNvbW1lbnRzIG9uIHRoaXMuIFdlIG1heSBuZWVkIHRvIGNoYW5n ZS4gDQ1UaGUgUkEgb3B0aW9uIGZvciBETlMgZGlzY292ZXJ5IGlzIGRlc2NyaWJlZCBpbiBSRkM0 MzM5Lg1JQ01QdjYNW0pIXSBUaGlzIGlzIGNvcGllZCBmcm9tIHZlcjA0LiANDUlDTVB2VjYgTVVT VCBiZSBpbXBsZW1lbnRlZCBhcyBzcGVjaWZpZWQgaW4gUkZDNDQ0My4NSVAgU2VjdXJpdHkgKElQ U2VjKQ1bSkhdIFRoaXMgaXMgY29waWVkIGZyb20gdmVyMDQuIA0NSVBzZWMgaXMgYW4gaW50ZWdy YWwgcGFydCBvZiB0aGUgSVB2NiBzdGFjayBvbiBob3N0cy4gSVBzZWMgaXMgYWxzbyBjb21tb25s eSB1c2VkIGZvciBWUE5zIGFuZCBvdGhlciBhcHBsaWNhdGlvbnMuIElLRXYyIHNob3VsZCBhbHNv IGJlIHN1cHBvcnRlZCBhcyBwZXIgUkZDIDQzMDYuICBTZWN1cml0eSBmb3IgbW9iaWxlIHN0YXRp b25zIHNob3VsZCBiZSBzdXBwb3J0ZWQgYXMgc3BlY2lmaWVkIGluIFJGQzQyOTQuDVVwbGluayBh bmQgZG93bmxpbmtnIHRyYW5zbWlzc2lvbiBvZiBJUHY2IHBhY2tldHMNW0pIXSBUaGlzIGlzIGNv cGllZCBmcm9tIHZlcjA0LiANDVVwbGluaw1JUHY2IHBhY2tldHMgY2FuIGJlIHNlbnQgYnkgdGhl IE1TIG92ZXIgSVB2NiBDUyB2aWEgYSB0cmFuc3BvcnQgY29ubmVjdGlvbiB0aGF0IG1hcHMgdG8g ZWl0aGVyIHRoZSBJbml0aWFsIHNlcnZpY2UgZmxvdyBvciB0byBhbm90aGVyIHByZS1wcm92aXNp aW9uZWQgc2VydmljZSBmbG93IGluIHRoZSBBU04uIFRoZSBNUyBzZW5kcyBJUHY2IHBhY2tldHMg dGhhdCBhcmUgY2FycmllZCBvdmVyIGEgdHJhbnNwb3J0IGNvbm5lY3Rpb24gaWRlbnRpZmllZCBi eSBhIGNvbm5lY3Rpb24gSWRlbnRpZmllciAoQ0lEKS4gVGhlIElQdjYgQ1MgYXQgdGhlIEJTIHJl Y2VpdmVzIHRoZSBJUHY2IHBhY2tldC4gQmFzZWQgb24gdGhlIENJRCB0aGF0IHRoZSBwYWNrZXQg d2FzIHJlY2VpdmVkIG9uLCB0aGUgQlMgaGFzIGEgbWFwcGluZyB0byBhIHNlcnZpY2UgZmxvdyB3 aGljaCBtYXBzIHRvIGEgRGF0YSBQYXRoIElEIChHUkUga2V5KS4gVGhlIEJTIHVzZXMgdGhlIERh dGEgcGF0aCBJRCAoR1JFIGtleSkgdG8gc2VuZCB0aGUgcGFja2V0IHRvIHRoZSBBY2Nlc3Mgcm91 dGVyIChBUikgdmlhIHRoZSBHUkUgdHVubmVsIChSNikgd2hlbiB0aGUgQlMgYW5kIEFjY2VzcyBy b3V0ZXIgYXJlIHNlcGFyYXRlZCAoUHJvZmlsZXMgQSBhbmQgQykuIEluIHRoZSBjYXNlIG9mIFBy b2ZpbGUgQiwgdGhlIEJTIGZvcndhcmRzIHRoZSBJUHY2IHBhY2tldCB0byB0aGUgQVIuDURvd25s aW5rDVdoZW4gYSBwYWNrZXQgZGVzdGluZWQgZm9yIGFuIE1TIGFycml2ZXMgYXQgdGhlIEFTTiBH Vy9BUiwgdGhlIEFTTiBHVy9BUiBsb29rcyBhdCB0aGUgSVB2NiBwYWNrZXQgaGVhZGVyIGFuZC9v ciBmbG93IElEIHRvIGRldGVybWluZSB0aGUgc2VydmljZSBmbG93IElEIChTRklEKSB0aGF0IHRo aXMgcGFja2V0IG5lZWRzIHRvIGJlIG1hcHBlZCBvbiB0by4gVGhlIFNGSUQgbWFwcyB0byBhIGRh dGEgcGF0aCBJRC4gVGhlIEFTTiBHVyB1c2VzIHRoZSBHUkUga2V5IGFzc29jaWF0ZWQgd2l0aCB0 aGUgZGF0YSBwYXRoIElEIHRvIGZvcndhcmQgdGhlIElQdjYgcGFja2V0IHZpYSB0aGUgR1JFIHR1 bm5lbCB0byB0aGUgQlMgaW4gdGhlIGNhc2Ugd2hlbiB0aGUgQVIgYW5kIHRoZSBCUyBhcmUgc2Vw YXJhdGVkIGJ5IHRoZSBSNiBpbnRlcmZhY2UgKFByb2ZpbGVzIEEgYW5kIEMpLiBJbiB0aGUgY2Fz ZSBvZiBQcm9maWxlIEIsIHRoZSBBUiBmb3J3YXJkcyB0aGUgcGFja2V0IHRvIHRoZSBCUyBpbiBj YXNlIHRoZSBCUyBhbmQgQVIgYXJlIG5vdCBjb2xvY2F0ZWQuIFRoZSBCUyByZWNlaXZlcyB0aGUg SVB2NiBwYWNrZXQuIFRoZSBCUyBtYXkgbm90IGJlIGFibGUgdG8gZGlyZWN0bHkgbWFwIGFuIElQ djYgcGFja2V0IHRvIGEgdHJhbnNwb3J0IGNvbm5lY3Rpb24gKENJRCkgYmFzZWQgb24ganVzdCB0 aGUgR1JFIGtleSB3aGVuIHRoZSBncmFudWxhcml0eSBvZiB0aGUgR1JFIGtleSBpcyBub3QgYXQg YSBwZXIgTVMgb3Igc2VydmljZSBmbG93IGJhc2lzIC4gSW4gc3VjaCBpbnN0YW5jZXMgdGhlIEJT IHdpbGwgdXNlIHRoZSBHUkUga2V5IGFzIHdlbGwgYXMgdGhlIHR1cGxlcyBpbiB0aGUgSVB2NiBo ZWFkZXIgdG8gaWRlbnRpZnkgdGhlIGFwcHJvcHJpYXRlIENJRCB0byBzZW5kIHRoZSBJUHY2IHBh Y2tldCBvbi4gVGhlIEJTIGZvcndhcmRzIHRoZSBJUHY2IHBhY2tldCBvbiBhIHRyYW5zcG9ydCBj b25uZWN0aW9uIGlkZW50aWZpZWQgYnkgYSBDSUQgdG8gdGhlIGFwcHJvcHJpYXRlIE1TLg1QcmVm aXggbWFuYWdlbWVudCBhdCB0aGUgQVINW0pIXSBXZZJkIGJldHRlciBrZWVwIGZyb20gdXNpbmcg dGhlIHRlcm0gkXByZWZpeCBkZWxlZ2F0aW9ukiBQZW9wbGUgbWF5IGJlIGNvbnN1ZGVkIHRoYXQg dGhlIHByZWZpeCBpcyBkZWxlZ2F0ZWQgdG8gYW4gTVMsIG5vdCBhc3NpZ25lZCBvbiBhIHAycCBs aW5rLiBBbHNvIEkgd29uZGVyIHdoZXRoZXIgd2UgbmVlZCB0byBpbmNsdWRlIHN1Y2ggY29tcGxp Y2F0ZWQgc2NoZW1lLiBJdCBzZWVtcyBzaW1wbGVyIHRvIGp1c3QgdXNlIGxvY2FsIHBvb2wgaW4g QVNOIEdXLiAgIA0NVXNpbmcgREhDUHY2IGZvciBQcmVmaXggbWFuYWdlbWVudA1UaGUgZmlndXJl IGJlbG93IHByZXNlbnRzIGEgcHJlZml4IGRlbGVnYXRpb24gcHJvY2VkdXJlIHVzaW5nIERIQ1B2 Ni4gDQENVGFibGUgICBVc2luZyBESENQdjYgZm9yIFByZWZpeCBEZWxlZ2F0aW9uDVN0ZXAHRGVz Y3JpcHRpb24HByAgICAgIDEHTVMgcGVyZm9ybXMgaW5pdGlhbCBuZXR3b3JrIGVudHJ5IGFuZCBh dXRoZW50aWNhdGlvbiBwcm9jZWR1cmVzLiBhcyBkZXNjcmliZWQgdGhlIHByZXZpb3VzIHNlY3Rp b25zBwcyB09uY2UgYXV0aGVudGljYXRpb24gc3VjY2VlZHMsICBBdXRoIGZ1bmN0aW9uIG1vZHVs ZSBub3RpZmllcyBESENQIGNsaWVudCBtb2R1bGUuICBBdXRoIFN1Y2Nlc3MgbWVzc2FnZSBpbmNs dWRlcyBzb21lIG9mIE1TkiBpbmZvcm1hdGlvbiAsIHN1Y2ggYXMgTUFDIGFkZHJlc3MgYW5kIHNv IG9uLgcHMwdESENQIG1lc3NhZ2VzIHNob3VsZCBiZSByZWxheWVkIGlmIHRoZSBBUiBhbmQgYSBE SENQIHNlcnZlciBhcmUgbm90ICBjb25uZWN0ZWQgZGlyZWN0bHkuICBUaGUgYWJvdmUgZmlndXJl IGlsbHVzdHJhdGVzIHRoZSBzY2VuYXJpbyB0aGF0IHRoZSBBUlNOLUdXIGFuZCB0aGUgIERIQ1Ag U2VydmVyIGFyZW4ndCBjb25uZWN0ZWQgZGlyZWN0bHkuICBUaGUgREhDUCBDbGllbnQgaW5pdGlh dGVzIERIQ1AgICAgcHJvY2VkdXJlIHdpdGggU29saWNpdCB0byByZXF1ZXN0IHByZWZpeGVzIGZv ciB0aGUgTVMuICBUaGUgQVJTTi1HVyAgY3JlYXRlcyBhbmQgdHJhbnNtaXRzIGEgU29saWNpdCBt ZXNzYWdlIGFzIGRlc2NyaWJlZCBpbiBzZWN0aW9ucyAgMTcuMS4xLCAiQ3JlYXRpb24gb2YgU29s aWNpdCBNZXNzYWdlcyIgYW5kIDE3LjEuMiwgdHJhbnNtaXNzaW9uICBvZiBTb2xpY2l0IE1lc3Nh Z2VzIiBvZiBSRkMgMzMxNS4gIFRoZSBBUlNOLUdXIGNyZWF0ZXMgYW4gSUFfUEQgYW5kICBhc3Np Z25zIGl0IGFuIElBSUQuICBJQUlEIGNhbpJ0IGJlIGNyZWF0ZWQgYmFzZWQgb24gdGhlIE1TkiBN QUMgYWRkcmVzcywgIGFuZCB0aGUgYWxnb3JpdGhtIGlzIGltcGxlbWVudGlvbiBzcGVjaWZpYy4g VGhlIEFSU04tR1cgTVVTVCBpbmNsdWRlIHRoZSBJQV9QRCBvcHRpb24gaW4gdGhlICBTb2xpY2l0 IG1lc3NhZ2UgBwc0B1RoZSBESENQIFNlcnZlcpJzICBJUCBhZGRyZXNzIHNob3VsZCBiZSBjb25m aWd1cmVkIGluIHRoZSBBUlNOLUdXLiAgREhDUCBSZWxheSBtb2R1bGUgcmVsYXlzIHRoZSBTb2xp Y2l0ICBtZXNzYWdlIHRvIHRUaGUgREhDUCBTZXJ2ZXIuICAHBzUsNgdUaGUgREhDUCBzZXJ2ZXIg c2VuZHMgYW4gQWR2ZXJ0aXNlIG1lc3NhZ2UgdG8gdGhlIERIQ1AgQ2xpZW50IHRocm91Z2ggREhD UCBSZWxheSBpbiB0aGUgc2FtZSAgIHdheSBhcyBkZXNjcmliZWQgaW4gc2VjdGlvbiAgNy4yLjIs ICJDcmVhdGlvbiBhbmQgdHJhbnNtaXNzaW9uIG9mICAgQWR2ZXJ0aXNlIG1lc3NhZ2VzIiBvZiBS RkMgMzMxNS4HBzcsOCw5LDEwB1RoZSBESENQIENsaWVudCB1c2VzIHRoZSBzYW1lIG1lc3NhZ2Ug ZXhjaGFuZ2VzIGFzIGRlc2NyaWJlZCBpbiBzZWN0aW9uICAxOCwgIkRIQ1AgQ2xpZW50LUluaXRp YXRlZCBjb25maWd1cmF0aW9uIEV4Y2hhbmdlIiBvZiBSRkMgMzMxNSB0byAgb2J0YWluIG9yIHVw ZGF0ZSBwcmVmaXhlcyBmcm9tIGEgREhDUCBzZXJ2ZXIuICBUaGUgREhDUCBDbGllbnQgYW5kIHRo ZSAgREhDUCBzZXJ2ZXIgdXNlIHRoZSBJQV9QRCBQcmVmaXggb3B0aW9uIHRvIGV4Y2hhbmdlIGlu Zm9ybWF0aW9uICBhYm91dCBwcmVmaXhlcyBpbiBtdWNoIHRoZSBzYW1lIHdheSBhcyBJQSBBZGRy ZXNzIG9wdGlvbnMgYXJlICB1c2VkIGZvciBhc3NpZ25lZCBhZGRyZXNzZXMuICAgBwcxMQdUaGUg REhDUCBDbGllbnQgIHNlbmRzIHRoZSBkZWxlZ2F0ZWQgZGVsZWdhdGlvbiBwcmVmaXhlcyB0byBT RkEgbW9kdWxlLiAHBzEyB0lTRiBpcyBlc3RhYmxpc2hlZAcHMTMHU0ZBIG1vZHVsZSBhZHZlcnRp c2VzIHRoZSBwcmVmaXhlcyB0byBNUyB0aHJvdWdoIFJBIG1lc3NhZ2UuIAcHDVByZWZpeGVzIGNh biBiZSByZWxlYXNlZCBpbiB0d28gd2F5cywgcHJlZml4IGFnaW5nIG9yIERIQ1AgcmVsZWFzZSAg cHJvY2VkdXJlLiAgSW4gdGhlIGZvcm1lciB3YXksIGEgcHJlZml4IFNIT1VMRCAgYmUgZGVsZXRl ZCBieSAgdGhlIERIQ1AgQ2xpZW50ICB3aGVuIHRoZSBwcmVmaXggYWdlcywgYW5kIHRoZSBESENQ IFNlcnZlciBjYW4gZGVsZWdhdGUgaXQgdG8gYW5vdGhlciAgTVMuICBJbiB0aGUgbGF0dGVyIHdh eSwgdGhlIEFSU04tR1cgaW5pdGlhdGVzIGEgUmVsZWFzZSBtZXNzYWdlICB3aGljaCBpcyByZWxh eWVkIGJ5IERIQ1AgUmVsYXkgdG8gZ2l2ZSBiYWNrIHRoZSBwcmVmaXhlcyB0byAgdGhlIERIQ1Ag c2VydmVyLiAgVGhlIHNlcnZlciByZXNwb25kcyB3aXRoIGEgUmVwbHkgbWVzc2FnZSAgYW5kICB0 aGVuIHRoZSBwcmVmaXhlcyBjYW4gYmUgcmV1c2VkIGJ5IG90aGVyIE1Tcy4NUmVudW1iZXJpbmcg Y2FuIGJlIG9idGFpbmVkIHRocm91Z2ggUmVuZXcgTWVzc2FnZSBvciBTZXJ2ZXIgSW5pdGlhdGVk IFJlY29uZmlndXJhdGlvbi4gIFRvIGV4dGVuZCB0aGUgdmFsaWQgYW5kIHByZWZlcnJlZCBsaWZl dGltZXMgZm9yIHRoZSBwcmVmaXhlcyAgYXNzb2NpYXRlZCB3aXRoIGFuIE1TLCB0aGUgTVMgc2Vu ZHMgYSBSZW5ldyBtZXNzYWdlIHRvIHRoZSBESENQIHNlcnZlci4gIFRoZSBzZXJ2ZXIgZGV0ZXJt aW5lcyBuZXcgbGlmZXRpbWVzIGZvciB0aGUgcHJlZml4ZXMuICBUaGUgIHNlcnZlciBNQVkgYWRk IG5ldyBwcmVmaXhlcyB0byB0aGUgTVMgZm9yIHJlbnVtYmVyaW5nLiAgQXMgZm9yIFNlcnZlciBJ bml0aWF0ZWQgUmVjb25maWd1cmF0aW9uLCAgREhDUCBzZXJ2ZXIgaW5pdGlhdGVzIGEgY29uZmln dXJhdGlvbiBtZXNzYWdlIGV4Y2hhbmdlIHdpdGggdGhlIEFTTi1HVyBieSAgc2VuZGluZyBhIFJl Y29uZmlndXJlIG1lc3NhZ2UuICBUaGUgcmVjb25maWd1cmUgbWVzc2FnZSB0cmlnZ2VycyB0aGUg IERIQ1AgQ2xpZW50IHRvIHNlbmQgUmVuZXcgbWVzc2FnZS4NVXNpbmcgTG9jYWwgUHJlZml4IFBv b2wgDUp1c3QgbGlrZSBhZGRyZXNzIGFsbG9jYXRpb24gYSBsb2NhbCBwcmVmaXggcG9vbCBpbiB0 aGUgQVNOLUdXIGNhbiBiZSB1c2VkIGZvciBwcmVmaXggZGVsZWdhdGlvbi4gIENvbXBhcmVkIHRv IHRoZSBhYm92ZSBtZXRob2QsIHNvbWUgbWFudWFsIGNvbmZpZ3VyYXRpb24gc2hvdWxkIGJlIGRv bmUsIGFuZCAgYSBwcmVmaXggZGVsZWdhdGlvbiBhbGdvcml0aG0gc2hvdWxkIGJlIGRlc2lnbmVk Lg1Vc2luZyBBQUEgU2VydmVycyBmb3IgUHJlZml4IE1hbmFnZW1lbnQgDUR1cmluZyBuZXR3b3Jr IGVudHJ5LCBBUiBhcyBSQURJVVMgKERpYW1ldGVyKSBjbGllbnQgc2VuZHMgQWNjZXNzLVJlcXVl c3QgKEFBLVJlcXVlc3QpIG1lc3NhZ2UgdG8gQUFBIHNlcnZlci4gQVIgTUFZIGluY2x1ZGUgRGVs ZWdhdGVkLUlQdjYtUHJlZml4IFtSZWZ4XSBhdHRyaWJ1dGUgaW4gQWNjZXNzLVJlcXVlc3QgKEFB LVJlcXVlc3QpLiBJZiBNUyBwYXNzZXMgdGhlIGF1dGhlbnRpY2F0aW9uLCBBQUEgc2VydmVyIFNI T1VMRCBzZW5kIEFjY2Vzcy1BY2NlcHQgKEFBLUFuc3dlcikgbWVzc2FnZSB3aXRoIERlbGVnYXRl ZC1JUHY2LVByZWZpeCBhdHRyaWJ1dGUuIFRoZSBhdHRyaWJ1dGUgY2FuIGFwcGVhciBtdWx0aXBs ZSB0aW1lcyB3aGVuIFJBRElVUyBzZXJ2ZXIgYXNzaWducyBtdWx0aXBsZSBwcmVmaXhlcyB0byBN Uy4NQVIgcmVsZWFzZXMgdGhlIHByZWZpeGVzIHdoZW4gTVMgaGFuZHNvZmYgb3Igc3dpdGNoZXMg b2ZmIGJ5IHNlbmRpbmcgQWNjb3VudGluZy1SZXF1ZXN0IG1lc3NhZ2UgdG8gQUFBIHNlcnZlciB3 aXRoIERlbGVnYXRlZC1JUHY2LVByZWZpeCBjYXJyeWluZyB0aGUgcHJlZml4KGVzKSB0byBiZSBy ZWxlYXNlZC4NDVVzaW5nIExvY2FsIFByZWZpeCBQb29sIA1KdXN0IGxpa2UgYWRkcmVzcyBhbGxv Y2F0aW9uIHdoaWNoIGlzIGEgREhDUCBzZXJ2ZXIgZnVuY3Rpb25hbGl0eSwgYSBsb2NhbCBwcmVm aXggcG9vbCBpbiB0aGUgQVIgY2FuIGJlIHVzZWQgZm9yIHByZWZpeCBtYW5hZ2VtZW50IGF0IHRo ZSBBUi4gIENvbXBhcmVkIHRvIHRoZSBhYm92ZSBtZXRob2RzLCBzb21lIG1hbnVhbCBjb25maWd1 cmF0aW9uIHNob3VsZCBiZSBkb25lLCBhbmQgIGEgcHJlZml4IGFsbG9jYXRpb24vZGVhbGxvY2F0 aW9uIGFsZ29yaXRobSBzaG91bGQgYmUgZGVzaWduZWQuDVtSZWZ4XSBTYWxvd2V5LCBKLiBhbmQg Ui4gRHJvbXMsICJSQURJVVMgRGVsZWdhdGVkLUlQdjYtUHJlZml4IEF0dHJpYnV0ZSIsIFNlcHRl bWJlciAyMDA2LCA8ZHJhZnQtaWV0Zi1yYWRleHQtZGVsZWdhdGVkLXByZWZpeC0wMy50eHQ+Lg1b UmVmeV0gTmVpZ2hib3IgRGlzY292ZXJ5IGFuZCBBZGRyZXNzIEF1dG9jb25maWd1cmF0aW9uIGlu IFBlci1NUyBTdWJuZXQgUHJlZml4IE1vZGVsLCBJRVRGIERyYWZ0LCAyMDA2Lg1bUmVmel0gRHJv bXMsIFIuLCBFZC4sICJETlMgQ29uZmlndXJhdGlvbiBvcHRpb25zIGZvciBEeW5hbWljIEhvc3Qg Q29uZmlndXJhdGlvbiBQcm90b2NvbCBmb3IgSVB2NiAoREhDUHY2KSIsIFJGQyAzNjQ2LCBEZWNl bWJlciAgMjAwMy4NW1JlZnVdIERyb21zLCBSLiwgIlN0YXRlbGVzcyBEeW5hbWljIEhvc3QgQ29u ZmlndXJhdGlvbiBQcm90b2NvbCAoREhDUCkgc2VydmljZSBmb3IgSVB2NiIsIFJGQyAzNzM2LCBB cHJpbCAgMjAwNC4NW1JlZnddIERyb21zLCBSLiwgZXQgYWwuLCAiRHluYW1pYyBIb3N0IENvbmZp Z3VyYXRpb24gUHJvdG9jb2wgKERIQ1ApIGZvciBJUHY2IChESENQdjYpIiwgUkZDIDMzMTUsIEp1 bHkgIDIwMDMuDVtyZWZ0XSBQYWd0emlzLCBULiwgIjgwMi4xNi9lIE1UVS9TRFUgY29uc2lkZXJh dGlvbnMgZm9yIEV0aGVybmV0IEJyaWRnaW5nlCwgZHJhZnQtcGFndHppcy0xNm5nLU1UVS1TRFUt Y29uZmlnLTAwLnR4dCwgd29yay1pbi1wcm9ncmVzcywgQXVnLiAyMDA2Lg0DDQAGAADaCAAA4QgA AOIIAADjCAAAEQkAABIJAAATCQAALAkAAC0JAAAvCQAAMAkAAFgJAABZCQAAWgkAAG0JAABuCQAA cAkAAHEJAACaCQAAmwkAAJwJAACwCQAAsQkAALMJAAC0CQAAvgoAAL8KAACFDgAAhg4AAIkOAACL DgAAjA4AAJ4OAAD88ePU47/Ur9Tj1OOa1K/U49TjhdSv1OPx/H/8d3NoW1YAAAAJFmicEXwAaAgA GBZoSi4qAFBKAwBoCABuSBIEbygBdEgSBAAVFmhKLioAUEoDAG5IEgRvKAF0SBIEBhZoSi4qAAAO FmidV1QAbkgRBHRIEQQAChZonVdUAGFKFAAAKQIIgQNqHAQAAAYIARVoDlqYABZonVdUADUIgVUI AVwIgW1IEARzSBAEKQIIgQNqSQMAAAYIARVoDlqYABZonVdUADUIgVUIAVwIgW1IEARzSBAEHhVo nVdUABZonVdUADBKFgA1CIFcCIFtSAsEc0gLBAApAgiBA2peAgAABggBFWgOWpgAFmidV1QANQiB VQgBXAiBbUgQBHNIEAQdA2oAAAAAFmidV1QANQiBVQgBXAiBbUgQBHNIEAQaFWidV1QAFmidV1QA NQiBXAiBbUgLBHNICwQAFBVonVdUABZonVdUAG1ICwRzSAsEAAYWaJ1XVAAhAAYAAAgIAAAqCAAA KwgAADEIAABYCAAA7wAAAAAAAAAAAAAAAN8AAAAAAAAAAAAAAABeAAAAAAAAAAAAAAAA7wAAAAAA AAAAAAAAAN8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAACBAABrZAAAAAAWJAEXJAFJZgEAAAAClmwABdYYBAEAAAAAAAAEAQAAAAAAAAQBAAAAAAAA CNYwAAJE/D4CgieABvoFBAEAAAAAAAAEAQAAAAAAAIAGRCUEAQAAAAAAAAQBAAAAAAAACdYCAAIS 1goAAAD/2dnZAAAAE9YwAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAA AP8AAAAAFPYDPisX9gMAABj2AwAAGtYIAAAA/wAAAP8b1ggAAAD/AAAA/xzWCAAAAP8AAAD/HdYI AAAA/wAAAP801gYAAQoDbABh9gOw/HDWCgAAAP/Z2dkAAAAAD1cAFiQBSWYBAAAAbMYQCwAAAP8A AAAAEAAAAQAAAAAPXwAWJAFJZgEAAABsxhALAAAA/wAAAAAQAAABAAAAAAUABgAA/oUAAA04AQB4 OAEA/f39AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEAAEBA1gIAABZCAAAbggAAI8I AAB+AAAAAAAAAAAAAAAAbgAAAAAAAAAAAAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAA9XABYkAUlmAQAAAGzGEAsAAAD/AAAAABAAAAEAAAAAD18AFiQBSWYBAAAAbMYQCwAAAP8A AAAAEAAAAQAAAIEAAGtkygAAABYkARckAUlmAQAAAAKWbAAF1hgEAQAAAAAAAAQBAAAAAAAABAEA AAAAAAAI1jAAAkT8PgKCJ4AG+gUEAQAAAAAAAAQBAAAAAAAAgAZEJQQBAAAAAAAABAEAAAAAAAAJ 1gIAAhLWCgAAAP/Z2dkAAAAT1jAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAAAAAAP8E AQAAAAAA/wAAAAAU9gM+Kxf2AwAAGPYDAAAa1ggAAAD/AAAA/xvWCAAAAP8AAAD/HNYIAAAA/wAA AP8d1ggAAAD/AAAA/zTWBgABCgNsAGH2A7D8cNYKAAAA/9nZ2QAAAAADjwgAAJAIAACaCAAAwggA ANkIAADaCAAAswkAAH4AAAAAAAAAAAAAAABuAAAAAAAAAAAAAAAAXgAAAAAAAAAAAAAAAF4AAAAA AAAAAAAAAABeAAAAAAAAAAAAAAAAXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAD1cAFiQBSWYBAAAAbMYQCwAAAP8AAAAAEAAAAQAAAAAPXwAWJAFJZgEAAABsxhALAAAA/wAA AAAQAAABAAAAgQAAa2SUAQAAFiQBFyQBSWYBAAAAApZsAAXWGAQBAAAAAAAABAEAAAAAAAAEAQAA AAAAAAjWMAACRPw+AoIngAb6BQQBAAAAAAAABAEAAAAAAACABkQlBAEAAAAAAAAEAQAAAAAAAAnW AgACEtYKAAAA/9nZ2QAAABPWMAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAAAP8AAAAAAAAA/wQB AAAAAAD/AAAAABT2Az4rF/YDAAAY9gMAABrWCAAAAP8AAAD/G9YIAAAA/wAAAP8c1ggAAAD/AAAA /x3WCAAAAP8AAAD/NNYGAAEKA2wAYfYDsPxw1goAAAD/2dnZAAAAAAazCQAAtAkAAL8JAAANCgAA awAAAAAAAAAAAAAAAFsAAAAAAAAAAAAAAABLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAD1cAFiQBSWYBAAAAbMYQCwAAAP8AAAAAEAAAAQAAAAAPXwAW JAFJZgEAAABsxhALAAAA/wAAAAAQAAABAAAAlAAAa2TzBAAAFiQBFyQBSWYBAAAAApZsAAXWGAQB AAAAAAAABAEAAAAAAAAEAQAAAAAAAAjWRgADRPw+AlwRgieABvoFBAEAAAAAAAAEAQAAAAAAAIAG Hg8EAQAAAAAAAAQBAAAAAAAAgAYmFgQBAAAAAAAABAEAAAAAAAAJ1gIAAhLWCgAAAP/Z2dkAAAAT 1jAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAU9gM+Kxf2 AwAAGPYDAAAa1gwAAAD/AAAA/wAAAP8b1gwAAAD/AAAA/wAAAP8c1gwAAAD/AAAA/wAAAP8d1gwA AAD/AAAA/wAAAP801gYAAQoDbABh9gOw/HDWCgAAAP/Z2dkAAAAAAw0KAAAOCgAAEgoAAGkKAAB+ AAAAAAAAAAAAAAAAbgAAAAAAAAAAAAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AA9XABYkAUlmAQAAAGzGEAsAAAD/AAAAABAAAAEAAAAAD18AFiQBSWYBAAAAbMYQCwAAAP8AAAAA EAAAAQAAAIEAAGtk0wUAABYkARckAUlmAQAAAAKWbAAF1hgEAQAAAAAAAAQBAAAAAAAABAEAAAAA AAAI1jAAAkT8PgKCJ4AG+gUEAQAAAAAAAAQBAAAAAAAAgAZEJQQBAAAAAAAABAEAAAAAAAAJ1gIA AhLWCgAAAP/Z2dkAAAAT1jAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAA AAAA/wAAAAAU9gM+Kxf2AwAAGPYDAAAa1ggAAAD/AAAA/xvWCAAAAP8AAAD/HNYIAAAA/wAAAP8d 1ggAAAD/AAAA/zTWBgABCgNsAGH2A7D8cNYKAAAA/9nZ2QAAAAADaQoAAGoKAABzCgAAvwoAAHwA AAAAAAAAAAAAAABsAAAAAAAAAAAAAAAAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPVwAW JAFJZgEAAABsxhALAAAA/wAAAAAQAAABAAAAAA9fABYkAUlmAQAAAGzGEAsAAAD/AAAAABAAAAEA AACDAABrZJ0GAAAWJAEXJAFJZgEAAAAClmwABdYYBAEAAAAAAAAEAQAAAAAAAAQBAAAAAAAAB5Td AwjWMAACRPw+AoIngAb6BQQBAAAAAAAABAEAAAAAAACABkQlBAEAAAAAAAAEAQAAAAAAAAnWAgAC EtYKAAAA/9nZ2QAAABPWMAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAA AAD/AAAAABT2Az4rF/YDAAAY9gMAABrWCAAAAP8AAAD/G9YIAAAA/wAAAP8c1ggAAAD/AAAA/x3W CAAAAP8AAAD/NNYGAAEKA2wAYfYDsPxw1goAAAD/2dnZAAAAAAO/CgAAwAoAANwKAADnCgAAfgAA AAAAAAAAAAAAAG4AAAAAAAAAAAAAAABeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP VwAWJAFJZgEAAABsxhALAAAA/wAAAAAQAAABAAAAAA9fABYkAUlmAQAAAGzGEAsAAAD/AAAAABAA AAEAAACBAABrZGsHAAAWJAEXJAFJZgEAAAAClmwABdYYBAEAAAAAAAAEAQAAAAAAAAQBAAAAAAAA CNYwAAJE/D4CgieABvoFBAEAAAAAAAAEAQAAAAAAAIAGRCUEAQAAAAAAAAQBAAAAAAAACdYCAAIS 1goAAAD/2dnZAAAAE9YwAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAA AP8AAAAAFPYDPisX9gMAABj2AwAAGtYIAAAA/wAAAP8b1ggAAAD/AAAA/xzWCAAAAP8AAAD/HdYI AAAA/wAAAP801gYAAQoDbABh9gOw/HDWCgAAAP/Z2dkAAAAAA+cKAADoCgAA8AoAADsMAAB+AAAA AAAAAAAAAAAAbgAAAAAAAAAAAAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9X ABYkAUlmAQAAAGzGEAsAAAD/AAAAABAAAAEAAAAAD18AFiQBSWYBAAAAbMYQCwAAAP8AAAAAEAAA AQAAAIEAAGtkNQgAABYkARckAUlmAQAAAAKWbAAF1hgEAQAAAAAAAAQBAAAAAAAABAEAAAAAAAAI 1jAAAkT8PgKCJ4AG+gUEAQAAAAAAAAQBAAAAAAAAgAZEJQQBAAAAAAAABAEAAAAAAAAJ1gIAAhLW CgAAAP/Z2dkAAAAT1jAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA /wAAAAAU9gM+Kxf2AwAAGPYDAAAa1ggAAAD/AAAA/xvWCAAAAP8AAAD/HNYIAAAA/wAAAP8d1ggA AAD/AAAA/zTWBgABCgNsAGH2A7D8cNYKAAAA/9nZ2QAAAAADOwwAADwMAABFDAAAhA4AAH4AAAAA AAAAAAAAAABuAAAAAAAAAAAAAAAAXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1cA FiQBSWYBAAAAbMYQCwAAAP8AAAAAEAAAAQAAAAAPXwAWJAFJZgEAAABsxhALAAAA/wAAAAAQAAAB AAAAgQAAa2T/CAAAFiQBFyQBSWYBAAAAApZsAAXWGAQBAAAAAAAABAEAAAAAAAAEAQAAAAAAAAjW MAACRPw+AoIngAb6BQQBAAAAAAAABAEAAAAAAACABkQlBAEAAAAAAAAEAQAAAAAAAAnWAgACEtYK AAAA/9nZ2QAAABPWMAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/ AAAAABT2Az4rF/YDAAAY9gMAABrWCAAAAP8AAAD/G9YIAAAA/wAAAP8c1ggAAAD/AAAA/x3WCAAA AP8AAAD/NNYGAAEKA2wAYfYDsPxw1goAAAD/2dnZAAAAAAOEDgAAhQ4AAIYOAACLDgAAnw4AAH4A AAAAAAAAAAAAAAB4AAAAAAAAAAAAAAAALgAAAAAAAAAAAAAAACYAAAAAAAAAAAAAAAAAAAAACAMA CiYAC0YAAGdkSi4qAABJAgAKJgELRiEARcaAAQABAInjqYYBAwAAAAAAAAAAAAAAAAAAAAAAAAUA AAALAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAuAAEAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZEouKgAABQAADcYFAAG8 FgCBAABrZMkJAAAWJAEXJAFJZgEAAAAClmwABdYYBAEAAAAAAAAEAQAAAAAAAAQBAAAAAAAACNYw AAJE/D4CgieABvoFBAEAAAAAAAAEAQAAAAAAAIAGRCUEAQAAAAAAAAQBAAAAAAAACdYCAAIS1goA AAD/2dnZAAAAE9YwAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAAAP8A AAAAFPYDPisX9gMAABj2AwAAGtYIAAAA/wAAAP8b1ggAAAD/AAAA/xzWCAAAAP8AAAD/HdYIAAAA /wAAAP801gYAAQoDbABh9gOw/HDWCgAAAP/Z2dkAAAAABJ4OAACfDgAAvQ4AAL4OAAC/DgAAChAA ABEQAAAzEAAANBAAAFIQAABTEAAAVBAAAD0SAAChEwAAsBQAALEUAADCFAAA4BQAAOEUAADiFAAA JhUAACsVAAAdFgAAORYAADoWAABQFgAAURYAAFIWAABZFgAA8+PQxcG6srrj0KWgi6B9eOPQxXFt cW1lbVplUgAAAAAAAAAAAAAAAAAAAAAAAAAADhZoYXkEAG1IDARzSAwEABUCCIEDapMKAAAGCAEW aGF5BABVCAEPA2oAAAAAFmhheQQAVQgBBhZoYXkEAAAMFWi5aYMAFmhheQQAAAkWaGF5BABoCAAb FWjRFgsAFmjRFgsAUEoDAG5IEgRvKAF0SBIEKAAIgRZonBF8ABdouCEMAGNIAQBkaAAAAABkaAAA AABkaIrjqYZoCAAACRZonBF8AGgIABgWaLs2uQBQSgMAaAgAbkgSBG8oAXRIEgQADxVonBF8ABZo nBF8AGgIAAwVaJwRfAAWaJwRfAAABhZonBF8AAAVFmi7NrkAUEoDAG5IEgRvKAF0SBIEJBVoZWJt ABZouza5AEIqAlBKAwBuSBIEbygBcGgAAP8AdEgSBAAeFmi7NrkAQioCUEoDAG5IEgRvKAFwaAAA /wB0SBIEABgWaJwRfABQSgMAaAgAbkgSBG8oAXRIEgQcnw4AAL4OAAC/DgAAChAAADQQAABTEAAA VBAAAD0SAACiEwAAsRQAAMIUAADhFAAA4hQAAGAWAAB/FgAAyBYAAMkWAAD6AAAAAAAAAAAAAAAA 9QAAAAAAAAAAAAAAAPUAAAAAAAAAAAAAAADtAAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAOUAAAAA AAAAAAAAAADlAAAAAAAAAAAAAAAA5QAAAAAAAAAAAAAAAPUAAAAAAAAAAAAAAACbAAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAJYAAAAAAAAAAAAAAACWAAAAAAAAAAAAAAAAkQAAAAAAAAAAAAAAAIwA AAAAAAAAAAAAAACKAAAAAAAAAAAAAAAAAAEPAAAEGwBnZGF5BAAABFkAZ2RheQQAAAQPAGdkYXkE AABJAwAKJgILRhgARcaAAQABAInjqYYBAwUAAAAAAAAAAAAAAAAAAAAAAAUAAAALAAAAAwAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAuAAEALgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZGF5BAAABwAAAyQDYSQDZ2R4STsACAMACiYA C0YAAGdkSi4qAAAEDwBnZJwRfAAABA8AZ2S7NrkAABBZFgAAWhYAAFsWAABdFgAAXhYAAF8WAABg FgAAYRYAAGIWAABjFgAAeBYAAHkWAAB6FgAAexYAAHwWAAB9FgAAfhYAAH8WAACGFgAAhxYAAJYW AACXFgAAmBYAAPTs9OTd2bqrp52nlX9wq1jZUUVRRTkXFWjJLhEAFmhheQQAbUgABG5IAAR1CAEX A2oAAAAAFmhheQQAVQgBbUgMBHNIDAQMFWjJLhEAFmhheQQAAC4ACIEDaqALAAAWaGF5BAAXaFtX 1ABVCAFjSAEAZGgAAAAAZGgAAAAAZGgqHapGABwBCIEDahALAAAESAEABWgqHapGFmhbV9QAVQgB ACsBCIEDagAAAAAESAEABWgqHapGFmhbV9QAVQgBbUgABG5IAAR0SBEEdQgBDwNqAAAAABZoW1fU AFUIARMBCIEESAEABWgqHapGFmhbV9QABhZoW1fUAAAcAQiBA2oAAAAABEgBAAVoKh2qRhZoW1fU AFUIAQA9AAiBA2oAAAAAFmhbV9QAF2hbV9QAVQgBY0gBAGRoAAAAAGRoAAAAAGRoKh2qRm1IAARu SAAEdEgRBHUIAQYWaGF5BAAADBVouWmDABZoYXkEAAAPA2oAAAAAFmhheQQAVQgBDhZoYXkEAG1I DARzSAwEABUWaGF5BABtSAAEbkgABHNIDAR1CAEAFpgWAACZFgAAmhYAAJsWAAC2FgAAtxYAALkW AAC6FgAAuxYAALwWAAC9FgAAxxYAAMgWAADJFgAASRcAAE8XAAB3GAAAeBgAAIcYAACIGAAAAhkA AAMZAAAyGQAAMxkAADQZAAADGgAABBoAAEcaAABIGgAA8+zz7PPg8+zc7NPsyLuwu6KVkIBygGRZ VUpVsAAAAAAVFmjEPnsAUEoEAG5IBAhvKAF0SAQIBhZoxD57AAAVFmi7NrkAUEoDAG5IEgRvKAF0 SBIEGxVouza5ABZouza5AFBKAwBuSBIEbygBdEgSBBsWaLs2uQBCKgJQSgMAbkgSBHBoAAD/AHRI EgQeFmi7NrkAQioCUEoDAG5IEgRvKAFwaAAA/wB0SBIEAAkWaMQ+ewBoCAAYFmjEPnsAUEoDAGgI AG5IEgRvKAF0SBIEABsVaF9nhQAWaF9nhQBQSgMAbkgSBG8oAXRIEgQVFmhfZ4UAUEoDAG5IEgRv KAF0SBIEGBVoX2eFABZoX2eFAFBKAwBuSBIEdEgSBAAVFmhheQQAUEoDAG5IEgRvKAF0SBIEERZo YXkEAG1IAARuSAAEdQgBBhZoYXkEAAAXFWjJLhEAFmhheQQAbUgABG5IAAR1CAEMFWjJLhEAFmhh eQQAABcDagAAAAAWaGF5BABVCAFtSAwEc0gMBAAcyRYAAHgYAACIGAAAMxkAADQZAACVGwAAlhsA AJocAACbHAAApB0AAKUdAADcHwAA3h8AAP0AAAAAAAAAAAAAAACzAAAAAAAAAAAAAAAArgAAAAAA AAAAAAAAAK4AAAAAAAAAAAAAAACuAAAAAAAAAAAAAAAArgAAAAAAAAAAAAAAAK4AAAAAAAAAAAAA AACuAAAAAAAAAAAAAAAArgAAAAAAAAAAAAAAAK4AAAAAAAAAAAAAAACuAAAAAAAAAAAAAAAA/QAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPAGdkxD57AABJAwAKJgILRhgA RcaAAQABAInjqYYBAwUAAAAAAAAAAAAAAAAAAAAAAAUAAAALAAAABAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAUAAAAuAAEALgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAABnZMQ+ewAAAQ8AAAxIGgAAlBsAAJUbAACWGwAAFRwAABwcAABqHAAA axwAAJgcAACZHAAAmhwAAJscAACwHAAAsRwAAN0cAADeHAAA+RwAAPwcAAD9HAAAIR0AACIdAACj HQAApB0AAKUdAADeHgAA4B4AACofAABUHwAA8+bb183Xwte4nYLXzdfC181v18LXwmHXwtdXAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATAQiBBEgBAAVopOOphhZoxWicABsVaF9n hQAWaMQ+ewBQSgQAbkgECG8oAXRIBAglAAiBFmjEPnsAF2jFaJwAY0gBAGRoAAAAAGRoAAAAAGRo n+OphjQACIEWaF9nhQAXaMVonABQSgMAY0gBAGRoAAAAAGRoAAAAAGRoouOphm5IEgRvKAF0SBIE ADQACIEWaMQ+ewAXaMVonABQSgQAY0gBAGRoAAAAAGRoAAAAAGRoouOphm5IBAhvKAF0SAQIABMB CIEESAEABWii46mGFmjFaJwAFRZoxD57AFBKBABuSAQIbygBdEgECBMBCIEESAEABWif46mGFmjF aJwABhZoxD57AAAVFmhfZ4UAUEoDAG5IEgRvKAF0SBIEGBVoX2eFABZoxD57AFBKAwBuSBIEdEgS BAAYFWhfZ4UAFmhfZ4UAUEoDAG5IEgR0SBIEG1QfAABaHwAAdh8AAH4fAACMHwAAjh8AAJAfAAC4 HwAAvB8AAMYfAADYHwAA2h8AANwfAADeHwAAACAAAC8gAABBIAAAVSAAAFYgAAB+IAAAgCAAAIEg AACNIAAAuiAAALsgAADpIAAA6iAAAAwhAAArIQAAPiEAAD8hAABTIQAAciEAAJkhAAC4IQAA7Oje 7OjT6N7s6NPFt6yopKiaqJaLrHtte2KopKhYqKSopAAAEwEIgQRIAQAFaKfjqYYWaMVonAAVFmi7 NrkAUEoDAG5IEgRvKAF0SBIEGxZouza5AEIqAlBKAwBuSBIEcGgAAP8AdEgSBB4WaLs2uQBCKgJQ SgMAbkgSBG8oAXBoAAD/AHRIEgQAFRZonVdUAFBKAwBuSBIEbygBdEgSBAYWaJ1XVAAAEhZoIC0F AFBKBABuSAQIdEgECAAGFmh4STsAAAYWaCAtBQAAFRZoxD57AFBKAwBuSBIEbygBdEgSBBsVaMQ+ ewAWaMQ+ewBQSgMAbkgSBG8oAXRIEgQbFWggLQUAFmjEPnsAUEoEAG5IBAhvKAF0SAQIFRZoxD57 AFBKBABuSAQIbygBdEgECBMBCIEESAEABWik46mGFmjFaJwABhZoxD57AAAlAAiBFmjEPnsAF2jF aJwAY0gBAGRoAAAAAGRoAAAAAGRopOOphgAi3h8AAAAgAACAIAAAgSAAAI0gAADpIAAA6iAAAFMi AABUIgAAiCQAAIkkAAD3JAAA+CQAALUAAAAAAAAAAAAAAACzAAAAAAAAAAAAAAAAswAAAAAAAAAA AAAAAGkAAAAAAAAAAAAAAACzAAAAAAAAAAAAAAAAswAAAAAAAAAAAAAAALMAAAAAAAAAAAAAAACz AAAAAAAAAAAAAAAAswAAAAAAAAAAAAAAALMAAAAAAAAAAAAAAACzAAAAAAAAAAAAAAAAswAAAAAA AAAAAAAAAAAAAEkEAAomAwtGGABFxoABAAEAieOphgEDBQcAAAAAAAAAAAAAAAAAAAAABQAAAAsA AAAEAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwAAAC4AAQAuAAIALgADAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkSi4qAAABDwAASQQACiYDC0YY AEXGgAEAAQCJ46mGAQMFBwAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAQAAAABAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAHAAAALgABAC4AAgAuAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAZ2RKLioAAAy4IQAA2CEAAPEhAADyIQAA9yEAAPghAAAXIgAANiIA ADciAABEIgAASSIAAFIiAABTIgAAVCIAAI0iAACSIgAAtiIAANUiAAD7IgAAGSMAABojAAA5IwAA WCMAAIkjAACZIwAAmiMAAMIjAADhIwAA4iMAAPgjAAD5IwAABSQAACQkAAAlJAAAQyQAAEUkAABG JAAAYyQAAGQkAACnJAAAwiQAAMMkAADHJAAA3SQAAN4kAAD2JAAA9yQAAPgkAAAlJQAAJiUAAPz4 7tvQ/PjF/ND8wbr8+Pz4/PjF/Pj8+MX8+MX8sPz4xfz4sPjF/Piw+Pyw/KWXk4gAAAAAAAAAAAAA AAAAAAAAAAAAAAAAABUWaMQ+ewBQSgMAbkgSBG8oAXRIEgQGFmjEPnsAABsVaF9nhQAWaMQ+ewBQ SgMAbkgSBG8oAXRIEgQVFmggLQUAUEoDAG5IEgRvKAF0SBIEEwEIgQRIAQAFaKfjqYYWaMVonAAM FWhfZ4UAFmidV1QAAAYWaJ1XVAAAFRZoeEk7AFBKBABuSAQIbygBdEgECBUWaF9nhQBQSgMAbkgS BG8oAXRIEgQlAAiBFmh4STsAF2jFaJwAY0gBAGRoAAAAAGRoAAAAAGRopeOphhMBCIEESAEABWil 46mGFmjFaJwABhZoeEk7AAAGFmggLQUAMfgkAAAmJQAAxSUAAC8mAAAfJwAAaygAAG4pAACIKQAA 0ikAAPIpAAAlKwAAtQAAAAAAAAAAAAAAALMAAAAAAAAAAAAAAACzAAAAAAAAAAAAAAAArgAAAAAA AAAAAAAAAK4AAAAAAAAAAAAAAACzAAAAAAAAAAAAAAAAZAAAAAAAAAAAAAAAALMAAAAAAAAAAAAA AACzAAAAAAAAAAAAAAAAswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEkE AAomAwtGGABFxoABAAEAieOphgEDBQcAAAAAAAAAAAAAAAAAAAAABQAAAAsAAAAFAAAAAQAAAAAA AAAAAAAAAAAAAAAAAAAAAAAABwAAAC4AAQAuAAIALgADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdk0RYLAAAEDwBnZF9nhQAAAQ8AAEkDAAomAgtGGABF xoABAAEAieOphgEDBQAAAAAAAAAAAAAAAAAAAAAABQAAAAsAAAAFAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAABQAAAC4AAQAuAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAGdkxD57AAAKJiUAACwlAABuJQAAbyUAAMQlAADFJQAA6yUAAOwlAAAR JgAAEiYAAC4mAAAvJgAATCcAAFAnAABtKQAAbikAAIgpAACNKQAA0SkAANIpAADxKQAA8ikAACUr AAA1KwAANisAADsrAABzKwAAdCsAAPUrAADw5fDl1cW3xbfFpJ2HnXRw8OXVxaRjcFjw5UjFHhZo wFjjAEIqBlBKAwBuSBIEbygBcGj/AAAAdEgSBAAVFmidV1QAUEoDAG5IEgRvKAF0SBIEGBVoX2eF ABZoX2eFAFBKAwBuSBIEdEgSBAAGFmidV1QAACQVaPQkRwAWaF9nhQBCKgZQSgMAbkgSBG8oAXBo /wAAAHRIEgQAKwAIgRVouWmDABZoX2eFABdoxWicAGNIAQBkaAAAAABkaAAAAABkaKjjqYYMFWi5 aYMAFmhfZ4UAACQVaLs2uQAWaLs2uQBCKgZQSgMAbkgSBG8oAXBo/wAAAHRIEgQAGxZouza5AEIq AlBKAwBuSBIEcGgAAP8AdEgSBB4WaLs2uQBCKgJQSgMAbkgSBG8oAXBoAAD/AHRIEgQAHhZonVdU AEIqBlBKAwBuSBIEbygBcGj/AAAAdEgSBAAVFWj0JEcAFmidV1QAQioGcGj/AAAAHhZouza5AEIq BlBKAwBuSBIEbygBcGj/AAAAdEgSBBwlKwAANisAAHQrAAAQLAAAESwAAAYtAABSLgAAMS8AAFwv AAC1AAAAAAAAAAAAAAAAsAAAAAAAAAAAAAAAAKsAAAAAAAAAAAAAAACmAAAAAAAAAAAAAAAApgAA AAAAAAAAAAAAAKYAAAAAAAAAAAAAAACmAAAAAAAAAAAAAAAAXAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEkEAAomAwtGGABFxoABAAEAieOp hgEDBQcAAAAAAAAAAAAAAAAAAAAABQAAAAsAAAAGAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA BwAAAC4AAQAuAAIALgADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAGdkyWVLAAAEDwBnZF9nhQAABA8AZ2S7NrkAAAQPAGdkyWVLAABJAwAKJgILRhgARcaA AQABAInjqYYBAwUAAAAAAAAAAAAAAAAAAAAAAAUAAAALAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAUAAAAuAAEALgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAABnZNEWCwAACPUrAAD2KwAAECwAABEsAADPLQAA0S0AANQtAAANLgAADi4A ABMuAABTLgAAVC4AAFYuAAAMLwAAEi8AADAvAAAxLwAAWy8AAGAvAABhLwAAeC8AAHkvAADx4dPG tprGtprGiprGisZ8dWpfWD8AAAAAAAAAAAAAAAAAAAAAADADarxexkgKCAEWaJ8RSgBPSgAAUEoE AFFKAABVCAFWCAFhShQAbkgECG8oAXRIBAgADBVouWmDABZongQRAAAVA2oAAAAAFWi5aYMAFmie BBEAVQgBFRZoyWVLAFBKAwBuSBIEbygBdEgSBAwVaMllSwAWaMllSwAAGxVoX2eFABZoX2eFAFBK AwBuSBIEbygBdEgSBB8BCIEESAEABWit46mGFmifEUoAUEoDAG5IEgR0SBIENwAIgRVoX2eFABZo X2eFABdonxFKAFBKAwBjSAEAZGgAAAAAZGgAAAAAZGis46mGbkgSBHRIEgQfAQiBBEgBAAVorOOp hhZonxFKAFBKAwBuSBIEdEgSBBgVaF9nhQAWaF9nhQBQSgMAbkgSBHRIEgQAGxVouza5ABZouza5 AFBKAwBuSBIEbygBdEgSBB4WaLs2uQBCKgJQSgMAbkgSBG8oAXBoAAD/AHRIEgQAGxZouza5AEIq AlBKAwBuSBIEcGgAAP8AdEgSBAAVXC8AAGAvAAB8LwAAxC8AAA4wAAC1AAAAAAAAAAAAAAAArAAA AAAAAAAAAAAAAKcAAAAAAAAAAAAAAABhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGawBFxoABAAEAieOp hgEAAAAAAAAAAAAEAgAEAgAEAgAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AgAAACkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAGdkngQRAAAEGwBnZJ4EEQAJDwADJAEGJAFhJAFnZJ4EEQAASQQACiYEC0YYAEXGgAEA AQCJ46mGAQMFBwkAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAYAAAABAAAAAQAAAAAAAAAAAAAAAAAA AAAAAAAJAAAALgABAC4AAgAuAAMALgAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAZ2TJZUsAAAR5LwAAei8AAHsvAACJLwAAii8AAKUvAACmLwAApy8AAKgvAADD LwAAxC8AAOMvAADkLwAA5i8AAMgwAADYMAAAHDEAAB0xAAAeMQAANTEAADYxAAA3MQAAODEAAEUx AABGMQAAYTEAAGIxAABjMQAAZDEAAIkxAACKMQAArTEAAK4xAAD37Ojg6ODX4OjQ6Maz6KidjezQ dGzs6ODo4Nfg6NDoYgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEwEIgQRIAQAFaK/j qYYWaJ8RSgAPA2onIAAAFmifEUoAVQgBMANqDl/GSAoIARZonxFKAE9KAABQSgQAUUoAAFUIAVYI AWFKFABuSAQIbygBdEgECAAeFmjJZUsAQioGUEoDAG5IEgRvKAFwaP8AAAB0SBIEABUVaJ4EEQAW aMllSwBCKgZwaP8AAAAVFmjJZUsAUEoDAG5IEgRvKAF0SBIEJQAIgRZongQRABdonxFKAGNIAQBk aAAAAABkaAAAAABkaK7jqYYTAQiBBEgBAAVoruOphhZonxFKAAwVaLlpgwAWaJ4EEQAAERZongQR AG1IAARuSAAEdQgBDwNqAAAAABZongQRAFUIAQYWaJ4EEQAAFQNqAAAAABVouWmDABZongQRAFUI AQ8DaqQaAAAWaJ8RSgBVCAEAIA4wAABWMAAAyDAAANgwAAAdMQAAuQAAAAAAAAAAAAAAAHMAAAAA AAAAAAAAAAApAAAAAAAAAAAAAAAAJAAAAAAAAAAAAAAAAAAEDwBnZMllSwAASQQACiYEC0YYAEXG gAEAAQCJ46mGAQMFBwkAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAYAAAABAAAAAgAAAAAAAAAAAAAA AAAAAAAAAAAJAAAALgABAC4AAgAuAAMALgAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAZ2TJZUsARmsARcaAAQABAInjqYYBAAAAAAAAAAAABAIABAIABAIAAAMA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAApAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZJ4EEQBGawBFxoABAAEA ieOphgEAAAAAAAAAAAAEAgAEAgAEAgAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAgAAACkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAGdkngQRAAAEHTEAADkxAACKMQAA2TEAAC8yAAD2AAAAAAAAAAAAAAAA8QAAAAAA AAAAAAAAAKcAAAAAAAAAAAAAAABdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAElrAAomAAtGJgBFxoABAAEAieOphgEA AAAAAAAAAAAEAgAEAgAEAgAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAA ACkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAGdkngQRAABJawAKJgALRiYARcaAAQABAInjqYYBAAAAAAAAAAAABAIABAIABAIAAAEAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAApAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZJ4EEQAABBsAZ2SeBBEACQ8A AyQBBiQBYSQBZ2SeBBEAAASuMQAAsDEAAM02AADONgAA/TYAAP42AAAWNwAAGTcAABs3AAAeNwAA cTkAAK85AACwOQAAsTkAAME5AAACOgAAAzoAAHg6AAB5OgAAkDoAAJE6AACSOgAAkzoAAKA6AACh OgAA7OjVzsq/6LWi6I/ogb96cHplelBIZehAAAAAAA8DagAAAAAWaJ4EEQBVCAEPA2oSJgAAFmie BBEAVQgBKQNqTQCVQAoIARZongQRAFBKAABVCAFWCAFfSAAAYUoUAG5ICQR0SAkEFQNqAAAAABVo uWmDABZongQRAFUIARMBCIEESAEABWi046mGFmiEXa0ADBVouWmDABZongQRAAAbFWieBBEAFmie BBEAUEoDAG5IEgRvKAF0SBIEJQAIgRZongQRABdohF2tAGNIAQBkaAAAAABkaAAAAABkaLTjqYYl AAiBFmieBBEAF2ifEUoAY0gBAGRoAAAAAGRoAAAAAGRosuOphhMBCIEESAEABWiy46mGFmifEUoA FRZoyWVLAFBKAwBuSBIEbygBdEgSBAYWaMllSwAADBVoyWVLABZoyWVLAAAkFWieBBEAFmieBBEA QioGUEoDAG5IEgRvKAFwaP8AAAB0SBIEAAYWaJ4EEQAAJQAIgRZongQRABdonxFKAGNIAQBkaAAA AABkaAAAAABkaK/jqYYAGC8yAAA+NAAAzTYAAM42AAC1AAAAAAAAAAAAAAAAawAAAAAAAAAAAAAA AGYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDwBnZMll SwAASWsACiYAC0YmAEXGgAEAAQCJ46mGAQAAAAAAAAAAAAQCAAQCAAQCAAAEAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2SeBBEAAElrAAomAAtGJgBFxoABAAEAieOp hgEAAAAAAAAAAAAEAgAEAgAEAgAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AgAAACkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAGdkngQRAAADzjYAAP42AAAWNwAAsTkAALUAAAAAAAAAAAAAAABrAAAAAAAAAAAAAAAA ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPAGdkngQR AABJBAAKJgQLRhgARcaAAQABAInjqYYBAwUHCQAAAAAAAAAAAAAAAAAAAAUAAAALAAAABgAAAAIA AAABAAAAAAAAAAAAAAAAAAAAAAAAAAkAAAAuAAEALgACAC4AAwAuAAQAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZMllSwAASQQACiYDC0YYAEXGgAEAAQCJ46mG AQMFBwAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAYAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH AAAALgABAC4AAgAuAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAZ2TJZUsAAAOxOQAAwTkAAHg6AACUOgAA5joAAE47AAC1AAAAAAAAAAAAAAAAsAAAAAAA AAAAAAAAAKcAAAAAAAAAAAAAAACiAAAAAAAAAAAAAAAAWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAABJawAKJgALRiYARcaAAQABAInjqYYBAAAAAAAAAAAABAIABAIA BAIAAAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAApAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZJ4EEQAABBsA Z2SeBBEACQ8AAyQBBiQBYSQBZ2SeBBEAAAQPAGdkngQRAABJBAAKJgQLRhgARcaAAQABAInjqYYB AwUHCQAAAAAAAAAAAAAAAAAAAAUAAAALAAAABgAAAAIAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAkA AAAuAAEALgACAC4AAwAuAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAABnZMllSwAABaE6AAC8OgAAvToAAL46AAC/OgAA5ToAAOY6AACuOwAArzsAALQ7AADPOwAA 0DsAAOw7AADtOwAAez0AAIk9AACZPQAAuD0AAL09AADZPQAA2z0AANw9AAA4PgAAOT4AAEI+AABG PgAA/PTr9Pzk/NrH/LyxraCxoJaxoIZ2hmZWRAAAAAAAAAAiAQiBBEgBAAVoCuSphhZoDDuuAFBK AwBuSBIEbygBdEgSBAAfAQiBBEgBAAVoCuSphhZoDDuuAFBKAwBuSBIEdEgSBB8BCIEESAEABWgK 5KmGFmieYNoAUEoDAG5IEgR0SBIEHwEIgQRIAQAFaAnkqYYWaAw7rgBQSgMAbkgSBHRIEgQfAQiB BEgBAAVoCOSphhZoDDuuAFBKAwBuSBIEdEgSBBIWaJ5g2gBQSgMAbkgSBHRIEgQAGBVonmDaABZo nmDaAFBKAwBuSBIEdEgSBAAGFmieYNoAABUWaJ5g2gBQSgMAbkgSBG8oAXRIEgQVFmjJZUsAUEoD AG5IEgRvKAF0SBIEJQAIgRZongQRABdohF2tAGNIAQBkaAAAAABkaAAAAABkaLXjqYYTAQiBBEgB AAVoteOphhZohF2tAAwVaLlpgwAWaJ4EEQAAERZongQRAG1IAARuSAAEdQgBDwNqAAAAABZongQR AFUIAQYWaJ4EEQAZTjsAAM87AADQOwAA7TsAAJU8AAA5PgAAtQAAAAAAAAAAAAAAALAAAAAAAAAA AAAAAABmAAAAAAAAAAAAAAAAYQAAAAAAAAAAAAAAALAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA8AZ2SeYNoAAEkEAAomAwtGGABF xoABAAEAieOphgEDBQcAAAAAAAAAAAAAAAAAAAAABQAAAAsAAAAGAAAAAwAAAAAAAAAAAAAAAAAA AAAAAAAAAAAABwAAAC4AAQAuAAIALgADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAGdknmDaAAAEDwBnZMllSwAASWsACiYAC0YmAEXGgAEAAQCJ46mGAQAA AAAAAAAAAAQCAAQCAAQCAAAGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAA KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAZ2SeBBEAAAVGPgAAVT4AAFY+AABsPgAAbT4AAHw+AADoPgAA6T4AAOw+AAACPwAAAz8AAAQ/ AAAXPwAAGD8AAB4/AACTPwAAlD8AAMU/AADGPwAA0j8AANQ/AACRQAAA7+Xv1e/F1cXVtaiknIyB cWFTYUA8AAAAAAAAAAAAAAAGFmieYNoAACQVaLs2uQAWaLs2uQBCKgZQSgMAbkgSBG8oAXBo/wAA AHRIEgQAGxZouza5AEIqAlBKAwBuSBIEcGgAAP8AdEgSBB4WaLs2uQBCKgJQSgMAbkgSBG8oAXBo AAD/AHRIEgQAHhZonVdUAEIqBlBKAwBuSBIEbygBcGj/AAAAdEgSBAAVFWj0JEcAFmidV1QAQioG cGj/AAAAHhZouza5AEIqBlBKAwBuSBIEbygBcGj/AAAAdEgSBAAPFWjRFgsAFmidV1QAaAgABhZo nVdUAAAYFWieBBEAFmgMO64AUEoDAG5IEgR0SBIEAB8BCIEESAEABWgK5KmGFmgMO64AUEoDAG5I EgR0SBIEHwEIgQRIAQAFaAzkqYYWaAw7rgBQSgMAbkgSBHRIEgQfAQiBBEgBAAVoDeSphhZoDDuu AFBKAwBuSBIEdEgSBBMBCIEESAEABWgK5KmGFmgMO64AHwEIgQRIAQAFaAvkqYYWaAw7rgBQSgMA bkgSBHRIEgQAFTk+AABWPgAAAz8AAAQ/AAC0AAAAAAAAAAAAAAAAbAAAAAAAAAAAAAAAAGwAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABH DwBDJAFFxoAAAAEACuSphgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkyWVLAEsEAAomAwtGGABDJAFFxoAAAAEACuSphgAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AGdkDDuuAAADBD8AABg/AACUPwAA0z8AANQ/AAD9QAAAyEEAAEpCAABBQwAASkMAAGpDAAC1AAAA AAAAAAAAAAAAswAAAAAAAAAAAAAAAK4AAAAAAAAAAAAAAACzAAAAAAAAAAAAAAAAqQAAAAAAAAAA AAAAAKkAAAAAAAAAAAAAAACpAAAAAAAAAAAAAAAAswAAAAAAAAAAAAAAAF8AAAAAAAAAAAAAAACu AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABJAwAKJgILRhgARcaAAQABAInjqYYBAwUAAAAA AAAAAAAAAAAAAAAAAAUAAAALAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAuAAEA LgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn ZNEWCwAABAAAZ2SeYNoAAAQPAGdkuza5AAABDwAASQMACiYCC0YYAEXGgAEAAQCJ46mGAQMFAAAA AAAAAAAAAAAAAAAAAAAFAAAACwAAAAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAALgAB AC4AAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Z2TRFgsAAAqRQAAAk0AAAPxAAAD9QAAAVUEAAFZBAABXQQAAl0EAAJhBAACdQQAAx0EAAMhBAABD QgAARUIAAElCAABKQgAAc0IAAHlCAABAQwAAQUMAAElDAABKQwAAaUMAAGpDAABrQwAASkQAAEtE AABNRAAATkQAAE9EAAD+RAAA9fHs8ezx7OLN7Mbx4vG+uq+6pKCkkH1y8WhV8ezxAAAAAAAAAAAA AAAAAAAAACUACIEWaJ5g2gAXaIRdrQBjSAEAZGgAAAAAZGgAAAAAZGi646mGEwEIgQRIAQAFaLrj qYYWaIRdrQAVFmi7NrkAUEoDAG5IEgRvKAF0SBIEJBVouza5ABZouza5AEIqBlBKAwBuSBIEbygB cGj/AAAAdEgSBAAeFmi7NrkAQioCUEoDAG5IEgRvKAFwaAAA/wB0SBIEAAYWaJ1XVAAAFRZonVdU AFBKAwBuSBIEbygBdEgSBBUWaJ5g2gBQSgMAbkgSBG8oAXRIEgQGFmidOcQAAA8VaC9rkAAWaJ5g 2gBvKAEMFWgva5AAFmieYNoAACgACIEWaJ5g2gAXaIRdrQBjSAEAZGgAAAAAZGgAAAAAZGi546mG bygBABMBCIEESAEABWi546mGFmiEXa0ACRZonmDaAG8oAQYWaJ5g2gAAEwEIgQRIAQAFaLjjqYYW aIRdrQAAHmpDAABrQwAAT0QAAP9EAAADRQAAI0UAACRFAADVRgAALUkAADZJAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAACwAAAAAAAAAAAAAAAAqwAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAACdAAAAAAAAAAAAAAAAnQAAAAAAAAAAAAAAAFMAAAAAAAAAAAAAAAAAAAAAAAAA AAAASQMACiYCC0YYAEXGgAEAAQCJ46mGAQMFAAAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAoAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAALgABAC4AAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TRFgsADgAAZ2RdZFIAb8YHAQEAwuOphmQm AQMkA2EkAwAEDwBnZLs2uQAASQMACiYCC0YYAEXGgAEAAQCJ46mGAQMFAAAAAAAAAAAAAAAAAAAA AAAFAAAACwAAAAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAALgABAC4AAgAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TRFgsAAAQAAGdk nmDaAAAJ/kQAAP9EAAACRQAAA0UAACJFAAAjRQAAJEUAAOJFAAAFRgAACEYAAAlGAABrRgAAbEYA AJVGAACWRgAA1EYAANVGAAByRwAAc0cAAIZHAAASSQAAGEkAAB5JAAAsSQAALUkAADVJAAA2SQAA VUkAAFZJAABXSQAAbUkAAPHt4tK/tLCmsKawnLCXsJewjXqwcF2w8e1V0r+0TgAADBVouWmDABZo RUSSAAAPFWjRFgsAFmidV1QAaAgAJQAIgRZonmDaABdoXWRSAGNIAQBkaAAAAABkaAAAAABkaMPj qYYTAQiBBEgBAAVow+OphhZoXWRSACUACIEWaJ5g2gAXaIRdrQBjSAEAZGgAAAAAZGgAAAAAZGjA 46mGEwEIgQRIAQAFaMDjqYYWaIRdrQAJFmieYNoAbygBEwEIgQRIAQAFaMLjqYYWaF1kUgATAQiB BEgBAAVoweOphhZoXWRSAAYWaJ5g2gAAFRZouza5AFBKAwBuSBIEbygBdEgSBCQVaLs2uQAWaLs2 uQBCKgZQSgMAbkgSBG8oAXBo/wAAAHRIEgQAHhZouza5AEIqAlBKAwBuSBIEbygBcGgAAP8AdEgS BAAVFmidV1QAUEoDAG5IEgRvKAF0SBIEBhZonVdUAAAbFWieYNoAFmieYNoAUEoDAG5IEgRvKAF0 SBIEAB42SQAAVkkAAFdJAABPSgAA9U4AANlPAADzTwAAWVAAAKVQAACmUAAAgFEAAPoAAAAAAAAA AAAAAAD1AAAAAAAAAAAAAAAA9QAAAAAAAAAAAAAAAPUAAAAAAAAAAAAAAAD1AAAAAAAAAAAAAAAA qwAAAAAAAAAAAAAAAKkAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAqQAAAAAAAAAAAAAAAKQAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPAGdknTnE AAABDwAASQMACiYCC0YYAEXGgAEAAQCJ46mGAQMFAAAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAsA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAALgABAC4AAgAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TRFgsAAAQPAGdkRUSSAAAEDwBnZLs2 uQAACm1JAACMSQAAc0oAAHVKAACMSgAAl0oAAABOAABcTgAAYU4AAGNOAABlTgAA9E4AAPVOAAA6 TwAAO08AAEBPAABDTwAArk8AANhPAADZTwAA8k8AAPNPAAD5TwAAMVAAADJQAABYUAAAWVAAAGxQ AABvUAAApFAAAPz1/PX89fHn3fH12fXZz7zZuK2poZGGkYZ2ZlhmAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAGxZouza5AEIqAlBKAwBuSBIEcGgAAP8AdEgSBB4WaLs2uQBCKgJQSgMAbkgSBG8o AXBoAAD/AHRIEgQAHhZonVdUAEIqBlBKAwBuSBIEbygBcGj/AAAAdEgSBAAVFWjCVGIAFmidV1QA QioGcGj/AAAAHhZouza5AEIqBlBKAwBuSBIEbygBcGj/AAAAdEgSBAAPFWjRFgsAFmidV1QAaAgA BhZonVdUAAAVFmgUaIIAUEoDAG5IEgRvKAF0SBIEBhZoIjdQAAAlAAiBFmjuVh0AF2hdZFIAY0gB AGRoAAAAAGRoAAAAAGRoxuOphhMBCIEESAEABWjG46mGFmhdZFIABhZo7lYdAAATAQiBBEgBAAVo Jx2qRhZoW1fUABMBCIEESAEABWgmHapGFmhbV9QABhZoG3sLAAAMFWi5aYMAFmhFRJIAAAYWaEVE kgAdpFAAAKZQAABhUQAAgFEAADJSAAAzUgAAYFIAAGFSAAAfUwAAIFMAACFTAAA8UwAAKFQAAONU AADkVAAA+1QAAPxUAAD9VAAA/lQAAAtVAAAMVQAAG1UAABxVAABKVQAAS1UAAExVAABNVQAAaFUA AGlVAABqVQAAa1UAAJFWAACvVgAAv1YAAMhWAADeVgAA6lYAAFtXAABdVwAA3VcAAN5XAAD1VwAA 9lcAAO3m4ubi5uLm2M3ixsK6wqmhusK6wrqWusK6wrqNusKGwobChsJ/wrrCbgAAAAAAACEDaqLj FkgKCAEWaJ5g2gBQSgAAVQgBVggBX0g5BGFKFAAMFWhYV8AAFmieYNoAAAwVaMkxCgAWaJ5g2gAA ERZonmDaAG1IAARuSAAEdQgBFBZonmDaADUIgW1IAARuSAAEdQgBAA8DalI+AAAWaJ5g2gBVCAEh A2qK2hZICggBFmieYNoAUEoAAFUIAVYIAV9IOQRhShQADwNqAAAAABZonmDaAFUIAQYWaJ5g2gAA DBVouWmDABZonmDaAAAVFmidV1QAUEoDAG5IEgRvKAF0SBIEEwEIgQRIAQAFaMfjqYYWaF1kUgAG FmidOcQAAAwVaLlpgwAWaJ05xAAAJBVouza5ABZouza5AEIqBlBKAwBuSBIEbygBcGj/AAAAdEgS BCqAUQAAwFEAAPNRAAAzUgAAuQAAAAAAAAAAAAAAAHMAAAAAAAAAAAAAAAAtAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGNwBFxoABAAEAieOphgAAAAAAAAAA ABcXFxcXFxcXFwAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC38AAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdk nTnEAEY3AEXGgAEAAQCJ46mGAAAAAAAAAAAAFxcXFxcXFxcXAAACAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAABALfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2SdOcQARjcARcaAAQABAInjqYYAAAAAAAAAAAAXFxcX FxcXFxcAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAt/AAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZJ05xAAA AzNSAABhUgAAmFIAACFTAAA8UwAAuQAAAAAAAAAAAAAAAHMAAAAAAAAAAAAAAABuAAAAAAAAAAAA AAAAJAAAAAAAAAAAAAAAAABJBAAKJgMLRhgARcaAAQABAInjqYYBAwUHAAAAAAAAAAAAAAAAAAAA AAUAAAALAAAACwAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAAAAuAAEALgACAC4AAwAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZMllSwAABA8AZ2Sd OcQARjcARcaAAQABAInjqYYAAAAAAAAAAAAXFxcXFxcXFxcAAAUAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAEAt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZJ05xABGNwBFxoABAAEAieOphgAAAAAAAAAAABcXFxcX FxcXFwAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC38AAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdknTnEAAAE PFMAAChUAADjVAAA/1QAAIBVAADYVQAA3VcAAPlXAACGWAAA81gAABVZAAA/WQAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD0AAAAAAAAAAAAAAAA7wAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA9AAAAAAAAAAAAAAAAO8AAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAApQAAAAAA AAAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA8AZ2TJZUsAAEkEAAomAwtGGABF xoABAAEAieOphgEDBQcAAAAAAAAAAAAAAAAAAAAABQAAAAsAAAALAAAAAgAAAAAAAAAAAAAAAAAA AAAAAAAAAAAABwAAAC4AAQAuAAIALgADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAGdkyWVLAAAEGwBnZJ5g2gAGDwAGJAFnZJ5g2gAABA8AZ2SeYNoAAAv2 VwAA91cAAPhXAAAFWAAABlgAABVYAAAWWAAARFgAAEVYAABGWAAAR1gAAGJYAABjWAAAZFgAAGVY AACFWAAA81gAABRZAAAVWQAAKVkAACxZAAAuWQAAPlkAAD9ZAABjWQAAZFkAAIRZAACXWQAA9+/r 7+vv4O/r7+vv1+/r0MW+saGFsXfFbFxMAAAAAAAAAAAAAAAAAB8BCIEESAEABWglHapGFmhbV9QA UEoDAG5IEgR0SBIEHwEIgQRIAQAFaA/kqYYWaAw7rgBQSgMAbkgSBHRIEgQVFmjJZUsAUEoDAG5I EgRvKAF0SBIEGxVow02oABZoyWVLAFBKAwBuSBIEbygBdEgSBDcACIEVaMNNqAAWaMNNqAAXaAw7 rgBQSgMAY0gBAGRoAAAAAGRoAAAAAGRoDuSphm5IEgR0SBIEHwEIgQRIAQAFaA7kqYYWaAw7rgBQ SgMAbkgSBHRIEgQYFWjDTagAFmjDTagAUEoDAG5IEgR0SBIEAAwVaMllSwAWaMllSwAAFBVoyWVL ABZoyWVLAG5IEgR0SBIEAAwVaLlpgwAWaJ5g2gAAERZonmDaAG1IAARuSAAEdQgBFBZonmDaADUI gW1IAARuSAAEdQgBAAYWaJ5g2gAADwNqAAAAABZonmDaAFUIAQ8DallGAAAWaJ5g2gBVCAEAGz9Z AABkWQAAa1oAAI9aAADqXAAA61wAAPhdAAC1AAAAAAAAAAAAAAAAsAAAAAAAAAAAAAAAAGYAAAAA AAAAAAAAAABYAAAAAAAAAAAAAAAAUwAAAAAAAAAAAAAAAEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AAGdkKXqrAG/GBwEBAM3jqYZkJgEDJANhJAMABAAAZ2TD TagADgAAZ2QpeqsAb8YHAQEAzOOphmQmAQMkA2EkAwBJBAAKJgMLRhgARcaAAQABAInjqYYBAwUH AAAAAAAAAAAAAAAAAAAAAAUAAAALAAAACwAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAAAAu AAEALgACAC4AAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AABnZMllSwAABA8AZ2TJZUsAAEkEAAomAwtGGABFxoABAAEAieOphgEDBQcAAAAAAAAAAAAAAAAA AAAABQAAAAsAAAALAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwAAAC4AAQAuAAIALgADAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkyWVLAAAGl1kA AKNZAACkWQAApVkAAMlZAADWWQAA2VkAANxZAADeWQAAaVoAAGpaAABrWgAAjloAAI9aAAAMWwAA I1sAAElbAABaWwAAF1wAABhcAADv38O2mrbvmraKfHFpYlhORGI6AAAAAAAAAAAAAAAAAAAAAAAT AQiBBEgBAAVozOOphhZoKXqrABMBCIEESAEABWjV46mGFmgqABwAEwEIgQRIAQAFaNXjqYYWaCl6 qwATAQiBBEgBAAVo1OOphhZoKXqrAAwVaHZZVwAWaMNNqAAADxVoyWVLABZoyWVLAG8oARQVaMll SwAWaMllSwBuSBIEdEgSBAAbFWjDTagAFmjJZUsAUEoDAG5IEgRvKAF0SBIEHwEIgQRIAQAFaMrj qYYWaF1kUgBQSgMAbkgSBHRIEgQ3AAiBFWjDTagAFmjDTagAF2gMO64AUEoDAGNIAQBkaAAAAABk aAAAAABkaBDkqYZuSBIEdEgSBBgVaMNNqAAWaMNNqABQSgMAbkgSBHRIEgQANwAIgRVow02oABZo w02oABdoDDuuAFBKAwBjSAEAZGgAAAAAZGgAAAAAZGgP5KmGbkgSBHRIEgQfAQiBBEgBAAVoD+Sp hhZoDDuuAFBKAwBuSBIEdEgSBB8BCIEESAEABWgQ5KmGFmgMO64AUEoDAG5IEgR0SBIEABMYXAAA IVwAAK1cAACuXAAAs1wAAOlcAADrXAAADF0AAA5dAAArXQAALF0AAKpdAACrXQAAwF0AAMFdAADH XQAAy10AAPFdAADyXQAA910AAPhdAAAFXgAABl4AACVeAAAmXgAA6eLYwuK9uaa5vbm9uZyJprm9 uXtwZVVCAAAAAAAAAAAkFWi7NrkAFmi7NrkAQioGUEoDAG5IEgRvKAFwaP8AAAB0SBIEAB4WaLs2 uQBCKgJQSgMAbkgSBG8oAXBoAAD/AHRIEgQAFRZo0RYLAFBKAwBuSBIEbygBdEgSBBUWaEZNMQBQ SgMAbkgSBG8oAXRIEgQbFWjDTagAFmidV1QAUEoDAG5IEgRvKAF0SBIEJQAIgRZow02oABdoKXqr AGNIAQBkaAAAAABkaAAAAABkaM7jqYYTAQiBBEgBAAVozuOphhZoKXqrACUACIEWaMNNqAAXaCl6 qwBjSAEAZGgAAAAAZGgAAAAAZGjN46mGBhZow02oAAAJFmjDTagAbygBKwAIgRVodllXABZow02o ABdoKXqrAGNIAQBkaAAAAABkaAAAAABkaM3jqYYTAQiBBEgBAAVozeOphhZoKXqrAAwVaHZZVwAW aMNNqAAAKwAIgRVodllXABZow02oABdoKXqrAGNIAQBkaAAAAABkaAAAAABkaMzjqYYAGPhdAAAG XgAAJl4AACdeAADfXwAAO2EAAIhiAAC2YgAAD2MAABBjAAC1AAAAAAAAAAAAAAAAsAAAAAAAAAAA AAAAAKsAAAAAAAAAAAAAAACrAAAAAAAAAAAAAAAAqwAAAAAAAAAAAAAAAKYAAAAAAAAAAAAAAABV AAAAAAAAAAAAAAAAqwAAAAAAAAAAAAAAAKsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAEAAMk AwomAwtGGAATpPAAFKQ8AEXGgAEAAQCJ46mGAQMFBwAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAwA AAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAAAALgABAC4AAgAuAAMAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYSQDZ2TDTagAAAQPAGdkRk0xAAAEDwBn ZMNNqAAABA8AZ2S7NrkAAEkDAAomAgtGGABFxoABAAEAieOphgEDBQAAAAAAAAAAAAAAAAAAAAAA BQAAAAsAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQAAAC4AAQAuAAIAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdk0RYLAAAJJl4AACde AADUXwAA2F8AANlfAADbXwAAgGAAAIFgAAC/YAAAwWAAAMtgAAAlYQAAKWEAACphAABOYgAAUGIA AIZiAACHYgAA9PDm08DwrfCjkPCGc/BpTTkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJhVoZzvc ABZow02oAInKBwEBABHkqYaDKgFCKgZhShQAcGj/AAAAADYBCAEESAEABWjj46mGFWhnO9wAFmgo AMEAicoHAQEAEeSphoMqATUIAUIqBmFKFABwaP8AAAAAEwEIgQRIAQAFaOPjqYYWaCgAwQAlAAiB FmjDTagAF2gqABwAY0gBAGRoAAAAAGRoAAAAAGRo3eOphhMBCIEESAEABWjd46mGFmgqABwAJQAI gRZow02oABdoKADBAGNIAQBkaAAAAABkaAAAAABkaOHjqYYTAQiBBEgBAAVo4eOphhZoKADBACUA CIEWaMNNqAAXaCgAwQBjSAEAZGgAAAAAZGgAAAAAZGjg46mGJQAIgRZow02oABdoKADBAGNIAQBk aAAAAABkaAAAAABkaOTjqYYlAAiBFmjDTagAF2gqABwAY0gBAGRoAAAAAGRoAAAAAGRo2+OphhMB CIEESAEABWjb46mGFmgqABwABhZow02oAAAVFmi7NrkAUEoDAG5IEgRvKAF0SBIEABGHYgAAiGIA ALZiAAAOYwAAD2MAABBjAACjZAAAxGQAABxlAAAeZQAAU2UAAFZlAABXZQAAWGUAAFVmAABZZgAA WmYAAHBmAABxZgAAcmYAAHZmAAB3ZgAAuWYAALpmAAC7ZgAAv2YAAMBmAAAVZwAAFmcAABdnAAAb ZwAAHGcAAERnAABIZwAASWcAAKpnAACuZwAAr2cAANVnAADZZwAA9PDg0sfwvODS8LKolfCogvCo 8Hhl8KjwqILwePB4ZfB4ZfB4ZfB4AAAAJQAIgRZow02oABdoKADBAGNIAQBkaAAAAABkaAAAAABk aObjqYYTAQiBBEgBAAVo5uOphhZoKADBACUACIEWaMNNqAAXaCgAwQBjSAEAZGgAAAAAZGgAAAAA ZGjl46mGJQAIgRZow02oABdoKADBAGNIAQBkaAAAAABkaAAAAABkaOTjqYYTAQiBBEgBAAVo5eOp hhZoKADBABMBCIEESAEABWjk46mGFmgoAMEAFRZow02oAFBKAwBuSBIEbygBdEgSBBUWaLs2uQBQ SgMAbkgSBG8oAXRIEgQbFWi7NrkAFmi7NrkAUEoDAG5IEgRvKAF0SBIEHhZouza5AEIqAlBKAwBu SBIEbygBcGgAAP8AdEgSBAAGFmjDTagAABUWaEZNMQBQSgMAbkgSBG8oAXRIEgQAJxBjAACvYwAA yGMAAN9jAAD2YwAA+gAAAAAAAAAAAAAAALQAAAAAAAAAAAAAAABuAAAAAAAAAAAAAAAAKAAAAAAA AAAAAAAAAAAAAAAAAAAARjcARcaAAQABAInjqYYAAAAAAAAAAAAXFxcXFxcXFxcAAAgAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZMNNqABGNwBFxoABAAEAieOphgAA AAAAAAAAABcXFxcXFxcXFwAABwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC3 8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAGdkw02oAEY3AEXGgAEAAQCJ46mGAAAAAAAAAAAAFxcXFxcXFxcXAAAGAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TDTagAAAQPAGdkw02oAAAE9mMAAE5kAACj ZAAAxGQAAB1lAAAeZQAAJGYAAPVmAAAPaAAAGWgAAHJoAABzaAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAACwAAAAAAAAAAAAAAAAqwAAAAAAAAAAAAAAAKsAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAABhAAAAAAAAAAAAAAAAqwAAAAAAAAAAAAAAAKsA AAAAAAAAAAAAAAAAAAAASQQACiYDC0YYAEXGgAEAAQCJ46mGAQMFBwAAAAAAAAAAAAAAAAAAAAAF AAAACwAAAAwAAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAAAALgABAC4AAgAuAAMAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TDTagAAAQPAGdkuza5 AABJBAAKJgMLRhgARcaAAQABAInjqYYBAwUHAAAAAAAAAAAAAAAAAAAAAAUAAAALAAAADAAAAAIA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAAAAuAAEALgACAC4AAwAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZMNNqAAABA8AZ2TDTagAAAvZZwAA2mcAAA5o AAAZaAAAcWgAAHNoAACraAAArGgAALJoAACzaAAA02gAANRoAADVaAAA2WgAANpoAADbaAAACWkA AAppAAAdaQAAHmkAAD5pAABAaQAALWoAAC5qAABAagAA7Ojdzb+ypJmRzb+GsnZaskyZkc2/skyZ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsVaMNNqAAWaEZNMQBQSgMAbkgSBG8oAXRIEgQ3 AAiBFWjDTagAFmjDTagAF2goAMEAUEoDAGNIAQBkaAAAAABkaAAAAABkaOjjqYZuSBIEdEgSBB8B CIEESAEABWjo46mGFmgoAMEAUEoDAG5IEgR0SBIEFRZouza5AFBKAwBuSBIEbygBdEgSBA8VaNEW CwAWaEZNMQBoCAAVFmhGTTEAUEoDAG5IEgRvKAF0SBIEGxVow02oABZow02oAFBKAwBuSBIEbygB dEgSBBgVaMNNqAAWaMNNqABQSgMAbkgSBHRIEgQAGxVouza5ABZouza5AFBKAwBuSBIEbygBdEgS BB4WaLs2uQBCKgJQSgMAbkgSBG8oAXBoAAD/AHRIEgQAFRZow02oAFBKAwBuSBIEbygBdEgSBAYW aMNNqAAAJQAIgRZow02oABdoKADBAGNIAQBkaAAAAABkaAAAAABkaObjqYYAGHNoAACsaAAAs2gA ANRoAADVaAAACmkAAB5pAAA/aQAAQGkAAC5qAAD6AAAAAAAAAAAAAAAAsAAAAAAAAAAAAAAAAKsA AAAAAAAAAAAAAACmAAAAAAAAAAAAAAAApgAAAAAAAAAAAAAAAFwAAAAAAAAAAAAAAACrAAAAAAAA AAAAAAAApgAAAAAAAAAAAAAAAKYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAASQMACiYCC0YYAEXGgAEAAQCJ46mGAQMFAAAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAA4AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAALgABAC4AAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2RGTTEAAAQPAGdkRk0xAAAEDwBnZLs2uQAA SQMACiYCC0YYAEXGgAEAAQCJ46mGAQMFAAAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAA0AAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAALgABAC4AAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2RGTTEAAAQPAGdkw02oAAAJQGoAAEFqAABCagAA YGoAAIBqAACCagAAiGoAAIlqAAAXawAAGGsAABlrAAAaawAAG2sAAE5tAABPbQAAV20AAFhtAACI bQAAj20AAJdtAACebQAA79TJuaugmIvvi3tfi1GgmIs1izUAADcACIEVaMNNqAAWaMNNqAAXaF9v +ABQSgMAY0gBAGRoAAAAAGRoAAAAAGRo6+Ophm5IEgR0SBIEGxVow02oABZow02oAFBKAwBuSBIE bygBdEgSBDcACIEVaMNNqAAWaMNNqAAXaCgAwQBQSgMAY0gBAGRoAAAAAGRoAAAAAGRo6eOphm5I EgR0SBIEHwEIgQRIAQAFaOrjqYYWaF9v+ABQSgMAbkgSBHRIEgQYFWjDTagAFmjDTagAUEoDAG5I EgR0SBIEAA8VaMllSwAWaMNNqABvKAEVFmjDTagAUEoDAG5IEgRvKAF0SBIEGxVouza5ABZouza5 AFBKAwBuSBIEbygBdEgSBB4WaLs2uQBCKgJQSgMAbkgSBG8oAXBoAAD/AHRIEgQAFRZoRk0xAFBK AwBuSBIEbygBdEgSBDQACIEWaEZNMQAXaCgAwQBQSgMAY0gBAGRoAAAAAGRoAAAAAGRo6eOphm5I EgRvKAF0SBIEAB8BCIEESAEABWjp46mGFmgoAMEAUEoDAG5IEgR0SBIEABQuagAAYGoAAIFqAACC agAAiWoAAE9tAAC1AAAAAAAAAAAAAAAAsAAAAAAAAAAAAAAAALAAAAAAAAAAAAAAAABmAAAAAAAA AAAAAAAAYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAEDwBnZEZNMQAASQQACiYDC0YYAEXGgAEAAQCJ46mGAQMFBwAAAAAAAAAAAAAA AAAAAAAFAAAACwAAAA8AAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAAAALgABAC4AAgAuAAMA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TDTagAAAQP AGdkuza5AABJAwAKJgILRhgARcaAAQABAInjqYYBAwUAAAAAAAAAAAAAAAAAAAAAAAUAAAALAAAA DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAuAAEALgACAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZEZNMQAABU9tAABYbQAAUnEAAG5x AAB+cgAAf3IAALUAAAAAAAAAAAAAAACwAAAAAAAAAAAAAAAAZgAAAAAAAAAAAAAAAGEAAAAAAAAA AAAAAABhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAQPAGdkoRfsAABJAwAKJgILRhgARcaAAQABAInjqYYBAwUAAAAAAAAAAAAAAAAA AAAAAAUAAAALAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAuAAEALgACAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZEZNMQAABA8A Z2RGTTEAAEkEAAomAwtGGABFxoABAAEAieOphgEDBQcAAAAAAAAAAAAAAAAAAAAABQAAAAsAAAAP AAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwAAAC4AAQAuAAIALgADAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkw02oAAAFnm0AAFdwAABYcAAAUXEA AFJxAABtcQAAbnEAAHVxAAB2cQAAmHEAAJlxAACqcQAAq3EAAH1yAAB+cgAAf3IAAKJyAADocgAA 6XIAAOpyAADrcgAA73IAABVzAAAocwAA89fzycW6qpyqnKqcqo6Ad2xhWVJORU4AAAAAAAAAAAAA AAAAAAAAAAAAERZodTjDAG5IBAhvKAF0SAQIBhZoYx59AAAMFWjRNfQAFmhjHn0AAA8DapB4AAAW aNE19ABVCAEVFmidV1QAUEoEAG5IBAhvKAF0SAQIFRZoVEtoAFBKBABuSAQIbygBdEgECBEWaGMe fQBuSAQIbygBdEgECBsVaKEX7AAWaKEX7ABQSgMAbkgSBG8oAXRIEgQbFWi7NrkAFmihF+wAUEoD AG5IEgRvKAF0SBIEGxZooRfsAEIqAlBKAwBuSBIEcGgAAP8AdEgSBB4WaKEX7ABCKgJQSgMAbkgS BG8oAXBoAAD/AHRIEgQAFRZonVdUAFBKAwBuSBIEbygBdEgSBAYWaJ1XVAAAGxVow02oABZow02o AFBKAwBuSBIEbygBdEgSBDcACIEVaMNNqAAWaMNNqAAXaF9v+ABQSgMAY0gBAGRoAAAAAGRoAAAA AGRo7uOphm5IEgR0SBIEGBVow02oABZow02oAFBKAwBuSBIEdEgSBBd/cgAAonIAAOlyAADrcgAA FnMAABtzAAAncwAAtQAAAAAAAAAAAAAAALAAAAAAAAAAAAAAAACwAAAAAAAAAAAAAAAAqAAAAAAA AAAAAAAAAJUAAAAAAAAAAAAAAACVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABJp ABYkAUlmAQAAAGdkYx59AGzGEAsAAAD/HAAAABAAAAEAAAAIGwAGJAETpGgBZ2RjHn0AAAQPAGdk nVdUAABJBAAKJgMLRgoARcaAAQABAInjqYYBAwUHAAAAAAAAAAAAAAAAAAAAAAUAAAALAAAABAAA AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAAAAuAAEALgACAC4AAwAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZGMefQAABidzAAAocwAAMHMAAJRzAABk AAAAAAAAAAAAAAAAUQAAAAAAAAAAAAAAAFEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAAWJAFJZgEAAABnZJQJyABsxhALAAAA /xsAAAAQAAABAAAAAJoAAGtkieEAABYkARckAUlmAQAAAABUAQAClmwABDQBBdYYBAEAAAQBAAAE AQAABAEAAAQBAAAEAQAACNYwAAKU//cCJCSABM8BAAAAAAAAAAAAAAAAAAAAAIAEuREAAAAAAAAA AAAAAAAAAAAACdYEAAIAAgp0AADgARLWFAAAAP/MzMwAAAAAAAD/zMzMAAAAE9YwAAAA/wQBAAAA AAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYDkCQVNgEX9gMAABj2AwAA GtYIAAAA/wAAAP8b1ggAAAD/AAAA/xzWCAAAAP8AAAD/HdYIAAAA/wAAAP801gYAAQUDAAA01gYA AQoDbABh9gMAAHDWFAAAAP/MzMwAAAAAAAD/zMzMAAAAilQBAAADKHMAAC9zAAAwcwAAZHMAAGVz AABvcwAAcHMAAH1zAACTcwAAlHMAAJVzAACWcwAAl3MAAKBzAACicwAAsHMAALNzAAAFdAAABnQA ABF0AAASdAAALHQAADR0AAA/dAAAQHQAAEF0AABCdAAAQ3QAAJp0AACddAAA9urj2s/Bp47PivaB eHBncHhweF94wXiBW/aBV04AAAAAAAAAERZogUvBAG5IBAhvKAF0SAQIBhZogUvBAAAGFmhjHn0A AA4WaEZidQBuSAQIdEgECAARFmh4STsAbkgECG8oAXRIBAgOFmh4STsAbkgECHRIBAgAERZoRmJ1 AG5IBAhvKAF0SAQIERZoYx59AG5IBAhvKAF0SAQIBhZolAnIAAAwAAiBFmiUCcgAF2hMTJgAY0gB AGRoAAAAAGRoAAAAAGRo9OOphm5IBAhvKAF0SAQIADMACIEVaJQJyAAWaJQJyAAXaExMmABjSAEA ZGgAAAAAZGgAAAAAZGj046mGbkgECHRIBAgbAQiBBEgBAAVo9OOphhZoTEyYAG5IBAh0SAQIFBVo lAnIABZolAnIAG5IBAh0SAQIABEWaJQJyABuSAQIbygBdEgECAwVaJQJyAAWaJQJyAAAFxVoUlOn ABZolAnIAG5IBAhvKAF0SAQIERZoNTtAAG5IBAhvKAF0SAQIAB2UcwAAlXMAAJdzAABAdAAAgAAA AAAAAAAAAAAAAGoAAAAAAAAAAAAAAABXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAElcAFiQBSWYBAAAAZ2Rj Hn0AbMYQCwAAAP8cAAAAEAAAAQAAAAAVVwADJAEWJAFJZgEAAABhJAFnZGMefQBsxhALAAAA/xwA AAAQAAABAAAAAH4AAGtkXeIAABYkARckAUlmAQAAAABUAQAClmwABdYYBAEAAAQBAAAEAQAABAEA AAQBAAAEAQAACNYwAAKU//cCJCQABM8BAAAAAAAAAAAAAAAAAAAAAAAEuREAAAAAAAAAAAAAAAAA AAAACnQAAOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8E AQAAFPYDkCQVNgEX9gMAABj2AwAAGtYIAAAA/wAAAP8b1ggAAAD/AAAA/xzWCAAAAP8AAAD/HdYI AAAA/wAAAP801gYAAQUDAAA01gYAAQoDbABh9gMAAIpUAQAAA0B0AABBdAAAQ3QAAPF2AACAAAAA AAAAAAAAAAAAagAAAAAAAAAAAAAAAFcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASVwAWJAFJZgEAAABnZBop /gBsxhALAAAA/xwAAAAQAAABAAAAABVXAAMkARYkAUlmAQAAAGEkAWdkYx59AGzGEAsAAAD/HAAA ABAAAAEAAAAAfgAAa2Tz4gAAFiQBFyQBSWYBAAAAAFQBAAKWbAAF1hgEAQAABAEAAAQBAAAEAQAA BAEAAAQBAAAI1jAAApT/9wIkJAAEzwEAAAAAAAAAAAAAAAAAAAAAAAS5EQAAAAAAAAAAAAAAAAAA AAAKdAAA4AET1jAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQB AAAU9gOQJBU2ARf2AwAAGPYDAAAa1ggAAAD/AAAA/xvWCAAAAP8AAAD/HNYIAAAA/wAAAP8d1ggA AAD/AAAA/zTWBgABBQMAADTWBgABCgNsAGH2AwAAilQBAAADnXQAAJ50AACmdAAAp3QAAK50AACy dAAA0HQAANF0AADSdAAA13QAAAZ1AAAHdQAACHUAAAl1AAAKdQAADXUAABh1AAAndQAAKnUAAGd1 AABodQAAaXUAAG51AABvdQAA5XUAAOZ1AAAadgAAG3YAABx2AAAhdgAATXYAAFV2AAD47/jh+NnQ 4bf479Dvr9nQ2ZjZ0IpxWtnQ2dCKcdlRAAAAERZoSGrFAG5IBAhvKAF0SAQILQAIgRZoGin+ABdo TEyYAGNIAQBkaAAAAABkaAAAAABkaPbjqYZuSAQIdEgECDAACIEWaBop/gAXaExMmABjSAEAZGgA AAAAZGgAAAAAZGj246mGbkgECG8oAXRIBAgAGwEIgQRIAQAFaPbjqYYWaExMmABuSAQIdEgECC0A CIEWaBop/gAXaExMmABjSAEAZGgAAAAAZGgAAAAAZGj146mGbkgECHRIBAgOFmh4STsAbkgECHRI BAgAMAAIgRZoGin+ABdoTEyYAGNIAQBkaAAAAABkaAAAAABkaPXjqYZuSAQIbygBdEgECAARFmga Kf4AbkgECG8oAXRIBAgOFmgaKf4AbkgECHRIBAgAGwEIgQRIAQAFaPXjqYYWaExMmABuSAQIdEgE CBEWaIFLwQBuSAQIbygBdEgECA4WaIFLwQBuSAQIdEgECB9VdgAAVnYAAHJ2AABzdgAAd3YAAH92 AACudgAAsnYAALN2AAC0dgAAuXYAAO92AADwdgAA8XYAAPJ2AADzdgAA9HYAAAN3AAAEdwAAL3cA ADB3AAA1dwAAaXcAAGp3AABrdwAA+O/47+Hv2dDht9nQq6eelYyEjHZdjFNAAAAAACUACIEWaGMe fQAXaExMmABjSAEAZGgAAAAAZGgAAAAAZGj346mGEwEIgQRIAQAFaPfjqYYWaExMmAAwAAiBFmhs CjgAF2hMTJgAY0gBAGRoAAAAAGRoAAAAAGRo9+Ophm5IBAhvKAF0SAQIABsBCIEESAEABWj346mG FmhMTJgAbkgECHRIBAgOFmhsCjgAbkgECHRIBAgAERZobAo4AG5IBAhvKAF0SAQIERZoYx59AG5I BAhvKAF0SAQIERZoNTtAAG5IBAhvKAF0SAQIBhZoYx59AAAXFWiBS8EAFmhjHn0AbkgECG8oAXRI BAgwAAiBFmgaKf4AF2hMTJgAY0gBAGRoAAAAAGRoAAAAAGRo9uOphm5IBAhvKAF0SAQIABEWaBop /gBuSAQIbygBdEgECA4WaBop/gBuSAQIdEgECAAbAQiBBEgBAAVo9uOphhZoTEyYAG5IBAh0SAQI ERZoSGrFAG5IBAhvKAF0SAQIDhZoSGrFAG5IBAh0SAQIGPF2AADydgAA9HYAAH13AACAAAAAAAAA AAAAAAAAagAAAAAAAAAAAAAAAFcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASVwAWJAFJZgEAAABnZGMefQBs xhALAAAA/xwAAAAQAAABAAAAABVXAAMkARYkAUlmAQAAAGEkAWdkYx59AGzGEAsAAAD/HAAAABAA AAEAAAAAfgAAa2SJ4wAAFiQBFyQBSWYBAAAAAFQBAAKWbAAF1hgEAQAABAEAAAQBAAAEAQAABAEA AAQBAAAI1jAAApT/9wIkJAAEzwEAAAAAAAAAAAAAAAAAAAAAAAS5EQAAAAAAAAAAAAAAAAAAAAAK dAAA4AET1jAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAU 9gOQJBU2ARf2AwAAGPYDAAAa1ggAAAD/AAAA/xvWCAAAAP8AAAD/HNYIAAAA/wAAAP8d1ggAAAD/ AAAA/zTWBgABBQMAADTWBgABCgNsAGH2AwAAilQBAAADa3cAAG53AAB5dwAAfncAAH93AACBdwAA gncAALR3AADSdwAA/XcAAP53AABFeAAASHgAAEx4AABPeAAAUHgAAFR4AABfeAAAtHgAALV4AAAP eQAAGnkAAMJ5AADFeQAAxnkAAMd5AADIeQAAzHkAAN95AADteQAA+HkAABB6AAASegAAE3oAABR6 AAAVegAAJ3oAACh6AAApegAAKnoAACt6AAAsegAAaHoAAGt6AABsegAAg3oAAJh6AAD88/zq4djU y9TL1PzC4djUwtTL1MLU/MLh2L7CsJfC/MLh/MLY/MLh2ML8jH91EhZoeEk7AFBKBABuSAQIdEgE CAAYFWg1cyUAFmg1cyUAUEoEAG5IBAh0SAQIABUWaJ1XVABQSgQAbkgECG8oAXRIBAgwAAiBFmjR NfQAF2hMTJgAY0gBAGRoAAAAAGRoAAAAAGRo9+Ophm5IBAhvKAF0SAQIABsBCIEESAEABWj446mG FmhMTJgAbkgECHRIBAgGFmjRNfQAABEWaNE19ABuSAQIbygBdEgECBEWaM8howBuSAQIbygBdEgE CAYWaM8howAAERZoYx59AG5IBAhvKAF0SAQIERZohlHXAG5IBAhvKAF0SAQIERZoNTtAAG5IBAhv KAF0SAQIERZorBDJAG5IBAhvKAF0SAQIBhZoYx59AC59dwAAfncAAIJ3AABGeAAAgAAAAAAAAAAA AAAAAGoAAAAAAAAAAAAAAABXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAElcAFiQBSWYBAAAAZ2TPIaMAbMYQ CwAAAP8cAAAAEAAAAQAAAAAVVwADJAEWJAFJZgEAAABhJAFnZGMefQBsxhALAAAA/xwAAAAQAAAB AAAAAH4AAGtkH+QAABYkARckAUlmAQAAAABUAQAClmwABdYYBAEAAAQBAAAEAQAABAEAAAQBAAAE AQAACNYwAAKU//cCJCQABM8BAAAAAAAAAAAAAAAAAAAAAAAEuREAAAAAAAAAAAAAAAAAAAAACnQA AOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYD kCQVNgEX9gMAABj2AwAAGtYIAAAA/wAAAP8b1ggAAAD/AAAA/xzWCAAAAP8AAAD/HdYIAAAA/wAA AP801gYAAQUDAAA01gYAAQoDbABh9gMAAIpUAQAAA0Z4AABHeAAAUHgAAMR5AACAAAAAAAAAAAAA AAAAagAAAAAAAAAAAAAAAFcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASVwAWJAFJZgEAAABnZM8howBsxhAL AAAA/xwAAAAQAAABAAAAABVXAAMkARYkAUlmAQAAAGEkAWdkYx59AGzGEAsAAAD/HAAAABAAAAEA AAAAfgAAa2S15AAAFiQBFyQBSWYBAAAAAFQBAAKWbAAF1hgEAQAABAEAAAQBAAAEAQAABAEAAAQB AAAI1jAAApT/9wIkJAAEzwEAAAAAAAAAAAAAAAAAAAAAAAS5EQAAAAAAAAAAAAAAAAAAAAAKdAAA 4AET1jAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAU9gOQ JBU2ARf2AwAAGPYDAAAa1ggAAAD/AAAA/xvWCAAAAP8AAAD/HNYIAAAA/wAAAP8d1ggAAAD/AAAA /zTWBgABBQMAADTWBgABCgNsAGH2AwAAilQBAAADxHkAAMV5AADIeQAAEXoAAIAAAAAAAAAAAAAA AABqAAAAAAAAAAAAAAAAVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABJXABYkAUlmAQAAAGdk0TX0AGzGEAsA AAD/HAAAABAAAAEAAAAAFVcAAyQBFiQBSWYBAAAAYSQBZ2RjHn0AbMYQCwAAAP8cAAAAEAAAAQAA AAB+AABrZEvlAAAWJAEXJAFJZgEAAAAAVAEAApZsAAXWGAQBAAAEAQAABAEAAAQBAAAEAQAABAEA AAjWMAAClP/3AiQkAATPAQAAAAAAAAAAAAAAAAAAAAAABLkRAAAAAAAAAAAAAAAAAAAAAAp0AADg ARPWMAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAABT2A5Ak FTYBF/YDAAAY9gMAABrWCAAAAP8AAAD/G9YIAAAA/wAAAP8c1ggAAAD/AAAA/x3WCAAAAP8AAAD/ NNYGAAEFAwAANNYGAAEKA2wAYfYDAACKVAEAAAMRegAAEnoAABV6AAAoegAAgAAAAAAAAAAAAAAA AGoAAAAAAAAAAAAAAABXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAElcAFiQBSWYBAAAAZ2RjHn0AbMYQCwAA AP8cAAAAEAAAAQAAAAAVVwADJAEWJAFJZgEAAABhJAFnZGMefQBsxhALAAAA/xwAAAAQAAABAAAA AH4AAGtk4eUAABYkARckAUlmAQAAAABUAQAClmwABdYYBAEAAAQBAAAEAQAABAEAAAQBAAAEAQAA CNYwAAKU//cCJCQABM8BAAAAAAAAAAAAAAAAAAAAAAAEuREAAAAAAAAAAAAAAAAAAAAACnQAAOAB E9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYDkCQV NgEX9gMAABj2AwAAGtYIAAAA/wAAAP8b1ggAAAD/AAAA/xzWCAAAAP8AAAD/HdYIAAAA/wAAAP80 1gYAAQUDAAA01gYAAQoDbABh9gMAAIpUAQAAAyh6AAApegAALHoAAGp6AACAAAAAAAAAAAAAAAAA agAAAAAAAAAAAAAAAFcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASVwAWJAFJZgEAAABnZGMefQBsxhALAAAA /xwAAAAQAAABAAAAABVXAAMkARYkAUlmAQAAAGEkAWdkYx59AGzGEAsAAAD/HAAAABAAAAEAAAAA fgAAa2R35gAAFiQBFyQBSWYBAAAAAFQBAAKWbAAF1hgEAQAABAEAAAQBAAAEAQAABAEAAAQBAAAI 1jAAApT/9wIkJAAEzwEAAAAAAAAAAAAAAAAAAAAAAAS5EQAAAAAAAAAAAAAAAAAAAAAKdAAA4AET 1jAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAU9gOQJBU2 ARf2AwAAGPYDAAAa1ggAAAD/AAAA/xvWCAAAAP8AAAD/HNYIAAAA/wAAAP8d1ggAAAD/AAAA/zTW BgABBQMAADTWBgABCgNsAGH2AwAAilQBAAADanoAAGt6AABsegAAM3wAAGR+AACAAAAAAAAAAAAA AAAAfgAAAAAAAAAAAAAAAHkAAAAAAAAAAAAAAAB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDwBnZE1BbgAABA8AZ2Q7H6YAAAEPAAB+ AABrZA3nAAAWJAEXJAFJZgEAAAAAVAEAApZsAAXWGAQBAAAEAQAABAEAAAQBAAAEAQAABAEAAAjW MAAClP/3AiQkAATPAQAAAAAAAAAAAAAAAAAAAAAABLkRAAAAAAAAAAAAAAAAAAAAAAp0AADgARPW MAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAABT2A5AkFTYB F/YDAAAY9gMAABrWCAAAAP8AAAD/G9YIAAAA/wAAAP8c1ggAAAD/AAAA/x3WCAAAAP8AAAD/NNYG AAEFAwAANNYGAAEKA2wAYfYDAACKVAEAAASYegAA4noAAOt6AADuegAA/noAAEh7AABjewAAZHsA AGl7AACGewAAlHsAAJd7AACmewAA33sAAP57AAD/ewAAAHwAADF8AAAyfAAAM3wAAD58AABXfAAA ZHwAAGh8AACIfAAAi3wAAPPo8+jz6Ni9sKWb6LCRsOiwhntfRF9EX0QAAAAAAAAANAAIgRZoqm1T ABdoTEyYAFBKBABjSAEAZGgAAAAAZGgAAAAAZGj646mGbkgECG8oAXRIBAgANwAIgRVoqm1TABZo qm1TABdoTEyYAFBKBABjSAEAZGgAAAAAZGgAAAAAZGj646mGbkgECHRIBAgVFmiGUdcAUEoEAG5I BAhvKAF0SAQIFRZopVqEAFBKBABuSAQIbygBdEgECBIWaDx4LwBQSgQAbkgECHRIBAgAEhZoeEk7 AFBKBABuSAQIdEgECAAVFmh4STsAUEoEAG5IBAhvKAF0SAQIGBVoOx+mABZoOx+mAFBKBABuSAQI dEgECAA0AAiBFmg7H6YAF2hMTJgAUEoEAGNIAQBkaAAAAABkaAAAAABkaPjjqYZuSAQIbygBdEgE CAAfAQiBBEgBAAVo+OOphhZoTEyYAFBKBABuSAQIdEgECBUWaDsfpgBQSgQAbkgECG8oAXRIBAgY FWg1cyUAFmg1cyUAUEoEAG5IBAh0SAQIGYt8AABMfQAATX0AAIN9AACGfQAAh30AAI19AACtfQAA r30AALB9AADwfQAA9n0AAD9+AABMfgAAYn4AAGN+AADjyOOtlK14rV1BXUFdQV0AAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3AAiBFWhNQW4AFmhNQW4A F2hMTJgAUEoEAGNIAQBkaAAAAABkaAAAAABkaPrjqYZuSAQIdEgECDQACIEWaE1BbgAXaExMmABQ SgQAY0gBAGRoAAAAAGRoAAAAAGRo+uOphm5IBAhvKAF0SAQIADcACIEVaKptUwAWaP0QCAAXaExM mABQSgQAY0gBAGRoAAAAAGRoAAAAAGRo+uOphm5IBAh0SAQIMQAIgRZo/RAIABdoTEyYAFBKBABj SAEAZGgAAAAAZGgAAAAAZGj646mGbkgECHRIBAg0AAiBFmj9EAgAF2hMTJgAUEoEAGNIAQBkaAAA AABkaAAAAABkaPrjqYZuSAQIbygBdEgECAA0AAiBFmiiBVIAF2hMTJgAUEoEAGNIAQBkaAAAAABk aAAAAABkaPrjqYZuSAQIbygBdEgECAA3AAiBFWiiBVIAFmiiBVIAF2hMTJgAUEoEAGNIAQBkaAAA AABkaAAAAABkaPrjqYZuSAQIdEgECAAPY34AAGR+AAB8fgAAfX4AANN+AADdfgAA5n4AAOh+AABB fwAASn8AAF5/AABffwAAZX8AAHR/AAB7fwAAhn8AAIh/AAAFgAAAGoAAAOLJspd8l2OXY5dYT0dP R089MAAAGBVo6TAbABZo6TAbAFBKBABuSAQIdEgECAASFmjpMBsAUEoEAG5IBAh0SAQIAA4WaCI3 UABuSAQIdEgECAARFmgiN1AAbkgECG8oAXRIBAgUFWgiN1AAFmgiN1AAbkgECHRIBAgAMQAIgRZo IjdQABdoX2/4AFBKBABjSAEAZGgAAAAAZGgAAAAAZGjy46mGbkgECHRIBAg0AAiBFmgiN1AAF2hf b/gAUEoEAGNIAQBkaAAAAABkaAAAAABkaPHjqYZuSAQIbygBdEgECAA0AAiBFmgiN1AAF2hfb/gA UEoEAGNIAQBkaAAAAABkaAAAAABkaPLjqYZuSAQIbygBdEgECAAtAAiBFmhjHn0AF2hfb/gAY0gB AGRoAAAAAGRoAAAAAGRo8uOphm5IBAh0SAQIMAAIgRZoYx59ABdoX2/4AGNIAQBkaAAAAABkaAAA AABkaPLjqYZuSAQIbygBdEgECAA6AAiBFWhNQW4AFmhNQW4AF2hfb/gAUEoEAGNIAQBkaAAAAABk aAAAAABkaPLjqYZuSAQIbygBdEgECBJkfgAAfX4AAF9/AACIfwAAKIEAANmBAAC1AAAAAAAAAAAA AAAAsAAAAAAAAAAAAAAAAGYAAAAAAAAAAAAAAABhAAAAAAAAAAAAAAAAYQAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDwBnZDNwyQAA SQQACiYDC0YKAEXGgAEAAQCJ46mGAQMFBwAAAAAAAAAAAAAAAAAAAAAFAAAACwAAAAQAAAADAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAHAAAALgABAC4AAgAuAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2QiN1AAAAQPAGdkIjdQAABJBAAKJgMLRgoARcaA AQABAInjqYYBAwUHAAAAAAAAAAAAAAAAAAAAAAUAAAALAAAABAAAAAIAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAcAAAAuAAEALgACAC4AAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAABnZGMefQAABRqAAACEgAAAq4AAAMCAAADMgAAA2YAAANqAAAAngQAAKIEA AJuBAACwgQAA2IEAANmBAADagQAA8oEAAPOBAAAPggAANYIAADeCAABSggAAU4IAAGuCAAB/ggAA iIIAAIqCAACeggAAn4IAANmCAAD27N/s0uzSyOzf7NKzo5WDc4Nhc4NRg1GDUYMAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAB8BCIEESAEABWjy46mGFmhfb/gAUEoEAG5IBAh0SAQIIgEIgQRIAQAFaPLj qYYWaGc73ABQSgQAbkgECG8oAXRIBAgAHwEIgQRIAQAFaBLkqYYWaGc73ABQSgQAbkgECHRIBAgi AQiBBEgBAAVo8uOphhZoX2/4AFBKBABuSAQIbygBdEgECAAbAQiBBEgBAAVo8uOphhZoX2/4AG5I BAh0SAQIHgEIgQRIAQAFaPLjqYYWaF9v+ABuSAQIbygBdEgECAAoAQiBBEgBAAVo8uOphhVoTUFu ABZoX2/4AFBKBABuSAQIbygBdEgECAASFmhjHn0AUEoEAG5IBAh0SAQIABgVaDNwyQAWaDNwyQBQ SgQAbkgECHRIBAgAGBVo6TAbABZoM3DJAFBKBABuSAQIdEgECAASFmgzcMkAUEoEAG5IBAh0SAQI ABIWaOkwGwBQSgQAbkgECHRIBAgb2YEAANqBAADzgQAAD4MAAJeDAAC3AAAAAAAAAAAAAAAAbAAA AAAAAAAAAAAAAGcAAAAAAAAAAAAAAABfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEAAomAAtGAABnZOkwGwAA BA8AZ2Rfb/gASwQACiYDC0YKAEMkAUXGgAAAAQDy46mGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2Rfb/gAAEcPAEMkAUXGgAAA AQDy46mGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAZ2Rfb/gAAATZggAA8IIAAPGCAAD6ggAADoMAAA+DAAAWgwAAlYMAAJaDAACX gwAAnoMAAOaDAADngwAA7IMAAP+DAAAAhAAABYQAAAaEAAAHhAAAQoQAAEOEAADv3c3dycW9uKye kYeRfXNpXWlHNCQBCIEESAEABWjc46mGFmgqABwAQioAUEoEAGFKGABwaAAAAP8AKgEIgQRIAQAF aNvjqYYVaCoAHAAWaCoAHABCKgBQSgQAYUoYAHBoAAAA/wAXAQiBBEgBAAVo2+OphgdIIwAWaCoA HAATAQiBBEgBAAVo2+OphhZoKgAcABMBCIEESAEABWjb46mGFmjFaJwAEwEIgQRIAQAFaKHjqYYW aMVonAATAQiBBEgBAAVooOOphhZoxWicABkBCIEESAEABWig46mGFWjFaJwAFmjFaJwAGwEIgQRI AQAFaKDjqYYWaMVonABuSAkEdEgJBBYBCIEESAEABWig46mGFmidV1QANQiBAAkWaOkwGwA1CIEP FWjpMBsAFmjpMBsANQiBBhZo6TAbAAAGFmjAWOMAAB8BCIEESAEABWjy46mGFmhfb/gAUEoEAG5I BAh0SAQIIgEIgQRIAQAFaPLjqYYWaF9v+ABQSgQAbkgECG8oAXRIBAgAHwEIgQRIAQAFaPPjqYYW aF9v+ABQSgQAbkgECHRIBAgAFJeDAAAAhAAAiIQAAKsAAAAAAAAAAAAAAABXAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTBAAKJgALRgAAQyQBRcaAAAABANvjqYYAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZCoA HABvxgcBAQDc46mGZCYBAEY8AABTBAAKJgALRgAAQyQBRcaAAAABAKDjqYYAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZMVonABv xgcBAQCh46mGZCYBAEY8AAACQ4QAAICEAACBhAAAh4QAAJqEAACbhAAApIQAALGEAACyhAAAyIQA AOiEAADqhAAA7YQAAPKEAAD3hAAA+IQAAPmEAAD6hAAAFIUAACGFAAAihQAAOIUAAEiFAADy6PLe yLXItaielJ6UnpSoin1nVEc9AAAAAAAAAAATAQiBBEgBAAVo5+OphhZoKADBABkBCIEESAEABWjn 46mGFWgqABwAFmgoAMEAJAEIgQRIAQAFaOfjqYYWaCgAwQBCKgBQSgQAYUoYAHBoAAAA/wAqAQiB BEgBAAVo5+OphhVoKgAcABZoKADBAEIqAFBKBABhShgAcGgAAAD/ABkBCIEESAEABWjn46mGFWgo AMEAFmgoAMEAEwEIgQRIAQAFaOfjqYYWaCoAHAATAQiBBEgBAAVo3+OphhZoKgAcABMBCIEESAEA BWje46mGFmgqABwAGQEIgQRIAQAFaN7jqYYVaCoAHAAWaCoAHAAkAQiBBEgBAAVo3uOphhZoKgAc AEIqAFBKBABhShgAcGgAAAD/ACoBCIEESAEABWje46mGFWgqABwAFmgqABwAQioAUEoEAGFKGABw aAAAAP8AEwEIgQRIAQAFaN3jqYYWaCoAHAATAQiBBEgBAAVo2+OphhZoKgAcABkBCIEESAEABWjb 46mGFWgqABwAFmgqABwAABaIhAAA+oQAAGqFAACrAAAAAAAAAAAAAAAAVwAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAUwQACiYAC0YAAEMkAUXGgAAAAQDn46mGAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2QqABwA b8YHAQEA3OOphmQmAQBGPAAAUwQACiYAC0YAAEMkAUXGgAAAAQDd46mGAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2QqABwAb8YH AQEA3OOphmQmAQBGPAAAAkiFAABRhQAAWYUAAFyFAABohQAAaYUAAGqFAAB0hQAAfoUAAH+FAAC0 hQAAt4UAAN+FAAD9hQAA/oUAAP+FAAAAhgAAADgBAAE4AQACOAEABDgBAAU4AQAHOAEA9ev1697U ysCqlH1jfUlBPTs9QT1BPQAAAAADVQgBBhZoTEyYAAAPA2oAAAAAFmhMTJgAVQgBMhVoW1fUABZo W1fUAInKBwEBACkdqkaDKgFCKgBQSgQAYUoYAG1ICRBwaAAAAP9zSAkQADIBCIEESAEABWgpHapG FWhbV9QAFmhbV9QAQioAUEoEAGFKGABtSAkQcGgAAAD/c0gJEAAsAQiBBEgBAAVoKR2qRhZoW1fU AEIqAFBKBABhShgAbUgJEHBoAAAA/3NICRAAKgEIgQRIAQAFaCkdqkYVaFtX1AAWaFtX1ABCKgBQ SgQAYUoYAHBoAAAA/wAqAQiBBEgBAAVoKR2qRhVoKgAcABZoW1fUAEIqAFBKBABhShgAcGgAAAD/ ABMBCIEESAEABWgoHapGFmhbV9QAEwEIgQRIAQAFaCcdqkYWaFtX1AATAQiBBEgBAAVoJx2qRhZo KADBABkBCIEESAEABWjn46mGFWgqABwAFmgoAMEAEwEIgQRIAQAFaOfjqYYWaCgAwQATAQiBBEgB AAVo6OOphhZoKADBAAAWaoUAAP6FAAAAhgAAATgBAAM4AQAEOAEABjgBAAc4AQAJOAEACjgBAAs4 AQAMOAEADTgBAA44AQAPOAEAEjgBABM4AQAWOAEAFzgBAKsAAAAAAAAAAAAAAACpAAAAAAAAAAAA AAAAqQAAAAAAAAAAAAAAAKkAAAAAAAAAAAAAAACpAAAAAAAAAAAAAAAAqQAAAAAAAAAAAAAAAKkA AAAAAAAAAAAAAACpAAAAAAAAAAAAAAAAqQAAAAAAAAAAAAAAAKMAAAAAAAAAAAAAAACpAAAAAAAA AAAAAAAAqQAAAAAAAAAAAAAAAKkAAAAAAAAAAAAAAACpAAAAAAAAAAAAAAAAqQAAAAAAAAAAAAAA AKkAAAAAAAAAAAAAAACpAAAAAAAAAAAAAAAAqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA BQAADcYFAAGQJAIAAQAAAFMEAAomAAtGAABDJAFFxoAAAAEAJx2qRgAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkKgAcAG/GBwEB ANzjqYZkJgEARjwAABINBA0NAw0NBA0NDQ0NDQ1SMQ0NTVMNDVByb2ZpbGUgQg0NUjENDU1TDQ1B U04NDVIzDQ1BUg0NSVB2Ng0NQlMNDVByb2ZpbGVzIEEgYW5kIEMNDQ1BU04NDVI2DQ1SMw0NQlMN DUFSDQ1JUHY2DQ1BU04tR1cNDQ0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAc4AQAIOAEACjgBAAs4AQAMOAEADTgBAA84AQAROAEAEjgBABM4AQAVOAEA FjgBABc4AQAgOAEAITgBACI4AQAkOAEAJTgBACY4AQAoOAEAKTgBACo4AQAtOAEALjgBAC84AQAx OAEAMjgBADM4AQA1OAEANjgBADc4AQA7OAEAPDgBAD04AQA/OAEAQDgBAEE4AQBROAEAUjgBAFQ4 AQBXOAEAWDgBAFk4AQBbOAEAXDgBAF04AQBfOAEAYDgBAGE4AQBjOAEAZDgBAGU4AQBnOAEAaDgB AGk4AQBtOAEAbjgBAG84AQB1OAEAdjgBAHc4AQB4OAEA9/Pt8+nz19Pz19PzxdPz19Pz19PzxdPz 19Pz19Pz19Pz19Pzs9Pz19Pz19Pz19PzxdPz19Pz19PzodPznQAAAAAABhZonVdUAAAjFmhbV9QA QioBQ0oQAE9KAgBRSgIAXkoCAGFKEABwaAAAAAAjFmhbV9QAQioBQ0oSAE9KAgBRSgIAXkoCAGFK EgBwaAAAAAAbFmhbV9QAQioBT0oCAFFKAgBeSgIAcGgAAAAABhZoW1fUAAAjFmhbV9QAQioBQ0oM AE9KAgBRSgIAXkoCAGFKDABwaAAAAAAGFmjQUMwAAAoWaExMmABeSgIAAAYWaExMmAAADwNqAAAA ABZoTEyYAFUIAQA9FzgBACE4AQAiOAEAJTgBACY4AQApOAEAKjgBAC44AQAvOAEAMjgBADM4AQA2 OAEANzgBADw4AQA9OAEAQDgBAEE4AQBSOAEAUzgBAFQ4AQBYOAEAWTgBAFw4AQBdOAEAYDgBAGE4 AQBkOAEAZTgBAGg4AQBpOAEA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA /QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAA AAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAA AAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0A AAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAA AAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAA AP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAAAAAAA AAAAAAAAAQAAAB1pOAEAbjgBAG84AQB2OAEAdzgBAHg4AQB5OAEA/QAAAAAAAAAAAAAAAP0AAAAA AAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAACpAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAABTBAAKJgALRgAAQyQBRcaAAAABACcdqkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZCoAHABvxgcBAQDc46mGZCYB AEY8AAABAAAABng4AQB5OAEA5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAyFWhbV9QAFmhbV9QAicoHAQEAKR2qRoMqAUIqAFBKBABhShgAbUgJEHBo AAAA/3NICRABOgAKMAEOMAIVUAEAJlABADGQaAEfsNAvILDgPSGwoAUisKAFI5CgBSSQoAUlsAAA F7DQAhiwAAAMkNACOgAKMAEOMAIVUAEAJlABADGQaAEfsNAvILDgPSGwoAUisKAFI5CgBSSQoAUl sAAAF7DQAhiwAAAMkNACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAADIABYkARckAUlmAQAAAAGWsPwhdgACaAE11gUAAQP6BTXWBQECA0QlI3YAAfoFI3YB AkQlOlYLAAKWbAAJ1gIAAhLWCgAAAP/Z2dkAAAAT1jAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAA AAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAU9gM+Kxj2AwAALNYDAAIBNdYFAAED+gU11gUBAgNEJS/W CwACBQAAAP8EAQAANNYGAAEFAAAAYfYDsPxw1goAAAD/2dnZAAAAyAAWJAEXJAFJZgEAAAABlrD8 IXYAAmgBNdYFAAED+gU11gUBAgNEJSN2AAH6BSN2AQJEJTpWCwAClmwACdYCAAIS1goAAAD/2dnZ AAAAE9YwAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAAAP8AAAAAFPYD PisY9gMAACzWAwACATXWBQABA/oFNdYFAQIDRCUv1gsAAgUAAAD/BAEAADTWBgABBQAAAGH2A7D8 cNYKAAAA/9nZ2QAAAMgAFiQBFyQBSWYBAAAAAZaw/CF2AAJoATXWBQABA/oFNdYFAQIDRCUjdgAB +gUjdgECRCU6VgsAApZsAAnWAgACEtYKAAAA/9nZ2QAAABPWMAAAAP8EAQAAAAAA/wAAAAAAAAD/ BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAABT2Az4rGPYDAAAs1gMAAgE11gUAAQP6BTXWBQEC A0QlL9YLAAIFAAAA/wQBAAA01gYAAQUAAABh9gOw/HDWCgAAAP/Z2dkAAADrAAAARAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ yep5+brOEYyCAKoAS6kLAgAAABcAAAAaAAAAYgBhAHMAYQB2AGEAcgBhAGoALgBwAGEAdABpAGwA QABuAG8AawBpAGEALgBjAG8AbQAAAODJ6nn5us4RjIIAqgBLqQtCAAAAbQBhAGkAbAB0AG8AOgBi AGEAcwBhAHYAYQByAGEAagAuAHAAYQB0AGkAbABAAG4AbwBrAGkAYQAuAGMAbwBtAAAA0wAAAEQA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA0Mnqefm6zhGMggCqAEupCwIAAAAXAAAAFAAAAGoAaQBuAGMAaABvAGUAQABzAGEAbQBz AHUAbgBnAC4AYwBvAG0AAADgyep5+brOEYyCAKoAS6kLNgAAAG0AYQBpAGwAdABvADoAagBpAG4A YwBoAG8AZQBAAHMAYQBtAHMAdQBuAGcALgBjAG8AbQAAANcAAABEAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDJ6nn5us4RjIIA qgBLqQsCAAAAFwAAABUAAABiAHMAYQByAGkAawBhAHkAYQBAAGgAdQBhAHcAZQBpAC4AYwBvAG0A AADgyep5+brOEYyCAKoAS6kLOAAAAG0AYQBpAGwAdABvADoAYgBzAGEAcgBpAGsAYQB5AGEAQABo AHUAYQB3AGUAaQAuAGMAbwBtAAAA3gAWJAEXJAFJZgEAAAABlrD8IXYAA2gBNdYFAAED+gU11gUB AgMeDzXWBQIDAyYWI3YAAfoFI3YBAh4PI3YCAyYWOlYLAAKWbAAJ1gIAAhLWCgAAAP/Z2dkAAAAT 1jAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAU9gM+Kxj2 AwAALNYDAAMBNdYFAAED+gU11gUBAgMeDzXWBQIDAyYWL9YLAAMFAAAA/wQBAAA01gYAAQUAAABh 9gOw/HDWCgAAAP/Z2dkAAADIABYkARckAUlmAQAAAAGWsPwhdgACaAE11gUAAQP6BTXWBQECA0Ql I3YAAfoFI3YBAkQlOlYLAAKWbAAJ1gIAAhLWCgAAAP/Z2dkAAAAT1jAAAAD/BAEAAAAAAP8AAAAA AAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAU9gM+Kxj2AwAALNYDAAIBNdYFAAED+gU1 1gUBAgNEJS/WCwACBQAAAP8EAQAANNYGAAEFAAAAYfYDsPxw1goAAAD/2dnZAAAAzAAWJAEXJAFJ ZgEAAAABlrD8IXYAAmgBNdYFAAED+gU11gUBAgNEJSN2AAH6BSN2AQJEJTpWCwAClmwAB5TdAwnW AgACEtYKAAAA/9nZ2QAAABPWMAAAAP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAAAP8AAAAAAAAA/wQB AAAAAAD/AAAAABT2Az4rGPYDAAAs1gMAAgE11gUAAQP6BTXWBQECA0QlL9YLAAIFAAAA/wQBAAA0 1gYAAQUAAABh9gOw/HDWCgAAAP/Z2dkAAADIABYkARckAUlmAQAAAAGWsPwhdgACaAE11gUAAQP6 BTXWBQECA0QlI3YAAfoFI3YBAkQlOlYLAAKWbAAJ1gIAAhLWCgAAAP/Z2dkAAAAT1jAAAAD/BAEA AAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAU9gM+Kxj2AwAALNYDAAIB NdYFAAED+gU11gUBAgNEJS/WCwACBQAAAP8EAQAANNYGAAEFAAAAYfYDsPxw1goAAAD/2dnZAAAA yAAWJAEXJAFJZgEAAAABlrD8IXYAAmgBNdYFAAED+gU11gUBAgNEJSN2AAH6BSN2AQJEJTpWCwAC lmwACdYCAAIS1goAAAD/2dnZAAAAE9YwAAAA/wQBAAAAAAD/AAAAAAAAAP8EAQAAAAAA/wAAAAAA AAD/BAEAAAAAAP8AAAAAFPYDPisY9gMAACzWAwACATXWBQABA/oFNdYFAQIDRCUv1gsAAgUAAAD/ BAEAADTWBgABBQAAAGH2A7D8cNYKAAAA/9nZ2QAAAMgAFiQBFyQBSWYBAAAAAZaw/CF2AAJoATXW BQABA/oFNdYFAQIDRCUjdgAB+gUjdgECRCU6VgsAApZsAAnWAgACEtYKAAAA/9nZ2QAAABPWMAAA AP8EAQAAAAAA/wAAAAAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/AAAAABT2Az4rGPYDAAAs 1gMAAgE11gUAAQP6BTXWBQECA0QlL9YLAAIFAAAA/wQBAAA01gYAAQUAAABh9gOw/HDWCgAAAP/Z 2dkAAADIABYkARckAUlmAQAAAAGWsPwhdgACaAE11gUAAQP6BTXWBQECA0QlI3YAAfoFI3YBAkQl OlYLAAKWbAAJ1gIAAhLWCgAAAP/Z2dkAAAAT1jAAAAD/BAEAAAAAAP8AAAAAAAAA/wQBAAAAAAD/ AAAAAAAAAP8EAQAAAAAA/wAAAAAU9gM+Kxj2AwAALNYDAAIBNdYFAAED+gU11gUBAgNEJS/WCwAC BQAAAP8EAQAANNYGAAEFAAAAYfYDsPxw1goAAAD/2dnZAAAAfQAAAEQAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI0Mnqefm6zhGM ggCqAEupCwIAAAAIAAAADgAAAF8AUgBlAGYAMQA0ADEAOAA2ADYAMwA0ADMAAACQAAAARABkAAAA AAAAAAIAAAAAAAAAAAAAAAAAgBa0EugD6AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AA8ABPBEAAAAsgQK8AgAAAAIBAAAAAoAADMAC/ASAAAAfwBAAUABAAEQAP//AQHw/wAAEwAi8QYA AAA/BQEAAQAAABDwBAAAAAAAAIAEDwAARABkAAAAAAAAAAgAAAAAAAAAAAAAAAAAFhxWFyEDIQMA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ABPBiAAAAsgQK8AgAAAABBAAAAAoAAEMA C/AwAAAABEEBAAAABcEYAAAABgECAAAA/wEAAAgARgBpAGcAdQByAGUAIAA1AC0ANQA2AAAAEwAi 8QYAAAC/AQAAYAAAABDwBAAAAAEAAIAyAAfwTg4AAAMEEtzUbRQKmR3dH9Bgkm0+v/8AKg4AAAIA AADkCwAAAAAUAGAhG/AiDgAAEtzUbRQKmR3dH9Bgkm0+vwZXAAAAAAAAAAAAALQLAAC5CQAAkKtF AFThOQDwDQAAAP542u1cfZAUxRXvmenpntk7gZyIJyoswglEIODJcSCkOC7CEQXPAyFFQdUZEIEA UmBxUl4qiCQElRxEBUIQQykRC+X8CAY05OKZpIxlJMYv/oiKH6mQ8krPlGUUVPJ787E7O7dzO7s7 C3eapd71zHTP69evf6/79eseFGYypt12CWNnsT69GH7092LRk10Unz1tcrVCj5jC5hygVKU/ccYa +4G+Tc8ZuxM0CgQ+7MEixm42WeL3U2RcPBSvXDFtMpWmd17ESzHk9QQtdcoNOht/zmPsCD1XWMpv 6jc1du1FnM1iU9kM0NV49h22kl3HGthitpzd4JQrAxWDDMbWutc6ruuQrlBsWXeeOnXKy3tzsq54 FXguBtel7Mz/zsrpreZEaxbZ6sSviX367xLrqqathJV+sLmxXWxphBpOvY/0L8+2NlAZ+9faIP/Y 2tD+o8cUyn8OT4a93azIJy+rp9TpenYVrktBrxy4rP5zlC118hasJtUn+0HxXPdAPwzxPKf+7+WR 3HTufwP8HMLNxbi+wClLP+Ep6+VfkuaaMDoYVOriFT+328s8ZWaBRoLOlYw9DQazUO8EzcIMO1+O 1epMohblfEk0VvPia0iaNuqe56qj/2Kn7j7ONcnk4pHKPFJQPJawa/QtjaWyiS1D+t4tzcqvGp5U cuE08d0nEu+VJp42sZv/WZJ45scW4cnF1ovP2tiie8qfeLyEvX//wPqH/1XC9vR8XHnvuMI0whvu KT9+nPhublyh2/xI/jdbk/zexbW3PTXHbTnOKxlYT3r+HHz8eFQdOYsT2kn24UzqE9BGYOFKFHwH b/5atfP0b22YyNZumEh596g2Fq/y6eeU8/serqswSk1nw9kUNpuNwT3ReAfPVaAZPqy68sHm10aF ey0A95oH9xXCxn1/mcT9ODFWI6wT5scJouxwr4XAPZU5fJpxf3zsYznh3msvUeN+wsbmnHHvticM 7rUMuF8AugFYGAYAtSFd7cM95S3CM94J7onPVFbLVrMKRlP5cNAARwYvPv11k73cAv6NyDyK9M++ uhvx7KBqvxtUd61lV3VWnSNPg23xANviHttaqNm29UOetK0l2lhtDSdqUZZoRNnZFg9hW7zgPk5H 24o3/TYn2/LaZNS2temT3OcUtz1hbItnsC3C934IMREAKkfhZh++KW9HCHxPwqxRjbQ6C3zHQuB7 NvneVLdp2z357+sceerMRnV3UaMaBqP51L2K23VPFMm61/BGdZwIV7e3TDqbUM7AfPPovQdysgmv LXWl+cZtTxibUELYxCgAZDc6+sdI3/fZBOW9EcIm6li5NdaW+erw2kQmbOhnABu5+uBeTHUlbGTj g+shsFGq29hYqnfEBuWFw0ZF3tgQZwAbuc6lXdVPzWYuFRmwUQ/qh0IDMF/sRfoDnoqN/ng2j9v+ bmd+qr0+s31Uv8+oBMyp0uGjppnXZMC8VglBtoKaMLfu0Ox3x2nbtU3m9rR+nwyYU3Op+w7UOcdX 9yZz7mmpm9p9LWi8ltrucdrsgtddK2ydz0Taizt+jNiu1YkePJe6RRZ1w6DYJ6hzD3yoL52617IT fHfRCV7odr8JWg4m7yDdJux3j7EV+jF2jyh03R9wu+7/IP2FU3c7X6G3820Fr/tCil+gzsdR90Cn 7v7KAPEoHxCq7nTrO+kbO8rSvEs8aa03zNIz/F3UXQZZKoW9JihTKsUxBhmUmKDroNi0Vy7v2i4K ufZxW652npRrH4+JduhmH68UdJ2tXJnmTHkG5szKKx79SvnabnvCzJkyRGznLoDo9+jUUghjiNQ5 k/JO6NHEdoJ8K29MPCgO/kA3WZ95sRY1Zl699onTsj7LFAd/GDQQhb4BUDwNavD5WZS3gNv7NUGY ob6qRb/dyBai75ay69kqFofnFUc/Lgcq46yaTaCxGlRO+y2g3g7R/QhQX9AEJy33UF8rHpI5DmJ0 Mp8YIeJ87jbm0aNHU941PXG+MuihBTb1PKjFsNc3g/lh4zlB9IwYzIkOG+nswQiI85m+Mddtj9mJ T2KGaI8RELc0nPb8gWwS7RmMQWUyBJqFjKGUx1vkbL5XzuVb5HzeKJfxRXINnyU38ClyK79c7uWX yqf4cPkCv0S+hfQj3Kv65bJEnyLj+iw5TF8kR+uNcry+RVbpe+UkvQXpa7hvw3PVGKb3MeL6YKNE rzBUfZLxEb/SeItfY7zA64ynkO7F/VY+ydjAK4w1fLCxjPcx5nPVmMvbINdrkuRLp18zQL+GT7/e vYuusl+x6Ehzt4gRzOxpnxXY1c97ViBpd3ROgH607x92LHPbHsXeBsUT7gOmtwHTnyJ9W6aOZZT3 sgwXf3XXi2HHHZHnuOO3U9Njp98HoGsh90OoZLhjpwthV4v0/XK5vks26E1yvb5W3q3fJB/UF8vD er18RZ8j22CPupgp+4lZskLMkdNFvZwvFsvV4ib5E7FW3iWa5L1il7xf7Jd7RAvSI7g/hucfIv8L lIsZ88U5xnTRz6gQg4x+Yoihi6FGmz7EeEUfZBzW+xkP6ucYd+sxY73+BeT4EPIcg1xHJMmXzzjo 3QcJ2vvoLrE8r31311geD+F7tqJDbwROpwCnh3y2R3n7ZOH2FV8D/xbwL0fdppFa9+vIOymj3Vc0 O9n7MAPWr62OXn4O+f7kyPMc7O5OI9ycFrQ/0lX2Qb7O8cww+yC3o8//DnoTdIEPo5TXw4h+H2SI JxYftCeys5v4O4Vcw+ezh5yND5NpT4Ti3sNQ6EW8dRLpBDMVJyPwbIgZPu7t7iPXhIh7F3rNMdI5 A3ovsP5LxV5z6NZZrDpjm0K0W65gRHVGFD6+CMD8mdjryfVMUlf1HbI5kyRCjI0vMXtsvEzpODZS XpixcRowP6YAfvtsJ8b6XTA7ABkHQ2GfOr7MdPUf8qB6CPSxHKj9LZTP25ntpJMlXbxX4uVnIMM8 pB87ssyDDBJ0lfqMpOtM8V4jRBw6W7l6a7aPswRpmyNXb+2QXAIq09okXWcrV1Bsv6vEpHNdFxTy TNTpWhfIELZN531q8Nbzqu37em2b8taH8ntGdfB78o1D7+wmcehC+sf5+D1RxqHXg75EIdOk82D2 dyVenFDefNP2AYJwUt8hDh23YsfVzjqykvYQHTz0ce4vCHnOrtBxHsI2fVdzNV6qBxPDOUc6mnFt rkI0Qx3NiLgWRVzl//HPwo2fUcc0t4JuAy4+Q/pX3xkpymtRo/WNslkHuL7Rf3GzEAxfBT3knB8/ qfxMXaguAe1RX1LXqWF8+s5sJ50s6XwQQsVKMIiB9jiyxCDDAWWP+pmyUqXrTD6IGcI3ylauVry8 BHQuOn2XI1cr9HOutkR9Wd2l0nW2cqXTaVeKmX6d1z1hzovT/upnoAZQtdZx73W0Fo1v5LdtNYu4 Za2zd0sy93J8pzrMqHWshxLGpvOp+w5h5zUhvdKpe5MoAk0teN1NzthL58x2OO9uYdvZdLGdna6x jGz3VjrnBWp2MLUNV3WQYxty6PpMjGU1wpZrk0jKVSNuxf12pM3WdRRj2Vchvt1V13lRxrdp/2cv hJhMPgbAsJmljmWUt45Ff/aoh3OOhH69nGuqQ1MMy38usgyerorVg+ZTRdSoE6qe8MWp7HAnbvC5 6naT/VSxRo6T6s5TPnzFq1Yuvq4zZNnvq877vZzTfL+zZFFU9aIZa1bddP2yTO9rVtoOPrbUSY/M 5U+pCjntVHVa4a4y7FKcvsdmgzQ97XfObvvdmtyW2/fc0pyiupoaoZQ6bXokZ50QR1N1n5D01G+X xu5RN0pqX9WM6cOnzB4Db3U86qI4ttu6/LTJA7Soh9KiSGgx3VezqVrUfVoUgVo8nKMW9TRaPMvS 4iL1BkFPptaurjgbFjQA1uK2yy0Zs0oeVBsFMaiqGw7vwVsmWFcilK5kQlfpvoJM1ZXw6UoG6ipX KxRpdGVrYIe6X6PHk2ZUs+pADcRSuMkED2vFjffdL+dS2yUT7QrLx/0KLoiP93n+CJKBWnlDHRWz PLzykQnsKAmtRCuF0YkUpbolRUXhpTDTSFFsSTGP9xeaPSbBlpJ2onRAiZrCMdahd91vQVJ7N9YB JZn4uN915MvH/UYjXz7u9xaZ+IgMfNxvJ/KVx/0OIl8+7jcN+fJxv08I4uMfRztyo7eKrfGUd/jS wMs1OYbGfGNoeP7+LwbC8Y/OEmOB89oJ/S61s3nNPyq4vkxSpgci9Fj6WzIt4ANV8l1qV964cPHS 61fFq+LXLV8Qr56A/HJ2PnzR3khHsL5sAqjc+teXTQqcaVKxVBQ419pnlO1SxYm5Nt1J5FSNFPn6 sdjTj+nttCjUfF9sRbAHaUO7xenh8DrxenOF8dnsue5leR+3/RCaY8J5Ytn2THc4L5ptz4iIekYE jjr7ZKsezps+KV/XM3vTsYA+dGcL9zRgZ5rw+4aF9AV7GLfLcL5gO3y5aPx1I9AbG2KO0F1vjDz2 mkBvLDdbcUfSdOeRssWmWUDf1O2bl6wZY9qMMTmMGsUW4niH8yudtTPIjyjq4Ef4T6Kk9yOKQvop Hfn7T5SE4+/3vwrjr9i9s95YrVqWM2pk1p7Kzgg9lXMsaeabX6pm0lOJTzKqMZZVsgtZH/yrRL3V Ec87ri2l27/uejNwi7o1Alvy73dGY0v+ncuobcm/A5mtLRVyFrZ7Z7Q2sBNbyuQ9J1aqzo5VUK+E 5ePuPuXLx91JigYl/j2hqFHi39vJFiWF9FVsX20d26tlWiHa/1Pi/wApgP0WgwUAAEQAZAAAAAAA AAAKAAAAAAAAAAAAAAAAAMgUQAvoA+gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP AATwYgAAALIECvAIAAAABgQAAAAKAABjAAvwJAAAAH8AgACAAARBBgAAAD8BAAAGAL8BDAAfAP8B AAAIAD8DEAAQADMAIvESAAAAvwEAAGAAvwMAAIABPwQAAAcAAAAQ8AQAAAACAACAMgAH8M0EAAAD BJkuo3TKeHYt990hM7Cb5Y3/AKkEAAABAAAA6BoAAAAAFABgIRvwoQQAAJkuo3TKeHYt990hM7Cb 5Y3QDQAAAAAAAAAAAACnCAAAsAQAAECMMwDA5xsAbwQAAAD+eNq1V01oG0cUfvOzP1rblZ22rjFy 2QgrxcRWbfeSgAlxjX+Suk6JDAm6qbEgIpYUpE2Dj4lJzj0UUoIiSAsuJQ3EwSWE1JccAQAAAAIA AAADAAAABAAAAAUAAAAGAAAABwAAAAgAAAAJAAAACgAAAAsAAAAMAAAADQAAAA4AAAAPAAAAEAAA ABEAAAASAAAAEwAAABQAAAAVAAAAFgAAABcAAAAYAAAAGQAAABoAAAAbAAAAHAAAAB0AAAAeAAAA HwAAACAAAAAhAAAAIgAAACMAAAAkAAAAJQAAACYAAAAnAAAAKAAAACkAAAAqAAAAKwAAACwAAAAt AAAALgAAAC8AAAAwAAAAMQAAADIAAAAzAAAANAAAADUAAAA2AAAANwAAADgAAAA5AAAAOgAAADsA AAA8AAAAPQAAAD4AAAA/AAAAQAAAAEEAAABCAAAAQwAAAEQAAABFAAAARgAAAEcAAABIAAAASQAA AEoAAABLAAAATAAAAE0AAABOAAAATwAAAFAAAABRAAAAUgAAAFMAAABUAAAAVQAAAFYAAABXAAAA WAAAAFkAAABaAAAAWwAAAFwAAABdAAAAXgAAAF8AAABgAAAAYQAAAGIAAABjAAAAZAAAAGUAAABm AAAAZwAAAGgAAABpAAAAagAAAGsAAABsAAAAbQAAAG4AAABvAAAAcAAAAHEAAAByAAAAcwAAAHQA AAB1AAAAdgAAAHcAAAB4AAAAeQAAAHoAAAB7AAAAfAAAAH0AAAB+AAAAfwAAAIAAAACBAAAAggAA AIMAAACEAAAAhQAAAIYAAACHAAAAiAAAAIkAAACKAAAAiwAAAIwAAACNAAAAjgAAAI8AAACQAAAA kQAAAJIAAACTAAAAlAAAAJUAAACWAAAAlwAAAJgAAACZAAAAmgAAAJsAAACcAAAAnQAAAJ4AAACf AAAAoAAAAKEAAAD+////owAAAKQAAAClAAAApgAAAKcAAACoAAAAqQAAAKoAAACrAAAArAAAAK0A AACuAAAArwAAAMABAAD9/////f///7MAAADFAAAAtQAAALYAAAC3AAAAuAAAALkAAAC6AAAAuwAA ALwAAAC9AAAAvgAAAL8AAADAAAAAwQAAAMIAAAD+/////v///x0BAADhAAAAxwAAAMgAAADJAAAA ygAAAMsAAADMAAAAzQAAAM4AAAD+////0AAAANEAAADSAAAA0wAAANQAAADVAAAA1gAAANcAAADY AAAA/v///9oAAADbAAAA3AAAAN0AAADeAAAA3wAAAOAAAAD+////+wAAAOMAAADkAAAA5QAAAOYA AADnAAAA6AAAAOkAAADqAAAA6wAAAOwAAADtAAAA7gAAAO8AAADwAAAA8QAAAP7////zAAAA9AAA APUAAAD2AAAA9wAAAPgAAAD5AAAA+gAAAP7///8cAQAA/f////4AAAD/AAAAAAEAAFIAbwBvAHQA IABFAG4AdAByAHkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW AAUB//////////8qAAAABgkCAAAAAADAAAAAAAAARgAAAAAAAAAAAAAAAKA5f6VW58YBxAAAAMAJ AAAAAAAARABhAHQAYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAoAAgH///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAACiAAAAo+cAAAAAAABXAG8AcgBkAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACASkAAAD//////////wAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4QgEAAAAAAE8AYgBqAGUAYwB0AFAAbwBvAGwAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWAAEBLAAAAP////8EAAAA AAAAAAAAAAAAAAAAAAAAAAAAAADAanWkVufGAaA5f6VW58YBAAAAAAAAAAAAAAAAXwAxADIAMgAw ADkANQA5ADkAMwAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgA AQEaAAAACwAAAAYAAAAHCQIAAAAAAMAAAAAAAABGAAAAAMBqdaRW58YBQLqHpFbnxgEAAAAAAAAA AAAAAAAxAFQAYQBiAGwAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAADgACAf///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAALQAAADYHAAAAAAAAAEAQwBvAG0AcABPAGIAagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAIBBQAAAAgAAAD/////AAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG8AAAAAAAAAAwBPAGIAagBJAG4AZgBvAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIAAgH///////////////8A AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAABgAAAAAAAACGAhAAEgABAJwA DwAEAAAAAwAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAA8AABA8f8CADwADAAAAAAAAAAAAAYATgBvAHIAbQBhAGwAAAACAAAAFABDShgA YUoYAG1ICQRzSAkEdEgJBAAAAAAAAAAAAAAAAAAAAAAAAEQAQQDy/6EARAAMAQAAAAAAAAAAFgBE AGUAZgBhAHUAbAB0ACAAUABhAHIAYQBnAHIAYQBwAGgAIABGAG8AbgB0AAAAAABSAGkA8/+zAFIA DAEAAAAAAAAAAAwAVABhAGIAbABlACAATgBvAHIAbQBhAGwAAAAcABf2AwAANNYGAAEKA2wANNYG AAEFAwAAYfYDAAACAAsAAAAoAGsA9P/BACgAAAEAAAAAAAAAAAcATgBvACAATABpAHMAdAAAAAIA AAAAAAAARACZAAEA8gBEAAwBAAAjP+MAAAAMAEIAYQBsAGwAbwBvAG4AIABUAGUAeAB0AAAAAgAP ABAAQ0oSAE9KBABRSgQAYUoSAAAAAAAZAAAAMgAAAFkAAACGAAAAjQAAAJEAAACVAAAAmQAAAAEA AAAAAAAAAAD/////MQQAAAAAAAABAAAAAAAAAAAA/////zAEAAAAAAAAAQAAAAAAAAAAAP////8t BAAAAAAAAAEAAAAAAAAAAAD/////KgQAAAAAAAABAAAAAAAAAAAA/////yUEAAAAAAAAAQAAAAAA AAAAAP////8jBAAAAAAAAAEAAAAAAAAAAAD/////IQQAAAAAAAD/////AAAAAAAAAAAAAAAAAAAA AAAAAAAAABkAAAAyAAAAWQAAAIYAAACNAAAAkQAAAJUAAACYAAAAAAAAAAAQAQAAAAAQAgAAAAAQ AwAAAAAQBAAAAAAQBQAAAAAQBgAAAAAQ//8AAAAAAAAAAJkAAAAKAAAQAAAAAP////8BAAAABCAA AP//AQBAVsMAAAAAAAAAAACZAAAAAAAAAAAAAAAAAAAAAAAbAAAANAAAAFsAAACPAAAAkwAAAJoA AAABAQAAyBQAAI2sAgAAAgAAvQYAAF7IAQAAAgAAzQoAAF7IAQAAAgAAbwwAAF7IAQAAAgAAWgEA AJnlAgAAAQAAhgEAAJnlAgAAAAAAAgAAABoAAAAbAAAAMwAAADQAAABaAAAAWwAAAIcAAACIAAAA jgAAAI8AAACSAAAAkwAAAJYAAACXAAAAmgAAAJgAAAAAMAAAAAAAAAEAAAAAAAAAAAAAAAAAAACY AAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAaIsAMAAAAAAAAAAAAgAAAAsAAAAAAAAAAAC9A5gA AAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAABoiwAwAAAAAAAAAAACAAAACQAAAAAAAAAAALsDmAAA AAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAGiLADAAAAAAAAAAAAIAAAAHAAAAAAAAAAAAuwOYAAAA ADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAaIsAMAAAAAAAAAAAAgAAAAUAAAAAAAAAAAC7A5gAAAAA MAAAAAAAAACAAAAAgAAAAAAAAAAAAABoiwAwAAAAAAAAAAACAAAAAwAAAAAAAAAAALsDmAAAAAAw AAAAAAAAAIAAAACAAAAAAAAAAAAAAGiLADAAAAAAAAAAAAIAAAABAAAAAAAAAAAAuwOYAAAAADAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAaIsAMAAAAAAAAAAAAQAAAAAAAAAAAAAAAAC1A2iLADAAAAAA AAAAAAEAAAAAAAAAAAAAAAAAtQMABgAAmQgAAAUAAAAABgAAmQgAAAYAAAAABgAAmAgAAAcAAAAP AADwOAAAAAAABvAYAAAAAggAAAIAAAAxAAAAAQAAAAEAAAAyAAAAQAAe8RAAAAD//wAAAAD/AICA gAD3AAAQAA8AAvBUDwAAEAAI8AgAAAAZAAAAMQQAAA8AA/DyDgAADwAE8CgAAAABAAnwEAAAAAAA //9IkAsAAAAAAAAAAAACAArwCAAAAAAEAAAFAAAADwAD8LoOAAAPAATwjAAAAAEACfAQAAAAAAAA AAAAAADNFAAAQAsAAAIACvAIAAAAGgQAAAECAABDAAvwGAAAAH8AgADAAf8BAAABAIgDAAAAAL8D AAAgAGMAIvEkAAAAjwMAAAAAkAMDAAAAkQMAAAAAkgMDAAAAvwMAAgACAAUAAAAAAAAQ8AQAAAAA AAAAAAAR8AQAAAABAAAADwAE8GAAAACyBArwCAAAABsEAAACCgAAYwAL8CQAAAB/AAQABABYAQAA AAB/ATkAOQC/AQEAEQD/AQAACAA/AwAAEAAAAA/wEAAAAAAAAAAAAAAAzRQAAEALAAAAABHwBAAA AAEAAAAPAATwSAAAAEIBCvAIAAAAHAQAAAIKAAAjAAvwDAAAAMsB4g4AAP8BCAAIAAAAD/AQAAAA ZQoAALUBAABmCgAAHgsAAAAAEfAEAAAAAQAAAA8ABPAWAQAAAgAK8AgAAAAdBAAAAgoAALMAC/Da AAAAQgEvDQAAQwHUAQAARAEEAAAARcFEAAAARsFOAAAAfwEBAAEAgAEAAAAAgQHY2NgAvwEQABAA /wEQABgAiAMAAAAAEQARAPD/9wwAADsAAAAfAEEACQCDAAAAyAAAAAwBCQBRAR8AlgE7ANQB9wzU ARMNlgElDVEBLw0MAS8NyAAlDYMAEw1BAPcMAAAkACgAAgAAQACsAQAArAEAAKwBAACsAQAArAEA AKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAA AOUDAAB4CAAAFBEAAEwKAAAAABHwBAAAAAEAAAAPAATwIAEAAAIACvAIAAAAHgQAAAIKAADTAAvw 5AAAAEIBLw0AAEMB1AEAAEQBBAAAAEXBRAAAAEbBTAAAAH8BAQABAL8BAAAQAMABAAAAAMQBAAAA AMsB4g4AAM4BAAAAAP8BGAAYAIgDAAAAABEAEQDw//cMAAA7AAAAHwBBAAkAgwAAAMgAAAAMAQkA UQEfAJYBOwDUAfcM1AETDZYBJQ1RAS8NDAEvDcgAJQ2DABMNQQD3DAAAIwAkAAIAAEAArAEAAKwB AACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwAgAAAD/AQAAAA5QMAAHgIAAAUEQAATAoAAAAAEfAEAAAAAQAAAA8ABPDYAAAAAgAK8AgAAAAf BAAAAgoAANMAC/CcAAAAQgE4AAAAQwHUAQAARAEEAAAARcEgAAAARsEoAAAAfwEBAAEAvwEAABAA wAEAAAAAxAEAAAAAywHiDgAAzgEAAAAA/wEYABgAiAMAAAAACAAIAPD/AAAAABwAQQAuAIMAOADI ADgADAEuAFEBHACWAQAA1AERABQAAgAAQACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArACA AAAP8BAAAAAgBAAAeAgAAFgEAABMCgAAAAAR8AQAAAABAAAADwAE8E4AAAASAArwCAAAACAEAAAC CgAAMwAL8BIAAAC/AQAAEADLAeIOAAD/AQgACAAAAA/wEAAAACIAAAAiAAAAgAQAALUBAAAAABHw BAAAAAEAAAAPAATwfgAAABIACvAIAAAAIQQAAAIKAACTAAvwNgAAAIAAAAAHAIEAAAAAAIIAAAAA AIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAkQEAAFEAAAAYAwAA fAEAAAAAEfAEAAAAAQAAAAAADfAEAAAAAAAHAA8ABPBOAAAAEgAK8AgAAAAiBAAAAgoAADMAC/AS AAAAvwEAABAAywHiDgAA/wEIAAgAAAAP8BAAAAA5CAAAIgAAAJQMAAC1AQAAAAAR8AQAAAABAAAA DwAE8H4AAAASAArwCAAAACMEAAACCgAAkwAL8DYAAACAAAAABgCBAAAAAACCAAAAAACDAAAAAACE AAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAALoJAABRAAAAFQsAAKcCAAAAABHw BAAAAAEAAAAAAA3wBAAAAAAABgAPAATwTgAAABIACvAIAAAAJAQAAAIKAAAzAAvwEgAAAL8BAAAQ AMsB4g4AAP8BCAAIAAAAD/AQAAAARBAAACIAAACiFAAAtQEAAAAAEfAEAAAAAQAAAA8ABPB4AAAA EgAK8AgAAAAlBAAAAgoAAIMAC/AwAAAAgAAAAAUAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAvwAS ABsAvwEAABAA/wEAAAgAAAAP8BAAAAB6EQAAbgAAANsTAACCAQAAAAAR8AQAAAABAAAAAAAN8AQA AAAAAAUADwAE8EgAAABCAQrwCAAAACYEAAACCgAAIwAL8AwAAADLAeIOAAD/AQgACAAAAA/wEAAA AFECAAC1AQAAUgIAAB4LAAAAABHwBAAAAAEAAAAPAATwSAAAAEIBCvAIAAAAJwQAAAIKAAAjAAvw DAAAAMsB4g4AAP8BCAAIAAAAD/AQAAAAfxIAALUBAACAEgAAHgsAAAAAEfAEAAAAAQAAAA8ABPD+ AAAAAgAK8AgAAAAoBAAAAgoAAPMAC/DCAAAAQgEuEAAAQwHhAQAARAEEAAAARcEsAAAARsE2AAAA fwEBAAEAgAEAAAAAgQH///8AvwEQABAAwAH///8AxAEAAAAAywHiDgAAzgEAAAAA/wEYABgAiAMA AAAACwALAPD/AADwADoD4QE6A58B8QyfAfEM4QEuEPAA8QwAAPEMRAA6A0QAOgMAAAAA8AAYABwA AgAAQACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAA AFECAABVAgAAfxIAADYEAAAAABHwBAAAAAEAAAAPAATw8AAAAAIACvAIAAAAKQQAAAIKAADTAAvw tAAAAEIBLhAAAEMB4QEAAEQBBAAAAEXBLAAAAEbBNAAAAH8BAQABAL8BAAAQAMABAAAAAMQBAAAA AMsB4g4AAM4BAAAAAP8BGAAYAIgDAAAAAAsACwDw/wAA8AA6A+EBOgOfAfEMnwHxDOEBLhDwAPEM AADxDEQAOgNEADoDAAAAAPAAFwAYAAIAAEAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwB AACsAQAArAEAAKwAgAAAD/AQAAAAUQIAAFUCAAB/EgAANgQAAAAAEfAEAAAAAQAAAA8ABPB+AAAA EgAK8AgAAAAqBAAAAgoAAJMAC/A2AAAAgAAAAAQAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQAC AAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAABYBAAA5AIAAMgQAABUBAAAAAAR8AQAAAABAAAA AAAN8AQAAAAAAAQADwAE8P4AAAACAArwCAAAACsEAAACCgAA8wAL8MIAAABCAS4QAABDAeEBAABE AQQAAABFwSwAAABGwTYAAAB/AQEAAQCAAQAAAACBAf///wC/ARAAEADAAf///wDEAQAAAADLAeIO AADOAQAAAAD/ARgAGACIAwAAAAALAAsA8P8AAPEAOgPhAToDoAHxDKAB8QzhAS4Q8QDxDAAA8QxC ADoDQgA6AwAAAADxABgAHAACAABAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwBAACsAWAAgAAAD/AQAAAAUQIAANgEAAB/EgAAuQYAAAAAEfAEAAAAAQAAAA8ABPDwAAAAAgAK 8AgAAAAsBAAAAgoAANMAC/C0AAAAQgEuEAAAQwHhAQAARAEEAAAARcEsAAAARsE0AAAAfwEBAAEA vwEAABAAwAEAAAAAxAEAAAAAywHiDgAAzgEAAAAA/wEYABgAiAMAAAAACwALAPD/AADxADoD4QE6 A6AB8QygAfEM4QEuEPEA8QwAAPEMQgA6A0IAOgMAAAAA8QAXABgAAgAAQACsAQAArAEAAKwBAACs AQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArACAAAAP8BAAAABRAgAA2AQAAH8SAAC5BgAAAAAR 8AQAAAABAAAADwAE8H4AAAASAArwCAAAAC0EAAACCgAAkwAL8DYAAACAAAAAAwCBAAAAAACCAAAA AACDAAAAAACEAAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAACEFAABnBQAA7w8A ANcGAAAAABHwBAAAAAEAAAAAAA3wBAAAAAAAAwAPAATwSAAAAEIBCvAIAAAALgQAAEIKAAAjAAvw DAAAAMsB4g4AAP8BCAAIAAAAD/AQAAAAFQMAAGIJAAB/EgAAYwkAAAAAEfAEAAAAAQAAAA8ABPCu AAAAAgAK8AgAAAAvBAAAAgoAALMAC/ByAAAAQgHWAAAAQwGQAAAARAEEAAAARcEQAAAARsEaAAAA fwEBAAEAgAEAAAAAgQEAAAAAvwEQABAA/wEQABgAiAMAAAAABAAEAPD/1gCQAAAASADWAAAA1gCQ AAoADAACAABAAKwBAACsAQAArAEAAKwBYACAAAAP8BAAAABRAgAAGgkAACcDAACqCQAAAAAR8AQA AAABAAAADwAE8H4AAAASAArwCAAAADAEAAACCgAAkwAL8DYAAACAAAAAAgCBAAAAAACCAAAAAACD AAAAAACEAAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAADQHAACpCAAA8g0AABkK AAAAABHwBAAAAAEAAAAAAA3wBAAAAAAAAgAPAATwfgAAABIACvAIAAAAMQQAAAIKAACTAAvwNgAA AIAAAAABAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAA D/AQAAAA7QYAAC8HAAAGCAAAzQgAAAAAEfAEAAAAAQAAAAAADfAEAAAAAAABAA8ABPBCAAAAEgAK 8AgAAAABBAAAAA4AAFMAC/AeAAAAvwEAABAAywEAAAAA/wEAAAgABAMJAAAAPwMBAAEAAAAR8AQA AAABAAAAAAAAAJkAAAAaBAAA/v////b////LFAAANgsAAHQAAAAAAAAAAAACAAAAmgAAAAcABwAA AAAAAgAAAJoAAAAHAAcAAAAAAAIAAAAZAAAAGwAAADIAAAA0AAAAWQAAAFsAAACGAAAAiAAAAI0A AACPAAAAkQAAAJMAAACVAAAAmgAAAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAAAAAAC AAAAmgAAAAcABwABAAAABAAAAAgAAADlAAAAAAAAAAAAAACfTmwA/0ADgAEAAAAAAAAAAADwEqUH AQABAAAAAAAAAAAAAAAAAAAAAAACEAAAAAAAAACZAAAAoAAAEABAAAD//wIAAAAHAFUAbgBrAG4A bwB3AG4ABABzAHkAYQBtAP//AgAIAAAAAAAAAAAAAAAAAAAAAAAAAAEA//8CAAAAAAAAAP//AAAC AP//AAAAAP//AAACAP//AAAAAAUAAABHFpABAAACAgYDBQQFAgMEh3oAIAAAAIAIAAAAAAAAAP8B AAAAAAAAVABpAG0AZQBzACAATgBlAHcAIABSAG8AbQBhAG4AAAA1FpABAgAFBQECAQcGAgUHAAAA AAAAABAAAAAAAAAAAAAAAIAAAAAAUwB5AG0AYgBvAGwAAAAzJpABAAACCwYEAgICAgIEh3oAIAAA AIAIAAAAAAAAAP8BAAAAAAAAQQByAGkAYQBsAAAAOwaQAYYDAgEGAAMBAQEBAQMAAAAAAA4IEAAA AAAAAAABAAQAAAAAAItbU08AAFMAaQBtAFMAdQBuAAAAQwaQAQAAUiAAA/AAv//GYAAAAAMAAAAA AAAAAAAAAAABAAAAAAAAAEwAdQBjAGkAZABhACAARwByAGEAbgBkAGUAAAAgAAQA8QiIAADw0AIA AGgBAAAAAK3jqYau46mGAAAAAAIAAQAAAAAAAAABAAAAAQABAAAABAADEAEAAAAAAAAAAQAAAAEA AQAAAAEAAAAAAAAAIQMA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApQbAB7QAtACAAH40 AAARABkAZAAAABkAAAABAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAfAwAAAAAJM4NxAPAQAAgAAwAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAhQAAAAACDg/w8BAAAAAAAAAAAA////f////3////9/////f////38A AAAA////f6NwCQAAAAAAMgAAAAAAAAAAAAAAAAAAAAAA//8SAAAAAAAAAAAAAAAAAAAADwBCAGEA cwBhAHYAYQByAGEAagAgAFAAYQB0AGkAbAAPAEIAZQBoAGMAZQB0ACAAUwBhAHIAaQBrAGEAeQBh AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAA/v////7///8EAAAA/v////7///8H AAAA/v////7///8KAAAA/v////7///8NAAAA/v////7///8QAAAAEQAAABIAAAATAAAAFAAAABUA AAAWAAAA/v///xgAAAAZAAAAGgAAABsAAAAcAAAAHQAAAB4AAAAfAAAAIAAAACEAAAAiAAAAIwAA ACQAAAD+////JgAAAP7///////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////wEA/v8DCgAA/////wcJAgAAAAAAwAAAAAAA AEYeAAAATWljcm9zb2Z0IE9mZmljZSBXb3JkIFBpY3R1cmUACgAAAE1TV29yZERvYwAPAAAAV29y ZC5QaWN0dXJlLjgA9DmycQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAAQAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA/v8D CgAA/////wcJAgAAAAAAwAAAAAAAAEYeAAAATWljcm9zb2Z0IE9mZmljZSBXb3JkIFBpY3R1cmUA CgAAAE1TV29yZERvYwAPAAAAV29yZC5QaWN0dXJlLjgA9DmycQAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAADAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAEA/v8CAAEA/////wcJAgAAAAAAwAAAAAAAAEYXAAAATWljcm9zb2Z0 IFdvcmQgUGljdHVyZQD+////TkI2Vw8AAABXb3JkLlBpY3R1cmUuOAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwBvAHIAZABEAG8AYwB1AG0AZQBuAHQAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoAAgAHAAAACQAAAP////8AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGAAAAMBAAAAAAAAAFAFMAdQBtAG0AYQBy AHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAACAf// //8KAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM8AAABMEwAAAAAA AAUARABvAGMAdQBtAGUAbgB0AFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAA AAAAAAAAAAA4AAIA////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAA2QAAAAAQAAAAAAAAXwAxADIAMgAwADkANgAwADAAMQA0AAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAABgAAQH//////////w0AAAAHCQIAAAAAAMAAAAAAAABGAAAA AEC6h6RW58YBoGiSpFbnxgEAAAAAAAAAAAAAAADspcEAA2AJBAAA8FK/AAAAAAAAEAAAAAAABgAA mQgAAA4AYmpiastzy3MAAAAAAAAAAAAAAAAAAAAAAAAJBBYAMBAAAKkZAQCpGQEAAgAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAlgAAAAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAA AAAAAAAAAAAAAKQAAAAAAOYDAAAAAAAA5gMAAOYDAAAAAAAA5gMAAAAAAAAOBQAAAAAAAA4FAAAA AAAADgUAABQAAAAAAAAAAAAAAEgFAABkAAAAsAcAAAAAAACwBwAAAAAAALAHAAAAAAAAsAcAAAwA AAC8BwAADAAAAKwFAAAAAAAA1BgAADYBAADUBwAAAAAAANQHAAAAAAAA1AcAAAAAAADUBwAAAAAA ANQHAAAAAAAAkxcAAAAAAACTFwAAAAAAAJMXAAAAAAAAPRgAAAIAAAA/GAAAAAAAAD8YAAAAAAAA PxgAAAAAAAA/GAAAAAAAAD8YAAAAAAAAPxgAACQAAAAKGgAAaAIAAHIcAABmAAAAYxgAABUAAAAA AAAAAAAAAAAAAAAAAAAADgUAAAAAAACTFwAAAAAAAAAAAAAAAAAAAAAAAAAAAABxFwAAIgAAAJMX AAAAAAAAkxcAAAAAAACTFwAAAAAAAGMYAAAAAAAAAAAAAAAAAADmAwAAAAAAAOYDAAAAAAAA1AcA AAAAAAAAAAAAAAAAANQHAACdDwAAeBgAACAAAAAhGAAAAAAAACEYAAAAAAAAIRgAAAAAAACTFwAA EAAAAOYDAADUAAAA1AcAAAAAAAAOBQAAAAAAANQHAAAAAAAAPRgAAAAAAAAAAAAAAAAAACEYAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkxcAAAAA AAA9GAAAAAAAAAAAAAAAAAAAIRgAAAAAAAAAAAAAAAAAACEYAAAAAAAAugQAAFQAAAAOBQAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA IRgAAAAAAADUBwAAAAAAAMgHAAAMAAAAkDHNwDbjxgEAAAAAAAAAALAHAAAAAAAAoxcAABAAAAAh GAAAAAAAAAAAAAAAAAAAPRgAAAAAAACYGAAAPAAAANQYAAAAAAAAIRgAAAAAAADYHAAAAAAAALMX AABeAAAA2BwAAAAAAAAhGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgcAAAAAAAAAAAAAAAAAAAOBQAA AAAAACEYAAAcAAAAAAAAAAAAAAAAAAAAAAAAACEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkxcAAAAAAACTFwAAAAAAAJMXAAAAAAAAYxgAAAAA AABjGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAERgAABAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJMXAAAAAAAAkxcAAAAAAACTFwAAAAAAANQYAAAAAAAA kxcAAAAAAACTFwAAAAAAAJMXAAAAAAAAkxcAAAAAAAAAAAAAAAAAAKwFAAAAAAAArAUAAAAAAACs BQAABAIAALAHAAAAAAAArAUAAAAAAACsBQAAAAAAAKwFAAAAAAAAsAcAAAAAAAAiBQAAFAAAADYF AAAOAAAARAUAAAQAAADmAwAAAAAAAOYDAAAAAAAA5gMAAAAAAADmAwAAAAAAAOYDAAAAAAAA5gMA AAAAAAD/////AAAAAAIADAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNVHJhbnNwb3J0IENvbm5lY3Rpb25JU0YNDTMuIFJv dXRlciBBZHZlcnRpc2VtZW50DQ0yLiBUcmFuc3BvcnQgQ29ubmVjdGlvbiBFc3RhYmxpc2htZW50 DQ0xLiBOZXR3b3JrIEVudHJ5IGFuZCBOZXR3b3JrIEF1dGhlbnRpY2F0aW9uDQ1BUiBHVw0NQlMN DU1TDQ0NDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAEIAAACCAAAFggAABkIAAAbCAAAMggAADQIAABZ CAAAWwgAAIYIAACICAAAiwgAAI0IAACPCAAAkQgAAJMIAACVCAAAmQgAAO3px67pnOmc6ZzpjnDp Xule6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjFmifTmwAQioBQ0oaAE9K AgBRSgIAXkoCAGFKGgBwaAAAAAA6AAiBFmifTmwAF2jEBPAAQioBT0oCAFFKAgBeSgIAY0gBAGRo AAAAAGRoAAAAAGRonpOlhnBoAAAAAAAbFmifTmwAQioBT0oCAFFKAgBeSgIAcGgAAAAAIxZon05s AEIqAUNKEABPSgIAUUoCAF5KAgBhShAAcGgAAAAAMAEIgQRIAQAFaKCTpYYWaJ9ObABCKgFDShIA T0oCAFFKAgBeSgIAYUoSAHBoAAAAAABCAAiBFmifTmwAF2jEBPAAQioBQ0oSAE9KAgBRSgIAXkoC AGFKEgBjSAEAZGgAAAAAZGgAAAAAZGigk6WGcGgAAAAAAAYWaJ9ObAAAIwNqAAAAABZon05sAFUI AWFKFABtSAAEbkgABHNIAAR0SAAEABIABgAAAggAABoIAAAbCAAAMwgAADQIAABaCAAAWwgAAIcI AACICAAAjggAAI8IAACSCAAAkwgAAJYIAACXCAAAmAgAAJkIAAD9AAAAAAAAAAAAAAAA/QAAAAAA AAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAA AAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAA AAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAA AAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAABAAAAEQAGAAACCAAAmAgAAP39AAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAABAQAAQECLgA6cJ9ObAAfsMBOILDATiGwhA0isHQsI5BMCSSQNDolsAAA F7DQAhiw0AIMkNACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAABQECAAAAAAAAAAAAAAAAAAAAAAABAAAA4IWf8vlPaBCr kQgAKyez2TAAAAAcEwAAEQAAAAEAAACQAAAAAgAAAJgAAAADAAAApAAAAAQAAACwAAAABQAAAMgA AAAHAAAA1AAAAAgAAADkAAAACQAAAPwAAAASAAAACAEAAAoAAAAoAQAADAAAADQBAAANAAAAQAEA AA4AAABMAQAADwAAAFQBAAAQAAAAXAEAABMAAABkAQAAEQAAAGwBAAACAAAAqAMAAB4AAAAEAAAA AAAAAB4AAAAEAAAAAAAAAB4AAAAQAAAAQmFzYXZhcmFqIFBhdGlsAB4AAAAEAAAAAAAAAB4AAAAI AAAATm9ybWFsAAAeAAAAEAAAAEJlaGNldCBTYXJpa2F5YQAeAAAABAAAADIAAAAeAAAAGAAAAE1p Y3Jvc29mdCBPZmZpY2UgV29yZAAAAEAAAAAARsMjAAAAAEAAAAAAxliVNuPGAUAAAAAADBy5NuPG AQMAAAABAAAAAwAAAAAAAAADAAAAAQAAAAMAAAAAAAAARwAAAKgRAAD/////AwAAAAgA/3//f3oU AQAJAAADwwgAAAsATAAAAAAABAAAAAMBCAAFAAAACwIAAAAABQAAAAwCOx41HgQAAAAuARgAHAAA APsCEAAHAAAAAAC8AgAAAIYBAgIiU3lzdGVtAB41HgAAuywAACipEQBwg4I5UEwaAAwCAAAEAAAA LQEAABwAAAD7Apz/AAAAAAAAkAEAAAAABEAAElRpbWVzIE5ldyBSb21hbgAAAAAAAAAAAAAAAAAA AAAABAAAAC0BAQAEAAAAAgEBAAUAAAAJAgAAAAINAAAAMgo6BKIFAQAEAAAAAADQINAgIOxLAAMA AAAeAAgAAAD6AgAAAwAAAAAAAAAEAAAALQECAAcAAAD8AgEAAAAAAAAABAAAAC0BAwAIAAAAJQMC AFMEsQBUBJ0ECAAAAPoCAAAAAAAAAAAAAAQAAAAtAQQABwAAAPwCAAD///8AAAAEAAAALQEFAAQA AADwAQIABAAAACcB//8DAAAAHgAHAAAA/AIAANjY2AAAAAQAAAAtAQIABAAAAAYBAQAIAAAA+gIF AAAAAAD///8ABAAAAC0BBgAmAAAAJAMRAAUHgwO3AYMDqwGeA6IBuQOeAdYDngHyA6IBDwSrASwE twFGBAUHRgQRBywEGAcPBBwH8gMcB9YDGAe5AxEHngMFB4MDBAAAAC0BBAAEAAAABgEBAAQAAAAt AQUABAAAACcB//8DAAAAHgAIAAAA+gIAAAMAAAAAAAAABAAAAC0BBwAEAAAALQEDACYAAAAlAxEA BQeDA7cBgwOrAZ4DogG5A54B1gOeAfIDogEPBKsBLAS3AUYEBQdGBBEHLAQYBw8EHAfyAxwH1gMY B7kDEQeeAwUHgwMEAAAALQEEAAQAAAAtAQUABAAAAPABBwAEAAAAJwH//wMAAAAeAAgAAAD6AgAA AwAAAAAAAAAEAAAALQEHAAQAAAAtAQMAFAAAACUDCAC3AYMDwgGeA8oBuQPOAdYDzgHyA8oBDwTC ASwEtwFGBAQAAAAtAQQABAAAAC0BBQAEAAAA8AEHAAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAA AAAAAAQAAAAtAQcABAAAAC0BAwAMAAAAJAMEAA0ACgANALEA3wGxAN8BCgAEAAAALQEEAAQAAAAt AQUABAAAAPABBwAEAAAAJwH//wMAAAAeAAcAAAAWBHoE6wb9A0gGBAAAAC0BAQAEAAAAAgEBABwA AAD7ApT/AAAAAAAAkAEAAAAABEAAIkFyaWFsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAA AC0BBwAOAAAAMgpiBEgGAgAEAEgG/QPrBnoETVNaAEgABAAAAC0BAQANAAAAMgpiBOoGAQAEAEgG /QPrBnoEIOxMAAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAAAAAAAAQAAAAtAQgABAAAAC0BAwAM AAAAJAMEAGwDCgBsA7EAPAWxADwFCgAEAAAALQEEAAQAAAAtAQUABAAAAPABCAAEAAAAJwH//wMA AAAeAAcAAAAWBPYEQAr9A64JBAAAAC0BAQAEAAAAAgEBAAQAAAAtAQcABQAAAAkCAAAAAg4AAAAy CmEErgkCAAQArgn9A0AK9gRCU0gASAAEAAAALQEBAA0AAAAyCmEEPgoBAAQArgn9A0AK9gQg7EwA BAAAACcB//8DAAAAHgAIAAAA+gIAAAMAAAAAAAAABAAAAC0BCAAEAAAALQEDAAwAAAAkAwQAxgYK AMYGsgCYCLIAmAgKAAQAAAAtAQQABAAAAC0BBQAEAAAA8AEIAAQAAAAnAf//AwAAAB4ABwAAABYE fATnDQkE6QwEAAAALQEBAAQAAAACAQEAHAAAAPsCnP8AAAAAAACQAQAAAAAEQAAiQXJpYWwAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAALQEIAAUAAAAJAgAAAAIQAAAAMgplBOkMAwAEAOkM CQTnDXwEQVIgAEMASAAcAAQAAAAtAQEADQAAADIKZQSQDQEABADpDAkE5w18BCDsSwAEAAAAJwH/ /wMAAAAeAAgAAAD6AgAAAwAAAAAAAAAEAAAALQEJAAQAAAAtAQMACAAAACUDAgD2ALEA9gCdBAQA AAAtAQQABAAAAC0BBQAEAAAA8AEJAAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAAAAAAAAQAAAAt AQkABAAAAC0BAwAIAAAAJQMCALQHsQC0B50EBAAAAC0BBAAEAAAALQEFAAQAAADwAQkABAAAACcB //8EAAAA8AECAAMAAAAeAAcAAAD8AgAA////AAAABAAAAC0BAgAEAAAABgEBAAQAAAAtAQYAGgAA ACQDCwD2AFgBTgK9AU4CoQFaBqEBWga9AbQHWAFaBvQAWgYQAU4CEAFOAvQA9gBYAQQAAAAtAQQA BAAAAAYBAQAEAAAALQEFAAgAAAD6AgAAAwAAAP///wAEAAAALQEJAAQAAAAtAQMAGgAAACQDCwD2 AFgBTgK9AU4CoQFaBqEBWga9AbQHWAFaBvQAWgYQAU4CEAFOAvQA9gBYAQQAAAAtAQQABAAAAC0B BQAEAAAA8AEJAAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAAAAAAAAQAAAAtAQkABAAAAC0BAwAa AAAAJQMLAPYAWAFOAr0BTgKhAVoGoQFaBr0BtAdYAVoG9ABaBhABTgIQAU4C9AD2AFgBBAAAAC0B BAAEAAAALQEFAAQAAADwAQkABAAAACcB//8DAAAAHgAHAAAAFgSpBZ8MEAVwBwQAAAAtAQEABAAA AAIBAQAcAAAA+wK9/wAAAAAAAJABAAAAAARAACJBcmlhbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAQAAAAtAQkABQAAAAkCAAAAAkwAAAAyCk0FcAcrAAQAcAcQBZ8MqQUxLiBOZXR3b3JrIEVu dHJ5IGFuZCBOZXR3b3JrIEF1dGhlbnRpY2F0aW9uACUAEwATADAAJQATAC8AJQAWACIAEwAtACQA EwAWACEAEwAlACUAJQATADAAJQATAC8AJQAWACIAEwAtACQAEgAlACUAJQATAA8AIgAlABIADwAl ACUABAAAAC0BAQANAAAAMgpNBZ8MAQAEAHAHEAWfDKkFIOxKAAQAAAAnAf//AwAAAB4ABAAAAC0B AgAEAAAABgEBAAQAAAAtAQYAGgAAACQDCwD2AGQCTgLIAk4CrQJaBq0CWgbIArQHZAJaBgACWgYc Ak4CHAJOAgAC9gBkAgQAAAAtAQQABAAAAAYBAQAEAAAALQEFAAgAAAD6AgAAAwAAAP///wAEAAAA LQEKAAQAAAAtAQMAGgAAACQDCwD2AGQCTgLIAk4CrQJaBq0CWgbIArQHZAJaBgACWgYcAk4CHAJO AgAC9gBkAgQAAAAtAQQABAAAAC0BBQAEAAAA8AEKAAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAA AAAAAAQAAAAtAQoABAAAAC0BAwAaAAAAJQMLAPYAZAJOAsgCTgKtAloGrQJaBsgCtAdkAloGAAJa BhwCTgIcAk4CAAL2AGQCBAAAAC0BBAAEAAAALQEFAAQAAADwAQoABAAAACcB//8DAAAAHgAHAAAA FgS1BkUMHAbEBwQAAAAtAQEABAAAAAIBAQAEAAAALQEJAAUAAAAJAgAAAAJDAAAAMgpZBsQHJQAE AMQHHAZFDLUGMi4gVHJhbnNwb3J0IENvbm5lY3Rpb24gRXN0YWJsaXNobWVudAAlABMAEwApABYA JQAlACIAJQAlABUAEwATADAAJQAlACUAJQAhABMADwAlACUAEgAtACEAEwAlACUADwAOACIAJAA5 ACUAJAATAAQAAAAtAQEADQAAADIKWQZFDAEABADEBxwGRQy1BiDsSgAEAAAAJwH//wMAAAAeAAgA AAD6AgAAAwAAAAAAAAAEAAAALQEKAAQAAAAtAQMACAAAACUDAgC0B+QDRwHlAwQAAAAtAQQABAAA AC0BBQAEAAAA8AEKAAQAAAAnAf//BAAAAPABAgADAAAAHgAHAAAA/AIAAAAAAAAAAAQAAAAtAQIA BAAAAAYBAQAEAAAALQEGAAwAAAAkAwQATwECBPYA5ANPAcYDTwECBAQAAAAtAQQABAAAAAYBAQAE AAAALQEFAAQAAAAnAf//AwAAAB4ABwAAABYEEQhxC3cHoQgEAAAALQEBAAQAAAACAQEABAAAAC0B CQAFAAAACQIAAAACLgAAADIKtAehCBcABAChCHcHcQsRCDMuIFJvdXRlciBBZHZlcnRpc2VtZW50 ACUAEwATADAAJQAlABMAJQAWABIALQAlACEAJQAWABMADwAiACQAOAAlACUAEgAEAAAALQEBAA0A AAAyCrQHcAsBAAQAoQh3B3ELEQgg7EoABAAAACcB//8DAAAAHgAHAAAAFgSGB/kI2gaECAQAAAAt AQEABAAAAAIBAQAcAAAA+wK1/wAAAAAAAJABAAAAAARAACJBcmlhbAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAQAAAAtAQoABQAAAAkCAAAAAhAAAAAyCh4HhAgDAAQAhAjaBvkIhgdJU0YAFQAy AC4ABAAAAC0BAQANAAAAMgoeB/kIAQAEAIQI2gb5CIYHIOxLAAQAAAAnAf//BAAAAC0BAAAFAAAA FAIAAAAABQAAABMC0CAAAAUAAAATAtAg0CAFAAAAEwIAANAgBQAAABMCAAAAAAUAAAAUAgEAAQAF AAAAEwLPIAEABQAAABMCzyDPIAUAAAATAgEAzyAFAAAAEwIBAAEABQAAABQCAgACAAUAAAATAs4g AgAFAAAAEwLOIM4gBQAAABMCAgDOIAUAAAATAgIAAgAFAAAAFAIDAAMABQAAABMCzSADAAUAAAAT As0gzSAFAAAAEwIDAM0gBQAAABMCAwADAAUAAAAUAgQABAAFAAAAEwLMIAQABQAAABMCzCDMIAUA AAATAgQAzCAFAAAAEwIEAAQABQAAABQCBQAFAAUAAAATAssgBQAFAAAAEwLLIMsgBQAAABMCBQDL IAUAAAATAgUABQAFAAAAFAIGAAYABQAAABMCyiAGAAUAAAATAsogyiAFAAAAEwIGAMogBQAAABMC BgAGAAUAAAAUAgcABwAFAAAAEwLJIAcABQAAABMCySDJIAUAAAATAgcAySAFAAAAEwIHAAcABQAA ABQCCAAIAAUAAAATAsggCAAFAAAAEwLIIMggBQAAABMCCADIIAUAAAATAggACAAFAAAAFAIJAAkA BQAAABMCxyAJAAUAAAATAscgxyAFAAAAEwIJAMcgBQAAABMCCQAJAAUAAAAUAgoACgAFAAAAEwLG IAoABQAAABMCxiDGIAUAAAATAgoAxiAFAAAAEwIKAAoABQAAABQCCwALAAUAAAATAsUgCwAFAAAA EwLFIMUgBQAAABMCCwDFIAUAAAATAgsACwAFAAAAFAIMAAwABQAAABMCxCAMAAUAAAATAsQgxCAF AAAAEwIMAMQgBQAAABMCDAAMAAUAAAAUAg0ADQAFAAAAEwLDIA0ABQAAABMCwyDDIAUAAAATAg0A wyAFAAAAEwINAA0ABQAAABQCDgAOAAUAAAATAsIgDgAFAAAAEwLCIMIgBQAAABMCDgDCIAUAAAAT Ag4ADgAFAAAAFAIPAA8ABQAAABMCwSAPAAUAAAATAsEgwSAFAAAAEwIPAMEgBQAAABMCDwAPAAUA AAAUAhAAEAAFAAAAEwLAIBAABQAAABMCwCDAIAUAAAATAhAAwCAFAAAAEwIQABAABQAAABQCEQAR AAUAAAATAr8gEQAFAAAAEwK/IL8gBQAAABMCEQC/IAUAAAATAhEAEQAFAAAAFAISABIABQAAABMC viASAAUAAAATAr4gviAFAAAAEwISAL4gBQAAABMCEgASAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAP7/AAAFAQIAAAAAAAAAAAAAAAAAAAAAAAEAAAAC1c3VnC4bEJOXCAArLPmuMAAA AOwAAAAMAAAAAQAAAGgAAAAPAAAAcAAAAAUAAACAAAAABgAAAIgAAAARAAAAkAAAABcAAACYAAAA CwAAAKAAAAAQAAAAqAAAABMAAACwAAAAFgAAALgAAAANAAAAwAAAAAwAAADNAAAAAgAAAKgDAAAe AAAACAAAAE5va2lhAAAAAwAAAAEAAAADAAAAAQAAAAMAAAABAAAAAwAAAKgZCwALAAAAAAAAAAsA AAAAAAAACwAAAAAAAAALAAAAAAAAAB4QAAABAAAAAQAAAAAMEAAAAgAAAB4AAAAGAAAAVGl0bGUA AwAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAxAFQAYQBiAGwAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAADgACAf///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAOIAAAAYHwAAAAAAAAEAQwBvAG0AcABPAGIAagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAIBDAAAAA8AAAD/////AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAwAAAG8AAAAAAAAAAwBPAGIAagBJAG4AZgBvAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIAAgH///////////////8AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAABgAAAAAAAABXAG8AcgBkAEQAbwBj AHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAA4A AAAQAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPIAAAAwEAAAAAAA AIYCEAASAAEAnAAPAAQAAAADAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAADwAAEDx/wIAPAAMAAAAAAAAAAAABgBOAG8AcgBtAGEAbAAA AAIAAAAUAENKGABhShgAbUgJBHNICQR0SAkEAAAAAAAAAAAAAAAAAAAAAAAARABBAPL/oQBEAAwB AAAAAAAAAAAWAEQAZQBmAGEAdQBsAHQAIABQAGEAcgBhAGcAcgBhAHAAaAAgAEYAbwBuAHQAAAAA AFIAaQDz/7MAUgAMAQAAAAAAAAAADABUAGEAYgBsAGUAIABOAG8AcgBtAGEAbAAAABwAF/YDAAA0 1gYAAQoDbAA01gYAAQUDAABh9gMAAAIACwAAACgAawD0/8EAKAAAAQAAAAAAAAAABwBOAG8AIABM AGkAcwB0AAAAAgAAAAAAAABEAJkAAQDyAEQADAEAACM/4wAAAAwAQgBhAGwAbABvAG8AbgAgAFQA ZQB4AHQAAAACAA8AEABDShIAT0oEAFFKBABhShIAAAAAABkAAAAyAAAASgAAAHEAAACeAAAApQAA AKkAAACtAAAAsQAAAAEAAAAAAAAAAAD/////GgQAAAAAAAABAAAAAAAAAAAA/////xkEAAAAAAAA AQAAAAAAAAAAAP////8YBAAAAAAAAAEAAAAAAAAAAAD/////FQQAAAAAAAABAAAAAAAAAAAA//// /xIEAAAAAAAAAQAAAAAAAAAAAP////8NBAAAAAAAAAEAAAAAAAAAAAD/////CwQAAAAAAAABAAAA AAAAAAAA/////wkEAAAAAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZAAAAMgAAAEoAAABx AAAAngAAAKUAAACpAAAArQAAALAAAAAAAAAAABABAAAAABACAAAAABADAAAAABAEAAAAABAFAAAA ABAGAAAAABAHAAAAABD//wAAAAAAAAAAsQAAAAoAABAAAAAA/////wEAAAAEIAAA//8BAEBWwwAA AAAAAAAAALEAAAAAAAAAAAAAAAAAAAAAAAIAAAA0AAAATAAAAHMAAACnAAAAqwAAALIAAAABAQAA yBQAAI2sAgAAAgAAvQYAAF7IAQAAAgAAxAUAAF7IAQAAAgAAzQoAAF7IAQAAAgAAbwwAAF7IAQAA AgAAWgEAAJnlAgAAAQAAhgEAAJnlAgAAAAAAAgAAABoAAAAbAAAAMwAAADQAAABLAAAATAAAAHIA AABzAAAAnwAAAKAAAACmAAAApwAAAKoAAACrAAAArgAAAK8AAACyAAAAmAAAAAAwAAAAAAAAAQAA AAAAAAAAAAAAAACAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAABoiwAwAAAAAAAAAAACAAAA DQAAAAAAAAAAALsDkAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAGiLADAAAAAAAAAAAAIAAAAL AAAAAAAAAAAAuwOQAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAaIsAMAAAAAAAAAAAAgAAAAkA AAAAAAAAAAC7A5AAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAABoiwAwAAAAAAAAAAACAAAABwAA AAAAAAAAALsDkAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAGiLADAAAAAAAAAAAAIAAAAFAAAA AAAAAAAAuwOQAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAABaIsAMAAAAAAAAAAAAgAAAAMAAAAA AAAAAAC7A5AAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAABoiwAwAAAAAAAAAAACAAAAAQAAAAAA AAAAALsDkAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAGiLADAAAAAAAAAAAAEAAAAAAAAAAAAA AAAAtQNoiwAwAAAAAAAAAAABAAAAAAAAAAAAAAAAALUDAAYAALEIAAAFAAAAAAYAALEIAAAGAAAA AAYAALAIAAAHAAAADwAA8DgAAAAAAAbwGAAAAAIIAAACAAAAHAAAAAEAAAABAAAAHQAAAEAAHvEQ AAAA//8AAAAA/wCAgIAA9wAAEAAPAALwCBEAABAACPAIAAAAHAAAABwEAAAPAAPwphAAAA8ABPAo AAAAAQAJ8BAAAAD/////Vkr6/0NR//8AAAAAAgAK8AgAAAAABAAABQAAAA8AA/BuEAAADwAE8IwA AAABAAnwEAAAAAAAAAAAAAAAzRQAAF0MAAACAArwCAAAAAIEAAABAgAAQwAL8BgAAAB/AIAAwAH/ AQAAAQCIAwAAAAC/AwAAIABjACLxJAAAAI8DAAAAAJADAwAAAJEDAAAAAJIDAwAAAL8DAAIAAgAF AAAAAAAAEPAEAAAAAAAAAAAAEfAEAAAAAQAAAA8ABPBgAAAAsgQK8AgAAAADBAAAAgoAAGMAC/Ak AAAAfwAEAAQAWAEAAAAAfwE5ADkAvwEBABEA/wEAAAgAPwMAABAAAAAP8BAAAAAAAAAAAAAAAM0U AABdDAAAAAAR8AQAAAABAAAADwAE8EgAAABCAQrwCAAAAAQEAAACCgAAIwAL8AwAAADLAeIOAAD/ AQgACAAAAA/wEAAAAGUKAACzAQAAZgoAABALAAAAABHwBAAAAAEAAAAPAATwJgEAAAIACvAIAAAA BQQAAAIKAACzAAvw6gAAAEIBTg0AAEMBogIAAEQBBAAAAEXBTAAAAEbBVgAAAH8BAQABAIABAAAA AIEB2NjYAL8BEAAQAP8BEAAYAIgDAAAAABMAEwDw//oMAABXAAAAMQBQABUApAAGAPgAAABSAQYA qQEVAP0BMQBRAlcAogL6DKICHA1RAjgN/QFIDakBTg1SAUgN+AA4DaQAHA1QAPoMAAAoACwAAgAA QACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwBAACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAAyQMAAAoIAAAXEQAArAoAAAAAEfAEAAAAAQAA AA8ABPAwAQAAAgAK8AgAAAAGBAAAAgoAANMAC/D0AAAAQgFODQAAQwGiAgAARAEEAAAARcFMAAAA RsFUAAAAfwEBAAEAvwEAABAAwAEAAAAAxAEAAAAAywHiDgAAzgEAAAAA/wEYABgAiAMAAAAAEwAT APD/+gwAAFcAAAAxAFAAFQCkAAYA+AAAAFIBBgCpARUA/QExAFECVwCiAvoMogIcDVECOA39AUgN qQFODVIBSA34ADgNpAAcDVAA+gwAACcAKAACAABAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwB AACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwAgAAAD/AQAAAA yQMAAAoIAAAXEQAArAoAAAAAEfAEAAAAAQAAAA8ABPDgAAAAAgAK8AgAAAAHBAAAAgoAANMAC/Ck AAAAQgFUAAAAQwGiAgAARAEEAAAARcEkAAAARsEsAAAAfwEBAAEAvwEAABAAwAEAAAAAxAEAAAAA ywHiDgAAzgEAAAAA/wEYABgAiAMAAAAACQAJAPD/AAAAACIAUAA+AKQATQD4AFQAUgFNAKkBPgD9 ASIAUQIAAKICEwAUAAIAAEAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAIAAAA/w EAAAACAEAAAKCAAAdAQAAKwKAAAAABHwBAAAAAEAAAAPAATwTgAAABIACvAIAAAACAQAAAIKAAAz AAvwEgAAAL8BAAAQAMsB4g4AAP8BCAAIAAAAD/AQAAAAIgAAACIAAACABAAAswEAAAAAEfAEAAAA AQAAAA8ABPB+AAAAEgAK8AgAAAAJBAAAAgoAAJMAC/A2AAAAgAAAAAgAgQAAAAAAggAAAAAAgwAA AAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAACRAQAAUQAAABgDAAB8AQAA AAAR8AQAAAABAAAAAAAN8AQAAAAAAAgADwAE8E4AAAASAArwCAAAAAoEAAACCgAAMwAL8BIAAAC/ AQAAEADLAeIOAAD/AQgACAAAAA/wEAAAADkIAAAiAAAAlAwAALMBAAAAABHwBAAAAAEAAAAPAATw fgAAABIACvAIAAAACwQAAAIKAACTAAvwNgAAAIAAAAAHAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAA AIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAugkAAFEAAAAVCwAApwIAAAAAEfAEAAAA AQAAAAAADfAEAAAAAAAHAA8ABPBOAAAAEgAK8AgAAAAMBAAAAgoAADMAC/ASAAAAvwEAABAAywHi DgAA/wEIAAgAAAAP8BAAAABEEAAAIgAAAKIUAACzAQAAAAAR8AQAAAABAAAADwAE8HgAAAASAArw CAAAAA0EAAACCgAAgwAL8DAAAACAAAAABgCBAAAAAACCAAAAAACDAAAAAACEAAAAAAC/ABIAGwC/ AQAAEAD/AQAACAAAAA/wEAAAAHoRAABtAAAAJxMAAIEBAAAAABHwBAAAAAEAAAAAAA3wBAAAAAAA BgAPAATwSAAAAEIBCvAIAAAADgQAAAIKAAAjAAvwDAAAAMsB4g4AAP8BCAAIAAAAD/AQAAAAUQIA ALMBAABSAgAAEAsAAAAAEfAEAAAAAQAAAA8ABPBIAAAAQgEK8AgAAAAPBAAAAgoAACMAC/AMAAAA ywHiDgAA/wEIAAgAAAAP8BAAAAB/EgAAswEAAIASAAAQCwAAAAAR8AQAAAABAAAADwAE8P4AAAAC AArwCAAAABAEAAACCgAA8wAL8MIAAABCAS4QAABDAd4BAABEAQQAAABFwSwAAABGwTYAAAB/AQEA AQCAAQAAAACBAf///wC/ARAAEADAAf///wDEAQAAAADLAeIOAADOAQAAAAD/ARgAGACIAwAAAAAL AAsA8P8AAO8AOgPeAToDnQHxDJ0B8QzeAS4Q7wDxDAAA8QxEADoDRAA6AwAAAADvABgAHAACAABA AKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAAUQIA AFICAAB/EgAAMAQAAAAAEfAEAAAAAQAAAA8ABPDwAAAAAgAK8AgAAAARBAAAAgoAANMAC/C0AAAA QgEuEAAAQwHeAQAARAEEAAAARcEsAAAARsE0AAAAfwEBAAEAvwEAABAAwAEAAAAAxAEAAAAAywHi DgAAzgEAAAAA/wEYABgAiAMAAAAACwALAPD/AADvADoD3gE6A50B8QydAfEM3gEuEO8A8QwAAPEM RAA6A0QAOgMAAAAA7wAXABgAAgAAQACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwB AACsAQAArACAAAAP8BAAAABRAgAAUgIAAH8SAAAwBAAAAAAR8AQAAAABAAAADwAE8H4AAAASAArw CAAAABIEAAACCgAAkwAL8DYAAACAAAAABQCBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAAFgEAADhAgAAyBAAAFEEAAAAABHwBAAAAAEAAAAAAA3w BAAAAAAABQAPAATw/gAAAAIACvAIAAAAEwQAAAIKAADzAAvwwgAAAEIBLhAAAEMB3wEAAEQBBAAA AEXBLAAAAEbBNgAAAH8BAQABAIABAAAAAIEB////AL8BEAAQAMAB////AMQBAAAAAMsB4g4AAM4B AAAAAP8BGAAYAIgDAAAAAAsACwDw/wAA7wA6A98BOgOdAfEMnQHxDN8BLhDvAPEMAADxDEEAOgNB ADoDAAAAAO8AGAAcAAIAAEAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwBYACAAAAP8BAAAABRAgAA0gQAAH8SAACxBgAAAAAR8AQAAAABAAAADwAE8PAAAAACAArwCAAA ABQEAAACCgAA0wAL8LQAAABCAS4QAABDAd8BAABEAQQAAABFwSwAAABGwTQAAAB/AQEAAQC/AQAA EADAAQAAAADEAQAAAADLAeIOAADOAQAAAAD/ARgAGACIAwAAAAALAAsA8P8AAO8AOgPfAToDnQHx DJ0B8QzfAS4Q7wDxDAAA8QxBADoDQQA6AwAAAADvABcAGAACAABAAKwBAACsAQAArAEAAKwBAACs AQAArAEAAKwBAACsAQAArAEAAKwBAACsAIAAAA/wEAAAAFECAADSBAAAfxIAALEGAAAAABHwBAAA AAEAAAAPAATwfgAAABIACvAIAAAAFQQAAAIKAACTAAvwNgAAAIAAAAAEAIEAAAAAAIIAAAAAAIMA AAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAIQUAAGEFAADvDwAA0QYA AAAAEfAEAAAAAQAAAAAADfAEAAAAAAAEAA8ABPBIAAAAQgEK8AgAAAAWBAAAQgoAACMAC/AMAAAA ywHiDgAA/wEIAAgAAAAP8BAAAABRAgAAAgkAALsRAAADCQAAAAAR8AQAAAABAAAADwAE8K4AAAAC AArwCAAAABcEAAACCgAAswAL8HIAAABCAdYAAABDAY8AAABEAQQAAABFwRAAAABGwRoAAAB/AQEA AQCAAQAAAACBAQAAAAC/ARAAEAD/ARAAGACIAwAAAAAEAAQA8P8AAAAA1gBHAAAAjwAAAAAACgAM AAIAAEAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAAAKkRAAC7CAAAfxIAAEoJAAAAABHwBAAAAAEA AAAPAATwfgAAABIACvAIAAAAGAQAAAIKAACTAAvwNgAAAIAAAAADAIEAAAAAAIIAAAAAAIMAAAAA AIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAANAcAAEsIAAD5DAAAuwkAAAAA EfAEAAAAAQAAAAAADfAEAAAAAAADAA8ABPB+AAAAEgAK8AgAAAAZBAAAAgoAAJMAC/A2AAAAgAAA AAIAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAA AADIBgAAvwoAAOEHAABdDAAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAIADwAE8H4AAAASAArwCAAA ABoEAAACCgAAkwAL8DYAAACAAAAAAQCBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIA GwC/AQAAEAD/AQAACAAAAA/wEAAAABgHAABTCQAA1g0AAMMKAAAAABHwBAAAAAEAAAAAAA3wBAAA AAAAAQAPAATwSAAAAEIBCvAIAAAAGwQAAEIKAAAjAAvwDAAAAMsB4g4AAP8BCAAIAAAAD/AQAAAA FQMAACYKAAB/EgAAJwoAAAAAEfAEAAAAAQAAAA8ABPCuAAAAAgAK8AgAAAAcBAAAAgoAALMAC/By AAAAQgHWAAAAQwGPAAAARAEEAAAARcEQAAAARsEaAAAAfwEBAAEAgAEAAAAAgQEAAAAAvwEQABAA /wEQABgAiAMAAAAABAAEAPD/1gCPAAAARwDWAAAA1gCPAAoADAACAABAAKwBAACsAQAArAEAAKwB YACAAAAP8BAAAABRAgAA3wkAACcDAABuCgAAAAAR8AQAAAABAAAADwAE8EIAAAASAArwCAAAAAEE AAAADgAAUwAL8B4AAAC/AQAAEADLAQAAAAD/AQAACAAEAwkAAAA/AwEAAQAAABHwBAAAAAEAAAAA AAAAsQAAAAIEAAD+////AwAAAMsUAABgDAAAdAAAAAAAAAAAAAIAAACyAAAABwAHAAAAAAACAAAA sgAAAAcABwAAAAAAAgAAABkAAAAvAAAAMgAAADQAAABKAAAATAAAAHEAAABzAAAAngAAAKAAAACl AAAApwAAAKkAAACrAAAArQAAALIAAAAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcA AAAAAAIAAACgAAAApgAAALIAAAAHAAcAAQAHAAEAAAAEAAAACAAAAOUAAAAAAAAAAAAAADssXAD/ QAOAAQAAAAAAAAAAAPhcpQcBAAEAAAAAAAAAAAAAAAAAAAAAAAIQAAAAAAAAALEAAACgAAAQAEAA AP//AgAAAAcAVQBuAGsAbgBvAHcAbgAEAHMAeQBhAG0A//8CAAgAAAAAAAAAAAAAAAAAAAAAAAAA AQD//wIAAAAAAAAA//8AAAIA//8AAAAA//8AAAIA//8AAAAABQAAAEcWkAEAAAICBgMFBAUCAwSH egAgAAAAgAgAAAAAAAAA/wEAAAAAAABUAGkAbQBlAHMAIABOAGUAdwAgAFIAbwBtAGEAbgAAADUW kAECAAUFAQIBBwYCBQcAAAAAAAAAEAAAAAAAAAAAAAAAgAAAAABTAHkAbQBiAG8AbAAAADMmkAEA AAILBgQCAgICAgSHegAgAAAAgAgAAAAAAAAA/wEAAAAAAABBAHIAaQBhAGwAAAA7BpABhgMCAQYA AwEBAQEBAwAAAAAADggQAAAAAAAAAAEABAAAAAAAi1tTTwAAUwBpAG0AUwB1AG4AAABDBpABAABS IAAD8AC//8ZgAAAAAwAAAAAAAAAAAAAAAAEAAAAAAAAATAB1AGMAaQBkAGEAIABHAHIAYQBuAGQA ZQAAACAABADxCIgAAPDQAgAAaAEAAAAAr+Ophq/jqYYAAAAAAgAAAAAAAAAAAAEAAAABAAEAAAAE AAMQAQAAAAAAAAABAAAAAQABAAAAAQAAAAAAAAAhAwDwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAClBsAHtAC0AIAAcjQAABEAGQBkAAAAGQAAAAEAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAB8DAAAAAAkzg3EA 8BAACAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACFAAAAAAAOD/DwEAAAAAAAAAAAD///9/ ////f////3////9/////fxkAAAD///9/o3AJAAAAAAAyAAAAAAAAAAAAAAAAAAAAAAD//xIAAAAA AAAAAAAAAAAAAAAPAEIAYQBzAGEAdgBhAHIAYQBqACAAUABhAHQAaQBsAA8AQgBlAGgAYwBlAHQA IABTAGEAcgBpAGsAYQB5AGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7KXBAANgCQQAAPBSvwAA AAAAABAAAAAAAAYAALEIAAAOAGJqYmrLc8tzAAAAAAAAAAAAAAAAAAAAAAAACQQWADAQAACpGQEA qRkBAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK4AAAAAAAAA//8PAAAAAAAAAAAA//8PAAAAAAAA AAAA//8PAAAAAAAAAAAAAAAAAAAAAACkAAAAAADmAwAAAAAAAOYDAADmAwAAAAAAAOYDAAAAAAAA MgUAAAAAAAAyBQAAAAAAADIFAAAUAAAAAAAAAAAAAABsBQAAdAAAACQIAAAAAAAAJAgAAAAAAAAk CAAAAAAAACQIAAAMAAAAMAgAAAwAAADgBQAAAAAAABQbAAA2AQAASAgAAAAAAABICAAAAAAAAEgI AAAAAAAASAgAAAAAAABICAAAAAAAALsZAAAAAAAAuxkAAAAAAAC7GQAAAAAAAH0aAAACAAAAfxoA AAAAAAB/GgAAAAAAAH8aAAAAAAAAfxoAAAAAAAB/GgAAAAAAAH8aAAAkAAAAShwAAGgCAACyHgAA ZgAAAKMaAAAVAAAAAAAAAAAAAAAAAAAAAAAAADIFAAAAAAAAuxkAAAAAAAAAAAAAAAAAAAAAAAAA AAAAmRkAACIAAAC7GQAAAAAAALsZAAAAAAAAuxkAAAAAAACjGgAAAAAAAAAAAAAAAAAA5gMAAAAA AADmAwAAAAAAAEgIAAAAAAAAAAAAAAAAAABICAAAUREAALgaAAAgAAAAYRoAAAAAAABhGgAAAAAA AGEaAAAAAAAAuxkAABAAAADmAwAA7gAAAEgIAAAAAAAAMgUAAAAAAABICAAAAAAAAH0aAAAAAAAA AAAAAAAAAABhGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAALsZAAAAAAAAfRoAAAAAAAAAAAAAAAAAAGEaAAAAAAAAAAAAAAAAAABhGgAAAAAAANQE AABeAAAAMgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAGEaAAAAAAAASAgAAAAAAAA8CAAADAAAAMD0oO8248YBAAAAAAAAAAAkCAAA AAAAAMsZAAAQAAAAYRoAAAAAAAAAAAAAAAAAAH0aAAAAAAAA2BoAADwAAAAUGwAAAAAAAGEaAAAA AAAAGB8AAAAAAADbGQAAagAAABgfAAAAAAAAYRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHwAAAAAA AAAAAAAAAAAAMgUAAAAAAABhGgAAHAAAAAAAAAAAAAAAAAAAAAAAAABhGgAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALsZAAAAAAAAuxkAAAAAAAC7 GQAAAAAAAKMaAAAAAAAAoxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEUa AAAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7GQAAAAAAALsZAAAAAAAAuxkA AAAAAAAUGwAAAAAAALsZAAAAAAAAuxkAAAAAAAC7GQAAAAAAALsZAAAAAAAAAAAAAAAAAADgBQAA AAAAAOAFAAAAAAAA4AUAAEQCAAAkCAAAAAAAAOAFAAAAAAAA4AUAAAAAAADgBQAAAAAAACQIAAAA AAAARgUAABQAAABaBQAADgAAAGgFAAAEAAAA5gMAAAAAAADmAwAAAAAAAOYDAAAAAAAA5gMAAAAA AADmAwAAAAAAAOYDAAAAAAAA/////wAAAAACAAwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDTQuIFJvdXRlciBBZHZlcnRp c2VtZW50DQ1UcmFuc3BvcnQgQ29ubmVjdGlvbklTRg0NMy4gUm91dGVyIFNvbGljaXRhdGlvbg0N Mi4gVHJhbnNwb3J0IENvbm5lY3Rpb24gRXN0YWJsaXNobWVudA0NMS4gTmV0d29yayBFbnRyeSBh bmQgTmV0d29yayBBdXRoZW50aWNhdGlvbg0NQVIgR1cNDUJTDQ1NUw0NDQ0AAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAABCAAAAggAABkIAAAbCAAA LwgAADIIAAA0CAAASggAAEwIAABxCAAAcwgAAJ4IAACgCAAAoggAAKUIAACnCAAAqQgAAKsIAACt CAAAsQgAAO3p1+m1nOnX6dfp1+mOcOle6V7pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIxZo OyxcAEIqAUNKGgBPSgIAUUoCAF5KAgBhShoAcGgAAAAAOgAIgRZoOyxcABdoxATwAEIqAU9KAgBR SgIAXkoCAGNIAQBkaAAAAABkaAAAAABkaKCTpYZwaAAAAAAAGxZoOyxcAEIqAU9KAgBRSgIAXkoC AHBoAAAAADABCIEESAEABWigk6WGFmg7LFwAQioBQ0oSAE9KAgBRSgIAXkoCAGFKEgBwaAAAAAAA QgAIgRZoOyxcABdoxATwAEIqAUNKEgBPSgIAUUoCAF5KAgBhShIAY0gBAGRoAAAAAGRoAAAAAGRo oJOlhnBoAAAAAAAjFmg7LFwAQioBQ0oQAE9KAgBRSgIAXkoCAGFKEABwaAAAAAAGFmg7LFwAACMD agAAAAAWaDssXABVCAFhShQAbUgABG5IAARzSAAEdEgABAAUAAYAAAIIAAAaCAAAGwgAADMIAAA0 CAAASwgAAEwIAAByCAAAcwgAAJ8IAACgCAAApggAAKcIAACqCAAAqwgAAK4IAACvCAAAsAgAALEI AAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAA AAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAA AAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA /QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAA AAAAAAAAAAD9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAABMABgAAAggAALAIAAD9/QAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEAAEBAi4AOnA7LFwAH7DATiCwwE4hsIQNIrB0 LCOQ/BwkkGwlJbAAABew0AIYsNACDJDQAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQBTAHUAbQBtAGEAcgB5AEkAbgBmAG8A cgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAgH/////EQAAAP////8A AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD9AAAAwBQAAAAAAAAFAEQAbwBjAHUA bQBlAG4AdABTAHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAOAAC AP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBAAAAEAAA AAAAAF8AMQAwADgAMwA1ADAANgA3ADYANQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAYAAEA//////////8UAAAABwkCAAAAAADAAAAAAAAARgAAAACgaJKkVufGAUBZ rKRW58YBAAAAAAAAAAAAAAAAMQBUAGEAYgBsAGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AAgH///////////////8AAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAQAQAA9hYAAAAAAAABAQAAAgEAAAMBAAAEAQAABQEAAAYBAAAH AQAA/v///wkBAAAKAQAACwEAAAwBAAANAQAADgEAAA8BAAD+////EQEAABIBAAATAQAAFAEAABUB AAAWAQAAFwEAABgBAAAZAQAAGgEAABsBAAD+////JgEAAKYCAAAfAQAAIAEAACEBAAAiAQAAIwEA ACQBAAAlAQAA/v///24BAAAoAQAAKQEAACoBAAArAQAALAEAAC0BAAAuAQAALwEAADABAAAxAQAA MgEAADMBAAA0AQAANQEAADYBAAA3AQAAOAEAADkBAAA6AQAAOwEAADwBAAA9AQAAPgEAAD8BAABA AQAAQQEAAEIBAABDAQAARAEAAEUBAABGAQAARwEAAEgBAABJAQAASgEAAEsBAABMAQAATQEAAE4B AABPAQAAUAEAAFEBAABSAQAAUwEAAFQBAABVAQAAVgEAAFcBAABYAQAAWQEAAFoBAABbAQAAXAEA AF0BAAD+////XwEAAGABAABhAQAAYgEAAGMBAABkAQAAZQEAAP7///9nAQAAaAEAAGkBAABqAQAA awEAAGwBAABtAQAA/v///4EBAABwAQAAcQEAAHIBAABzAQAAdAEAAHUBAAB2AQAA/v///3gBAAB5 AQAAegEAAHsBAAB8AQAAfQEAAH4BAAB/AQAA/v////7/AAAFAQIAAAAAAAAAAAAAAAAAAAAAAAEA AADghZ/y+U9oEKuRCAArJ7PZMAAAAJAUAAARAAAAAQAAAJAAAAACAAAAmAAAAAMAAACkAAAABAAA ALAAAAAFAAAAyAAAAAcAAADUAAAACAAAAOQAAAAJAAAA/AAAABIAAAAIAQAACgAAACgBAAAMAAAA NAEAAA0AAABAAQAADgAAAEwBAAAPAAAAVAEAABAAAABcAQAAEwAAAGQBAAARAAAAbAEAAAIAAACo AwAAHgAAAAQAAAAAAAAAHgAAAAQAAAAAAAAAHgAAABAAAABCYXNhdmFyYWogUGF0aWwAHgAAAAQA AAAAAAAAHgAAAAgAAABOb3JtYWwAAB4AAAAQAAAAQmVoY2V0IFNhcmlrYXlhAB4AAAAEAAAAMgAA AB4AAAAYAAAATWljcm9zb2Z0IE9mZmljZSBXb3JkAAAAQAAAAAAAAAAAAAAAQAAAAABS39w248YB QAAAAABS39w248YBAwAAAAEAAAADAAAAAAAAAAMAAAABAAAAAwAAAAAAAABHAAAAHBMAAP////8D AAAACAD/f/9/7RIBAAkAAAN9CQAADABMAAAAAAAEAAAAAwEIAAUAAAALAgAAAAAFAAAADAI7HjUe BAAAAC4BGAAcAAAA+wIQAAcAAAAAALwCAAAAhgECAiJTeXN0ZW0AHjUeAAC7LAAAKKkRAHCDgjlQ TBoADAIAAAQAAAAtAQAAHAAAAPsCnP8AAAAAAACQAQAAAAAEQAASVGltZXMgTmV3IFJvbWFuAAAA AAAAAAAAAAAAAAAAAAAEAAAALQEBAAQAAAACAQEABQAAAAkCAAAAAg0AAAAyCm4MogUBAAQAAAAA ANAg0CAg80sAAwAAAB4ACAAAAPoCAAADAAAAAAAAAAQAAAAtAQIABwAAAPwCAQAAAAAAAAAEAAAA LQEDAAgAAAAlAwIAUwS2AFQEnQQIAAAA+gIAAAAAAAAAAAAABAAAAC0BBAAHAAAA/AIAAP///wAA AAQAAAAtAQUABAAAAPABAgAEAAAAJwH//wMAAAAeAAcAAAD8AgAA2NjYAAAABAAAAC0BAgAEAAAA BgEBAAgAAAD6AgUAAAAAAP///wAEAAAALQEGACoAAAAkAxMA+wZaA7cBWgOnAXwDmwGfA5UBwgOS AecDlQELBJsBLgSnAVEEtwFzBPsGcwQJB1EEFAcuBBsHCwQeB+cDGwfCAxQHnwMJB3wD+wZaAwQA AAAtAQQABAAAAAYBAQAEAAAALQEFAAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAAAAAAAAQAAAAt AQcABAAAAC0BAwAqAAAAJQMTAPsGWgO3AVoDpwF8A5sBnwOVAcIDkgHnA5UBCwSbAS4EpwFRBLcB cwT7BnMECQdRBBQHLgQbBwsEHgfnAxsHwgMUB58DCQd8A/sGWgMEAAAALQEEAAQAAAAtAQUABAAA APABBwAEAAAAJwH//wMAAAAeAAgAAAD6AgAAAwAAAAAAAAAEAAAALQEHAAQAAAAtAQMAFgAAACUD CQC3AVoDxQF8A9EBnwPXAcID2gHnA9cBCwTRAS4ExQFRBLcBcwQEAAAALQEEAAQAAAAtAQUABAAA APABBwAEAAAAJwH//wMAAAAeAAgAAAD6AgAAAwAAAAAAAAAEAAAALQEHAAQAAAAtAQMADAAAACQD BAANAA8ADQC2AN8BtgDfAQ8ABAAAAC0BBAAEAAAALQEFAAQAAADwAQcABAAAACcB//8DAAAAHgAH AAAAFgSzDOsGNwxIBgQAAAAtAQEABAAAAAIBAQAcAAAA+wKU/wAAAAAAAJABAAAAAARAACJBcmlh bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAtAQcADgAAADIKnAxIBgIABABIBjcM6waz DE1TWgBIAAQAAAAtAQEADQAAADIKnAzqBgEABABIBjcM6wazDCDzTAAEAAAAJwH//wMAAAAeAAgA AAD6AgAAAwAAAAAAAAAEAAAALQEIAAQAAAAtAQMADAAAACQDBABsAw8AbAO2ADwFtgA8BQ8ABAAA AC0BBAAEAAAALQEFAAQAAADwAQgABAAAACcB//8DAAAAHgAHAAAAFgQwDUAKNwyuCQQAAAAtAQEA BAAAAAIBAQAEAAAALQEHAAUAAAAJAgAAAAIOAAAAMgqbDK4JAgAEAK4JNwxACjANQlNIAEgABAAA AC0BAQANAAAAMgqbDD4KAQAEAK4JNwxACjANIPNMAAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAA AAAAAAQAAAAtAQgABAAAAC0BAwAMAAAAJAMEAMYGDwDGBrYAmAi2AJgIDwAEAAAALQEEAAQAAAAt AQUABAAAAPABCAAEAAAAJwH//wMAAAAeAAcAAAAWBLUMnA1CDOkMBAAAAC0BAQAEAAAAAgEBABwA AAD7Apz/AAAAAAAAkAEAAAAABEAAIkFyaWFsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAA AC0BCAAFAAAACQIAAAACDgAAADIKngzpDAIABADpDEIMnA21DEFSQwBIAAQAAAAtAQEADQAAADIK ngx0DQEABADpDEIMnA21DCDzSwAEAAAAJwH//wMAAAAeAAgAAAD6AgAAAwAAAAAAAAAEAAAALQEJ AAQAAAAtAQMACAAAACUDAgD2ALYA9gCdBAQAAAAtAQQABAAAAC0BBQAEAAAA8AEJAAQAAAAnAf// AwAAAB4ACAAAAPoCAAADAAAAAAAAAAQAAAAtAQkABAAAAC0BAwAIAAAAJQMCALQHtgC0B50EBAAA AC0BBAAEAAAALQEFAAQAAADwAQkABAAAACcB//8EAAAA8AECAAMAAAAeAAcAAAD8AgAA////AAAA BAAAAC0BAgAEAAAABgEBAAQAAAAtAQYAGgAAACQDCwD2AFwBTgK/AU4CpAFaBqQBWga/AbQHXAFa BvgAWgYVAU4CFQFOAvgA9gBcAQQAAAAtAQQABAAAAAYBAQAEAAAALQEFAAgAAAD6AgAAAwAAAP// /wAEAAAALQEJAAQAAAAtAQMAGgAAACQDCwD2AFwBTgK/AU4CpAFaBqQBWga/AbQHXAFaBvgAWgYV AU4CFQFOAvgA9gBcAQQAAAAtAQQABAAAAC0BBQAEAAAA8AEJAAQAAAAnAf//AwAAAB4ACAAAAPoC AAADAAAAAAAAAAQAAAAtAQkABAAAAC0BAwAaAAAAJQMLAPYAXAFOAr8BTgKkAVoGpAFaBr8BtAdc AVoG+ABaBhUBTgIVAU4C+AD2AFwBBAAAAC0BBAAEAAAALQEFAAQAAADwAQkABAAAACcB//8DAAAA HgAHAAAAFgThDZ8MSA1wBwQAAAAtAQEABAAAAAIBAQAcAAAA+wK9/wAAAAAAAJABAAAAAARAACJB cmlhbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAtAQkABQAAAAkCAAAAAkwAAAAyCoUN cAcrAAQAcAdIDZ8M4Q0xLiBOZXR3b3JrIEVudHJ5IGFuZCBOZXR3b3JrIEF1dGhlbnRpY2F0aW9u ACUAEwATADAAJQATAC8AJQAWACIAEwAtACQAEwAWACEAEwAlACUAJQATADAAJQATAC8AJQAWACIA EwAtACQAEgAlACUAJQATAA8AIgAlABIADwAlACUABAAAAC0BAQANAAAAMgqFDZ8MAQAEAHAHSA2f DOENIPNKAAQAAAAnAf//AwAAAB4ABAAAAC0BAgAEAAAABgEBAAQAAAAtAQYAGgAAACQDCwD2AGcC TgLLAk4CrwJaBq8CWgbLArQHZwJaBgMCWgYeAk4CHgJOAgMC9gBnAgQAAAAtAQQABAAAAAYBAQAE AAAALQEFAAgAAAD6AgAAAwAAAP///wAEAAAALQEKAAQAAAAtAQMAGgAAACQDCwD2AGcCTgLLAk4C rwJaBq8CWgbLArQHZwJaBgMCWgYeAk4CHgJOAgMC9gBnAgQAAAAtAQQABAAAAC0BBQAEAAAA8AEK AAQAAAAnAf//AwAAAB4ACAAAAPoCAAADAAAAAAAAAAQAAAAtAQoABAAAAC0BAwAaAAAAJQMLAPYA ZwJOAssCTgKvAloGrwJaBssCtAdnAloGAwJaBh4CTgIeAk4CAwL2AGcCBAAAAC0BBAAEAAAALQEF AAQAAADwAQoABAAAACcB//8DAAAAHgAHAAAAFgTsDkUMUw7EBwQAAAAtAQEABAAAAAIBAQAEAAAA LQEJAAUAAAAJAgAAAAJDAAAAMgqQDsQHJQAEAMQHUw5FDOwOMi4gVHJhbnNwb3J0IENvbm5lY3Rp b24gRXN0YWJsaXNobWVudAAlABMAEwApABYAJQAlACIAJQAlABUAEwATADAAJQAlACUAJQAhABMA DwAlACUAEgAtACEAEwAlACUADwAOACIAJAA5ACUAJAATAAQAAAAtAQEADQAAADIKkA5FDAEABADE B1MORQzsDiDzSgAEAAAAJwH//wMAAAAeAAgAAAD6AgAAAwAAAAAAAAAEAAAALQEKAAQAAAAtAQMA CAAAACUDAgBiB8ID9gDCAwQAAAAtAQQABAAAAC0BBQAEAAAA8AEKAAQAAAAnAf//BAAAAPABAgAD AAAAHgAHAAAA/AIAAAAAAAAAAAQAAAAtAQIABAAAAAYBAQAEAAAALQEGAAwAAAAkAwQAWgekA7QH wgNaB+ADWgekAwQAAAAtAQQABAAAAAYBAQAEAAAALQEFAAQAAAAnAf//AwAAAB4ABwAAABYEIxAJ C4oPoQgEAAAALQEBAAQAAAACAQEABAAAAC0BCQAFAAAACQIAAAACLAAAADIKxw+hCBYABAChCIoP CQsjEDMuIFJvdXRlciBTb2xpY2l0YXRpb24lABMAEwAwACUAJQATACUAFgASAC0AJQAPAA4AIgAP ABMAJAATAA8AJQAkAAQAAAAtAQEADQAAADIKxw8ICwEABAChCIoPCQsjECDzSgAEAAAAJwH//wMA AAAeAAcAAAAWBDwR6giPEHQIBAAAAC0BAQAEAAAAAgEBABwAAAD7ArX/AAAAAAAAkAEAAAAABEAA IkFyaWFsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAC0BCgAFAAAACQIAAAACEAAAADIK 0xB0CAMABAB0CI8Q6gg8EUlTRgAVADIALgAEAAAALQEBAA0AAAAyCtMQ6QgBAAQAdAiPEOoIPBEg 80sABAAAACcB//8DAAAAHgAHAAAAFgSREGUL+A+VCAQAAAAtAQEABAAAAAIBAQAEAAAALQEJAAUA AAAJAgAAAAIuAAAAMgo1EJUIFwAEAJUI+A9lC5EQNC4gUm91dGVyIEFkdmVydGlzZW1lbnQAJQAT ABMAMAAlACUAEwAlABYAEgAtACUAIQAlABYAEwAPACIAJAA4ACUAJQASAAQAAAAtAQEADQAAADIK NRBkCwEABACVCPgPZQuRECDzSgAEAAAAJwH//wMAAAAeAAgAAAD6AgAAAwAAAAAAAAAEAAAALQEL AAQAAAAtAQMACAAAACUDAgC0BzsERwE8BAQAAAAtAQQABAAAAC0BBQAEAAAA8AELAAQAAAAnAf// AwAAAB4ABAAAAC0BAgAEAAAABgEBAAQAAAAtAQYADAAAACQDBABPAVkE9gA7BE8BHgRPAVkEBAAA AC0BBAAEAAAABgEBAAQAAAAtAQUABAAAACcB//8EAAAALQEAAAUAAAAUAgAAAAAFAAAAEwLQIAAA BQAAABMC0CDQIAUAAAATAgAA0CAFAAAAEwIAAAAABQAAABQCAQABAAUAAAATAs8gAQAFAAAAEwLP IM8gBQAAABMCAQDPIAUAAAATAgEAAQAFAAAAFAICAAIABQAAABMCziACAAUAAAATAs4gziAFAAAA EwICAM4gBQAAABMCAgACAAUAAAAUAgMAAwAFAAAAEwLNIAMABQAAABMCzSDNIAUAAAATAgMAzSAF AAAAEwIDAAMABQAAABQCBAAEAAUAAAATAswgBAAFAAAAEwLMIMwgBQAAABMCBADMIAUAAAATAgQA BAAFAAAAFAIFAAUABQAAABMCyyAFAAUAAAATAssgyyAFAAAAEwIFAMsgBQAAABMCBQAFAAUAAAAU AgYABgAFAAAAEwLKIAYABQAAABMCyiDKIAUAAAATAgYAyiAFAAAAEwIGAAYABQAAABQCBwAHAAUA AAATAskgBwAFAAAAEwLJIMkgBQAAABMCBwDJIAUAAAATAgcABwAFAAAAFAIIAAgABQAAABMCyCAI AAUAAAATAsggyCAFAAAAEwIIAMggBQAAABMCCAAIAAUAAAAUAgkACQAFAAAAEwLHIAkABQAAABMC xyDHIAUAAAATAgkAxyAFAAAAEwIJAAkABQAAABQCCgAKAAUAAAATAsYgCgAFAAAAEwLGIMYgBQAA ABMCCgDGIAUAAAATAgoACgAFAAAAFAILAAsABQAAABMCxSALAAUAAAATAsUgxSAFAAAAEwILAMUg BQAAABMCCwALAAUAAAAUAgwADAAFAAAAEwLEIAwABQAAABMCxCDEIAUAAAATAgwAxCAFAAAAEwIM AAwABQAAABQCDQANAAUAAAATAsMgDQAFAAAAEwLDIMMgBQAAABMCDQDDIAUAAAATAg0ADQAFAAAA FAIOAA4ABQAAABMCwiAOAAUAAAATAsIgwiAFAAAAEwIOAMIgBQAAABMCDgAOAAUAAAAUAg8ADwAF AAAAEwLBIA8ABQAAABMCwSDBIAUAAAATAg8AwSAFAAAAEwIPAA8ABQAAABQCEAAQAAUAAAATAsAg EAAFAAAAEwLAIMAgBQAAABMCEADAIAUAAAATAhAAEAAFAAAAFAIRABEABQAAABMCvyARAAUAAAAT Ar8gvyAFAAAAEwIRAL8gBQAAABMCEQARAAUAAAAUAhIAEgAFAAAAEwK+IBIABQAAABMCviC+IAUA AAATAhIAviAFAAAAEwISABIAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAABQECAAAAAAAAAAAAAAAAAAAAAAABAAAAAtXN1ZwuGxCT lwgAKyz5rjAAAADsAAAADAAAAAEAAABoAAAADwAAAHAAAAAFAAAAgAAAAAYAAACIAAAAEQAAAJAA AAAXAAAAmAAAAAsAAACgAAAAEAAAAKgAAAATAAAAsAAAABYAAAC4AAAADQAAAMAAAAAMAAAAzQAA AAIAAACoAwAAHgAAAAgAAABOb2tpYQAAAAMAAAABAAAAAwAAAAEAAAADAAAAAQAAAAMAAACoGQsA CwAAAAAAAAALAAAAAAAAAAsAAAAAAAAACwAAAAAAAAAeEAAAAQAAAAEAAAAADBAAAAIAAAAeAAAA BgAAAFRpdGxlAAMAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAFAAQABIAAQClAA8AAgAAAAAAAAAAADwAAEDx/wIAPAAMAAAAAAAAAAAABgBO AG8AcgBtAGEAbAAAAAIAAAAUAENKGABhShgAbUgJBHNICQR0SAkEAAAAAAAAAAAAAAAAAAAAAAAA RABBQPL/oQBEAAwBAAAAAAAAAAAWAEQAZQBmAGEAdQBsAHQAIABQAGEAcgBhAGcAcgBhAHAAaAAg AEYAbwBuAHQAAAAAAFIAaUDz/7MAUgAMAQAAAAAAAAAADABUAGEAYgBsAGUAIABOAG8AcgBtAGEA bAAAABwAF/YDAAA01gYAAQoDbAA01gYAAQUDAABh9gMAAAIACwAAACgAa0D0/8EAKAAAAQAAAAAA AAAABwBOAG8AIABMAGkAcwB0AAAAAgAAAAAAAABEAJlAAQDyAEQADAEAACM/4wAAAAwAQgBhAGwA bABvAG8AbgAgAFQAZQB4AHQAAAACAA8AEABDShIAT0oDAFFKAwBhShIAAAAAABkAAAAxAAAASgAA AFIAAABWAAAAWgAAAF4AAAABAAAAAAAAAAAA/////xQEAAAAAAAAAQAAAAAAAAAAAP////8TBAAA AAAAAAEAAAAAAAAAAAD/////EgQAAAAAAAABAAAAAAAAAAAA/////w0EAAAAAAAAAQAAAAAAAAAA AP////8LBAAAAAAAAAEAAAAAAAAAAAD/////CQQAAAAAAAD/////AAAAAAAAAAAAAAAAAAAAAAAA AAAAABkAAAAxAAAASgAAAFIAAABWAAAAWgAAAF0AAAAAAAAAABABAAAAAAACAAAAAAADAAAAAAAE AAAAAAAFAAAAABD//wAAAAAAAAAAXgAAAB8AAA4AABwA/////wEAAAAEIAAA//8BAEBWwwAAAAAA AAAAAF4AAAAAAAAAAAAAAAAAAgAAABoAAAAbAAAAMgAAADMAAABLAAAATAAAAFMAAABUAAAAVwAA AFgAAABbAAAAXwAAAJgAAAAAMAAAAAAAAACAAAAAgAAAANgAAKB0gACYQAAAADAAAAAAAAAAgAAA AIAAAAAAAAAAAAABmgAAAAAwAAAAAAAAAIAAAACAAAAAAP+/BAGAAJhAAAAAMAAAAAAAAACAAAAA gAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAwAAAABgAAAAcA/78BAKsHmEAAAAAwAAAAAAAAAIAAAACA AAAAAAAAAAAAAQgAAAAAAAAANxcAAEkAAAAGAAAABwD/vwEAqweYQAAAADAAAAAAAAAAgAAAAIAA AAAAAAAAAAABCAAAAAAAAACnDwAAUQAAAAYAAAAHAP+/AQCrB5hAAAAAMAAAAAAAAACAAAAAgAAA AAAAAAAAAAH/vwCa/78AADCaAABVAAAABgAAAAcA/78BAKsHmEAAAAAwAAAAAAAAAIAAAACAAAAA AAAAAAAAAf+/AIn/vwYDIIsAADiPAAAHEAAAAAD/vwAAiQcABgAAXgYAAAQAAAAABgAAXgYAAAUA AAAABgAAXQYAAAYAAAAPAADwOAAAAAAABvAYAAAAFwQAAAIAAAAWAAAAAQAAAAEAAAAXAAAAQAAe 8RAAAAD//wAAAAD/AICAgAD3AAAQAA8AAvCEDAAAEAAI8AgAAAAWAAAAFgQAAA8AA/AiDAAADwAE 8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAEAAAFAAAADwAD8OoLAAAPAATw kgAAAAEACfAQAAAAAAAAAAAAAAB0EwAAJAsAAAIACvAIAAAAAgQAAAECAABDAAvwGAAAAH8AwAHA Af8BAAABAIgDAAAAAL8DAAAgAHMAIvEqAAAAjwMAAAAAkAMDAAAAkQMAAAAAkgMDAAAAvwMAAgAC AAUAAAAAPwUBAAEAAAAQ8AQAAAAAAAAAAAAR8AQAAAAAAAABDwAE8GAAAACyBArwCAAAAAMEAAAC CgAAYwAL8CQAAAB/AAQABABYAQAAAAB/ATkAOQC/AQEAEQD/AQAACAA/AwAAEAAAAA/wEAAAAAAA AAAAAAAAdBMAACQLAAAAABHwBAAAAAAAAAIPAATwSAAAAEIBCvAIAAAABAQAAAIKAAAjAAvwDAAA AMsBKyoAAP8BCAAIAAAAD/AQAAAApwkAAKUBAACoCQAAnQgAAAAAEfAEAAAAAAAAAg8ABPBWAQAA AgAK8AgAAAAFBAAAAgoAALMAC/AaAQAAQgF9DgAAQwGnBAAARAEEAAAARcFkAAAARsFuAAAAfwEB AAEAgAEAAAAAgQHY2NgAvwEQABAA/wEQABgAiAMAAAAAGQAZAPD/5w0AAJMAAABiAGUAPQDQAB0A PQEMAKsBAAAbAgAAjAIMAPwCHQBqAz0A1wNiAEIEkwCnBOcNpwQYDkIEQA7XA10OagNxDvwCfQ6M An0OGwJxDqsBXQ49AUAO0AAYDmUA5w0AADQAOAACAABAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAA rAEAAKwBAACsAQAArAEAAKwBYACAAAAP8BAAAABWAgAAVQMAANMQAAD8BwAAAAAR8AQAAAAAAAAC DwAE8GABAAACAArwCAAAAAYEAAACCgAA0wAL8CQBAABCAX0OAABDAacEAABEAQQAAABFwWQAAABG wWwAAAB/AQEAAQC/AQAAEADAAQAAAADEAQAAAADLAeIOAADOAQAAAAD/ARgAGACIAwAAAAAZABkA 8P/nDQAAkwAAAGIAZQA9ANAAHQA9AQwAqwEAABsCAACMAgwA/AIdAGoDPQDXA2IAQgSTAKcE5w2n BBgOQgRADtcDXQ5qA3EO/AJ9DowCfQ4bAnEOqwFdDj0BQA7QABgOZQDnDQAAMwA0AAIAAEAArAEA AKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAA rAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArACAAAAP8BAAAABWAgAAVQMAANMQ AAD8BwAAAAAR8AQAAAAAAAACDwAE8PgAAAACAArwCAAAAAcEAAACCgAA0wAL8LwAAABCAZMAAABD AacEAABEAQQAAABFwTAAAABGwTgAAAB/AQEAAQC/AQAAEADAAQAAAADEAQAAAADLAeIOAADOAQAA AAD/ARgAGACIAwAAAAAMAAwA8P8AAAAAMQBlAFkA0AB2AD0BigCrAZMAGwKTAIwCigD8AnYAagNZ ANcDMQBCBAAApwQZABwAAgAAQACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACs AQAArAEAAKwAgAAAD/AQAAAA6QIAAFUDAAB8AwAA/AcAAAAAEfAEAAAAAAAAAg8ABPBOAAAAEgAK 8AgAAAAIBAAAAgoAADMAC/ASAAAAvwEQABAAywErKgAA/wEIAAgAAAAP8BAAAAArAAAAKwAAAC4E AAClAQAAAAAR8AQAAAAAAAACDwAE8H4AAAASAArwCAAAAAkEAAACCgAAkwAL8DYAAACAAAAABgCB AAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAAHkB AABdAAAA4gIAAHEBAAAAABHwBAAAAAAAAAIAAA3wBAAAAAAABgAPAATwTgAAABIACvAIAAAACgQA AAIKAAAzAAvwEgAAAL8BEAAQAMsBKyoAAP8BCAAIAAAAD/AQAAAAjQcAACsAAADECwAApQEAAAAA EfAEAAAAAAAAAg8ABPB+AAAAEgAK8AgAAAALBAAAAgoAAJMAC/A2AAAAgAAAAAUAgQAAAAAAggAA AAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAAAJCQAAXQAAAEoK AACFAgAAAAAR8AQAAAAAAAACAAAN8AQAAAAAAAUADwAE8E4AAAASAArwCAAAAAwEAAACCgAAMwAL 8BIAAAC/ARAAEADLASsqAAD/AQgACAAAAA/wEAAAAO0OAAArAAAAQBMAAKUBAAAAABHwBAAAAAAA AAIPAATwfgAAABIACvAIAAAADQQAAAIKAACTAAvwNgAAAIAAAAAEAIEAAAAAAIIAAAAAAIMAAAAA AIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAWg8AAGgAAAAfEQAAYgIAAAAA EfAEAAAAAAAAAgAADfAEAAAAAAAEAA8ABPBIAAAAQgEK8AgAAAAOBAAAAgoAACMAC/AMAAAAywEr KgAA/wEIAAgAAAAP8BAAAAAJEQAApQEAAAoRAACVCAAAAAAR8AQAAAAAAAACDwAE8EgAAABCAQrw CAAAAA8EAAACCgAAIwAL8AwAAADLASsqAAD/AQgACAAAAA/wEAAAABECAAClAQAAEgIAAJ0IAAAA ABHwBAAAAAAAAAIPAATwSAAAAEIBCvAIAAAAEAQAAEIKAAAjAAvwDAAAAMsBKyoAAP8BCAAIAAAA D/AQAAAA5gIAAO0GAAAJEQAA7gYAAAAAEfAEAAAAAAAAAg8ABPCuAAAAAgAK8AgAAAARBAAAAgoA ALMAC/ByAAAAQgHpAAAAQwGcAAAARAEEAAAARcEQAAAARsEaAAAAfwEBAAEAgAEAAAAAgQEAAAAA vwEQABAA/wEQABgAiAMAAAAABAAEAPD/6QCcAAAATgDpAAAA6QCcAAoADAACAABAAKwBAACsAQAA rAEAAKwBYACAAAAP8BAAAAARAgAAnwYAAPoCAAA7BwAAAAAR8AQAAAAAAAACDwAE8H4AAAASAArw CAAAABIEAAACCgAAkwAL8DYAAACAAAAAAwCBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAAEIGAAD8CAAAuAcAACQLAAAAABHwBAAAAAAAAAIAAA3w BAAAAAAAAwAPAATwfgAAABIACvAIAAAAEwQAAAIKAACTAAvwNgAAAIAAAAACAIEAAAAAAIIAAAAA AIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAfwUAALoDAAAmDgAA 4gUAAAAAEfAEAAAAAAAAAgAADfAEAAAAAAACAA8ABPB+AAAAEgAK8AgAAAAUBAAAAgoAAJMAC/A2 AAAAgAAAAAEAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgA AAAP8BAAAACKBQAA8gUAAKYPAAAaCAAAAAAR8AQAAAAAAAACAAAN8AQAAAAAAAEADwAE8EgAAABC AQrwCAAAABUEAAACCgAAIwAL8AwAAADLASsqAAD/AQgACAAAAA/wEAAAABECAACbBAAAMhAAAJwE AAAAABHwBAAAAAAAAAIPAATwrgAAAAIACvAIAAAAFgQAAAIKAACzAAvwcgAAAEIB6QAAAEMBnAAA AEQBBAAAAEXBEAAAAEbBGgAAAH8BAQABAIABAAAAAIEBAAAAAL8BEAAQAP8BEAAYAIgDAAAAAAQA BADw/wAAAADpAE4AAACcAAAAAAAKAAwAAgAAQACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAAIBAA AE0EAAAJEQAA6QQAAAAAEfAEAAAAAAAAAg8ABPBCAAAAEgAK8AgAAAABBAAAAA4AAFMAC/AeAAAA vwEAABAAywEAAAAA/wEAAAgABAMJAAAAPwMBAAEAAAAR8AQAAAAAAAABAAAAAF4AAAACBAAA9v// /wAAAABqEwAAJAsAAHSAAAAAAAAAAAABAAAAAgAAAAIAAAAaAAAAGgAAABsAAAAbAAAAMgAAADIA AAAzAAAAMwAAAEsAAABLAAAATAAAAEwAAABTAAAAUwAAAFQAAABUAAAAVwAAAFcAAABYAAAAWAAA AFsAAABbAAAAXwAAAAMABwAEAAcABAADAAQABwAEAAMABAAHAAQAAwAEAAcABAADAAQABwAEAAMA BAAHAAQAAwAAAAAAAQAAAAIAAAACAAAAGgAAABoAAAAbAAAAGwAAADIAAAAyAAAAMwAAADMAAABL AAAASwAAAEwAAABMAAAAUwAAAFMAAABUAAAAVAAAAFcAAABXAAAAWAAAAFgAAABbAAAAWwAAAF8A AAADAAcABAAHAAQAAwAEAAcABAADAAQABwAEAAMABAAHAAQAAwAEAAcABAADAAQABwAEAAMA/0AB AQEAAAAAAAEAAAAwTk0QAQABAAAAAAAAAAAAAQAAAAAAAAAkACQAdwSAAwIQAAAAAAAAAF4AAADw AQAMAEAAAP//AgAAAAcAVQBuAGsAbgBvAHcAbgAEAHMAeQBhAG0A//8CAAgAAAAAAAAAAAAAAAAA AAAAAAAAAQD//wIAAAAAAAAA//8AAAIA//8AAAAA//8AAAIA//8AAAAABAAAAEcGkAEAAAACAgYD BQQFAgMAAAADAAAAAAAAAAAAAAAAAQAAAAAAAABUAGkAbQBlAHMAIABOAGUAdwAgAFIAbwBtAGEA bgAAADUGkAECAAACAAUAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAgAAAAABTAHkAbQBiAG8AbAAA ADMGkAEAAAACCwYEAgICAgIAAAADAAAAAAAAAAAAAAAAAQAAAAAAAABBAHIAaQBhAGwAAABDBpAB AADSFAADwgC//8ZgAAAAAwAAAAAAAAAAAAAAAAEAAAAAAAAATAB1AGMAaQBkAGEAIABHAHIAYQBu AGQAZQAAACAABAAxCIgAAPDQAgAAaAEAAAAAU6SlxlOkpcYAAAAAAgAAAAAAAAAAAAAAAAABAAEA AAAEAAMQAQAAAAAAAAAAAAAAAQABAAAAAQAAAAAAAAAhAwDwEAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAClBsAHtAC0AIAAEjQAABEAGQBkAAAAGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAgB AGAA8BAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/DwAAAAAAAAAAAAD/ //9/////f////3////9/////fzEAAAD///9/o3AJAP//EgAAAAAAAAAAAAAAAAAAAA8AQgBhAHMA YQB2AGEAcgBhAGoAIABQAGEAdABpAGwADwBCAGEAcwBhAHYAYQByAGEAagAgAFAAYQB0AGkAbAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AQBDAG8AbQBwAE8AYgBqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAABIAAgETAAAAFgAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAGAAAAWAAAAAAAAAADAE8AYgBqAEkAbgBmAG8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAEgACAf///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAgAAAAEAAAAAAAAAE8AYgBqAGUAYwB0AFAAbwBvAGwAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWAAEAFQAAABgAAAD/////AAAAAAAA AAAAAAAAAAAAAAAAAACgaJKkVufGAaBokqRW58YBAAAAAAAAAAAAAAAAVwBvAHIAZABEAG8AYwB1 AG0AZQBuAHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoAAgD///// //////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAQAAABAAAAAAAAAA AAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAQD+/wMKAAD/////BwkCAAAAAADAAAAAAAAARhcAAABNaWNyb3NvZnQgV29yZCBQaWN0 dXJlAAoAAABNU1dvcmREb2MADwAAAFdvcmQuUGljdHVyZS44APQ5snEAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQD+/wMKAAD/////BwkCAAAAAADAAAAAAAAARhcA AABNaWNyb3NvZnQgV29yZCBQaWN0dXJlAAoAAABNU1dvcmREb2MADwAAAFdvcmQuUGljdHVyZS44 APQ5snEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMADQAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8AAAUBAgAA AAAAAAAAAAAAAAAAAAAAAQAAAOCFn/L5T2gQq5EIACsns9kwAAAArAEAABIAAAABAAAAmAAAAOyl wQAHYQkEAADwEr8AAAAAAAERAAEAAQAGAABeBgAADgBqYmpihCyELAAAAAAAAAAAAAAAAAAAAAAA AAkEFgAkDgAA7k4AAO5OAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbAAAAAAAAAP//DwAAAAAA AAAAAP//DwAAAAAAAAAAAP//DwAAAAAAAAAAAAAAAAAAAAAAiAAAAAAAdAEAAAAAAAB0AQAAdAEA AAAAAAB0AQAAAAAAAHgCAAAAAAAAeAIAAAAAAAB4AgAAFAAAAAAAAAAAAAAArgIAAAAAAABSBAAA AAAAAFIEAAAAAAAAUgQAAAAAAABSBAAADAAAAF4EAAAMAAAArgIAAAAAAABEEwAA+gAAAHYEAAAA AAAAdgQAAAAAAAB2BAAAAAAAAHYEAAAAAAAAdgQAAAAAAABlEQAAAAAAAGURAAAAAAAAZREAAAAA AAClEgAAAgAAAKcSAAAAAAAApxIAAAAAAACnEgAAAAAAAKcSAAAAAAAApxIAAAAAAACnEgAALAAA AD4UAABSAgAAkBYAAGYAAADTEgAAFQAAAAAAAAAAAAAAAAAAAAAAAAB4AgAAAAAAAGURAAAAAAAA AAAAAAAAAAAAAAAAAAAAAEMRAAAiAAAAZREAAAAAAABlEQAAAAAAAGURAAAAAAAA0xIAAAAAAACl EgAAAAAAAHQBAAAAAAAAdAEAAAAAAAB2BAAAAAAAAAAAAAAAAAAAdgQAAM0MAADoEgAAIAAAAKUS AAAAAAAApRIAAAAAAAClEgAAAAAAAGURAACgAAAAdAEAALoAAAB2BAAAAAAAAHgCAAAAAAAAdgQA AAAAAAClEgAAAAAAAAAAAAAAAAAApRIAAAAAAACMAgAAFAAAAKACAAAOAAAAdAEAAAAAAAB0AQAA AAAAAHQBAAAAAAAAdAEAAAAAAABlEQAAAAAAAKUSAAAAAAAAAAAAAAAAAAClEgAAAAAAAAAAAAAA AAAApRIAAAAAAAAuAgAASgAAAHgCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClEgAAAAAAAAAAAAAAAAAAagQAAAwAAACDRpXAAAAA AAAAAAAAAAAAUgQAAAAAAAAFEgAAoAAAAKUSAAAAAAAAAAAAAAAAAAClEgAAAAAAAAgTAAA8AAAA RBMAAAAAAAClEgAAAAAAAPYWAAAAAAAApRIAAAAAAAD2FgAAAAAAAKUSAAAAAAAApRIAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArgIAAAAAAACuAgAApAEAAFIEAAAA AAAAAAAAAAAAAAAAAAAAAAAAAK4CAAAAAAAArgIAAAAAAABSBAAAAAAAAAQAAQEPAAQBAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNMi4g Um91dGVyIEFkdmVydGlzZW1lbnQNDTEuIFJvdXRlciBTb2xpY2l0YXRpb24NDVRyYW5zcG9ydCBD b25uZWN0aW9uSVNGDQ1BU04gR1cNDUJTDQ1NUw0NDQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAEG AAACBgAAGQYAABsGAAAxBgAAMwYAAEcGAABKBgAATAYAAE8GAABSBgAAVAYAAFYGAABYBgAAWgYA AF4GAADt6dvp2+m6oumQbunb6dvpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEIACIEWaFoDiQAXaMQE 8ABCKgFDShYAT0oCAFFKAgBeSgIAYUoWAGNIAQBkaAAAAABkaAAAAABkaKKTpYZwaAAAAAAAIxZo WgOJAEIqAUNKFgBPSgIAUUoCAF5KAgBhShYAcGgAAAAALgEIgQRIAQAFaKKTpYYWaFoDiQA1CIFC KgFPSgIAUUoCAFwIgV5KAgBwaAAAAAAAQAAIgRZoWgOJABdoxATwADUIgUIqAU9KAgBRSgIAXAiB XkoCAGNIAQBkaAAAAABkaAAAAABkaKKTpYZwaAAAAAAAGxZoWgOJAEIqAU9KAgBRSgIAXkoCAHBo AAAAAAYWaFoDiQAAIwNqAAAAABZoWgOJAFUIAWFKFABtSAAEbkgABHNIAAR0SAAEABAABgAAAgYA ABoGAAAbBgAAMgYAADMGAABLBgAATAYAAFMGAABUBgAAVwYAAFgGAABbBgAAXAYAAF0GAABeBgAA /QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAA AAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAA AAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0A AAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAADwAGAAACBgAA XQYAAP7+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQECIgA6cFoDiQAf sMBOILDATiGwOA4isBQtI5CoBySQ7DslsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAFMAdQBtAG0A YQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAAC ARcAAAAZAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcBAACQbQAA AAAAAAUARABvAGMAdQBtAGUAbgB0AFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBu AAAAAAAAAAAAAAA4AAIA////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAXgEAAAAQAAAAAAAAXwAxADIAMAA5ADQANQA3ADIAOQAwAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgAAQESAAAAIgAAABwAAAAHCQIAAAAAAMAAAAAAAABG AAAAAEBZrKRW58YBsC63pFbnxgEAAAAAAAAAAAAAAABEAGEAdABhAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgACAf///////////////wAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGYBAAAAEAAAAAAAAP7/AAADCgEAAAAA AAAAAAAAAAAAAAAAAAEAAADghZ/y+U9oEKuRCAArJ7PZMAAAAGBtAAARAAAAAQAAAJAAAAACAAAA mAAAAAMAAACkAAAABAAAALAAAAAFAAAAyAAAAAcAAADUAAAACAAAAOQAAAAJAAAA/AAAABIAAAAI AQAACgAAACQBAAAMAAAAMAEAAA0AAAA8AQAADgAAAEgBAAAPAAAAUAEAABAAAABYAQAAEwAAAGAB AAARAAAAaAEAAAIAAAAQJwAAHgAAAAEAAAAA5UyQHgAAAAEAAAAA5UyQHgAAABAAAABCYXNhdmFy YWogUGF0aWwAHgAAAAEAAAAA5UyQHgAAAAcAAABOb3JtYWwAAR4AAAAQAAAAQmFzYXZhcmFqIFBh dGlsAB4AAAACAAAAMgBMkB4AAAAUAAAATWljcm9zb2Z0IFdvcmQgMTEuMgBAAAAAAAAAAAAAAABA AAAAAKKzZFt8xgFAAAAAAKKzZFt8xgEDAAAAAQAAAAMAAAAAAAAAAwAAAAAAAAADAAAAAAAAAEcA AADwawAA/v///1BJQ1Rr6AAAAAAD8APwABEC/wwA//4AAAEsAAABLAAAAAAAABBoEGgAAAAAAKEB 8gAETVNXRAAeAAEACgAAAAAQaBBoACwAEgfaD1RpbWVzIE5ldyBSb21hbgADB9oADQAyAAYAGAAA AC0ACAAX/8AAAAAAAC4ABAAAAAAAFgeuACgBxgL2ASAAoQCMAAgBmAL0A+sHAgChAIwACAAAAAAA AAAAAKAAjQChAGQHV1BQTlQCASVQREYtMS4zCiXE5fLl66fzoNDExgoyIDAgb2JqCjw8IC9MZW5n dGggNCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjaK1QIVChUMFEoVzBU8ALi LAULBV8FfediQwXnYAUDMAx2VjA0MjdUMLE0U8iFMC3MLBRyFIIVAgHEOQ2oCmVuZHN0cmVhbQpl bmRvYmoKNCAwIG9iago2MgplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDYg MCBSIC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRzIDIgMCBSIC9NZWRpYUJveApbMTI2OCA0OTMg MTI3NSA4NzJdID4+CmVuZG9iagozIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiBdIC9Db2xvclNw YWNlIDw8IC9DczEgNSAwIFIgPj4gPj4KZW5kb2JqCjcgMCBvYmoKPDwgL0xlbmd0aCA4IDAgUiAv TiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0K eNp9kk9IFFEcx7+zJUKsBWUmUvBOtgdXBu1gHYzd9W/Ktqxrpgiyzr7ZHZ2dnd7MbiUeQoguQdYx uljRSTqGBw8dAg8RgmJdIugoGQSCl5DtNzO77ojagzfvM7//v997QF0obZp6gAF5wxbJ/ii7Oz7B 6jdQhwYEQSutWGYkkRh2mWxxZO19heScm+Hj9f9dDYISAhJVgMasx9ccnvZ4wOH7tmkTTzqs5NIZ YpO4TaSSMeJXxGezPp72cYZbCvEy8U3FFBQnkCIeKClZJ+YOsWxkNIPkl4m7MpaSJybfwFNnFl6Z 9hDQfQU49bkmm7CA5XfApdaaLNQMXBwDVjprst2kOx+pad1SOztckRSMAnU/yuXdVqD+BbD/vFz+ +7pc3n9DOb4DH3WlKEqVGUnSF8Drw12N/dzgQlOYc18JUVA1nftGerza69eLR/Ulq3QSezNxVxew RPcwdgYYegy8/AlcfQ9c+AAkGoDUdQQeobpt/sDNEyuYD4WWzdmsQ5Y7WNg5OlmEXghnsULeLNpc sEFDaW9jaV1nrqnFBLe4KPFMO/J6sdrvOdpBboyO0EnzCqjc6q2wNJNJ99DdoJ14I8N7ep13Qbyo an2DzoXQ/qSKvlGPpfOaPZjyONBt6PHhCsMoxG97MbFj2tFkNb5VGumtymfStxJ0tpD8xmxhyLFp It/QXC415rGUmsvF4hVexTh0cGgw6GuAIYl+RBGGCYECVNJoZKGRlLs2gtjC7LGWOhI+ZqTfJp9t 1+ceiuTteN1BNI6FtoMITP4m/5a35CX5rfxrsaUYqmkWxJSmrD/7Q3GdzNW4FW2lJi++QnkjpNWR JWn+oCfLV6mvOtVYbKlFcnLwJ/E9X5fclymMaTfSrJup5Oos+kZ82U6aHtmuza8213JtnV6Z3Ayu zR+aVeFIV/ygq8P/NTu/P/8HzbABaAplbmRzdHJlYW0KZW5kb2JqCjggMCBvYmoKNzA2CmVuZG9i ago1IDAgb2JqClsgL0lDQ0Jhc2VkIDcgMCBSIF0KZW5kb2JqCjYgMCBvYmoKPDwgL1R5cGUgL1Bh Z2VzIC9NZWRpYUJveCBbMTI2OCA0OTMgMTI3NSA4NzJdIC9Db3VudCAxIC9LaWRzIFsgMSAwIFIK XSA+PgplbmRvYmoKOSAwIG9iago8PCAvVHlwZSAvQ2F0YWxvZyAvUGFnZXMgNiAwIFIgPj4KZW5k b2JqCjEwIDAgb2JqCjw8IC9DcmVhdGlvbkRhdGUgKEQ6MjAwNjA1MjAxNzE5NDYtMDUnMDAnKSAv TW9kRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcpCi9Qcm9kdWNlciAoTWFjIE9TIFggMTAu NC42IFF1YXJ0eiBQREZDb250ZXh0KSA+PgplbmRvYmoKeHJlZgowIDExCjAwMDAwMDAwMDAgMDAw MDAgbiAKMDAwMDAwMDE3NiAwMDAwMCBuIAowMDAwMDAwMDIyIDAwMDAwIG4gCjAwMDAwMDAyODYg MDAwMDAgbiAKMDAwMDAwMDE1OCAwMDAwMCBuIAowMDAwMDAxMTgwIDAwMDAwIG4gCjAwMDAwMDEy MTUgMDAwMDAgbiAKMDAwMDAwMDM1NCAwMDAwMCBuIAowMDAwMDAxMTYxIDAwMDAwIG4gCjAwMDAw MDEzMDQgMDAwMDAgbiAKMDAwMDAwMTM1MyAwMDAwMCBuIAp0cmFpbGVyCjw8IC9TaXplIDExIC9S b290IDkgMCBSIC9JbmZvIDEwIDAgUiAvSUQgWyA8ZmVmMzQ3NTA2NGM4MzkzZDgzOTlhYTY0MTYx MWI4NDY+CjxmZWYzNDc1MDY0YzgzOTNkODM5OWFhNjQxNjExYjg0Nj4gXSA+PgpzdGFydHhyZWYK MTQ5NgolJUVPRgoAAKEAjAAIAe0E9ANoBPsAAQAKgAGAAX//f/8ABwAEAAQAIgHvBPcA/wAjAP8A I///ACP/AAAj/wEAI/8BACEDYgTzACMAAQAjAQEAIwEAACMBAAAjAQAAIwD/ACEB7wT3AKAAjQCh AGQABlBQTlQCAgChAGQHtlBQTlQCASVQREYtMS4zCiXE5fLl66fzoNDExgoyIDAgb2JqCjw8IC9M ZW5ndGggNCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjadc87DgIxDATQPqeY mgLifGyn5gR7hpUQRShWub9E1vGKiu5JicfjAxsOPJ6DsA/EuxaJVTX/4dhBnBKqMj5oRKaOFilw lCltBZzaKRVwTaYMlmoicFOXpOtVSvUJYQ0rRRqtZCjlU3Ob5jJlFS7m5O/EhXxo8koiruTxk8V3 GlcR+7Da2diqbGHrDlsxjwv9d3vHG68bti+v30HxCmVuZHN0cmVhbQplbmRvYmoKNCAwIG9iagox NTgKZW5kb2JqCjEgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCA2IDAgUiAvUmVzb3VyY2Vz IDMgMCBSIC9Db250ZW50cyAyIDAgUiAvTWVkaWFCb3gKWzg4MSA1ODYgMTY1NSA4MzVdID4+CmVu ZG9iagozIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiBdIC9Db2xvclNwYWNlIDw8IC9DczEgNSAw IFIgPj4gPj4KZW5kb2JqCjcgMCBvYmoKPDwgL0xlbmd0aCA4IDAgUiAvTiAzIC9BbHRlcm5hdGUg L0RldmljZVJHQiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNp9kk9IFFEcx7+zJUKs BWUmUvBOtgdXBu1gHYzd9W/Ktqxrpgiyzr7ZHZ2dnd7MbiUeQoguQdYxuljRSTqGBw8dAg8RgmJd IugoGQSCl5DtNzO77ojagzfvM7//v997QF0obZp6gAF5wxbJ/ii7Oz7B6jdQhwYEQSutWGYkkRh2 mWxxZO19heScm+Hj9f9dDYISAhJVgMasx9ccnvZ4wOH7tmkTTzqs5NIZYpO4TaSSMeJXxGezPp72 cYZbCvEy8U3FFBQnkCIeKClZJ+YOsWxkNIPkl4m7MpaSJybfwFNnFl6Z9hDQfQU49bkmm7CA5XfA pdaaLNQMXBwDVjprst2kOx+pad1SOztckRSMAnU/yuXdVqD+BbD/vFz++7pc3n9DOb4DH3WlKEqV GUnSF8Drw12N/dzgQlOYc18JUVA1nftGerza69eLR/Ulq3QSezNxVxewRPcwdgYYegy8/AlcfQ9c +AAkGoDUdQQeobpt/sDNEyuYD4WWzdmsQ5Y7WNg5OlmEXghnsULeLNpcsEFDaW9jaV1nrqnFBLe4 KPFMO/J6sdrvOdpBboyO0EnzCqjc6q2wNJNJ99DdoJ14I8N7ep13Qbyoan2DzoXQ/qSKvlGPpfOa PZjyONBt6PHhCsMoxG97MbFj2tFkNb5VGumtymfStxJ0tpD8xmxhyLFpIt/QXC415rGUmsvF4hVe xTh0cGgw6GuAIYl+RBGGCYECVNJoZKGRlLs2gtjC7LGWOhI+ZqTfJp9t1+ceiuTteN1BNI6FtoMI TP4m/5a35CX5rfxrsaUYqmkWxJSmrD/7Q3GdzNW4FW2lJi++QnkjpNWRJWn+oCfLV6mvOtVYbKlF cnLwJ/E9X5fclymMaTfSrJup5Oos+kZ82U6aHtmuza8213JtnV6Z3AyuzR+aVeFIV/ygq8P/NTu/ P/8HzbABaAplbmRzdHJlYW0KZW5kb2JqCjggMCBvYmoKNzA2CmVuZG9iago1IDAgb2JqClsgL0lD Q0Jhc2VkIDcgMCBSIF0KZW5kb2JqCjYgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBb ODgxIDU4NiAxNjU1IDgzNV0gL0NvdW50IDEgL0tpZHMgWyAxIDAgUgpdID4+CmVuZG9iago5IDAg b2JqCjw8IC9UeXBlIC9DYXRhbG9nIC9QYWdlcyA2IDAgUiA+PgplbmRvYmoKMTAgMCBvYmoKPDwg L0NyZWF0aW9uRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcpIC9Nb2REYXRlIChEOjIwMDYw NTIwMTcxOTQ2LTA1JzAwJykKL1Byb2R1Y2VyIChNYWMgT1MgWCAxMC40LjYgUXVhcnR6IFBERkNv bnRleHQpID4+CmVuZG9iagp4cmVmCjAgMTEKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMDAwMjcz IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwMDM4MiAwMDAwMCBuIAowMDAwMDAw MjU0IDAwMDAwIG4gCjAwMDAwMDEyNzYgMDAwMDAgbiAKMDAwMDAwMTMxMSAwMDAwMCBuIAowMDAw MDAwNDUwIDAwMDAwIG4gCjAwMDAwMDEyNTcgMDAwMDAgbiAKMDAwMDAwMTM5OSAwMDAwMCBuIAow MDAwMDAxNDQ4IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMTEgL1Jvb3QgOSAwIFIgL0luZm8g MTAgMCBSIC9JRCBbIDwxNjkyMDU0NDU3NDdkYTEzMDljYmY0ZjYwM2Q2MjBiND4KPDE2OTIwNTQ0 NTc0N2RhMTMwOWNiZjRmNjAzZDYyMGI0PiBdID4+CnN0YXJ0eHJlZgoxNTkxCiUlRU9GCgChAIwA CAJKA3EDQwZ3ABrY2NjY2NgAcQByAkoDcQNCBnYCSgZWAkoDjwJfA4UCdQN+AowDdwKjA3MCugNx AtIDcQLpA3MDAAN3AxcDfgMtA4UDQgOPA0IGVgMtBmADFwZpAwAGbwLpBnMC0gZ2AroGdgKjBnMC jAZvAnUGaQJfBmACSgZWAkoGVgCgAI0AoQBkAAZQUE5UAgIAoQBkB8BQUE5UAgElUERGLTEuMwol xOXy5eun86DQxMYKMiAwIG9iago8PCAvTGVuZ3RoIDQgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2Rl ID4+CnN0cmVhbQp42j2QSwrDMAxE9znFnKCN/JHkdXaBLkKO0F1JFqH3h8qyUozMg5FHI1/YcIGw Wn2geOG5fAnLjtnPvrjc0e5H9XqfIE4JVRknGlGn6UCbCTwLDmgr4NQ6qYBrcspgqU7W1zRI0q1K GapMwhou0gjDWSl3smmai5FHuDGn0IkLxSPD24m4UtgblpjpOIJ4w0jXn0VkNxt79BHTWO6/+4Hd vm/7ARmwQhYKZW5kc3RyZWFtCmVuZG9iago0IDAgb2JqCjE2OAplbmRvYmoKMSAwIG9iago8PCAv VHlwZSAvUGFnZSAvUGFyZW50IDYgMCBSIC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRzIDIgMCBS IC9NZWRpYUJveApbODgwIDU4NSAxNjU2IDgzNl0gPj4KZW5kb2JqCjMgMCBvYmoKPDwgL1Byb2NT ZXQgWyAvUERGIF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA1IDAgUiA+PiA+PgplbmRvYmoKNyAwIG9i ago8PCAvTGVuZ3RoIDggMCBSIC9OIDMgL0FsdGVybmF0ZSAvRGV2aWNlUkdCIC9GaWx0ZXIgL0Zs YXRlRGVjb2RlID4+CnN0cmVhbQp42n2ST0gUURzHv7MlQqwFZSZS8E62B1cG7WAdjN31b8q2rGum CLLOvtkdnZ2d3sxuJR5CiC5B1jG6WNFJOoYHDx0CDxGCYl0i6CgZBIKXkO03M7vuiNqDN+8zv/+/ 33tAXShtmnqAAXnDFsn+KLs7PsHqN1CHBgRBK61YZiSRGHaZbHFk7X2F5Jyb4eP1/10NghICElWA xqzH1xye9njA4fu2aRNPOqzk0hlik7hNpJIx4lfEZ7M+nvZxhlsK8TLxTcUUFCeQIh4oKVkn5g6x bGQ0g+SXibsylpInJt/AU2cWXpn2ENB9BTj1uSabsIDld8Cl1pos1AxcHANWOmuy3aQ7H6lp3VI7 O1yRFIwCdT/K5d1WoP4FsP+8XP77ulzef0M5vgMfdaUoSpUZSdIXwOvDXY393OBCU5hzXwlRUDWd +0Z6vNrr14tH9SWrdBJ7M3FXF7BE9zB2Bhh6DLz8CVx9D1z4ACQagNR1BB6hum3+wM0TK5gPhZbN 2axDljtY2Dk6WYReCGexQt4s2lywQUNpb2NpXWeuqcUEt7go8Uw78nqx2u852kFujI7QSfMKqNzq rbA0k0n30N2gnXgjw3t6nXdBvKhqfYPOhdD+pIq+UY+l85o9mPI40G3o8eEKwyjEb3sxsWPa0WQ1 vlUa6a3KZ9K3EnS2kPzGbGHIsWki39BcLjXmsZSay8XiFV7FOHRwaDDoa4AhiX5EEYYJgQJU0mhk oZGUuzaC2MLssZY6Ej5mpN8mn23X5x6K5O143UE0joW2gwhM/ib/lrfkJfmt/GuxpRiqaRbElKas P/tDcZ3M1bgVbaUmL75CeSOk1ZElaf6gJ8tXqa861VhsqUVycvAn8T1fl9yXKYxpN9Ksm6nk6iz6 RnzZTpoe2a7NrzbXcm2dXpncDK7NH5pV4UhX/KCrw/81O78//wfNsAFoCmVuZHN0cmVhbQplbmRv YmoKOCAwIG9iago3MDYKZW5kb2JqCjUgMCBvYmoKWyAvSUNDQmFzZWQgNyAwIFIgXQplbmRvYmoK NiAwIG9iago8PCAvVHlwZSAvUGFnZXMgL01lZGlhQm94IFs4ODAgNTg1IDE2NTYgODM2XSAvQ291 bnQgMSAvS2lkcyBbIDEgMCBSCl0gPj4KZW5kb2JqCjkgMCBvYmoKPDwgL1R5cGUgL0NhdGFsb2cg L1BhZ2VzIDYgMCBSID4+CmVuZG9iagoxMCAwIG9iago8PCAvQ3JlYXRpb25EYXRlIChEOjIwMDYw NTIwMTcxOTQ2LTA1JzAwJykgL01vZERhdGUgKEQ6MjAwNjA1MjAxNzE5NDYtMDUnMDAnKQovUHJv ZHVjZXIgKE1hYyBPUyBYIDEwLjQuNiBRdWFydHogUERGQ29udGV4dCkgPj4KZW5kb2JqCnhyZWYK MCAxMQowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAwMDAyODMgMDAwMDAgbiAKMDAwMDAwMDAyMiAw MDAwMCBuIAowMDAwMDAwMzkyIDAwMDAwIG4gCjAwMDAwMDAyNjQgMDAwMDAgbiAKMDAwMDAwMTI4 NiAwMDAwMCBuIAowMDAwMDAxMzIxIDAwMDAwIG4gCjAwMDAwMDA0NjAgMDAwMDAgbiAKMDAwMDAw MTI2NyAwMDAwMCBuIAowMDAwMDAxNDA5IDAwMDAwIG4gCjAwMDAwMDE0NTggMDAwMDAgbiAKdHJh aWxlcgo8PCAvU2l6ZSAxMSAvUm9vdCA5IDAgUiAvSW5mbyAxMCAwIFIgL0lEIFsgPDFjMmEwZWVl YzM3NmJhNzczZDQ4OGMxZDNjYWY4ZjgwPgo8MWMyYTBlZWVjMzc2YmE3NzNkNDg4YzFkM2NhZjhm ODA+IF0gPj4Kc3RhcnR4cmVmCjE2MDEKJSVFT0YKAKEAjAAIAkkDcANEBngAGgAAAAAAAAAHAAEA AQAgAkoGVgJKA48AI/YVACP5FgAj+RcAI/wXACP+FwAjABgAIwIXACMEFwAjBxcAIwcWACMKFQAh A0IGVgAjCusAIwnqACMG6QAjBOkAIwPpACMA6AAj/ekAI/zpACP66QAj9+oAI/brAKAAjQChAGQA BlBQTlQCAgChAGQHj1BQTlQCASVQREYtMS4zCiXE5fLl66fzoNDExgoyIDAgb2JqCjw8IC9MZW5n dGggNCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjaNc49CsMwDAXgPad4J2gt 2dbP7C3QIfgI3Uo7hN4fKosUI/OhJ2OdOHCCsEe9YHjgPr6EMVHyzJHxYty3nvX8wInQTRBihhTd 3vBaIOxYEkjnpRY97amYc7uk/E+19euFSqa1bOq0FDNGdSl+s9pCM/Y9fkFAJSsKZW5kc3RyZWFt CmVuZG9iago0IDAgb2JqCjEyMQplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50 IDYgMCBSIC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRzIDIgMCBSIC9NZWRpYUJveApbOTEwIDU4 NSA5NDQgODM2XSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgXSAvQ29sb3JT cGFjZSA8PCAvQ3MxIDUgMCBSID4+ID4+CmVuZG9iago3IDAgb2JqCjw8IC9MZW5ndGggOCAwIFIg L04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFt CnjafZJPSBRRHMe/syVCrAVlJlLwTrYHVwbtYB2M3fVvyrasa6YIss6+2R2dnZ3ezG4lHkKILkHW MbpY0Uk6hgcPHQIPEYJiXSLoKBkEgpeQ7Tczu+6I2oM37zO//7/fe0BdKG2aeoABecMWyf4ouzs+ weo3UIcGBEErrVhmJJEYdplscWTtfYXknJvh4/X/XQ2CEgISVYDGrMfXHJ72eMDh+7ZpE086rOTS GWKTuE2kkjHiV8Rnsz6e9nGGWwrxMvFNxRQUJ5AiHigpWSfmDrFsZDSD5JeJuzKWkicm38BTZxZe mfYQ0H0FOPW5JpuwgOV3wKXWmizUDFwcA1Y6a7LdpDsfqWndUjs7XJEUjAJ1P8rl3Vag/gWw/7xc /vu6XN5/Qzm+Ax91pShKlRlJ0hfA68Ndjf3c4EJTmHNfCVFQNZ37Rnq82uvXi0f1Jat0EnszcVcX sET3MHYGGHoMvPwJXH0PXPgAJBqA1HUEHqG6bf7AzRMrmA+Fls3ZrEOWO1jYOTpZhF4IZ7FC3iza XLBBQ2lvY2ldZ66pxQS3uCjxTDvyerHa7znaQW6MjtBJ8wqo3OqtsDSTSffQ3aCdeCPDe3qdd0G8 qGp9g86F0P6kir5Rj6Xzmj2Y8jjQbejx4QrDKMRvezGxY9rRZDW+VRrprcpn0rcSdLaQ/MZsYcix aSLf0FwuNeaxlJrLxeIVXsU4dHBoMOhrgCGJfkQRhgmBAlTSaGShkZS7NoLYwuyxljoSPmak3yaf bdfnHork7XjdQTSOhbaDCEz+Jv+Wt+Ql+a38a7GlGKppFsSUpqw/+0NxnczVuBVtpSYvvkJ5I6TV kSVp/qAny1eprzrVWGypRXJy8CfxPV+X3JcpjGk30qybqeTqLPpGfNlOmh7Zrs2vNtdybZ1emdwM rs0fmlXhSFf8oKvD/zU7vz//B82wAWgKZW5kc3RyZWFtCmVuZG9iago4IDAgb2JqCjcwNgplbmRv YmoKNSAwIG9iagpbIC9JQ0NCYXNlZCA3IDAgUiBdCmVuZG9iago2IDAgb2JqCjw8IC9UeXBlIC9Q YWdlcyAvTWVkaWFCb3ggWzkxMCA1ODUgOTQ0IDgzNl0gL0NvdW50IDEgL0tpZHMgWyAxIDAgUgpd ID4+CmVuZG9iago5IDAgb2JqCjw8IC9UeXBlIC9DYXRhbG9nIC9QYWdlcyA2IDAgUiA+PgplbmRv YmoKMTAgMCBvYmoKPDwgL0NyZWF0aW9uRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcpIC9N b2REYXRlIChEOjIwMDYwNTIwMTcxOTQ2LTA1JzAwJykKL1Byb2R1Y2VyIChNYWMgT1MgWCAxMC40 LjYgUXVhcnR6IFBERkNvbnRleHQpID4+CmVuZG9iagp4cmVmCjAgMTEKMDAwMDAwMDAwMCAwMDAw MCBuIAowMDAwMDAwMjM2IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwMDM0NCAw MDAwMCBuIAowMDAwMDAwMjE3IDAwMDAwIG4gCjAwMDAwMDEyMzggMDAwMDAgbiAKMDAwMDAwMTI3 MyAwMDAwMCBuIAowMDAwMDAwNDEyIDAwMDAwIG4gCjAwMDAwMDEyMTkgMDAwMDAgbiAKMDAwMDAw MTM2MCAwMDAwMCBuIAowMDAwMDAxNDA5IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMTEgL1Jv b3QgOSAwIFIgL0luZm8gMTAgMCBSIC9JRCBbIDwyYjI4MTc1ZGEyMTNkZDRmNjAyZTQxNTgyMGMx MmE0YT4KPDJiMjgxNzVkYTIxM2RkNGY2MDJlNDE1ODIwYzEyYTRhPiBdID4+CnN0YXJ0eHJlZgox NTUyCiUlRU9GCgAAoQCMAAgCSQOOA0QDsAAiAkoDjwsVACMIFgAjBhcAIwQXACMCFwAjABgAI/4X ACP8FwAj+hcAI/gWACP1FQCgAI0AoQBkAAZQUE5UAgIAoQBkB3BQUE5UAgElUERGLTEuMwolxOXy 5eun86DQxMYKMiAwIG9iago8PCAvTGVuZ3RoIDQgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+ CnN0cmVhbQp42iWMOw6AIBQEe08xN9BnEKSmM7EgHIFoLLRACq8vn2wzye5swpMYXRZiRlpyxOgF JYZZFMbyHpwovlJurOxdcIGpJbgqDFV4sGVf6e5kdaF21+gi4H/6hhljCmVuZHN0cmVhbQplbmRv YmoKNCAwIG9iago5MQplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDYgMCBS IC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRzIDIgMCBSIC9NZWRpYUJveApbNzYzIDQxNSA5ODEg NDk4XSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgXSAvQ29sb3JTcGFjZSA8 PCAvQ3MxIDUgMCBSID4+ID4+CmVuZG9iago3IDAgb2JqCjw8IC9MZW5ndGggOCAwIFIgL04gMyAv QWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjafZJP SBRRHMe/syVCrAVlJlLwTrYHVwbtYB2M3fVvyrasa6YIss6+2R2dnZ3ezG4lHkKILkHWMbpY0Uk6 hgcPHQIPEYJiXSLoKBkEgpeQ7Tczu+6I2oM37zO//7/fe0BdKG2aeoABecMWyf4ouzs+weo3UIcG BEErrVhmJJEYdplscWTtfYXknJvh4/X/XQ2CEgISVYDGrMfXHJ72eMDh+7ZpE086rOTSGWKTuE2k kjHiV8Rnsz6e9nGGWwrxMvFNxRQUJ5AiHigpWSfmDrFsZDSD5JeJuzKWkicm38BTZxZemfYQ0H0F OPW5JpuwgOV3wKXWmizUDFwcA1Y6a7LdpDsfqWndUjs7XJEUjAJ1P8rl3Vag/gWw/7xc/vu6XN5/ Qzm+Ax91pShKlRlJ0hfA68Ndjf3c4EJTmHNfCVFQNZ37Rnq82uvXi0f1Jat0EnszcVcXsET3MHYG GHoMvPwJXH0PXPgAJBqA1HUEHqG6bf7AzRMrmA+Fls3ZrEOWO1jYOTpZhF4IZ7FC3izaXLBBQ2lv Y2ldZ66pxQS3uCjxTDvyerHa7znaQW6MjtBJ8wqo3OqtsDSTSffQ3aCdeCPDe3qdd0G8qGp9g86F 0P6kir5Rj6Xzmj2Y8jjQbejx4QrDKMRvezGxY9rRZDW+VRrprcpn0rcSdLaQ/MZsYcixaSLf0Fwu NeaxlJrLxeIVXsU4dHBoMOhrgCGJfkQRhgmBAlTSaGShkZS7NoLYwuyxljoSPmak3yafbdfnHork 7XjdQTSOhbaDCEz+Jv+Wt+Ql+a38a7GlGKppFsSUpqw/+0NxnczVuBVtpSYvvkJ5I6TVkSVp/qAn y1eprzrVWGypRXJy8CfxPV+X3JcpjGk30qybqeTqLPpGfNlOmh7Zrs2vNtdybZ1emdwMrs0fmlXh SFf8oKvD/zU7vz//B82wAWgKZW5kc3RyZWFtCmVuZG9iago4IDAgb2JqCjcwNgplbmRvYmoKNSAw IG9iagpbIC9JQ0NCYXNlZCA3IDAgUiBdCmVuZG9iago2IDAgb2JqCjw8IC9UeXBlIC9QYWdlcyAv TWVkaWFCb3ggWzc2MyA0MTUgOTgxIDQ5OF0gL0NvdW50IDEgL0tpZHMgWyAxIDAgUgpdID4+CmVu ZG9iago5IDAgb2JqCjw8IC9UeXBlIC9DYXRhbG9nIC9QYWdlcyA2IDAgUiA+PgplbmRvYmoKMTAg MCBvYmoKPDwgL0NyZWF0aW9uRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcpIC9Nb2REYXRl IChEOjIwMDYwNTIwMTcxOTQ2LTA1JzAwJykKL1Byb2R1Y2VyIChNYWMgT1MgWCAxMC40LjYgUXVh cnR6IFBERkNvbnRleHQpID4+CmVuZG9iagp4cmVmCjAgMTEKMDAwMDAwMDAwMCAwMDAwMCBuIAow MDAwMDAwMjA1IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwMDMxMyAwMDAwMCBu IAowMDAwMDAwMTg3IDAwMDAwIG4gCjAwMDAwMDEyMDcgMDAwMDAgbiAKMDAwMDAwMTI0MiAwMDAw MCBuIAowMDAwMDAwMzgxIDAwMDAwIG4gCjAwMDAwMDExODggMDAwMDAgbiAKMDAwMDAwMTMyOSAw MDAwMCBuIAowMDAwMDAxMzc4IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMTEgL1Jvb3QgOSAw IFIgL0luZm8gMTAgMCBSIC9JRCBbIDxmOGRjOTM2OTU2MTgyY2VlNGEyZDk4ZTZmYTM4NzMxZT4K PGY4ZGM5MzY5NTYxODJjZWU0YTJkOThlNmZhMzg3MzFlPiBdID4+CnN0YXJ0eHJlZgoxNTIxCiUl RU9GCgChAIwACAGRAu0CAAPjAAkAAAAAAAAAAAAxAaMC/wHuA9EABwAEAAQACf//////////ADAB nwL7AfID1QCgAI0AoQBkAAZQUE5UAgIAoQCMAAgAAAAAAAAAAACgAI0AAQAKAawDOQHlA5cALAAI B9EFQXJpYWwAAwfRAAYAAQAAAC0ACAAA/SAAAAAAABYAUQArTRQBTQAGAAAAAAAtAAgAAAAAAAAA AAAWAAAAKSoBUwAAAwfaAAYAGAAAAC0ACAAX/8AAAAAAABYHrgApIQEgAAChAGQHdlBQTlQCASVQ REYtMS4zCiXE5fLl66fzoNDExgoyIDAgb2JqCjw8IC9MZW5ndGggNCAwIFIgL0ZpbHRlciAvRmxh dGVEZWNvZGUgPj4Kc3RyZWFtCnjaLYw7CoAwEAV7TzE30I3xkzqdYBFyhKBYaKEpvL5mlWkGHvNO Aie1z0LKiJITIp3DyoAxHYPjWlix3O86MTJ/hY80SvRaVKU4kHa0Gu+/ur6oXqpuRMIDdCEaPQpl bmRzdHJlYW0KZW5kb2JqCjQgMCBvYmoKOTMKZW5kb2JqCjEgMCBvYmoKPDwgL1R5cGUgL1BhZ2Ug L1BhcmVudCA2IDAgUiAvUmVzb3VyY2VzIDMgMCBSIC9Db250ZW50cyAyIDAgUiAvTWVkaWFCb3gK WzExNTcgNDE1IDEzODYgNDk4XSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYg XSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDUgMCBSID4+ID4+CmVuZG9iago3IDAgb2JqCjw8IC9MZW5n dGggOCAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUg Pj4Kc3RyZWFtCnjafZJPSBRRHMe/syVCrAVlJlLwTrYHVwbtYB2M3fVvyrasa6YIss6+2R2dnZ3e zG4lHkKILkHWMbpY0Uk6hgcPHQIPEYJiXSLoKBkEgpeQ7Tczu+6I2oM37zO//7/fe0BdKG2aeoAB ecMWyf4ouzs+weo3UIcGBEErrVhmJJEYdplscWTtfYXknJvh4/X/XQ2CEgISVYDGrMfXHJ72eMDh +7ZpE086rOTSGWKTuE2kkjHiV8Rnsz6e9nGGWwrxMvFNxRQUJ5AiHigpWSfmDrFsZDSD5JeJuzKW kicm38BTZxZemfYQ0H0FOPW5JpuwgOV3wKXWmizUDFwcA1Y6a7LdpDsfqWndUjs7XJEUjAJ1P8rl 3Vag/gWw/7xc/vu6XN5/Qzm+Ax91pShKlRlJ0hfA68Ndjf3c4EJTmHNfCVFQNZ37Rnq82uvXi0f1 Jat0EnszcVcXsET3MHYGGHoMvPwJXH0PXPgAJBqA1HUEHqG6bf7AzRMrmA+Fls3ZrEOWO1jYOTpZ hF4IZ7FC3izaXLBBQ2lvY2ldZ66pxQS3uCjxTDvyerHa7znaQW6MjtBJ8wqo3OqtsDSTSffQ3aCd eCPDe3qdd0G8qGp9g86F0P6kir5Rj6Xzmj2Y8jjQbejx4QrDKMRvezGxY9rRZDW+VRrprcpn0rcS dLaQ/MZsYcixaSLf0FwuNeaxlJrLxeIVXsU4dHBoMOhrgCGJfkQRhgmBAlTSaGShkZS7NoLYwuyx ljoSPmak3yafbdfnHork7XjdQTSOhbaDCEz+Jv+Wt+Ql+a38a7GlGKppFsSUpqw/+0NxnczVuBVt pSYvvkJ5I6TVkSVp/qAny1eprzrVWGypRXJy8CfxPV+X3JcpjGk30qybqeTqLPpGfNlOmh7Zrs2v NtdybZ1emdwMrs0fmlXhSFf8oKvD/zU7vz//B82wAWgKZW5kc3RyZWFtCmVuZG9iago4IDAgb2Jq CjcwNgplbmRvYmoKNSAwIG9iagpbIC9JQ0NCYXNlZCA3IDAgUiBdCmVuZG9iago2IDAgb2JqCjw8 IC9UeXBlIC9QYWdlcyAvTWVkaWFCb3ggWzExNTcgNDE1IDEzODYgNDk4XSAvQ291bnQgMSAvS2lk cyBbIDEgMCBSCl0gPj4KZW5kb2JqCjkgMCBvYmoKPDwgL1R5cGUgL0NhdGFsb2cgL1BhZ2VzIDYg MCBSID4+CmVuZG9iagoxMCAwIG9iago8PCAvQ3JlYXRpb25EYXRlIChEOjIwMDYwNTIwMTcxOTQ2 LTA1JzAwJykgL01vZERhdGUgKEQ6MjAwNjA1MjAxNzE5NDYtMDUnMDAnKQovUHJvZHVjZXIgKE1h YyBPUyBYIDEwLjQuNiBRdWFydHogUERGQ29udGV4dCkgPj4KZW5kb2JqCnhyZWYKMCAxMQowMDAw MDAwMDAwIDAwMDAwIG4gCjAwMDAwMDAyMDcgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAow MDAwMDAwMzE3IDAwMDAwIG4gCjAwMDAwMDAxODkgMDAwMDAgbiAKMDAwMDAwMTIxMSAwMDAwMCBu IAowMDAwMDAxMjQ2IDAwMDAwIG4gCjAwMDAwMDAzODUgMDAwMDAgbiAKMDAwMDAwMTE5MiAwMDAw MCBuIAowMDAwMDAxMzM1IDAwMDAwIG4gCjAwMDAwMDEzODQgMDAwMDAgbiAKdHJhaWxlcgo8PCAv U2l6ZSAxMSAvUm9vdCA5IDAgUiAvSW5mbyAxMCAwIFIgL0lEIFsgPDcyNGI0ZmMyOTFkZmI3NDU4 MWI2OGM2Y2IyZDkxMWE3Pgo8NzI0YjRmYzI5MWRmYjc0NTgxYjY4YzZjYjJkOTExYTc+IF0gPj4K c3RhcnR4cmVmCjE1MjcKJSVFT0YKAKEAjAAIAZEEdwIABXgAAQAKgAGAAX//f/8ACQAAAAAAAAAA ADEBowSJAe4FZgAJ//////////8AMAGfBIUB8gVqAKAAjQChAGQABlBQTlQCAgChAIwACAAAAAAA AAAAAKAAjQABAAoBrATNAh8FIgAsAAgH0QVBcmlhbAADB9EABgAAAAAALQAIAAAAAAAAAAAAFgAA ACgB2gTWAkJTAAADB9oABgAZAAAALQAIABkAAAAAAAAAFggAAClCASAAAKEAZAd2UFBOVAIBJVBE Ri0xLjMKJcTl8uXrp/Og0MTGCjIgMCBvYmoKPDwgL0xlbmd0aCA0IDAgUiAvRmlsdGVyIC9GbGF0 ZURlY29kZSA+PgpzdHJlYW0KeNotjEEOQDAUBfdOMTfgt6W67k5iIT2CEAsWdOH69JPZTPIy72Ti pI5ZmDOi5BlpW4MTj7GCD1wLK477XQd6xq+IiUZJUYuqFAfie6vx/mvoiuql6kZiegByIho3CmVu ZHN0cmVhbQplbmRvYmoKNCAwIG9iago5MwplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFnZSAv UGFyZW50IDYgMCBSIC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRzIDIgMCBSIC9NZWRpYUJveApb MTU1MCA0MTUgMTc4NSA0OThdID4+CmVuZG9iagozIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiBd IC9Db2xvclNwYWNlIDw8IC9DczEgNSAwIFIgPj4gPj4KZW5kb2JqCjcgMCBvYmoKPDwgL0xlbmd0 aCA4IDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+ PgpzdHJlYW0KeNp9kk9IFFEcx7+zJUKsBWUmUvBOtgdXBu1gHYzd9W/Ktqxrpgiyzr7ZHZ2dnd7M biUeQoguQdYxuljRSTqGBw8dAg8RgmJdIugoGQSCl5DtNzO77ojagzfvM7//v997QF0obZp6gAF5 wxbJ/ii7Oz7B6jdQhwYEQSutWGYkkRh2mWxxZO19heScm+Hj9f9dDYISAhJVgMasx9ccnvZ4wOH7 tmkTTzqs5NIZYpO4TaSSMeJXxGezPp72cYZbCvEy8U3FFBQnkCIeKClZJ+YOsWxkNIPkl4m7MpaS JybfwFNnFl6Z9hDQfQU49bkmm7CA5XfApdaaLNQMXBwDVjprst2kOx+pad1SOztckRSMAnU/yuXd VqD+BbD/vFz++7pc3n9DOb4DH3WlKEqVGUnSF8Drw12N/dzgQlOYc18JUVA1nftGerza69eLR/Ul q3QSezNxVxewRPcwdgYYegy8/AlcfQ9c+AAkGoDUdQQeobpt/sDNEyuYD4WWzdmsQ5Y7WNg5OlmE XghnsULeLNpcsEFDaW9jaV1nrqnFBLe4KPFMO/J6sdrvOdpBboyO0EnzCqjc6q2wNJNJ99DdoJ14 I8N7ep13Qbyoan2DzoXQ/qSKvlGPpfOaPZjyONBt6PHhCsMoxG97MbFj2tFkNb5VGumtymfStxJ0 tpD8xmxhyLFpIt/QXC415rGUmsvF4hVexTh0cGgw6GuAIYl+RBGGCYECVNJoZKGRlLs2gtjC7LGW OhI+ZqTfJp9t1+ceiuTteN1BNI6FtoMITP4m/5a35CX5rfxrsaUYqmkWxJSmrD/7Q3GdzNW4FW2l Ji++QnkjpNWRJWn+oCfLV6mvOtVYbKlFcnLwJ/E9X5fclymMaTfSrJup5Oos+kZ82U6aHtmuza82 13JtnV6Z3AyuzR+aVeFIV/ygq8P/NTu/P/8HzbABaAplbmRzdHJlYW0KZW5kb2JqCjggMCBvYmoK NzA2CmVuZG9iago1IDAgb2JqClsgL0lDQ0Jhc2VkIDcgMCBSIF0KZW5kb2JqCjYgMCBvYmoKPDwg L1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMTU1MCA0MTUgMTc4NSA0OThdIC9Db3VudCAxIC9LaWRz IFsgMSAwIFIKXSA+PgplbmRvYmoKOSAwIG9iago8PCAvVHlwZSAvQ2F0YWxvZyAvUGFnZXMgNiAw IFIgPj4KZW5kb2JqCjEwIDAgb2JqCjw8IC9DcmVhdGlvbkRhdGUgKEQ6MjAwNjA1MjAxNzE5NDYt MDUnMDAnKSAvTW9kRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcpCi9Qcm9kdWNlciAoTWFj IE9TIFggMTAuNC42IFF1YXJ0eiBQREZDb250ZXh0KSA+PgplbmRvYmoKeHJlZgowIDExCjAwMDAw MDAwMDAgMDAwMDAgbiAKMDAwMDAwMDIwNyAwMDAwMCBuIAowMDAwMDAwMDIyIDAwMDAwIG4gCjAw MDAwMDAzMTcgMDAwMDAgbiAKMDAwMDAwMDE4OSAwMDAwMCBuIAowMDAwMDAxMjExIDAwMDAwIG4g CjAwMDAwMDEyNDYgMDAwMDAgbiAKMDAwMDAwMDM4NSAwMDAwMCBuIAowMDAwMDAxMTkyIDAwMDAw IG4gCjAwMDAwMDEzMzUgMDAwMDAgbiAKMDAwMDAwMTM4NCAwMDAwMCBuIAp0cmFpbGVyCjw8IC9T aXplIDExIC9Sb290IDkgMCBSIC9JbmZvIDEwIDAgUiAvSUQgWyA8NzI0YjRmYzI5MWRmYjc0NTgx YjY4YzZjYjJkOTExYTc+Cjw3MjRiNGZjMjkxZGZiNzQ1ODFiNjhjNmNiMmQ5MTFhNz4gXSA+Pgpz dGFydHhyZWYKMTUyNwolJUVPRgoAoQCMAAgBkQYAAgAHBwABAAqAAYABf/9//wAJAAAAAAAAAAAA MQGjBhIB7gb1AAn//////////wAwAZ8GDgHyBvkAoACNAKEAZAAGUFBOVAICAKEAjAAIAAAAAAAA AAAAoACNAAEACgGuBh4CFwaPAAMH0QANAC0ABgAAAAAALQAIAAAAAAAAAAAAFgAAACgB1wYnAUEA BgABAAAALQAIAAD/8AAAAAAAFgBbACkeAVMAAAYAAAAAAC0ACAAAAAAAAAAAABYAAAApHwFOAAAD B9oADQAyAAYAGQAAAC0ACAAZAAAAAAAAABYIAAApIAEgAAChAGQHV1BQTlQCASVQREYtMS4zCiXE 5fLl66fzoNDExgoyIDAgb2JqCjw8IC9MZW5ndGggNCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUg Pj4Kc3RyZWFtCnjaK1QIVChUMFEoVzBU8ALiLAULBV8FfediQwXnYAUDMAx2VjA0MzNVMLE0U8iF MC3MzBRyFIIVAgHFIA20CmVuZHN0cmVhbQplbmRvYmoKNCAwIG9iago2MgplbmRvYmoKMSAwIG9i ago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDYgMCBSIC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRz IDIgMCBSIC9NZWRpYUJveApbMTY2MiA0OTMgMTY2OSA4NzBdID4+CmVuZG9iagozIDAgb2JqCjw8 IC9Qcm9jU2V0IFsgL1BERiBdIC9Db2xvclNwYWNlIDw8IC9DczEgNSAwIFIgPj4gPj4KZW5kb2Jq CjcgMCBvYmoKPDwgL0xlbmd0aCA4IDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmls dGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNp9kk9IFFEcx7+zJUKsBWUmUvBOtgdXBu1gHYzd 9W/Ktqxrpgiyzr7ZHZ2dnd7MbiUeQoguQdYxuljRSTqGBw8dAg8RgmJdIugoGQSCl5DtNzO77oja gzfvM7//v997QF0obZp6gAF5wxbJ/ii7Oz7B6jdQhwYEQSutWGYkkRh2mWxxZO19heScm+Hj9f9d DYISAhJVgMasx9ccnvZ4wOH7tmkTTzqs5NIZYpO4TaSSMeJXxGezPp72cYZbCvEy8U3FFBQnkCIe KClZJ+YOsWxkNIPkl4m7MpaSJybfwFNnFl6Z9hDQfQU49bkmm7CA5XfApdaaLNQMXBwDVjprst2k Ox+pad1SOztckRSMAnU/yuXdVqD+BbD/vFz++7pc3n9DOb4DH3WlKEqVGUnSF8Drw12N/dzgQlOY c18JUVA1nftGerza69eLR/Ulq3QSezNxVxewRPcwdgYYegy8/AlcfQ9c+AAkGoDUdQQeobpt/sDN EyuYD4WWzdmsQ5Y7WNg5OlmEXghnsULeLNpcsEFDaW9jaV1nrqnFBLe4KPFMO/J6sdrvOdpBboyO 0EnzCqjc6q2wNJNJ99DdoJ14I8N7ep13Qbyoan2DzoXQ/qSKvlGPpfOaPZjyONBt6PHhCsMoxG97 MbFj2tFkNb5VGumtymfStxJ0tpD8xmxhyLFpIt/QXC415rGUmsvF4hVexTh0cGgw6GuAIYl+RBGG CYECVNJoZKGRlLs2gtjC7LGWOhI+ZqTfJp9t1+ceiuTteN1BNI6FtoMITP4m/5a35CX5rfxrsaUY qmkWxJSmrD/7Q3GdzNW4FW2lJi++QnkjpNWRJWn+oCfLV6mvOtVYbKlFcnLwJ/E9X5fclymMaTfS rJup5Oos+kZ82U6aHtmuza8213JtnV6Z3AyuzR+aVeFIV/ygq8P/NTu/P/8HzbABaAplbmRzdHJl YW0KZW5kb2JqCjggMCBvYmoKNzA2CmVuZG9iago1IDAgb2JqClsgL0lDQ0Jhc2VkIDcgMCBSIF0K ZW5kb2JqCjYgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMTY2MiA0OTMgMTY2OSA4 NzBdIC9Db3VudCAxIC9LaWRzIFsgMSAwIFIKXSA+PgplbmRvYmoKOSAwIG9iago8PCAvVHlwZSAv Q2F0YWxvZyAvUGFnZXMgNiAwIFIgPj4KZW5kb2JqCjEwIDAgb2JqCjw8IC9DcmVhdGlvbkRhdGUg KEQ6MjAwNjA1MjAxNzE5NDYtMDUnMDAnKSAvTW9kRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScw MCcpCi9Qcm9kdWNlciAoTWFjIE9TIFggMTAuNC42IFF1YXJ0eiBQREZDb250ZXh0KSA+PgplbmRv YmoKeHJlZgowIDExCjAwMDAwMDAwMDAgMDAwMDAgbiAKMDAwMDAwMDE3NiAwMDAwMCBuIAowMDAw MDAwMDIyIDAwMDAwIG4gCjAwMDAwMDAyODYgMDAwMDAgbiAKMDAwMDAwMDE1OCAwMDAwMCBuIAow MDAwMDAxMTgwIDAwMDAwIG4gCjAwMDAwMDEyMTUgMDAwMDAgbiAKMDAwMDAwMDM1NCAwMDAwMCBu IAowMDAwMDAxMTYxIDAwMDAwIG4gCjAwMDAwMDEzMDQgMDAwMDAgbiAKMDAwMDAwMTM1MyAwMDAw MCBuIAp0cmFpbGVyCjw8IC9TaXplIDExIC9Sb290IDkgMCBSIC9JbmZvIDEwIDAgUiAvSUQgWyA8 ZmVmMzQ3NTA2NGM4MzkzZDgzOTlhYTY0MTYxMWI4NDY+CjxmZWYzNDc1MDY0YzgzOTNkODM5OWFh NjQxNjExYjg0Nj4gXSA+PgpzdGFydHhyZWYKMTQ5NgolJUVPRgoAAKEAjAAIAe0GfgNmBoUAAQAK gAGAAX//f/8AIgHvBoEA/wAjAP8AI///ACP/AAAj/wEAI/8BACEDYAZ9ACMAAQAjAQEAIwEAACMB AAAjAQAAIwD/ACEB7waBAKAAjQChAGQABlBQTlQCAgChAGQHU1BQTlQCASVQREYtMS4zCiXE5fLl 66fzoNDExgoyIDAgb2JqCjw8IC9MZW5ndGggNCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4K c3RyZWFtCnjaK1QIVChUMFEoVzBU8ALiLAULBV8FfediQwXnYAUDMAx2VrAwM1MwsTRTyAWyzIHY QiFHIVghEACrQQ1bCmVuZHN0cmVhbQplbmRvYmoKNCAwIG9iago2MgplbmRvYmoKMSAwIG9iago8 PCAvVHlwZSAvUGFnZSAvUGFyZW50IDYgMCBSIC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRzIDIg MCBSIC9NZWRpYUJveApbODYzIDQ5MyA4NzEgODcyXSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJv Y1NldCBbIC9QREYgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDUgMCBSID4+ID4+CmVuZG9iago3IDAg b2JqCjw8IC9MZW5ndGggOCAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAv RmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjafZJPSBRRHMe/syVCrAVlJlLwTrYHVwbtYB2M3fVvyras a6YIss6+2R2dnZ3ezG4lHkKILkHWMbpY0Uk6hgcPHQIPEYJiXSLoKBkEgpeQ7Tczu+6I2oM37zO/ /7/fe0BdKG2aeoABecMWyf4ouzs+weo3UIcGBEErrVhmJJEYdplscWTtfYXknJvh4/X/XQ2CEgIS VYDGrMfXHJ72eMDh+7ZpE086rOTSGWKTuE2kkjHiV8Rnsz6e9nGGWwrxMvFNxRQUJ5AiHigpWSfm DrFsZDSD5JeJuzKWkicm38BTZxZemfYQ0H0FOPW5JpuwgOV3wKXWmizUDFwcA1Y6a7LdpDsfqWnd Ujs7XJEUjAJ1P8rl3Vag/gWw/7xc/vu6XN5/Qzm+Ax91pShKlRlJ0hfA68Ndjf3c4EJTmHNfCVFQ NZ37Rnq82uvXi0f1Jat0EnszcVcXsET3MHYGGHoMvPwJXH0PXPgAJBqA1HUEHqG6bf7AzRMrmA+F ls3ZrEOWO1jYOTpZhF4IZ7FC3izaXLBBQ2lvY2ldZ66pxQS3uCjxTDvyerHa7znaQW6MjtBJ8wqo 3OqtsDSTSffQ3aCdeCPDe3qdd0G8qGp9g86F0P6kir5Rj6Xzmj2Y8jjQbejx4QrDKMRvezGxY9rR ZDW+VRrprcpn0rcSdLaQ/MZsYcixaSLf0FwuNeaxlJrLxeIVXsU4dHBoMOhrgCGJfkQRhgmBAlTS aGShkZS7NoLYwuyxljoSPmak3yafbdfnHork7XjdQTSOhbaDCEz+Jv+Wt+Ql+a38a7GlGKppFsSU pqw/+0NxnczVuBVtpSYvvkJ5I6TVkSVp/qAny1eprzrVWGypRXJy8CfxPV+X3JcpjGk30qybqeTq LPpGfNlOmh7Zrs2vNtdybZ1emdwMrs0fmlXhSFf8oKvD/zU7vz//B82wAWgKZW5kc3RyZWFtCmVu ZG9iago4IDAgb2JqCjcwNgplbmRvYmoKNSAwIG9iagpbIC9JQ0NCYXNlZCA3IDAgUiBdCmVuZG9i ago2IDAgb2JqCjw8IC9UeXBlIC9QYWdlcyAvTWVkaWFCb3ggWzg2MyA0OTMgODcxIDg3Ml0gL0Nv dW50IDEgL0tpZHMgWyAxIDAgUgpdID4+CmVuZG9iago5IDAgb2JqCjw8IC9UeXBlIC9DYXRhbG9n IC9QYWdlcyA2IDAgUiA+PgplbmRvYmoKMTAgMCBvYmoKPDwgL0NyZWF0aW9uRGF0ZSAoRDoyMDA2 MDUyMDE3MTk0Ni0wNScwMCcpIC9Nb2REYXRlIChEOjIwMDYwNTIwMTcxOTQ2LTA1JzAwJykKL1By b2R1Y2VyIChNYWMgT1MgWCAxMC40LjYgUXVhcnR6IFBERkNvbnRleHQpID4+CmVuZG9iagp4cmVm CjAgMTEKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMDAwMTc2IDAwMDAwIG4gCjAwMDAwMDAwMjIg MDAwMDAgbiAKMDAwMDAwMDI4NCAwMDAwMCBuIAowMDAwMDAwMTU4IDAwMDAwIG4gCjAwMDAwMDEx NzggMDAwMDAgbiAKMDAwMDAwMTIxMyAwMDAwMCBuIAowMDAwMDAwMzUyIDAwMDAwIG4gCjAwMDAw MDExNTkgMDAwMDAgbiAKMDAwMDAwMTMwMCAwMDAwMCBuIAowMDAwMDAxMzQ5IDAwMDAwIG4gCnRy YWlsZXIKPDwgL1NpemUgMTEgL1Jvb3QgOSAwIFIgL0luZm8gMTAgMCBSIC9JRCBbIDxlNTAzMzRk NGUzZWUxNmExYmY2ZjYxYzkyODRmNTM2YT4KPGU1MDMzNGQ0ZTNlZTE2YTFiZjZmNjFjOTI4NGY1 MzZhPiBdID4+CnN0YXJ0eHJlZgoxNDkyCiUlRU9GCgAAoQCMAAgB7QNfA2gDZwAiAe4DYgD/ACP/ /wAj/wAAI/8BACP/AQAjAAEAIQNjA18AIwEBACMBAAAjAQAAIwEAACMA/wAjAP8AIQHuA2IAoACN AKEAZAAGUFBOVAICAKEAZAdVUFBOVAIBJVBERi0xLjMKJcTl8uXrp/Og0MTGCjIgMCBvYmoKPDwg L0xlbmd0aCA0IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNorVAhUKFQwUShX MFTwAuIsBQsFXwV952JDBedgBQMwDHZWMDQzM1UwN7dQyFWwNDQEs3IUghUCAbfHDYIKZW5kc3Ry ZWFtCmVuZG9iago0IDAgb2JqCjYyCmVuZG9iagoxIDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJl bnQgNiAwIFIgL1Jlc291cmNlcyAzIDAgUiAvQ29udGVudHMgMiAwIFIgL01lZGlhQm94Cls5MDgg Nzc1IDE2NjkgNzgyXSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgXSAvQ29s b3JTcGFjZSA8PCAvQ3MxIDUgMCBSID4+ID4+CmVuZG9iago3IDAgb2JqCjw8IC9MZW5ndGggOCAw IFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCnjafZJPSBRRHMe/syVCrAVlJlLwTrYHVwbtYB2M3fVvyrasa6YIss6+2R2dnZ3ezG4lHkKI LkHWMbpY0Uk6hgcPHQIPEYJiXSLoKBkEgpeQ7Tczu+6I2oM37zO//7/fe0BdKG2aeoABecMWyf4o uzs+weo3UIcGBEErrVhmJJEYdplscWTtfYXknJvh4/X/XQ2CEgISVYDGrMfXHJ72eMDh+7ZpE086 rOTSGWKTuE2kkjHiV8Rnsz6e9nGGWwrxMvFNxRQUJ5AiHigpWSfmDrFsZDSD5JeJuzKWkicm38BT ZxZemfYQ0H0FOPW5JpuwgOV3wKXWmizUDFwcA1Y6a7LdpDsfqWndUjs7XJEUjAJ1P8rl3Vag/gWw /7xc/vu6XN5/Qzm+Ax91pShKlRlJ0hfA68Ndjf3c4EJTmHNfCVFQNZ37Rnq82uvXi0f1Jat0Ensz cVcXsET3MHYGGHoMvPwJXH0PXPgAJBqA1HUEHqG6bf7AzRMrmA+Fls3ZrEOWO1jYOTpZhF4IZ7FC 3izaXLBBQ2lvY2ldZ66pxQS3uCjxTDvyerHa7znaQW6MjtBJ8wqo3OqtsDSTSffQ3aCdeCPDe3qd d0G8qGp9g86F0P6kir5Rj6Xzmj2Y8jjQbejx4QrDKMRvezGxY9rRZDW+VRrprcpn0rcSdLaQ/MZs YcixaSLf0FwuNeaxlJrLxeIVXsU4dHBoMOhrgCGJfkQRhgmBAlTSaGShkZS7NoLYwuyxljoSPmak 3yafbdfnHork7XjdQTSOhbaDCEz+Jv+Wt+Ql+a38a7GlGKppFsSUpqw/+0NxnczVuBVtpSYvvkJ5 I6TVkSVp/qAny1eprzrVWGypRXJy8CfxPV+X3JcpjGk30qybqeTqLPpGfNlOmh7Zrs2vNtdybZ1e mdwMrs0fmlXhSFf8oKvD/zU7vz//B82wAWgKZW5kc3RyZWFtCmVuZG9iago4IDAgb2JqCjcwNgpl bmRvYmoKNSAwIG9iagpbIC9JQ0NCYXNlZCA3IDAgUiBdCmVuZG9iago2IDAgb2JqCjw8IC9UeXBl IC9QYWdlcyAvTWVkaWFCb3ggWzkwOCA3NzUgMTY2OSA3ODJdIC9Db3VudCAxIC9LaWRzIFsgMSAw IFIKXSA+PgplbmRvYmoKOSAwIG9iago8PCAvVHlwZSAvQ2F0YWxvZyAvUGFnZXMgNiAwIFIgPj4K ZW5kb2JqCjEwIDAgb2JqCjw8IC9DcmVhdGlvbkRhdGUgKEQ6MjAwNjA1MjAxNzE5NDYtMDUnMDAn KSAvTW9kRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcpCi9Qcm9kdWNlciAoTWFjIE9TIFgg MTAuNC42IFF1YXJ0eiBQREZDb250ZXh0KSA+PgplbmRvYmoKeHJlZgowIDExCjAwMDAwMDAwMDAg MDAwMDAgbiAKMDAwMDAwMDE3NiAwMDAwMCBuIAowMDAwMDAwMDIyIDAwMDAwIG4gCjAwMDAwMDAy ODUgMDAwMDAgbiAKMDAwMDAwMDE1OCAwMDAwMCBuIAowMDAwMDAxMTc5IDAwMDAwIG4gCjAwMDAw MDEyMTQgMDAwMDAgbiAKMDAwMDAwMDM1MyAwMDAwMCBuIAowMDAwMDAxMTYwIDAwMDAwIG4gCjAw MDAwMDEzMDIgMDAwMDAgbiAKMDAwMDAwMTM1MSAwMDAwMCBuIAp0cmFpbGVyCjw8IC9TaXplIDEx IC9Sb290IDkgMCBSIC9JbmZvIDEwIDAgUiAvSUQgWyA8MjUwNjc0NDIyNTFiNGNiNzhmZmU4NTEx N2I0NjhiMTc+CjwyNTA2NzQ0MjI1MWI0Y2I3OGZmZTg1MTE3YjQ2OGIxNz4gXSA+PgpzdGFydHhy ZWYKMTQ5NAolJUVPRgoAAKEAjAAIAwcDjAMOBoUAIgMKBoABAAAjAP8AIwD/ACMA/wAj//8AI/8A ACEDBgONACP/AQAj/wEAIwABACMBAQAjAQAAIwEAACEDCgaAAKAAjQChAGQABlBQTlQCAgChAGQH U1BQTlQCASVQREYtMS4zCiXE5fLl66fzoNDExgoyIDAgb2JqCjw8IC9MZW5ndGggNCAwIFIgL0Zp bHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjaK1QIVChU0HcuNlRILlYwAMPiZAVLQ1MFc0sT hVwFCzMzBXNzC4UciJiZIYwFlM1RyFBI01IIBAApsw9tCmVuZHN0cmVhbQplbmRvYmoKNCAwIG9i ago2MgplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDYgMCBSIC9SZXNvdXJj ZXMgMyAwIFIgL0NvbnRlbnRzIDIgMCBSIC9NZWRpYUJveApbODY2IDc2MSA5MTYgNzk1XSA+Pgpl bmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDUg MCBSID4+ID4+CmVuZG9iago3IDAgb2JqCjw8IC9MZW5ndGggOCAwIFIgL04gMyAvQWx0ZXJuYXRl IC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjafZJPSBRRHMe/syVC rAVlJlLwTrYHVwbtYB2M3fVvyrasa6YIss6+2R2dnZ3ezG4lHkKILkHWMbpY0Uk6hgcPHQIPEYJi XSLoKBkEgpeQ7Tczu+6I2oM37zO//7/fe0BdKG2aeoABecMWyf4ouzs+weo3UIcGBEErrVhmJJEY dplscWTtfYXknJvh4/X/XQ2CEgISVYDGrMfXHJ72eMDh+7ZpE086rOTSGWKTuE2kkjHiV8Rnsz6e 9nGGWwrxMvFNxRQUJ5AiHigpWSfmDrFsZDSD5JeJuzKWkicm38BTZxZemfYQ0H0FOPW5JpuwgOV3 wKXWmizUDFwcA1Y6a7LdpDsfqWndUjs7XJEUjAJ1P8rl3Vag/gWw/7xc/vu6XN5/Qzm+Ax91pShK lRlJ0hfA68Ndjf3c4EJTmHNfCVFQNZ37Rnq82uvXi0f1Jat0EnszcVcXsET3MHYGGHoMvPwJXH0P XPgAJBqA1HUEHqG6bf7AzRMrmA+Fls3ZrEOWO1jYOTpZhF4IZ7FC3izaXLBBQ2lvY2ldZ66pxQS3 uCjxTDvyerHa7znaQW6MjtBJ8wqo3OqtsDSTSffQ3aCdeCPDe3qdd0G8qGp9g86F0P6kir5Rj6Xz mj2Y8jjQbejx4QrDKMRvezGxY9rRZDW+VRrprcpn0rcSdLaQ/MZsYcixaSLf0FwuNeaxlJrLxeIV XsU4dHBoMOhrgCGJfkQRhgmBAlTSaGShkZS7NoLYwuyxljoSPmak3yafbdfnHork7XjdQTSOhbaD CEz+Jv+Wt+Ql+a38a7GlGKppFsSUpqw/+0NxnczVuBVtpSYvvkJ5I6TVkSVp/qAny1eprzrVWGyp RXJy8CfxPV+X3JcpjGk30qybqeTqLPpGfNlOmh7Zrs2vNtdybZ1emdwMrs0fmlXhSFf8oKvD/zU7 vz//B82wAWgKZW5kc3RyZWFtCmVuZG9iago4IDAgb2JqCjcwNgplbmRvYmoKNSAwIG9iagpbIC9J Q0NCYXNlZCA3IDAgUiBdCmVuZG9iago2IDAgb2JqCjw8IC9UeXBlIC9QYWdlcyAvTWVkaWFCb3gg Wzg2NiA3NjEgOTE2IDc5NV0gL0NvdW50IDEgL0tpZHMgWyAxIDAgUgpdID4+CmVuZG9iago5IDAg b2JqCjw8IC9UeXBlIC9DYXRhbG9nIC9QYWdlcyA2IDAgUiA+PgplbmRvYmoKMTAgMCBvYmoKPDwg L0NyZWF0aW9uRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcpIC9Nb2REYXRlIChEOjIwMDYw NTIwMTcxOTQ2LTA1JzAwJykKL1Byb2R1Y2VyIChNYWMgT1MgWCAxMC40LjYgUXVhcnR6IFBERkNv bnRleHQpID4+CmVuZG9iagp4cmVmCjAgMTEKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMDAwMTc2 IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwMDI4NCAwMDAwMCBuIAowMDAwMDAw MTU4IDAwMDAwIG4gCjAwMDAwMDExNzggMDAwMDAgbiAKMDAwMDAwMTIxMyAwMDAwMCBuIAowMDAw MDAwMzUyIDAwMDAwIG4gCjAwMDAwMDExNTkgMDAwMDAgbiAKMDAwMDAwMTMwMCAwMDAwMCBuIAow MDAwMDAxMzQ5IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMTEgL1Jvb3QgOSAwIFIgL0luZm8g MTAgMCBSIC9JRCBbIDxlNTAzMzRkNGUzZWUxNmExYmY2ZjYxYzkyODRmNTM2YT4KPGU1MDMzNGQ0 ZTNlZTE2YTFiZjZmNjFjOTI4NGY1MzZhPiBdID4+CnN0YXJ0eHJlZgoxNDkyCiUlRU9GCgAAoQCM AAgC+QNiAxsDlABxAB4C+QNiAxoDkwMaA5MDCgNiAvkDkwMaA5MDGgOTAKAAjQChAGQABlBQTlQC AgChAIwACAAAAAAAAAAAAKAAjQABAAoDeAQ5A+oEmQADB9EABAEAAAYAAQAAAC0ACAAA/SAAAAAA ABYAUQAoA6YEQgFJAAYAAAAAAC0ACAAAAAAAAAAAABYAAAApDgJTRgADB9oABAAAAAYAGAAAAC0A CAAX/8AAAAAAABYHrgApQAEgAAChAIwACAAAAAAAAAAAAKAAjQABAAoCXwQQAtIF8AADB9EABgAA AAAALQAIAAAAAAAAAAAAFgAAACgCjQQZDDEuIFJvdXRlciBTbwAABv//AAAALQAI//7/wAAAAAAA Fv+uACgCjQUzAmxpAAAGAAAAAAAtAAgAAAAAAAAAAAAWAAAAKRYBYwAABv//AAAALQAI//7/wAAA AAAAFv+uACkZAWkAAAYAAAAAAC0ACAAAAAAAAAAAABYAAAApCwN0YXQAAAb//gAAAC0ACP/9/4AA AAAAABb/XAApOAFpAAAGAAAAAAAtAAgAAAAAAAAAAAAWAAAAKQoCb24AAwfaAAYAFwAAAC0ACAAW /4AAAAAAABYHXAApOAEgAAChAIwACAAAAAAAAAAAAKAAjQABAAoC1QQSA0gGQAADB9EABgAAAAAA LQAIAAAAAAAAAAAAFgAAACgDAwQcCTIuIFJvdXRlcgAG//8AAAAtAAj//v/AAAAAAAAW/64AKc8B IAAABgAAAAAALQAIAAAAAAAAAAAAFgAAACgDPQQcBkFkdmVydAAABv//AAAALQAI//7/wAAAAAAA Fv+uACmRAWkAAAYAAAAAAC0ACAAAAAAAAAAAABYAAAApCwJzZQAGAAIAAAAtAAgAAf1gAAAAAAAW AKMAKTUBbQAABgAAAAAALQAIAAAAAAAAAAAAFgAAACkqA2VudAAAAwfaAAYAFwAAAC0ACAAW/4AA AAAAABYHXAApRgEgAAChAGQHVVBQTlQCASVQREYtMS4zCiXE5fLl66fzoNDExgoyIDAgb2JqCjw8 IC9MZW5ndGggNCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnjaK1QIVChUMFEo VzBU8ALiLAULBV8FfediQwXnYAUDMAx2VrAwM1MwMzVRyFUwNDMyADNzFIIVAgG3Wg10CmVuZHN0 cmVhbQplbmRvYmoKNCAwIG9iago2MgplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFy ZW50IDYgMCBSIC9SZXNvdXJjZXMgMyAwIFIgL0NvbnRlbnRzIDIgMCBSIC9NZWRpYUJveApbODYz IDY1MSAxNjI0IDY1OF0gPj4KZW5kb2JqCjMgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIF0gL0Nv bG9yU3BhY2UgPDwgL0NzMSA1IDAgUiA+PiA+PgplbmRvYmoKNyAwIG9iago8PCAvTGVuZ3RoIDgg MCBSIC9OIDMgL0FsdGVybmF0ZSAvRGV2aWNlUkdCIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp42n2ST0gUURzHv7MlQqwFZSZS8E62B1cG7WAdjN31b8q2rGumCLLOvtkdnZ2d3sxuJR5C iC5B1jG6WNFJOoYHDx0CDxGCYl0i6CgZBIKXkO03M7vuiNqDN+8zv/+/33tAXShtmnqAAXnDFsn+ KLs7PsHqN1CHBgRBK61YZiSRGHaZbHFk7X2F5Jyb4eP1/10NghICElWAxqzH1xye9njA4fu2aRNP Oqzk0hlik7hNpJIx4lfEZ7M+nvZxhlsK8TLxTcUUFCeQIh4oKVkn5g6xbGQ0g+SXibsylpInJt/A U2cWXpn2ENB9BTj1uSabsIDld8Cl1pos1AxcHANWOmuy3aQ7H6lp3VI7O1yRFIwCdT/K5d1WoP4F sP+8XP77ulzef0M5vgMfdaUoSpUZSdIXwOvDXY393OBCU5hzXwlRUDWd+0Z6vNrr14tH9SWrdBJ7 M3FXF7BE9zB2Bhh6DLz8CVx9D1z4ACQagNR1BB6hum3+wM0TK5gPhZbN2axDljtY2Dk6WYReCGex Qt4s2lywQUNpb2NpXWeuqcUEt7go8Uw78nqx2u852kFujI7QSfMKqNzqrbA0k0n30N2gnXgjw3t6 nXdBvKhqfYPOhdD+pIq+UY+l85o9mPI40G3o8eEKwyjEb3sxsWPa0WQ1vlUa6a3KZ9K3EnS2kPzG bGHIsWki39BcLjXmsZSay8XiFV7FOHRwaDDoa4AhiX5EEYYJgQJU0mhkoZGUuzaC2MLssZY6Ej5m pN8mn23X5x6K5O143UE0joW2gwhM/ib/lrfkJfmt/GuxpRiqaRbElKasP/tDcZ3M1bgVbaUmL75C eSOk1ZElaf6gJ8tXqa861VhsqUVycvAn8T1fl9yXKYxpN9Ksm6nk6iz6RnzZTpoe2a7NrzbXcm2d XpncDK7NH5pV4UhX/KCrw/81O78//wfNsAFoCmVuZHN0cmVhbQplbmRvYmoKOCAwIG9iago3MDYK ZW5kb2JqCjUgMCBvYmoKWyAvSUNDQmFzZWQgNyAwIFIgXQplbmRvYmoKNiAwIG9iago8PCAvVHlw ZSAvUGFnZXMgL01lZGlhQm94IFs4NjMgNjUxIDE2MjQgNjU4XSAvQ291bnQgMSAvS2lkcyBbIDEg MCBSCl0gPj4KZW5kb2JqCjkgMCBvYmoKPDwgL1R5cGUgL0NhdGFsb2cgL1BhZ2VzIDYgMCBSID4+ CmVuZG9iagoxMCAwIG9iago8PCAvQ3JlYXRpb25EYXRlIChEOjIwMDYwNTIwMTcxOTQ2LTA1JzAw JykgL01vZERhdGUgKEQ6MjAwNjA1MjAxNzE5NDYtMDUnMDAnKQovUHJvZHVjZXIgKE1hYyBPUyBY IDEwLjQuNiBRdWFydHogUERGQ29udGV4dCkgPj4KZW5kb2JqCnhyZWYKMCAxMQowMDAwMDAwMDAw IDAwMDAwIG4gCjAwMDAwMDAxNzYgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAowMDAwMDAw Mjg1IDAwMDAwIG4gCjAwMDAwMDAxNTggMDAwMDAgbiAKMDAwMDAwMTE3OSAwMDAwMCBuIAowMDAw MDAxMjE0IDAwMDAwIG4gCjAwMDAwMDAzNTMgMDAwMDAgbiAKMDAwMDAwMTE2MCAwMDAwMCBuIAow MDAwMDAxMzAyIDAwMDAwIG4gCjAwMDAwMDEzNTEgMDAwMDAgbiAKdHJhaWxlcgo8PCAvU2l6ZSAx MSAvUm9vdCA5IDAgUiAvSW5mbyAxMCAwIFIgL0lEIFsgPDI1MDY3NDQyMjUxYjRjYjc4ZmZlODUx MTdiNDY4YjE3Pgo8MjUwNjc0NDIyNTFiNGNiNzhmZmU4NTExN2I0NjhiMTc+IF0gPj4Kc3RhcnR4 cmVmCjE0OTQKJSVFT0YKAAChAIwACAKLA18CkgZYAAEACoABgAF//3//ACICigNh/wAAI/8BACP/ AQAjAAEAIwEBACMBAAAhAo4GUgAjAQAAIwEAACMA/wAjAP8AIwD/ACP//wAhAooDYQCgAI0AoQBk AAZQUE5UAgIAoQBkB1hQUE5UAgElUERGLTEuMwolxOXy5eun86DQxMYKMiAwIG9iago8PCAvTGVu Z3RoIDQgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp42itUCFQoVNB3LjZUSC5W MADD4mQFQzNDMwUzYwuFXCDTzFTBzNREIQcqam4AZwIV5ChkKKRpKQQCAGN/EBoKZW5kc3RyZWFt CmVuZG9iago0IDAgb2JqCjYzCmVuZG9iagoxIDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQg NiAwIFIgL1Jlc291cmNlcyAzIDAgUiAvQ29udGVudHMgMiAwIFIgL01lZGlhQm94ClsxNjE2IDYz OCAxNjY2IDY3MV0gPj4KZW5kb2JqCjMgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIF0gL0NvbG9y U3BhY2UgPDwgL0NzMSA1IDAgUiA+PiA+PgplbmRvYmoKNyAwIG9iago8PCAvTGVuZ3RoIDggMCBS IC9OIDMgL0FsdGVybmF0ZSAvRGV2aWNlUkdCIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVh bQp42n2ST0gUURzHv7MlQqwFZSZS8E62B1cG7WAdjN31b8q2rGumCLLOvtkdnZ2d3sxuJR5CiC5B 1jG6WNFJOoYHDx0CDxGCYl0i6CgZBIKXkO03M7vuiNqDN+8zv/+/33tAXShtmnqAAXnDFsn+KLs7 PsHqN1CHBgRBK61YZiSRGHaZbHFk7X2F5Jyb4eP1/10NghICElWAxqzH1xye9njA4fu2aRNPOqzk 0hlik7hNpJIx4lfEZ7M+nvZxhlsK8TLxTcUUFCeQIh4oKVkn5g6xbGQ0g+SXibsylpInJt/AU2cW Xpn2ENB9BTj1uSabsIDld8Cl1pos1AxcHANWOmuy3aQ7H6lp3VI7O1yRFIwCdT/K5d1WoP4FsP+8 XP77ulzef0M5vgMfdaUoSpUZSdIXwOvDXY393OBCU5hzXwlRUDWd+0Z6vNrr14tH9SWrdBJ7M3FX F7BE9zB2Bhh6DLz8CVx9D1z4ACQagNR1BB6hum3+wM0TK5gPhZbN2axDljtY2Dk6WYReCGexQt4s 2lywQUNpb2NpXWeuqcUEt7go8Uw78nqx2u852kFujI7QSfMKqNzqrbA0k0n30N2gnXgjw3t6nXdB vKhqfYPOhdD+pIq+UY+l85o9mPI40G3o8eEKwyjEb3sxsWPa0WQ1vlUa6a3KZ9K3EnS2kPzGbGHI sWki39BcLjXmsZSay8XiFV7FOHRwaDDoa4AhiX5EEYYJgQJU0mhkoZGUuzaC2MLssZY6Ej5mpN8m n23X5x6K5O143UE0joW2gwhM/ib/lrfkJfmt/GuxpRiqaRbElKasP/tDcZ3M1bgVbaUmL75CeSOk 1ZElaf6gJ8tXqa861VhsqUVycvAn8T1fl9yXKYxpN9Ksm6nk6iz6RnzZTpoe2a7NrzbXcm2dXpnc DK7NH5pV4UhX/KCrw/81O78//wfNsAFoCmVuZHN0cmVhbQplbmRvYmoKOCAwIG9iago3MDYKZW5k b2JqCjUgMCBvYmoKWyAvSUNDQmFzZWQgNyAwIFIgXQplbmRvYmoKNiAwIG9iago8PCAvVHlwZSAv UGFnZXMgL01lZGlhQm94IFsxNjE2IDYzOCAxNjY2IDY3MV0gL0NvdW50IDEgL0tpZHMgWyAxIDAg UgpdID4+CmVuZG9iago5IDAgb2JqCjw8IC9UeXBlIC9DYXRhbG9nIC9QYWdlcyA2IDAgUiA+Pgpl bmRvYmoKMTAgMCBvYmoKPDwgL0NyZWF0aW9uRGF0ZSAoRDoyMDA2MDUyMDE3MTk0Ni0wNScwMCcp IC9Nb2REYXRlIChEOjIwMDYwNTIwMTcxOTQ2LTA1JzAwJykKL1Byb2R1Y2VyIChNYWMgT1MgWCAx MC40LjYgUXVhcnR6IFBERkNvbnRleHQpID4+CmVuZG9iagp4cmVmCjAgMTEKMDAwMDAwMDAwMCAw MDAwMCBuIAowMDAwMDAwMTc3IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwMDI4 NyAwMDAwMCBuIAowMDAwMDAwMTU5IDAwMDAwIG4gCjAwMDAwMDExODEgMDAwMDAgbiAKMDAwMDAw MTIxNiAwMDAwMCBuIAowMDAwMDAwMzU1IDAwMDAwIG4gCjAwMDAwMDExNjIgMDAwMDAgbiAKMDAw MDAwMTMwNSAwMDAwMCBuIAowMDAwMDAxMzU0IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMTEg L1Jvb3QgOSAwIFIgL0luZm8gMTAgMCBSIC9JRCBbIDxiMzU3YmMyY2Q5YjFiYWNiODhhMWFlNDMy Mzg2OTdiYz4KPGIzNTdiYzJjZDliMWJhY2I4OGExYWU0MzIzODY5N2JjPiBdID4+CnN0YXJ0eHJl ZgoxNDk3CiUlRU9GCgChAIwACAJ+BlACnwaCAHEAHgJ+BlACngaBAn4GUAKOBoECngZQAn4GUAJ+ BlAAoACNAKEAZAAGUFBOVAICAAcAAQABACAAAAAAEGgAAAAhEGgQaAAhAAAQaAAhAAAAAAAgAAEA ARBnAAEAIRBnEGcAIQABEGcAIQABAAEAIAACAAIQZgACACEQZhBmACEAAhBmACEAAgACACAAAwAD EGUAAwAhEGUQZQAhAAMQZQAhAAMAAwAgAAQABBBkAAQAIRBkEGQAIQAEEGQAIQAEAAQAIAAFAAUQ YwAFACEQYxBjACEABRBjACEABQAFACAABgAGEGIABgAhEGIQYgAhAAYQYgAhAAYABgAgAAcABxBh AAcAIRBhEGEAIQAHEGEAIQAHAAcAIAAIAAgQYAAIACEQYBBgACEACBBgACEACAAIAP8AAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8AAAMKAQAA AAAAAAAAAAAAAAAAAAAAAQAAAALVzdWcLhsQk5cIACss+a4wAAAA7AAAAAwAAAABAAAAaAAAAA8A AABwAAAABQAAAIAAAAAGAAAAiAAAABEAAACQAAAAFwAAAJgAAAALAAAAoAAAABAAAACoAAAAEwAA ALAAAAAWAAAAuAAAAA0AAADAAAAADAAAAM0AAAACAAAAECcAAB4AAAAGAAAATm9raWEAAAEDAAAA AQAAAAMAAAABAAAAAwAAAAAAAAADAAAAAwILAAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAAsAAAAA AAAAHhAAAAEAAAABAAAAAAwQAAACAAAAHgAAAAYAAABUaXRsZQADAAAAAQAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJAAAABEAGQAAAAAAAAAAgAA AAAAAAAAAAAAAAAgHOAQtgP6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwAE8EQA AACyBArwCAAAAAEEAAAACgAAMwAL8BIAAAB/AEABQAEAARAA//8BAfD/AAATACLxBgAAAD8FAQAB AAAAEPAEAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxAFQAYQBiAGwAZQAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgACARsAAAAeAAAA/////wAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG8BAAAAEAAAAAAAAAEAQwBvAG0AcABP AGIAagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAIB ////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQAAAGgAAAAA AAAAAwBPAGIAagBJAG4AZgBvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAABIAAgAdAAAAIAAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAALAAAABgAAAAAAAABXAG8AcgBkAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAP///////////////wAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAHcBAAAoEAAAAAAAABQADwASAAEAnAAPAAMAAAADAAAAAABEAABA 8f8CAEQADAAAAAAAAAAAAAYATgBvAHIAbQBhAGwAAAACAAAAHABDShgAX0gBBGFKGABtSAkEbkgR BHNICQR0SBEEAAAAAAAAAAAAAAAAAAAAAAAARABBQPL/oQBEAAwBAAAAAAAAAAAWAEQAZQBmAGEA dQBsAHQAIABQAGEAcgBhAGcAcgBhAHAAaAAgAEYAbwBuAHQAAAAAAFIAaUDz/7MAUgAMAQAAAAAA AAAADABUAGEAYgBsAGUAIABOAG8AcgBtAGEAbAAAABwAF/YDAAA01gYAAQoDbAA01gYAAQUDAABh 9gMAAAIACwAAACgAawD0/8EAKAAAAQAAAAAAAAAABwBOAG8AIABMAGkAcwB0AAAAAgAAAAAAAAAA AAAAFwAAABgAAAAZAAAAGgAAADoAAABZAAAAAQAAAAAAAAAAAP////8GBAAAAAAAAP////8AAAAA AQD/////AAAAAAAAAAABAAAAAQAAAAEA/////wAAAAAAAAAAAgAAAAIAAAABAP////8AAAAAAAAA AAEAAAAAAAAAAAD/////DgQAAAAAAAADAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAABcAAAAYAAAA GQAAABoAAAA6AAAAPQAAAAAAAAAAEAEAAAAACAIAAAAACAMAAAAACAQAAAAAEP//AAAAAAAAAABZ AAAACQAAEAAABgD/////AQAAAAQgAAD//wEAQFbDAAAAAAAAAAAAWQAAAAAAAAAAAAAAAAAdAAAA MwAAADQAAAA1AAAANgAAADcAAABWAAAAVwAAAFoAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAA AAABmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAA5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAAAA BgAAWQgAAAUAAAAABgAAWQgAAAYAAAAABgAAWAgAAAcAAAAAAAAAGAAAABsAAABZAAAAk18U/xWc DwAA8DgAAAAAAAbwGAAAAA8EAAACAAAADgAAAAEAAAABAAAADwAAAEAAHvEQAAAA//8AAAAA/wCA gIAA9wAAEAAPAALwcAIAABAACPAIAAAABQAAAA4EAAAPAAPwDgIAAA8ABPAoAAAAAQAJ8BAAAAAA AAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAABAAABQAAAA8AA/DWAQAADwAE8IYAAAABAAnwEAAAAGQU AAB0IgAAHC8AAKwmAAACAArwCAAAAAMEAAABAgAAIwAL8AwAAAB/AMABwAG/AwAAIABzACLxKgAA AI8DAAAAAJADAwAAAJEDAAAAAJIDAwAAAL8DAAIAAgAFAAAAAD8FAQABAAAAEPAEAAAAAAAAAAAA EfAEAAAAAQAAAA8ABPBgAAAAsgQK8AgAAAACBAAAAgoAAGMAC/AkAAAAfwAEAAQAWAEAAAAAfwE5 ADkAvwEBABEA/wEAAAgAPwMAABAAAAAP8BAAAABkFAAAdCIAABwvAACsJgAAAAAR8AQAAAAJAAAA DwAE8GgAAACiDArwCAAAAAYEAAACCgAAMwAL8BIAAACAAAAAAQC/AQAAEADLAQM+AAATACLxBgAA AL8BAABgAAAAD/AQAAAAGBUAANwjAADAIQAARCUAAAAAEfAEAAAACAAAAAAADfAEAAAAAAABAA8A BPBoAAAAogwK8AgAAAAOBAAAAgoAADMAC/ASAAAAgAAAAAUAvwEAABAAywEDPgAAEwAi8QYAAAC/ AQAAYAAAAA/wEAAAAMAhAADcIwAAaC4AAEQlAAAAABHwBAAAAAgAAAAAAA3wBAAAAAAABQAPAATw QgAAABIACvAIAAAAAQQAAAAOAABTAAvwHgAAAL8BAAAQAMsBAAAAAP8BAAAIAAQDCQAAAD8DAQAB AAAAEfAEAAAAAQAAABkAAABZAAAAAwQAAAAAAAAAAAAAuBoAADgEAAB0gAAAAAAAAAAAAAAAABoA AAAbAAAAHAAAAB0AAAAyAAAANAAAAFUAAABWAAAAVwAAAFoAAAAEAAMABAADAAcABAADAAQAAwAE AAMAAAAAAB0AAABaAAAABwAHAAAAAAAdAAAAMgAAADcAAABVAAAAWgAAAAcABQAHAAUABwAAAAAA HQAAAFoAAAAHAAcAuAAAAAQAAAAIAAAA5QAAAAAAAAC3AAAAPlIAANVLAwCOCAUADi4FAIspBgA+ cggAlAUJABdGCgDkWAoAhksMAA0rDQCbRQ0AH0kRAIVdEQBeFRIAKB0SAJdDEgAeTxMAnXwWAMwV GgAvHhoAu3gaABsRHgA8Kx4AdxYhAJM4IQBKJiIAtW8lAMRdJwDdTSsANlkrAMFqKwARAywAmlsu AD5lMQCZKDMAojMzAOc/OQCdRToAnDVBALJJQwBXE0QAHV9EAE1rRACaYEUAOR5HAF0gRwCjJkcA YXJKAN4+SwBJGk0AeFBNAAEYTgCAME4AbWRQAP0kUgCpXVIA7HFUAGtUVQAbAlYADHlWAMkhWgD6 J1wA1F9cAMoIXgBLQWAAgDhhAEwFYwCxFWQAmXBkAH4GZgD8WWgAJWNqAFslbABgMXAATRh0ABYZ dABwYnYA7RJ3AHUhfQAVOn4AR1V+APx/fgAmEoEAlQ+CAKI5hwCACokAWz6JAMk0jQAgVI0Aw3+S AEsXkwBENZMAPlWTAAselAAoMZcA3kCXAPkxmACXQJgAxVSYAJRymABAUpoA10ObAJtHmwB5J50A gQueAK8coACCa6IAcS2jAPt6pQCkFqgAyUKpABwYqgDfaqoA0EGuAPsKsQClArIAxAyzACFRtAAV IrcAYBq5AG81uQAKVrkATye7AN8FvAD1MbwAPDC9AB49vQDWA78ANyO/ACRrvwADdL8A2iLAAFIC wQAvfMIAChDDAPg9wwAAE8UA+hnFAGhixgAYGMcAmF/IAOoDygCXPsoAcQrMAM56zgDga88AxH3Q AK8D0gBfc9IAERXTAIMl0wDuKNUARnbVAFhT1gCPItgAkkXYAA9U2wBxAdwACnzcAA0O3QCNFN0A HBbiAAVB5ABcYuUAVRboAOhY6ABYUOkAQVbrAAEv8ABWV/EANmHxAOUD8gCHSPIAW3f0AABg9QCh PfcAfyf4ALJA+QCiVvkANSL7APIH/QAcM/8AWTX/AP9AAQEBAAAAAAAcAAAAXCQ0DwEAAQAZAAAA AAAAAAMAAAAAAAAAAhAAAAAAAAAAWQAAAJAAABAAQAAA//8BAAAABwBVAG4AawBuAG8AdwBuAP// AQAIAAAAAAAAAAAAAAD//wEAAAAAAP//AAACAP//AAAAAP//AAACAP//AAAAAAQAAABHFpABAAAC AgYDBQQFAgMEhzoAIAAAAAAAAAAAAAAAAP8BAAAAAAAAVABpAG0AZQBzACAATgBlAHcAIABSAG8A bQBhAG4AAAA1FpABAgAFBQECAQcGAgUHAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAUwB5AG0AYgBv AGwAAAAzJpABAAACCwYEAgICAgIEhzoAIAAAAAAAAAAAAAAAAP8BAAAAAAAAQQByAGkAYQBsAAAA RzWQAYAKAgIGCQQCBQgDBL8CAKD7/MdoEAAAAAAAAACfAAIAAAAAAE0AUwAgAE0AaQBuAGMAaABv AAAALf8z/yAADmYdZwAAIgAEADEIiBgA8NACAABoAQAAAADjkqWG6ZKlhgAAAAACAAEAAAAEAAAA GQAAAAEAAQAAAAQAAxABAAAABAAAABkAAAABAAEAAAABAAAAAAAAACEDAPAQAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAEgSwCG0ALQAgYFyNAAAAAAAAAAAAAAAAAAAHAAAABwAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAA AAAAAAAAATKDEQDwEAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIAAAAAAAp8P8PAQAB PwAA5AQAAP///3////9/////f////3////9/////f////391IX0A//8SAAAAAAAAAAAAAAAAAAAA BABzAHkAYQBtAAQAcwB5AGEAbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADspcEABUAJBAAA+BK/AAAAAAAAEAAAAAAABgAAWQgAAA4A Ympiau5G7kYAAAAAAAAAAAAAAAAAAAAAAAAJBBYAKBAAAIwsAACMLAAAHQAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAOwAAAAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAA AAAAAIgAAAAAADYBAAAAAAAANgEAADYBAAAAAAAANgEAAAAAAAAWAgAAAAAAABYCAAAAAAAAFgIA ABQAAAAAAAAAAAAAAEwCAAAAAAAAcAMAAAAAAABwAwAAAAAAAHADAAAAAAAAcAMAAAwAAAB8AwAA DAAAAEwCAAAAAAAAhgoAAP4AAACUAwAAFgAAAKoDAAAAAAAAqgMAAAAAAACqAwAAAAAAAKoDAAAA AAAAhQYAAAAAAACFBgAAAAAAAIUGAAAAAAAABQoAAAIAAAAHCgAAAAAAAAcKAAAAAAAABwoAAAAA AAAHCgAAAAAAAAcKAAAAAAAABwoAACQAAACECwAAUgIAANYNAAA6AAAAKwoAABUAAAAAAAAAAAAA AAAAAAAAAAAAFgIAAAAAAACFBgAAAAAAAAAAAAAAAAAAAAAAAAAAAABjBgAAIgAAAIUGAAAAAAAA hQYAAAAAAACFBgAAAAAAACsKAAAAAAAAAAAAAAAAAAA2AQAAAAAAADYBAAAAAAAAqgMAAAAAAAAA AAAAAAAAAKoDAAC5AgAAQAoAABYAAAANBwAAAAAAAA0HAAAAAAAADQcAAAAAAACFBgAARgAAADYB AACgAAAAqgMAAAAAAAAWAgAAAAAAAKoDAAAAAAAABQoAAAAAAAAAAAAAAAAAAA0HAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhQYAAAAAAAAFCgAA AAAAAAAAAAAAAAAADQcAAAAAAAAAAAAAAAAAAA0HAAAAAAAA1gEAAEAAAAAWAgAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQcAAAAA AACqAwAAAAAAAIgDAAAMAAAA4HNw+EF6xgEAAAAAAAAAAHADAAAAAAAAywYAABAAAAANBwAAAAAA AAAAAAAAAAAABQoAAAAAAABWCgAAMAAAAIYKAAAAAAAADQcAAAAAAAAQDgAAAAAAANsGAAAiAAAA EA4AAAAAAAANBwAAAAAAAAAAAAAAAAAAKgIAABQAAAA+AgAADgAAADYBAAAAAAAANgEAAAAAAAA2 AQAAAAAAADYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOAAAAAAAAAAAAAAAAAAAWAgAAAAAAAA0H AAD4AgAAhQYAAAAAAACFBgAAAAAAAA0HAAAAAAAAhQYAAAAAAACFBgAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAhQYAAAAAAACFBgAAAAAAAIUGAAAAAAAAKwoAAAAAAAArCgAA AAAAAEwCAAAAAAAATAIAACQBAABwAwAAAAAAAAAAAAAAAAAA/QYAABAAAABMAgAAAAAAAEwCAAAA AAAAcAMAAAAAAAACAAEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAABMgU0hBUEUgIFwqIE1FUkdFRk9STUFUIBQIARUNSVB2NiBQcmVm aXggKDY0IGJpdHMpDQ0NDQ1JbnRlcmZhY2UgSWRlbnRpZmllciAoNjQgYml0cykNDQ0NAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAYAAAEIAAAYCAAAGQgAABoIAAAcCAAAHQgAADIIAAAzCAAANwgA AFUIAABWCAAAWAgAAFkIAAD38/fj99/XzPPXzPPfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFBVo+D3DABZo+D3DAENKFABhShQAAA4WaPg9wwBD ShQAYUoUAAAGFmilArIAAB4DagAAAAAWaPg9wwBVCAFfSDkEbUgABG5IAAR1CAEABhZo+D3DAAAP A2oAAAAAFmj4PcMAVQgBAA0ABgAAHQgAADMIAAA0CAAANQgAADYIAAA3CAAAVggAAFcIAABYCAAA WQgAAPoBAQAAuBoAAOh2CgDyAAEAAG4LAAB2OgIA8AAAAAAAAAAAAAAAAPAAAAAAAAAAAAAAAADw AAAAAAAAAAAAAAAA8AAAAAAAAAAAAAAAAPIAAQAAbgsAAHY6AgDwAAAAAAAAAAAAAAAA8AAAAAAA AAAAAAAAAPoBAQAAuBoAAOh2CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAcAAAMkAWEkAWdk +D3DAAAEAABnZPg9wwAACgAGAAAdCAAAWAgAAP7+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAACAQECJgAxkGgBOnD4PcMAH7DATiCwwE4hsEgSIrDAISOQwCEkkMgoJbAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAD9////pAEAAIMBAACEAQAAhQEAAIYBAACHAQAAiAEAAIkBAAD+////iwEA AIwBAACNAQAAjgEAAI8BAACQAQAAkQEAAP7///+TAQAAlAEAAJUBAACWAQAAlwEAAJgBAACZAQAA mgEAAJsBAACcAQAAnQEAAJ4BAACfAQAAoAEAAKEBAACiAQAAowEAAP7///+3AQAApgEAAKcBAACo AQAAqQEAAKoBAACrAQAArAEAAK0BAACuAQAA/v///7ABAACxAQAAsgEAALMBAAC0AQAAtQEAALYB AAD+////4gIAALkBAAC6AQAAuwEAALwBAAC9AQAAvgEAAL8BAAD+////wQEAAMIBAADDAQAAxAEA AMUBAADGAQAAxwEAAMgBAADJAQAAygEAAMsBAADMAQAAzQEAAM4BAADPAQAA0AEAANEBAADSAQAA 0wEAANQBAADVAQAA1gEAANcBAADYAQAA2QEAANoBAADbAQAA3AEAAN0BAADeAQAA3wEAAOABAADh AQAA4gEAAOMBAADkAQAA5QEAAOYBAADnAQAA6AEAAOkBAADqAQAA6wEAAOwBAADtAQAA7gEAAO8B AADwAQAA8QEAAPIBAADzAQAA9AEAAPUBAAD2AQAA9wEAAPgBAAD5AQAA+gEAAPsBAAD8AQAA/QEA AP4BAAD/AQAAAQIAAAUAUwB1AG0AbQBhAHIAeQBJAG4AZgBvAHIAbQBhAHQAaQBvAG4AAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAoAAIBHwAAACEAAAD/////AAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAggEAAAAQAAAAAAAABQBEAG8AYwB1AG0AZQBuAHQAUwB1AG0AbQBhAHIA eQBJAG4AZgBvAHIAbQBhAHQAaQBvAG4AAAAAAAAAAAAAADgAAgD///////////////8AAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACKAQAAABAAAAAAAABfADEAMgAwADkANAA1ADkA NgAxADgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAABAP////// ////JAAAAAcJAgAAAAAAwAAAAAAAAEYAAAAAsC63pFbnxgGQ98ekVufGAQAAAAAAAAAAAAAAADEA VABhAGIAbABlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAOAAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA kgEAAG4iAAAAAAAA/v8AAAUBAgAAAAAAAAAAAAAAAAAAAAAAAQAAAOCFn/L5T2gQq5EIACsns9kw AAAAaAEAABEAAAABAAAAkAAAAAIAAACYAAAAAwAAAKQAAAAEAAAAsAAAAAUAAADAAAAABgAAAMwA AAAHAAAA2AAAAAgAAADsAAAACQAAAPwAAAASAAAACAEAAAoAAAAkAQAADAAAADABAAANAAAAPAEA AA4AAABIAQAADwAAAFABAAAQAAAAWAEAABMAAABgAQAAAgAAAOQEAAAeAAAAAQAAAAAAcwAeAAAA AQAAAAAAcwAeAAAABQAAAHN5YW0AAGYAHgAAAAEAAAAAeWFtHgAAAAEAAAAAeWFtHgAAAAsAAABO b3JtYWwuZG90AAAeAAAABQAAAHN5YW0AbC5kHgAAAAIAAAAyAGFtHgAAABQAAABNaWNyb3NvZnQg V29yZCAxMC4wAEAAAAAARsMjAAAAAEAAAAAAzuv+QHrGAUAAAAAAcn/VQXrGAQMAAAABAAAAAwAA AAQAAAADAAAAGQAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAP7/AAAFAQIAAAAAAAAAAAAAAAAAAAAAAAEAAAAC1c3VnC4bEJOXCAArLPmuMAAAAOgAAAAM AAAAAQAAAGgAAAAPAAAAcAAAAAUAAAB8AAAABgAAAIQAAAARAAAAjAAAABcAAACUAAAACwAAAJwA AAAQAAAApAAAABMAAACsAAAAFgAAALQAAAANAAAAvAAAAAwAAADJAAAAAgAAAOQEAAAeAAAAAQAA AAAAAAADAAAAAQAAAAMAAAABAAAAAwAAABwAAAADAAAA4hkKAAsAAAAAAAAACwAAAAAAAAALAAAA AAAAAAsAAAAAAAAAHhAAAAEAAAABAAAAAAwQAAACAAAAHgAAAAYAAABUaXRsZQADAAAAAQAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAA8A EgABAJwADwADAAAAAwAAAAAARAAAQPH/AgBEAAwAAAAAAAAAAAAGAE4AbwByAG0AYQBsAAAAAgAA ABwAQ0oYAF9IAQRhShgAbUgJBG5IEQRzSAkEdEgRBAAAAAAAAAAAAAAAAAAAAAAAAEQAQQDy/6EA RAAMAQAAAAAAAAAAFgBEAGUAZgBhAHUAbAB0ACAAUABhAHIAYQBnAHIAYQBwAGgAIABGAG8AbgB0 AAAAAABSAGkA8/+zAFIADAEAAAAAAAAAAAwAVABhAGIAbABlACAATgBvAHIAbQBhAGwAAAAcABf2 AwAANNYGAAEKA2wANNYGAAEFAwAAYfYDAAACAAsAAAAoAGsA9P/BACgAAAEAAAAAAAAAAAcATgBv ACAATABpAHMAdAAAAAIAAAAAAAAAAAAAAAYAAAAkAAAAPAAAAEIAAABgAAAAeAAAAJAAAACuAAAA tAAAALoAAADOAAAA4gAAAPMAAAAKAQAAAQAAAAAAAAAAAP////8DBAAAAAAAAAEAAAAAAAAAAAD/ ////AgQAAAAAAAABAAAAAAAAAAAA/////wQEAAAAAAAAAQAAAAAAAAAAAP////8FBAAAAAAAAAEA AAAAAAAAAAD/////BgQAAAAAAAABAAAAAAAAAAAA/////wcEAAAAAAAAAQAAAAAAAAAAAP////8b BAAAAAAAAAEAAAAAAAAAAAD/////GgQAAAAAAAABAAAAAAAAAAAA/////xkEAAAAAAAAAQAAAAAA AAAAAP////8YBAAAAAAAAAEAAAAAAAAAAAD/////JAQAAAAAAAABAAAAAAAAAAAA/////yUEAAAA AAAAAQAAAAAAAAAAAP////8mBAAAAAAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAABgAAACQA AAA8AAAAQgAAAGAAAAB4AAAAkAAAAK4AAAC0AAAAugAAAM4AAADiAAAA8wAAAPYAAAAAAAAAABAB AAAAABACAAAAABADAAAAABAEAAAAABAFAAAAABAGAAAAABAHAAAAABAIAAAAABAJAAAAABAKAAAA AAALAAAAAAAMAAAAAAD//wAAAAAAAAAACgEAAA4AABIAAAAA/////wEAAAAEIAAA//8BAEBWwwAA AAAAAAAAAAoBAAAAAAAAAAAAAAAAFQAAABoAAAAbAAAAOAAAADkAAABQAAAAUQAAAFYAAABXAAAA dAAAAHUAAACMAAAAjQAAAKQAAAClAAAAwgAAAMMAAADIAAAAyQAAAM4AAADPAAAA4gAAAOMAAAD2 AAAA9wAAAAcBAAAIAQAACwEAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAA5gAAAAAMAAAAAAAAACAAAAAgAAAWBK8 AG+gAQcABgAACgkAAAUAAAAABgAACQkAAAoJAAAGAAAACAAAAAAGAAAJCQAABwAAAAoBAAAPAADw egcAAAAABvAYAAAAAggAAAIAAAAmAAAAAQAAAAEAAAAnAAAAcwYL8GoCAACBADBlAQCCAJiyAACD ADBlAQCEAJiyAACFAAAAAACHAAAAAACIAAAAAACJAAAAAAC/AAAADwAMAfQAABANAQAAACAOAQAA ACDAAQAAAADBAQAAAQDCAf///wDDAQAAACDEAQAAAADFQQAAAADGwQAAAADHAQAAAADIAQAAAADJ AQAAAADKAQAAAADLATUlAADMAQAACADNAQAAAADOAQAAAADPwQAAAADQAQAAAADSAQEAAADTAQEA AADUAQEAAADVAQEAAADXAQIAAAD/AQ4ADgAAAgAAAAABAoCAgAACAsvLywADAgAAACAEAgAAAQAF AjhjAAAGAjhjAAAHAgAAAAAIAgAAAAAJAgAAAQAKAgAAAAALAgAAAAAMAgAAAQANAgAAAAAOAgAA AAAPAgABAAAQAgAAAAARAgAAAAA/AgAAAwCAAgAAAACBAgAAAQCCAgUAAACDApwxAACEAgAAAACF AvD5BgCGAgAAAACHAvcAABCIAgAAACC/AgEADwDAAgAAAADBAgAAAADCAmQAAADDAgAAAADEAgAA AADFAgAAAADGAgAAAADHAgAAAADIAgAAAADJAgAAAADKAjB1AADLAtASEwDMAjDt7P/NAkBUiQDO AgCAAADPAgCA///QAgAAef/RAjIAAADSAiBOAADTAlDDAADUAgAAAADVAhAnAADWAnCUAADXArA8 ///YAgAAAADZAhAnAADaAnCUAAD/AhYAHwAEAwEAAABBA6gpAQBCAwAAAABDAwMAAABEA3y+AQBF AwAAAAB/AwAADwCEA3y+AQCFAwAAAACGA3y+AQCHAwAAAADDDCLxyAQAAIwAAQAAAI0AMGUBAH8B AABAANkB/////9oB/////9sBAAAAINzBAAAAAN0B/////94B/////98BAAAAIODBAAAAAOEB//// /+IB//////8BAADAABIC/////xMC/////xQCAAAAIBXCAAAAABYC/////xcC/////xgCAAAAIBnC AAAAABoC/////xsC/////4kC/////4oC/////4sCAAAAIIzCAAAAAI0C/////48DAAAAAJADAgAA AJEDAAAAAJIDAgAAAL8DAIIAgkAFAAAAAEEFAAABAEIF////AEMFAAAAIEQFAAAAAEVFAAAAAEbF AAAAAEcFAAAAAEgFAAAAAEkFAAAAAEoFAAAAAEsFNSUAAEwFAAAIAE0FAAAAAE4FAAAAAE/FAAAA AFAFAAAAAFEFAAAAAFIFAQAAAFMFAQAAAFQFAQAAAFUFAQAAAFcFAgAAAFkF/////1oF/////1sF AAAAIFzFAAAAAF0F/////14F/////18FAAAAIGDFAAAAAGEF/////2IF/////38FBgBOAIAFAAAA AIEFAAABAIIF////AIMFAAAAIIQFAAAAAIVFAAAAAIbFAAAAAIcFAAAAAIgFAAAAAIkFAAAAAIoF AAAAAIsFNSUAAIwFAAAIAI0FAAAAAI4FAAAAAI/FAAAAAJAFAAAAAJEFAAAAAJIFAQAAAJMFAQAA AJQFAQAAAJUFAQAAAJcFAgAAAJkF/////5oF/////5sFAAAAIJzFAAAAAJ0F/////54F/////58F AAAAIKDFAAAAAKEF/////6IF/////78FBgBOAMAFAAAAAMEFAAABAMIF////AMMFAAAAIMQFAAAA AMVFAAAAAMbFAAAAAMcFAAAAAMgFAAAAAMkFAAAAAMoFAAAAAMsFNSUAAMwFAAAIAM0FAAAAAM4F AAAAAM/FAAAAANAFAAAAANEFAAAAANIFAQAAANMFAQAAANQFAQAAANUFAQAAANcFAgAAANkF//// /9oF/////9sFAAAAINzFAAAAAN0F/////94F/////98FAAAAIODFAAAAAOEF/////+IF//////8F BgBOAAAGAAAAAAEGAAABAAIG////AAMGAAAAIAQGAAAAAAVGAAAAAAbGAAAAAAcGAAAAAAgGAAAA AAkGAAAAAAoGAAAAAAsGNSUAAAwGAAAIAA0GAAAAAA4GAAAAAA/GAAAAABAGAAAAABEGAAAAABIG AQAAABMGAQAAABQGAQAAABUGAQAAABcGAgAAABkG/////xoG/////xsGAAAAIBzGAAAAAB0G//// /x4G/////x8GAAAAICDGAAAAACEG/////yIG/////z8GBgBOAEAGAAAAAEEGAAABAEIG////AEMG AAAAIEQGAAAAAEVGAAAAAEbGAAAAAEcGAAAAAEgGAAAAAEkGAAAAAEoGAAAAAEsGNSUAAEwGAAAI AE0GAAAAAE4GAAAAAE/GAAAAAFAGAAAAAFEGAAAAAFIGAQAAAFMGAQAAAFQGAQAAAFUGAQAAAFcG AgAAAFkG/////1oG/////1sGAAAAIFzGAAAAAF0G/////14G/////18GAAAAIGDGAAAAAGEG//// /2IG/////38GBgAOAEAAHvEQAAAA//8AAAAA/wCAgIAA9wAAEAAPAALwGgkAABAACPAIAAAAFQAA ACYEAAAPAAPwuAgAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAABAAA BQAAAA8ABPBcAAAAogwK8AgAAAACBAAAAAoAADMAC/ASAAAAgAAAAAIAigACBAAAywEDPgAAEwAi 8QYAAAC/AQAAYAAAABDwBAAAABIAAAAAABHwBAAAABEAAAAAAA3wBAAAAAAAAgAPAATwXAAAAKIM CvAIAAAAAwQAAAAKAAAzAAvwEgAAAIAAAAABAIoAAwQAAMsBAz4AABMAIvEGAAAAvwEAAGAAAAAQ 8AQAAAAQAAAAAAAR8AQAAAA+AAAAAAAN8AQAAAAAAAEADwAE8FwAAACiDArwCAAAAAQEAAAACgAA MwAL8BIAAACAAAAAAwCKAAQEAADLAQM+AAATACLxBgAAAL8BAABgAAAAEPAEAAAAEwAAAAAAEfAE AAAACwAAAAAADfAEAAAAAAADAA8ABPBcAAAAogwK8AgAAAAFBAAAAAoAADMAC/ASAAAAgAAAAAQA igAFBAAAywEDPgAAEwAi8QYAAAC/AQAAYAAAABDwBAAAABEAAAAAABHwBAAAAEkAAAAAAA3wBAAA AAAABAAPAATwXAAAAKIMCvAIAAAABgQAAAAKAAAzAAvwEgAAAIAAAAAFAIoABgQAAMsBAz4AABMA IvEGAAAAvwEAAGAAAAAQ8AQAAAAPAAAAAAAR8AQAAAAjAAAAAAAN8AQAAAAAAAUADwAE8FwAAACi DArwCAAAAAcEAAAACgAAMwAL8BIAAACAAAAABgCKAAcEAADLAQM+AAATACLxBgAAAL8BAABgAAAA EPAEAAAADgAAAAAAEfAEAAAAEgAAAAAADfAEAAAAAAAGAA8ABPBUAAAAQgEK8AgAAAANBAAAQAoA AGMAC/AkAAAARAEEAAAAfwEAAAEAvwEAABAAywEDPgAAzgECAAAA/wEYABgAAAAQ8AQAAAANAAAA AAAR8AQAAAAJAAAADwAE8FQAAABCAQrwCAAAABAEAAAACgAAYwAL8CQAAABEAQQAAAB/AQAAAQC/ AQAAEADLAQM+AADOAQIAAAD/ARgAGAAAABDwBAAAAAwAAAAAABHwBAAAAAYAAAAPAATwVAAAAEIB CvAIAAAAFgQAAAAKAABjAAvwJAAAAEQBBAAAAH8BAAABAL8BAAAQAMsBAz4AAM4BAgAAAP8BGAAY AAAAEPAEAAAACwAAAAAAEfAEAAAABQAAAA8ABPBUAAAAQgEK8AgAAAAXBAAAQAoAAGMAC/AkAAAA RAEEAAAAfwEAAAEAvwEAABAAywEDPgAAzgECAAAA/wEYABgAAAAQ8AQAAAAKAAAAAAAR8AQAAAAF AAAADwAE8FwAAACiDArwCAAAABgEAAAACgAAMwAL8BIAAACAAAAACgCKABgEAADLAQM+AAATACLx BgAAAL8BAABgAAAAEPAEAAAABwAAAAAAEfAEAAAADQAAAAAADfAEAAAAAAAKAA8ABPBcAAAAogwK 8AgAAAAZBAAAAAoAADMAC/ASAAAAgAAAAAkAigAZBAAAywEDPgAAEwAi8QYAAAC/AQAAYAAAABDw BAAAAAYAAAAAABHwBAAAAA0AAAAAAA3wBAAAAAAACQAPAATwXAAAAKIMCvAIAAAAGgQAAAAKAAAz AAvwEgAAAIAAAAAIAIoAGgQAAMsBAz4AABMAIvEGAAAAvwEAAGAAAAAQ8AQAAAAJAAAAAAAR8AQA AAANAAAAAAAN8AQAAAAAAAgADwAE8FwAAACiDArwCAAAABsEAAAACgAAMwAL8BIAAACAAAAABwCK ABsEAADLAQM+AAATACLxBgAAAL8BAABgAAAAEPAEAAAACAAAAAAAEfAEAAAADQAAAAAADfAEAAAA AAAHAA8ABPBUAAAAQgEK8AgAAAAfBAAAAAoAAGMAC/AkAAAARAEEAAAAfwEAAAEAvwEAABAAywED PgAAzgECAAAA/wEYABgAAAAQ8AQAAAAEAAAAAAAR8AQAAAAQAAAADwAE8FQAAABCAQrwCAAAACAE AAAACgAAYwAL8CQAAABEAQQAAAB/AQAAAQC/AQAAEADLAQM+AADOAQIAAAD/ARgAGAAAABDwBAAA AAUAAAAAABHwBAAAADEAAAAPAATwWgAAAEIBCvAIAAAAIQQAAAAKAABzAAvwKgAAAEQBBAAAAH8B AAABAL8BAAAQAMsBAz4AAM4BAgAAANEBAQAAAP8BGAAYAAAAEPAEAAAAAwAAAAAAEfAEAAAANQAA AA8ABPCqAAAAogwK8AgAAAAkBAAAAAoAAIMAC/AwAAAAgAAAAAsAvwAAAA0AvwEAABAA/wEGAA4A PwIAAAMAvwIBAA8A/wIWAB8AfwMAAA8AkwAi8TYAAAB/AQAAQAC/AQAAYAD/AQAAwAC/AwACAAJ/ BQYATgC/BQYATgD/BQYATgA/BgYATgB/BgYADgAAABDwBAAAAAIAAAAAABHwBAAAABYAAAAAAA3w BAAAAAAACwAPAATwqgAAAKIMCvAIAAAAJQQAAAAKAACDAAvwMAAAAIAAAAAMAL8AAAANAL8BAAAQ AP8BBgAOAD8CAAADAL8CAQAPAP8CFgAfAH8DAAAPAJMAIvE2AAAAfwEAAEAAvwEAAGAA/wEAAMAA vwMAAgACfwUGAE4AvwUGAE4A/wUGAE4APwYGAE4AfwYGAA4AAAAQ8AQAAAABAAAAAAAR8AQAAAAR AAAAAAAN8AQAAAAAAAwADwAE8KoAAACiDArwCAAAACYEAAAACgAAgwAL8DAAAACAAAAADQC/AAAA DQC/AQAAEAD/AQYADgA/AgAAAwC/AgEADwD/AhYAHwB/AwAADwCTACLxNgAAAH8BAABAAL8BAABg AP8BAADAAL8DAAIAAn8FBgBOAL8FBgBOAP8FBgBOAD8GBgBOAH8GBgAOAAAAEPAEAAAAAAAAAAAA EfAEAAAAGgAAAAAADfAEAAAAAAANAA8ABPBCAAAAEgAK8AgAAAABBAAAAA4AAFMAC/AeAAAAvwEA ABAAywEAAAAA/wEAAAgABAMJAAAAPwMBAAEAAAAR8AQAAAABAAAAAAAAAAEAAAACAAAAAwAAAAQA AAAFAAAABgAAAAcAAAAIAAAACQAAAAoAAAALAAAADAAAAA0AAAAOAAAADwAAABAAAAARAAAAEgAA ABMAAAAKAQAAJgQAAC8cAAAECwAAkCQAACANAAB0AAAAAAAlBAAAaxwAAHMFAABEJQAAjwcAAHQA AAAAACQEAAB6HAAAAAAAAEQlAAAcAgAAdAAAAAAAIQQAAO4CAAAIBwAA7gIAAEALAAB0AAAAAAAf BAAAIBwAAAgHAAAgHAAAQAsAAHQAAAAAACAEAAAPAAAACAcAAA8AAABACwAAdAAAAAAAGQQAABAO AABACwAAhREAAKgMAAB0AAEAAAAYBAAAmwoAAEALAAAQDgAAqAwAAHQAAQAAABsEAACFEQAAQAsA ABEcAACoDAAAdAABAAAAGgQAAA8AAABACwAAmwoAAKgMAAB0AAEAAAAXBAAAHgAAAGgBAACiAwAA oAUAAHQAAAAAABYEAACrGAAAaAEAAC8cAACgBQAAdAAAAAAAEAQAAB8OAABoAQAAoxEAAKAFAAB0 AAAAAAANBAAAqgoAAGgBAAAuDgAAoAUAAHQAAAAAAAcEAACUEQAAoAUAACAcAAAIBwAAdAABAAAA BgQAAB4AAACgBQAAqgoAAAgHAAB0AAEAAAADBAAAqgoAAKAFAAAfDgAACAcAAHQAAQAAAAUEAAAf DgAAoAUAAJQRAAAIBwAAdAABAAAAAgQAAJMDAAAPAAAAHw4AAHcBAAB0AAEAAAAEBAAAHw4AAA8A AACrGAAAdwEAAHQAAQAAAAAAAAAVAAAAJQAAAC0AAAAvAAAANwAAAGEAAABpAAAAawAAAHMAAACv AAAAtwAAALkAAADBAAAACwEAAAcABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAAAAAAFQAAABsA AAAtAAAAVwAAAGkAAAClAAAAtwAAAAsBAAAHAAcAOgAHADoABwA6AAcAAAAAABUAAAAZAAAAGwAA ADcAAAA5AAAATwAAAFEAAABVAAAAVwAAAHMAAAB1AAAAiwAAAI0AAACjAAAApQAAAMEAAADDAAAA xwAAAMkAAADNAAAAzwAAAOEAAADjAAAA9QAAAPcAAAAGAQAACwEAAAcABQAHAAUABwAFAAcABQAH AAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAAAAAAVAAAACwEAAAcABwC6AAAA BAAAAAgAAADlAAAAAAAAALkAAAA+UgAA1UsDAI4IBQAOLgUAiykGAD5yCACUBQkAF0YKAORYCgCG SwwADSsNAJtFDQAfSREAhV0RAF4VEgAoHRIAl0MSAB5PEwCdfBYAzBUaAC8eGgC7eBoAGxEeADwr HgB3FiEAkzghAEomIgC1byUAxF0nAN1NKwA2WSsAwWorABEDLACaWy4APmUxAJkoMwCiMzMA5z85 AJ1FOgCcNUEAsklDAFcTRAAdX0QATWtEAJpgRQA5HkcAXSBHAKMmRwBhckoA3j5LAEkaTQB4UE0A ARhOAIAwTgBtZFAA/SRSAKldUgDscVQAa1RVABsCVgAMeVYAySFaAPonXADUX1wAygheAEtBYACA OGEATAVjALEVZACZcGQAfgZmAPxZaAAlY2oAWyVsAGAxcABNGHQAFhl0AHBidgDtEncAdSF9ABU6 fgBHVX4A/H9+ACYSgQCVD4IAojmHAIAKiQBbPokAyTSNACBUjQDDf5IASxeTAEQ1kwA+VZMACx6U ACgxlwDeQJcA+TGYAJdAmADFVJgAlHKYAEBSmgDXQ5sAm0ebAHknnQCBC54ArxygAIJrogBxLaMA +3qlAKQWqADJQqkAHBiqAN9qqgDQQa4A+wqxAKUCsgDEDLMAIVG0ABUitwBgGrkAbzW5AApWuQBP J7sA3wW8APUxvAA8ML0AHj29ANYDvwA3I78AJGu/AAN0vwDaIsAAUgLBAC98wgAKEMMAABPFAPoZ xQBoYsYAGBjHAJhfyADqA8oAlz7KAHEKzADOes4A4GvPAMR90ACvA9IAuzjSAF9z0gARFdMAgyXT AO4o1QBGdtUAWFPWAI8i2ACSRdgAOC7ZAA9U2wAiANwAcQHcAAp83AANDt0AjRTdABwW4gAFQeQA XGLlAFUW6ADoWOgAWFDpAEFW6wABL/AAVlfxADZh8QDlA/IAh0jyAFt39AAAYPUAoT33AH8n+ACy QPkAolb5ADUi+wDyB/0AHDP/AFk1/wD/QAOAAQAUAAAAFAAAAEy5QQ8BAAEAFAAAAAAAAAAUAAAA AAAAAAIQAAAAAAAAAAoBAADgAAAQAEAAAP//AQAAAAcAVQBuAGsAbgBvAHcAbgD//wEACAAAAAAA AAAAAAAA//8BAAAAAAD//wAAAgD//wAAAAD//wAAAgD//wAAAAAEAAAARxaQAQAAAgIGAwUEBQID BIc6ACAAAAAAAAAAAAAAAAD/AQAAAAAAAFQAaQBtAGUAcwAgAE4AZQB3ACAAUgBvAG0AYQBuAAAA NRaQAQIABQUBAgEHBgIFBwAAAAAAAAAQAAAAAAAAAAAAAACAAAAAAFMAeQBtAGIAbwBsAAAAMyaQ AQAAAgsGBAICAgICBIc6ACAAAAAAAAAAAAAAAAD/AQAAAAAAAEEAcgBpAGEAbAAAAEc1kAGACgIC BgkEAgUIAwS/AgCg+/zHaBAAAAAAAAAAnwACAAAAAABNAFMAIABNAGkAbgBjAGgAbwAAAC3/M/8g AA5mHWcAACIABABxCIgYAPDQAgAAaAEAAAAADpOlhg+TpYYAAAAAAgABAAAAAwAAABIAAAABAAEA AAAEAAMQAQAAAAMAAAASAAAAAQABAAAAAQAAAAAAAAAhAwDwEAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAiC74jtAC0AIGBPjQAAAAAAAAAAAAAAAAAABQAAAAUAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAEy g1EA8BAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAAAAAAKfD/DwEAAT8AAOQEAAD/ //9/////f////3////9/////f////3////9/dSF9AP//EgAAAAAAAAAAAAAAAAAAAAQAcwB5AGEA bQAEAHMAeQBhAG0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAEMAbwBtAHAATwBiAGoAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgACASMAAAAmAAAA//// /wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAABoAAAAAAAAAAMATwBiAGoA SQBuAGYAbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAS AAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAAAAYA AAAAAAAAVwBvAHIAZABEAG8AYwB1AG0AZQBuAHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAABoAAgAlAAAAJwAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAClAQAAKBIAAAAAAAAFAFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBu AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAACAf////8oAAAA/////wAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAK8BAAAAEAAAAAAAAOylwQAFQAkEAADwEr8AAAAAAAAQAAAA AAAGAAAKCQAADgBiamJq7kbuRgAAAAAAAAAAAAAAAAAAAAAAAAkEFgAoEgAAjCwAAIwsAAAVAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAD0AAAAAAAAAP//DwAAAAAAAAAAAP//DwAAAAAAAAAAAP//DwAA AAAAAAAAAAAAAAAAAAAAiAAAAAAANgEAAAAAAAA2AQAANgEAAAAAAAA2AQAAAAAAADYDAAAAAAAA NgMAAAAAAAA2AwAAFAAAAAAAAAAAAAAAbAMAAAAAAADwBgAAAAAAAPAGAAAAAAAA8AYAAAAAAADw BgAADAAAAPwGAAAUAAAAbAMAAAAAAADkHgAA/gAAABwHAAAEAAAAIAcAAAAAAAAgBwAAAAAAACAH AAAAAAAAIAcAAAAAAAAhGgAAAAAAACEaAAAAAAAAIRoAAAAAAABjHgAAAgAAAGUeAAAAAAAAZR4A AAAAAABlHgAAAAAAAGUeAAAAAAAAZR4AAAAAAABlHgAAJAAAAOIfAABSAgAANCIAADoAAACJHgAA FQAAAAAAAAAAAAAAAAAAAAAAAAA2AwAAAAAAACEaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMUXAABc AgAAIRoAAAAAAAAhGgAAAAAAACEaAAAAAAAAiR4AAAAAAAAAAAAAAAAAADYBAAAAAAAANgEAAAAA AAAgBwAAAAAAAAAAAAAAAAAAIAcAAKUQAACeHgAAFgAAAGMbAAAAAAAAYxsAAAAAAABjGwAAAAAA ACEaAABYAAAANgEAAHABAAAgBwAAAAAAADYDAAAAAAAAIAcAAAAAAABjHgAAAAAAAAAAAAAAAAAA YxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh GgAAAAAAAGMeAAAAAAAAAAAAAAAAAABjGwAAAAAAAAAAAAAAAAAAYxsAAAAAAACmAgAAkAAAADYD AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAABjGwAAAAAAACAHAAAAAAAAEAcAAAwAAADAZrimRnrGAQAAAAAAAAAA8AYAAAAAAAB5GgAA NAAAAGMbAAAAAAAAAAAAAAAAAABjHgAAAAAAALQeAAAwAAAA5B4AAAAAAABjGwAAAAAAAG4iAAAA AAAArRoAAKYAAABuIgAAAAAAAGMbAAAAAAAAAAAAAAAAAABKAwAAFAAAAF4DAAAOAAAANgEAAAAA AAA2AQAAAAAAADYBAAAAAAAANgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbiIAAAAAAAAAAAAAAAAA ADYDAAAAAAAAYxsAAAADAAAhGgAAAAAAACEaAAAAAAAAYxsAAAAAAAAhGgAAAAAAACEaAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhGgAAAAAAACEaAAAAAAAAIRoAAAAAAACJ HgAAAAAAAIkeAAAAAAAAbAMAAAAAAABsAwAAhAMAAPAGAAAAAAAAAAAAAAAAAABTGwAAEAAAAGwD AAAAAAAAbAMAAAAAAADwBgAAAAAAAAIAAQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgICAgICAgICAgICAgICAgICAgNMHhGRg0N Y2NjY2NjMDAgIGNjY2NjY2NjICBjY2NjY2NjYw0NRXh0ZW5zaW9uIElEICgyNC1iaXQpIA0NMHhG RQ0NY2NjY2NjMDAgIGNjY2NjY2NjICBjY2NjY2NjYw0NRXh0ZW5zaW9uIElEICgyNC1iaXQpIA0N RXh0ZW5zaW9uIElEICgyNC1iaXQpIA0NY2NjY2NjMTAgIGNjY2NjY2NjICBjY2NjY2NjYw0NMHhG RQ0NMHhGRg0NNDgtYml0IE1BQyBBZGRyZXNzDQ02NC1iaXQgRVVJIEFkZHJlc3MNDTY0LWJpdCBJ UHY2IElJRA0NDQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgAAAggAABQIAAAVCAAAGQgAABoIAAAbCAAA IQgAADcIAAA4CAAAOQgAAFAIAABRCAAAVQgAAFYIAABXCAAAXQgAAHMIAAB0CAAAdQgAAIwIAACN CAAApAgAAKUIAACrCAAArAgAAMEIAADCCAAAwwgAAMcIAADICAAAyQgAAM0IAADOCAAAzwgAANsI AADcCAAA4ggAAOMIAAD2CAAA9wgAAAcJAAAJCQAACgkAAPDg3NTJxcnUycW6xdTJxcnUycW6xbrF ybLUycXUycXUycWnnKfFp8WnxdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAU FWgiANwAFmgiANwAQ0oWAGFKFgAAFBVoIgDcABZoOC7ZAENKFgBhShYAAA4WaLs40gBDShQAYUoU AAAUFWg4LtkAFmg4LtkAQ0oUAGFKFAAABhZoOC7ZAAAUFWj4PcMAFmg4LtkAQ0oUAGFKFAAADhZo OC7ZAENKFABhShQAAAYWaKUCsgAAHgNqAAAAABZoOC7ZAFUIAV9IOQRtSAAEbkgABHUIAQAeA2oA AAAAFmgiANwAVQgBX0g5BG1IAARuSAAEdQgBKwAGAAAVCAAAGggAABsIAAA4CAAAOQgAAFAIAABR CAAAVggAAFcIAAB0CAAAdQgAAIwIAACNCAAApAgAAKUIAADCCAAAwwgAAMgIAADJCAAAzggAAM8I AADiCAAA4wgAAPYIAAD3CAAABwkAAAgJAAAJCQAA/QABAABEJQAAjawCAPUAAQAAOwIAAHY6AgD9 AAAAAAAAAAAAAAAA8AABAABSCQAAdjoCAP0AAAAAAAAAAAAAAADwAAEAAFIJAAB2OgIA/QAAAAAA AAAAAAAAAPUAAQAAOwIAAHY6AgD9AAAAAAAAAAAAAAAA8AABAABSCQAAdjoCAP0AAAAAAAAAAAAA AADwAAEAAFIJAAB2OgIA/QAAAAAAAAAAAAAAAPAAAQAAUgkAAHY6AgD9AAAAAAAAAAAAAAAA8AAB AABSCQAAdjoCAP0AAAAAAAAAAAAAAAD1AAEAADsCAAB2OgIA/QAAAAAAAAAAAAAAAPUAAQAAOwIA AHY6AgD9AAAAAAAAAAAAAAAA/QABAACpBwAAgXMCAP0AAAAAAAAAAAAAAADwAAEAALgHAACBcwIA /QAAAAAAAAAAAAAAAPAAAQAAQAcAAIFzAgD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAAAEAABn ZDgu2QAABwAAAyQBYSQBZ2Q4LtkAAAEAAAAcAAYAABUIAAAJCQAA/v4AAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBAQIJCQAACgkAAP0AAQAARCUAAI2sAgAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAASYAMZBoATpwIgDcAB+wwE4gsMBOIbAiCyKwWh4jkL4j JJDiHSWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8AAAUBAgAAAAAAAAAAAAAAAAAAAAAAAQAAAOCFn/L5 T2gQq5EIACsns9kwAAAAaAEAABEAAAABAAAAkAAAAAIAAACYAAAAAwAAAKQAAAAEAAAAsAAAAAUA AADAAAAABgAAAMwAAAAHAAAA2AAAAAgAAADsAAAACQAAAPwAAAASAAAACAEAAAoAAAAkAQAADAAA ADABAAANAAAAPAEAAA4AAABIAQAADwAAAFABAAAQAAAAWAEAABMAAABgAQAAAgAAAOQEAAAeAAAA AQAAAAAAcwAeAAAAAQAAAAAAcwAeAAAABQAAAHN5YW0AAGYAHgAAAAEAAAAAeWFtHgAAAAEAAAAA eWFtHgAAAAsAAABOb3JtYWwuZG90AAAeAAAABQAAAHN5YW0AbC5kHgAAAAIAAAAyAGFtHgAAABQA AABNaWNyb3NvZnQgV29yZCAxMC4wAEAAAAAARsMjAAAAAEAAAAAAeKtxRnrGAUAAAAAAvm6VRnrG AQMAAAABAAAAAwAAAAMAAAADAAAAEgAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAUARABvAGMAdQBtAGUAbgB0AFMAdQBtAG0AYQByAHkASQBuAGYAbwBy AG0AYQB0AGkAbwBuAAAAAAAAAAAAAAA4AAIA////////////////AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAuAEAAAAQAAAAAAAAMQBUAGEAYgBsAGUAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AAgABAAAAAwAAAP////8AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAgAA420BAAAAAAAFAFMAdQBtAG0AYQBy AHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAACAQIA AAArAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AAADcAQAAAAAA AAUARABvAGMAdQBtAGUAbgB0AFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAA AAAAAAAAAAA4AAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAFwAAAFgDAAAAAAAA/v8AAAUBAgAAAAAAAAAAAAAAAAAAAAAAAQAAAALVzdWcLhsQk5cIACss +a4wAAAA6AAAAAwAAAABAAAAaAAAAA8AAABwAAAABQAAAHwAAAAGAAAAhAAAABEAAACMAAAAFwAA AJQAAAALAAAAnAAAABAAAACkAAAAEwAAAKwAAAAWAAAAtAAAAA0AAAC8AAAADAAAAMkAAAACAAAA 5AQAAB4AAAABAAAAAAAAAAMAAAABAAAAAwAAAAEAAAADAAAAFAAAAAMAAADiGQoACwAAAAAAAAAL AAAAAAAAAAsAAAAAAAAACwAAAAAAAAAeEAAAAQAAAAEAAAAADBAAAAIAAAAeAAAABgAAAFRpdGxl AAMAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAEKSg3JJgm8Fk0IPppQQfHAblDezWmklrbGsuru8mdHMm3nfvPfNmxUBHwD7UwVogWkQ D0dhRAcF6xYqekSrld7hP+liLEy6IID1P7QdNDnjN6F1lVAajCxkrXgSUBPgQT/AyC8dcH7x8uGv prtxBXvtAQKl+bminA7fEmn3KOybTSTjWXMmftE8mU7GUlD72POJrCnWAplPWKdtWAwbUSztUYCf 9Tvc3PgCGLY/BgQEW6jJqlaicgf/UlLVy6R2iFGI8GWY5Te4M7saBy/NBigWi+VeRdZ/49qi/oQU izYCR3dtbc1lX9Qq7sS2oMjVxWr2uAoHsO5lHaBoi+weWWS3SJ79QO6zPHmJ8hrbfn6L9PN7ZIIr 2gTv0Pp5l+bnAe01C2gvWZd2n3VoeSbmO6gdm268FZzentLKvjkgfbP3iCqe03aJ6AOJSAeB5iGi eYpoCoimgGieIpqHJTR7Y61VRoRDGxgoy/A7EWJAY6sLFnTy63CM9MBSHZ/tc/Fd7bkIjmYSsXnY /nEwvidPwWVcWTBrCXrQznX4MhKFqbKttpLOlLTr6Jgb0w35Qa/zwzwzUJZhRBGynR90Tz90kjzv gVZe6wdnP5Xzbe/sEuqKnbXirDzO/jwyVbezS5DjxKXT/M4eqQbKXfheF7K7neVgXO+DSc07wrkm I6y7PNIud3sFbTAcndT60GIORk+aMIY+CdR45Qr8pRGXnsiMjXjFV5cTN5Hzm3Bjm9Pka3LVFW0Z ZedVndxanVPd+ZfW5DcVumU8WxD1aTJDV1FukqgqZJWsaKexfgNRtR37hbyRetvlSvd+Knm6sp// aqt5T3ZLT/4flm1GPyFv1UFSIN6MXm2S0T4Xo6clU5No4yCOFsggWnxChsL4QWBdTGfOmeMpK7Ng xlJz5Z7RC9bZeMpKnIlZiXQKQvA+voOy/hTLTghiawB6seyE/ViG5Outs6886se+EP72y9/VJymJ qIgLn7lxvMZfO/Nwjs7Qxyi3aVQV8piuaHNYA0oA+4UAFXq746HhwcPmbFXYYDTEQ8ODh3tt2ebh C/qjOkKD1PvOcPNpTMZrAXVFDIN0BGe+oMNhczYTS2XPpzOWOZZOpeJnBHfM8awV+3o+kT2bREKV mNSH7BAMCMrywzK77He/ZEpIMmWgzC4/3sJBZNNhbAveVbNnATEQF5p69uzk30rGfMUmyR9sJ995 Z8zqr+Bapjo34AlC+Sa8YifIIybajX1B2nEa4s+Ua6zYQJzC0jPPUfcjHC3Sa+yZMsQ/C+OfgAtW PGOOzn0Tz1iJbNwVmcHSSRXnV3hfREO07bPbC4dKcan2/nNWUIjLRr33bexL7BTbouvUO9f92mSu M+pu7yNsnYrbe51u0VNsiR2LTCDLhiFcg/sI4iEuPfft7fynsvnyDjeustvrBQAARABkAAAAAAAA AAoAAAAAAAAAAAAAAAAAyBRYDOgD6AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8A BPBiAAAAsgQK8AgAAAAFBAAAAAoAAGMAC/AkAAAAfwCAAIAABEEFAAAAPwEAAAYAvwEMAB8A/wEA AAgAPwMQABAAMwAi8RIAAAC/AQAAYAC/AwAAgAE/BAAABwAAABDwBAAAAAMAAIAyAAfwNQUAAAME bDXbBsZ5gH/UEkB1cDOfHP8AEQUAAAEAAABrIAAAAAAUAGAhG/AJBQAAbDXbBsZ5gH/UEkB1cDOf HEQPAAAAAAAAAAAAAKcIAAAlBQAAQIwzAHCeHgDXBAAAAP542rVXTWwTRxR+87O7/ktNCbhVQNHG sVVKidumORQRiaYRTWjTUHAutbiY4AaniQ32EoQIl1YqFaeqaqVKBCJaRFQJqQdScygoUhC9IJDI BauXVuLAtVKkCCWt3DezXnttr2XHhV29nfHMm3nffPPN2zUBNwD7UQPwwQiIi6Mx4gIFSy8VLaLm o2FlwSX6IuRV2InlBt0CmhxxW3h9RSgNRs9mjcQ0oCfAb3sA+m+8DCe//GLvJyMdOIM5dw+B4vi5 ghwO3xAZ9z3YOpacTmT10cQZ/Uh6Op6C6sscT2RJsRTI3CI6bcNHryeGT7MX4GdXWNEnPwKG9U5A QLCOnqxiJipX8A8lFa1MeocZhSjPwRi/zK3RlTh4cTRAoVAotSqy/BvnFuVrpFAwEVi++XzeFl+U Kq7EjKDI2cVsZr8Ku7EMsXbYUGPsFomxBTLLLpF59j1ZZt+Sp1h6+SUS4QvkML9FsnxDzXK3dphv 0yJ8h+blndpTtkNbZtu0eebWZpmYx0JvxbbjLuN1ZkwrcbRbcvTikJWZ1DaJLCCRuUGguoeoHiGq x4jqD0T1GFE9QlT3iqieT0Sf3CUObeBHy8GfRJgfmptdKCPA5+Eg6YbrNRo3z8p31WclOJBJxqeg /mVhfEmejK9xZqG269CNcebh42gMhkux2oo+wzKu5aNPjjTFg6uGhynmR8tBvyKsHg8uRx52kiu8 G3y8mgdrPeUzb67sAvqKlflw1BUc/X50uGZlF2COE5tP6yv7XfWj5eAHl7DNrewqrGsRGNKcd3iu xR121TByEWMIRoYw2rp2FQaODNYwchFWNGLzEZmyGUbcNTlyDfW+BpfrnCR3i7Muajm0xrNaubYy x9rzMa3Kcyp0yL30IuqjZJQuoV0jMVXYElnUjmL5DGLqdmwX9kz61cuZ9vWU83Z5Pf83VutMdkgm X0RkU80PyL9qH3lInNV8p0U1u21qHpFKPYUx3sDeh6QPIz4gb0fwA8E4k858rh9IGZmzejx1vNQy cNo4kUgZyfG4kUynIAzteL8lyzfxGYAg1noghM8AdOEzLG9nn62lXj+2hfG3X/6uPEmnEBWx4dMn P6ziq7EOJ+govY/2C42pwu7TRW0CS4bWie3CGBV+m9Ohx0GHrcUqq8HTlA49Djp83pFNHebpT+p+ GqTO7wu7ngblfs2ir9jDIN2PI/O0N6KPZeKp7Ml0xtAH06lUYlxoRz+QNeLHppLZE9MoqKKSXkd1 CAUE5XN7SV3m3SWVEpZK6Smpy49v4CCqaS/Whe4q1TOLGIgNTa16GvFrZcxj+C21BsusEXfOGbPy q7haqdbbL6ZdY4sYJ6b9xUS9uS9Jc5/8fEKZYYUm9mmPZOYm+gawt0Bn2ITi5+9E8E/BaSOR0aPp qeR40pBHPGzbg3Z5egX3Fut+bAsVdyVUxfxN9plCbPPXMm/i3qUMs3N8hTrnuV9bzHMe23q3SDxL GINh7wo9x4fZLuVg9ANUWC9EqnAv8SFGbH61b24T93l+V3nCVpvgOyLn1fkqfQV7V+kTdlc5z/tK fA8cn0lkjGQ2YTsJtYx3ybqZK0PwbvEcVGLX+bLk3IrRrNq9Dt8H+/gQ6a/zfeBtMgNbuj5EPuVr sI8fIp1c1Bvp2vofa6L8D/Hs3KhAGAAARABkAAAAAAAAAAoAAAAAAAAAAAAAAAAAdBMsC+gD6AMA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ABPBCAAAAsgQK8AgAAAAEBAAAAAoAAFMA C/AeAAAAfwCAAIAABEEEAAAAPwEAAAYAvwEMAB8A/wEAAAgAAAAQ8AQAAAAEAACAMgAH8KoXAAAD BPId6H1osx86B3wwpgl5ZaL/AIYXAAABAAAAViYAAAAAFABgIRvwfhcAAPId6H1osx86B3wwpgl5 ZaJeFwAAAAAAAAAAAAAOBAAAVAIAAIBAMACIthsA4wUAAAD+eNq1WE1oXFUUPufemcnP1Ah5Q6m1 SBqlutBgXWkklKYgKG0lTZnYLPqjRhPmL82MxiAljRubNrGChKaBLsRkUwKVLGIqrtwUbNONCwMl tEjpWmEmKVUY731vzpefzqQ3mAZu5ntfznnn57vvnTthqiHS16JE1fQm2Z+wWVElaJs6qupCFoX4 mRLXxDtKSDGXUA08WBWLRdIGvUC7zO9/1O2if2P61hr/bFb90Z5UV7bhcFd/w5FM6lSavpi83z9k VsPrD/qfq/rkfsgYvWasq8zn7jBTAzUZVGvWnsiz5tNEKLJ/z2qzHqkIhYIQFHiyn0lMHSOtLPLU ByUUA/JUh0HiH17jr/zPv3CfDvjESalKMQMfVfKxluLDjnGspeRGSmITaiiyW2xrGfjc4gDFgDw1 zyv32TifefjcZnKs21qKDyvhGJwCp8BpcNLneXDz4Kya5faA3SX/mv23sLCwqpIg2zDxmmw1KrS7 /SW9k07qGZqgGbpIN+gcLdIQ5ekMRflLajSrmc9QGw9RN5+jQb5IYzxBV/mkvsoJPcZZPcgDupvP 6DY+q5vNajQ4arg8ZfUiJfQN//52bbR7uezutX5B5TZD4QLkqRsm44AT5KlFU0HACfJU3lQUcII8 FTVVBZwgT9lqA06Qp5rBNYNrg28bfLtZYgjy1CBLLoI8NcaSsyBPXWWpTZDlgspjQNY3ocU3oSVG VkuMrJZcBrTkMqCRs0bOWmo7q6W2s1p6IFwjuCh8o/DNk8QQZHsvuQiyGknOgjxf1XJ74XF9J6Hv JPSdhr7T0HcG+s5A31noOwt956DvHPSdg75z0HcW+s5C3xnoOwN9p6HvNPSdhL6Tq/Td6Km100J2 fgjvEnla6/ynNGymVJTu+CtucNy/Du7A695g5d9SYd/6+VAn3TUoXDajSlluDx2i7ylGByrNs8b9 fT2nkgb8WV/71sFofYV5FilVtzLXDlGrWXLVbq76//fMDGJEVs3OVhr32Ze5WAzmclCVneyrO7Ra g5U3ZRgafMdR6lV2xQ2O+9euXc+pKrrIm+v61/SqitEfbO9Vbf7g0P233buvqLW9le7x0+h3o9qK fu/SUSr6K25w3L927bcOVdEOvbl+D9JlvZ1e0Wv7/ftG/W7ZzG7fT/tor17Z7fvofVwdNldpvfVa 7KNvtIsWcl4c1XLWGtVylhKuw6Dy56YItJMzm/jEaURX0kqylbPfCHwuOMaxlpLbeS2xz6OGYcfY 1jLw+Y2HS/cR5KmbPOyYz0343OLzjrGtpfhc0MJdADcCbgTcKLhR5CjcTXBWzcqT9hhlSPqUQR+E 6zDIVWvxiVOaXLVOwydFrlqnkFsSsZOoIUGuWidI+piABsLNc8Ixn3n43OakY2xrKT4pcClwaXBp cBlwGeSYQQ7CWTUra53D3slhn+SwT7LgsuD6wPWBO82uz/9p+PSy6/Pfixx78Rz04jno5cuOulhL yXcc+YyT1HXJUStrKf255Bg7C5+ciegWJ4fccqXMY0CWmwA3AW5Eb3SifDzDctP1Cn1ldl4fX6EP 2WK7Njcvj6gf+B4fqHA++UWtn5e11bV3Ks/L8GPz8l2qUwdZTivt79Spzi06rYRXTcg6NVG27nJT s5kfmW8jO51PZKbiRZeKt/nZbKO9TSb9z3JdfQ3tmQK9WIpTLEoPkj0FalESXWr4iArUrtbaMvUY Ngnbap/VlDuVM3x/Wetr6+6sKJMu0HW19T0v0N/Ktec/8nu6hXdtpud3XXoe9bOpoTek55TgPby+ Lw2GLSB2jc9GaP/Hn3f15abK2PfQFP/E6/uY7ZriX1lsUsZmmUWRrnTO/HX3U+jyFH/qcA7XFd9T 8q06jW/alWZ11br3YB6zuoBZXcCsXnrirK4q+SxhVi9TwjH2MnweUtIxzkPk9pBS4FLgjmvhjmvh ToA7Ae4kOPmvzTK4ZXBL4JbAFQxyq68An7yJ7FZfHjlaNSs9eRtNi079wJy1l8xnhC2260lPMNF/ ZGcrF0MF+t9Gu9w2N8hhB6um/cucWp5qAAAAAAAAAAAAAPkAAACPAAAAgEAwAIi2GwA1EQAAAP54 nO2cCVQUR/7Hq6cZkBHPIKjr0YBcHtj3ASpyBCFRbtEoRuZCR45RGBV1CajBO1HUoBIxmlU3KhrQ F000UbOeccVFjbfEY9V4rJt4oIkH868eBgP0gP7j4/ke261F99TVPTVd9f30r37V41YBcVsIfgft FGYnYK4CAOldHcRNEW/X2nKwBrkP7IbEDQsF3QACVC/SeoP2DufbxBvS9JlYpH4yFmtMU6cD1OE8 aAVIYA86wox9QAvgat5rqccP2Fn2bcXSlhpcHLaAnn4IBs8BFsCc8BoUcXZONZ+s22rwEYzROURF R0fGKxDP6NCwPoQfpfLcf/3+9Tt/f7C6fP9BFYnhmFEzTtWvH9Z3sD59jGksRsOoWKxvmCHVpM+A +1S1SR+q1xp1emzAAFWmKUOvTlNlne8V3yLeJx6P8RmGx/+quNpb2VI5Wpn9syZE+XOSEsWdJiXg DJ1QUhJ9WEkNPurknOE8o4MCWZnZSqnSp+us1cAj8ey09SpYvCaGqHVd8VPG67G+0eoxlr8Z+nQT xlZfY6w+0zgxQwsbkqqOCDGmm2B6JkZWfx6i1xnUwcYs1UiGwDGewRiCw2iWHiV+FeupqFqnis4w auP0JmwkPAwNw0aJNaYaM+LGq7V6TMwQkklgjKXuAQNq1cFJm5GvvoJIeGl9g8SmTIftiPUN1U8y aPWxg4Jf3sLZi6PCnWO6HNqzzTO4WKn3iv01crvDMPu7SV0XVFQaj2wvTlnfYuux3ee6FhUV/XQ0 3bNb8By/oNPEzuHHI/xnObTpqmjTboZmlPtNn052M5YtustRu/475/xM7hdqj3nPpWkDR/mkFU7N Rabsc/mhymdXwIDvb3PRs+3tgnptHp7cI7/jpBWpE3R3s/Ourfz0yr8rzaNazWivaD8092DxoTNd Vj3K2nvl6XbDW1H+xddOdNIs+XrI2sXE1WH7x2wbsOrRhFkjVffIe0MOODt7L3Lv5uP7nveN1qWp OnrmtWVzd5EFi729Lu2NG+Py/opHbcuzlXzlN16fluRen7x33enC3j86JXZBE/xTtlasDei+wVAR GxCQmO+8QDEx8Mj1ioTVVcoS87eJVU93Jv6UEyLsRrtPXOfzziedIk647r2zb9RHzy9eDo5bnjna MSaaKXoaNvXb83fOzB9U6bnJ1H4aNWGYa0noY3ySfcepTt8+c0zMbpP4G+jROffHiXbd1uxMq9pb 9lav5W3yCsrOFYcUBAw/K/i/9+H7LcaUBv/U+3xiSVCIwag1jBqzZcMBux1f+9wbHHB/aun5X4Tz QekLPi6PeKD64uLtzSX0kojH5RWri7I89k2bWjQ56NsvxmXPPJZXXrV23u6YheseFPZffp8vT7t5 74pqn89+4zSiVHv+uI7ZPbTzrc1HxpzY0d60fdGzg6nqw6UG90vliX7MjdKlhf88cLXD+wd40/ix +M2UXLe5H4S2m+U4XRF/YqxuTf7SXeyMs//4T2mBf/sByWsveX2WdubnbvOu3c2qCKI/zts+s8Xg Ki9zwY5rnr9vfpZSuq7jRoPL/qXriwOfhkwoOnrq6w5p67z67g6e4rH2VL6noWq19z+HbfjS/9Tw 1A1vZ2T86n2v/+hlF5f5LjBwJ4o/3XDtdu8nYX89F1nY7dyWsi/ZMxlpRe+vuOi0pax74dAr4cOe rd60z8wE7Ak0O5SVIGOl/Zy3dhMOZ2uiGGsU7HERISHB6ky9DuMsXWdUTRbW5liQ+UfvxiS9G3bb iXCYILC+7xp0mbA7E9Yq/+iygqTWELVJnWocU1M9a+3mL4YkvFaJEPi1TAZjeqjYqX1C/UkcZ3GG xAmOEGiuD85447i3L7xEo67xLCpxzNFN1MKBwGeIWotFxWHDMQL3o/1YLGaiOsM0FYMjkWVcyzL5 1rqcrAx9sgrHCEKFv9iw6r/pWE0cwdGSOJwkJXEkT0jLMmz9OILgGEkcSUjPS9GCtKyN+khBGkfR tc5hylAbUvUZljaPM0zVw+8Lh32j0YQJ1eNrRHqyEbP8NOKHUPhT9yNYeH/hlI5IprQ6EucYQWAY niMJQcMwtBYfoHp5FmxU9VAMfwBLQxM0z6s8Pd+OClPVqO5QpAopVyhFbc9FcpEcc44ZOECttgPu YJgCAWbgIQazGAAMiCW4IUeQ5zAFfkLEAP4IMLebpaRVuYG9RbkVFhUvaRoVn7gwoLWCcAp92v/A j85tcxbzjPdZqvhDn9UDp+XM5VnPiiVhq6ZUJR1y2PE0go9cusnQ99TgqstT9hbO2Hml1cagvouO hGn5CJQS7oFNfhsvn3Z1zFraY83oniceBI849/nbNy6Om1Vwmz6z9EIPLvw2E7dsfsttp67SuvnJ f+lzZuU/ktYbrruqb/dR/1J2L6YqYPOqrMSSHKTz/cB2DTMCwdBNBgkESWEEx2O8AMcRkpMpQaYE mRKaDyVIurdtTFDV7vf/E5hAshK5tokJFMdJyzKS+giSk+AEQeESqcdp2gZOMJLzEpRASeJomnw9 TOAJDc7rdCKDwPr1ap7keFZH6hgNQxOCloeY8NIsEkxgeKYGE6opYSuYhmxCp4POZy0bmAAyLHEb 0VywFU2Cx4XgEFgIKsAc8BBMR1qCbMQdpvvDEAOPx8K4HDAH+QQsRDaCQlguCfkETUFy0ExkLDoF iUGzEX80F3GHoSWaDR6iU0AFmgkOoSnV9cNgiyd2Nw1PMIsI1T7c6e3HK69+tvqrHhfyb6TmtXYb dDNh8ZqHVdE/ZBBkm92VldfbTPrrwKys79ZkXd2d7XhhOnmstJVQ/svIv1TuXP3djIQDynEzC96K V+rsvW8lrcfY8Ztndv76y5l2qfrF5aM7RJxyuaXfOUd14psCl2sne07+ezhuSIsbmlPUdaP95Hvx 48iiU09Wuix1DC6LP54fsc/z5OzM9GsnC84+3n8lcLsZTA8JZBuhC5ZvQrog4fDDweGHh8MPL9OF TBcyXTQnuqjXvWW6sBICL1Fv23QhSI0QJCsxYBAkL6UGipSel2akRgiSlRocaFxCNQRd21jxZ+iC 4zQkLbBqmiM4AaeTSYZiBJzT07weJmgESBcvzSKlC0GoSxelYCpSjM4Ana02fweAwH/YC7LwqOwA PH53gcEVeDyDoQoG0BF4KODeDgYHMcD0lh2Am8gW8OgO8GhxG3jY34I5YEBhADeBx3O4fwbDExh+ g+mVd2xyxcdNxBXHAlQo4WRX/kEU4R1evDDnq10D5x0YFO7KHlj8NOSgZmb+lPtJI70nrWzbb7iR 7jeh++jvl4eX3piTlf+0z6DvBiz6z6LzAztsfHw36cvoDl3yv3ga++/3NrjNfmT64dpnhafuzPok fFP66dS5facdefdZ2VfRSx78N9BP2eNSI5xANt1UBcFQloGE4FmZE2ROkDmhmXFC/e4tc4JV6ymJ rtvmBFrKEyRhY3KBkuo6yUnrowmptYIkeClj2OAJGudfjxMYiD2MjuNJSD86gWMYNcnxGr2GwXGO Y3EacsJLs0g5gSHqc8IKpBjsBO4iFaggE7SAmm9vZQCFlQmqrIzwBIbfYPqjDjYVPqlpFN5zHtE6 F2trN200EVju0cOBKZqrvOIYql2jjP0tux15IHVr3BznG9F5ifmRZT7dPFwq+wU4FOzo2uvjtP1u pabYm/f6d/Ioc91TlBIyO7L9PXTzLZeUhuWbZ5rO0QAOCSRJYQIuC7cs3LJwNx/hrt2zG3Iw+F/T bEJ4xZkDXBpHSJ0OCMKGQwBJSe0CFCeddSCksxMERUhnDij2NWcOSK2eJHlax+v18DswyYReI5CM WuBwiiQ4koGa/dIsUs3G684cmH83PwZjwV3g+MKjjwAt4acEcMHqZ+Botm4AhzFKMAJcsqHY9X0C RV9EZxAChsC03qCFw3FlUIZBnQpQh+PAHqZWex+C55ilhAuIAb2GOCNDYBqoSbNuLjD49kTigMV7 Ueq5KPop+rpV+ynqHAxNxA0LAiA3ONtNiyK4tnPcfzR5uXzo0fajPJfwK5V5Y9afHfIIcsPBaOab z/MKVyw9qD169OqUSa29fnLZzG/f0639O+Frzjj86yNme5lfzM+FtwI1IjxQ811XNAwPQtM9+lOw O3EYS/IyPsj4IONDs8KHun1bBggrK+Cv5qFI4VLQEC0oEljApYJPUpKHeVuuDATBSycbKOm1EFRt 94Y/9dCvY0maZzV6LWzuZA7Xs2oqWUtqBJZV85pkESBemkUKEARd10PR/DsyHYxVzKjjoViHJpAl IEExvi5HIAvBCIXpVTkCOQNmK3rb4AhbrOADgpHLiuAXvNDJmqdTTR6Y3Te4hhdSmooX/rAzLApZ EH1yxfC2qwbSLiOwvEuu+IXBW7d96qgLG/1h/KJVi4ev/H6N94b92zKTslK+0pz7oGJQfNTDId27 cJ8/TJx8ps3phHFRXSPdr6BjKjq6vhFe4AQSjikETnIyMMjAIANDswKGep1bXtPw/yQGG+sSbBOD DRcDSkobFCedEiBsuiLYoAiOej1i0Ao6kqZovS6ZFQgNqVPrOK2aZvS8ODegTRadFV+axQYxsPWJ AVWBsXbtGiYGtAtIQM11iQHtCEbYoa9IDC6oD8hBV1gooRVU/4ZIIRAlkKDa9gjzr9bUkcC3m2hz aMAe0R2JBLVWU9pkDKyGMd7Y2sgSGh9mXRs5uI91bWTRvFad38jaSAH2AHgjC/A+pFlSxggZI2SM aD4YUb93yxxhFWV5bWTTrY1E5yDH0IV1OMIdDEPnN7gq8jA6u7FVkbCkLV+EN/duA7okXvJug9xW Dm9EvwmcFXs4QVDyuw1k/Zb1u3npd/3eLeu3rN9Nrt9gHFIOJoiaDdIafpMBMDSm2bCkLc2OfZPP 3DjLRR8eitOM/bZq0d6Q2KqR5YAs0YRe/jhGsZyFyylOVm1ZtWXVbk6qXb97y17+NbL9al7+tlYN EoyNSXsbE/kkYWM6gLHhbchITfqk1KMRyvZrevmT8BZQa5MZHjYzqaE4kmS0apLWcgItUDRr8Rh8 WRapbAt1vfwRIyhAJsGnbnckA51n1WGPeurthqSDZS80vL56u4klbap2XFOqdvlkPzY+3C8BB/uu 6pQhcZlKbUsqL1EZgr6r1GaieV3mLN/guEC5tCzmcHT4ydgWdsDTv01EI7JNNuGztoBRDI2Jtw7F y68IkmVblu3mJNv1u7cs2zWyLX19j23Zlj6V25JZwsZsOil11oeyLfW/I2wsxKOk10zUeVL/M7IN 9VdD6NSMVkdROiaZxHmOVWvUnAD/UxQjPm2/NIsN2SbrPm0jGpCGzASr4PN2N8vxDFBkCRnwWGM9 huHVZtiRy0iIIhb5m2WG3Q4BDfj0+yhaI4ORiIZm0Vsr4sIss+jiu4cb8OwfWD2LbmuW/xDSGfFX PGnUF7AS8XAi/LBY40RRvOKM8DyQUSw5zVU15zFvEXMq+itSDQ3O+Lsg2obK+nZCGi7XEjWpTWLJ KmvJ5+Zca8lE4Ms3UlKlMKZbfRhdrekuNWUdLGUbahmkP9IFKUHfaaxlkBTEy5GsaZmGvtm/xHM0 VMM6xMs+SDdJn2FqsGXyG2sZRaYepimsacjzJGva34Avg6Q1WK4nCqEJNNYyYdUt8watQDhdEo+T RNzhoSU4paixAkW3CngzViCcxUiawngW7hnZhVPGSRknmxVO1uveMk7W4KRsBWoaKxB4AMaBJ6im nu/FfZBaa+6mtt3HDTxCE+vM3dS2GbmJJd+0RahlXEulhxbNS1S+i2YqPd6iRIvQinZ1LEJeWW2i 3ohFiIe3D0nhmIDDPUvJEi5LuCzhzUfCJd1blvAaCZctQk1kEQI30BGIA7pAtAhZju3R+eIeKvV8 eDzCciyG+rps/j+n5XDfBwgAAEQAZAAAAAAAAAAKAAAAAAAAAAAAAAAAALcaNwToA+gDAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAATwXAAAALIECvAIAAAAAwQAAAAKAABjAAvwJAAA AH8AgACAAARBAwAAAD8BAAAHAL8BDAAfAP8BAAAIAD8DEAAQACMAIvEMAAAAvwEAAGAAvwMAAIAB AAAQ8AQAAAAFAACAIgAH8FcHAAACBE4zy5Ado0wlTZW4Ch1YIaz/ADMHAAABAAAAlj4AAAAAFABA PRrwKwcAAE4zy5Ado0wlTZW4Ch1YIaxYDQAAAAAAAAAAAAAlCwAAwgEAAABFQgCAdQoAawQAAAD+ eNq1V99rHFUUPjNzt91dNVmGpEkxhCRmS4xRB10klNrO2l8UYwm1CWmptDZpa0BrsSUWqThCJQWD GJAq4oMvYq0R+uCDSpGlfdQHEUFEhNL6UNSH/gEt63fmnjt7M52xlpILX++Ze84999xzz/mydYjo ZWAtMAMU7yN6waFk9D1OdGw15q3PbSNyaOoBop1YV7R8NHzt5AdM7U5Kt9ajiQFFcEAj7BOAu0ec 0KEeyBXAqTR+Z9spV4Nt9wHjYjsQKrpf/PVin5EHLbk/XJ3IQejGfnWc0SYVUqJbQ1ruBspyvhkl +R5AHi7hHlWxbYMTX2RH9oo/dxf+Oebo9U+azaZ99/clFzjf302z9AodouPIwE7Mr2PeRa9i7UU6 Sv9vvBc2qHbVpwb95hZ/eqdtATLduPUWz5/NLp6a5pxgvvmnTwXO93Vf5wn6A/UOeumyCqKgI5bN +Ke91n4gkO8jfVTDnlvfq2CBLsa61um19rGf3WBvQwU34J/3bHnz44CAiCoRW3T/7RPLtWs+LbYt nvKw1mw6kc4KzywhKUWKsX0NZ8h1V3kFVXA9Nb8+Lo9kNCV/nLuZuXhX8ias6tduqFfexAzzfgNi y+fujv1YvmWwn4mJ+ZCi+dDs47WxVJ0b3Xhcw8dPPEq6TocAruPtW3ZsdjPsKcfOnP8Q7C5bdh1y J7bzcvZu5doCPsQjP2HtXQI+lZ4ZRs0PJnmJNrUia8nFkNwN3C9WD06K7svz6+p8ltwplo0Nh18M Hc/0M6/HucKZz9JZYMRZLDDOQum83Yk+rVj5NO920HrL9SLz+qAAsT5txZ3IHMt+YFTkUVkfTYjL oc9zesjUj2vJSGM0KfxkuPBSQXMhx3xOTZXOqW/84h7GVMnsAzVG1RYXRFbcdSvuuh33kHW+uTPz kF2r2+S9K/KWNn9l1Ui6D94AvgWmcYcS7mBzl+ErPv+rFearhXojV+fF1dLqgzRfXbD46oLFVzdL wlfXtc0v6y7SB3NXFPPWk2c6gw2A8ZPHVzpbmTGtGF+5wj8/Ah/B7jvMz6C4isI3hoNYp4BOi4PS 73kS8g4w0Rw9hQDG6TW8z2GceRJfQ1irYT6I7xN4vYellvCnPJaHSft+TNY5vgeBLtF3yvqwZTss +i7p9x65C2Oz0nc5knEX1qkUn6bvMi4+qxk9kOa9dwua9/4o3yvvuffAe14m7zHXMef9WmYY3vMS 3nPvivdoo1VWG7N4z8vhvefvwHteDu/tLyz/Dcgxnx5ZUqdH9pW+nmQsqTvzHlm8R5m8560g7zUK ura+KN/Oe3Yf2r/f4t8EMJhZpevYK99ex6zjOu616jh91pm4J4+i5w6hHw+DJach9WFtBjOvz8Y9 ytqsLu2R/uuSWHukL6sW7N6sWvbdVg+bvXfbx6qs7z+UcX/Wpfs4ff+8PrZ/Q/Mb1qQWcno10mjJ WT0zJn+j++X/L4SanXBa31cQ019xfs5TVv8vl7PHf9Wla9Vlm9QliZ7lfwGbmGunQwWCPSvI7k2j 851vdA30AEvC9ggAAAAAAAAAAAAAOwIAAFsAAAAARUIAgHUKAFoCAAAA/nic3VTNbtNAEJ7ZJI0b lTS0ICEUuy4qUZNYFUItBxKEOVAJVeVfFSqnQlOph7Tqj6C3hkfgUq5wLS/BWyCV9+CImZm1HQem QoYblr7szLeT2dnZ/db5Dvy9NB24aKIJiH6QdxQjmeHvE2xCa/XZo2WA+6vLPqGNIUKdpmoErH35 xmEvjIXEr4/GXwuLMBGn9ei/iT2XsWfDcmrfCI3kLoo3uFsMIZ2j/CcwxgZSMvqpCLtubkMAU+Wz yefb/d6B/7D31n+629/YgUL5DC7AJViI081zLPrwET5IraejtbZorTkKuxKvDek3tJ0QTJfrzOx/ LZ77fNq4x20w1hU7iaEvckIsBGT4MS9F0ZortK0VCPB9iXFCk/juMvVn2AfZcmWAAzyOjiNwYBz2 oEE9qMIdCuPRo7ErmCSOURWe4zrsoyc82x10oSvwUp7jXKwLZ1EHT+ASz7D8HmV1KX4m5nmcIZ85 9rmvV0f7eu4Z8glep3Yv4TSdU43OZxGe4IP4fIZxzRI+ht/ZcXyjsA7eUllfYYvn5N1X2BL2FLaM W2rstrraUY7K5tW8+t4Wc+R9pcbq9R6q7IHCjmFTYavDGv5SbeYf1FZQ1cYKY6V9rTAStRVStZlf 1SZKIyWwUqwiEoW4xDGsUkRp7JtAeLY7pg1dQZDyojTTEs6iBZ6gTTzD8qI0VlfM85iojv3cSsMG LJlZaPZJYtrd2lFvhn4HdC3outEVsqFmeK2y+mr6/db3tqnuTc+bpw+6bvK8CXk6+f++FFPZl+Lm H1+KgUXGVtRgsmqIfgKYeCTVNzIAAEQAZAAAAAAAAAAKAAAAAAAAAAAAAAAAAEQlIA3oA+gDAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAATwXAAAALIECvAIAAAACQQAAAAKAABjAAvw JAAAAH8AgACAAARBBwAAAD8BAAAGAL8BDAAfAP8BAAAIAD8DEAAQACMAIvEMAAAAvwEAAGAAvwMA AIABAAAQ8AQAAAAGAACAIgAH8IcxAAACBIEFWds0U/V7mP667Ec5ilr/AGMxAAABAAAAnUYAAAAA FABAPRrwWzEAAIEFWds0U/V7mP667Ec5ilqoXQAAAAAAAAAAAACLDwAAeAUAAPhuXABwjSAAuxgA AAD+eNrVXGt4E8e5Hq1X0q7u1sXybVeyLbkYCHWDk3A1Nr5hLjaxJd9lCDYXg7mbBFLKJSXHUg4H NYGSJkXqeRpaIkjStMnJAZoaSEmepqlxC5xwTpvTpnFOCwlJ+yT5kaQtPvPtji5eydjGdkLF8zLf q9n9vtnZmXdmZ8eSIYQ6MS4NDAwAKvQIPSBHkc9PixHKtSJkL1tSjpAMPe1ByEYhFHOI8DlrxP+l IfQGTvQySV5aEnJn0wg7QFMx7BjY3RRZkQxlYtuAITOc/R0c20CJgGNbMJaSY7OLaKQh/nh8Xth2 xNhZRcqInV9ECX5pge2ZRxehSF4KEu1UDBWJH/6whHfjetiOL9JJjtVhJ0Ziw+XVYGySifYRXG+x 1/stcv04ptGFOtB6tBJtxVddhdMHcFqDNuLv7kMb0Mg+B4rOooJ3jOgs+h+K+fXDuv3YRn/9x25I f9Dx6M42qAec/v1do3Bfpl41inWD85cXm9Gan9P5e/LNgh3+XNcX6JfnE77ajgrwOf/oofP3o5eF vGj0Av3ii1R+01k6/6/YP5xT+o0n8xHGHmTYA0ekvm9EYBf0G9Gjukd3JuHvBgZke8RagRQsXCkM ElCRAjVEUYokOS2nkujuWUKTiHwGSP1B3bXfL5wVuQ8yct/IvaRcwnHRzxS4L+Q4t7u7CO3pLoL4 jeS7xZE2IX7C93kpaZd3ILHtTcKAtllRWlmCmyN6gJTpKj72++RcOK6B+IQ2Ohm3MQcpH7S5aJSo rcIlCh8D5QK3J9b2lJw4frpo4Hv7SwcGLCVZYjWhFTHX7CDAvubG+I3YUMavEL9UuB5JswzXHRVj Y/976qCfYOyUif35HfzfESTar1nrMF5iU1oBdQIPn6vE5zqj92BPTNmKY8pWHFs2qKvvYOwndcUU IWoOiR/u+3Xk+BPHc4up6HUIdvgYuCymSJYUe274fobrEVL3f2WUnJj1cmk4he+RTLbXgvXCENMG ZkXrY0R1vAxjBkYSSVFMiuwydGyIPhyur6QYW07uAWjiQpmowSYFQr2kfNJ7MJb6nxQTP3zNoH3Z xIa2WE7avIHco1jNhDwzqSfoE+An3E550u5O4GvIw+mL+MK24zSRXsJ5z06wXu4vPjtkHo5fRPqG 8JHq5fMxevl8jF7+nSV6eVU85nLuy+jQ/W/ToJvTvZb8ORhhP0PppVhbCcs0YXqZRPQRNLEHHzcZ p9/FDeIBiUZCXhfmihiNlN5P0Lq2mH9OEkcKiPdrGBcpMd5j8vh4kNdFxuKh4m0X+ng+vlj7oLjw L9F3EAtgIXAOg0THOYa4HsBBuej/hQTXA3ldkjFGej3iGFNZ4kjQ76TjzTrsoIYSx5uPqXEeb7IP lLr/z1KKlp8swXfglseb4caVTfga6ilxXPmQzBlVFVucqoqL01JaAWBvcY7vuEKNYVxJSjyukPoS 0pWzS4VxJZxCPQrjSlJkXKHGMK7Qtziu0EOMK/NwhhMHgHHFliQeJ70H4zGu0BM4rvw7dv51SuxH v6QGjyuxOiedF7Zj/AafuxOfsxuf+zo1uM9C3muUWPZwn5XGcgntYTsuZ7nQ96E/TyMI68IeuRjj BwliQN5r1GBdkMYI60LuCHThLfLgtUQ1AfNQMk8a2TwUFcY0w8LR6MIf5aIWVKii8031V6dg/I6e XgOYIvDh2yWKaZdoGF2gx6AL8sS6QOorPM90r3eUhdPofFMe0QV6SF0Yui6H04XaW9SFH8nF+eZ2 VXS+Kb0HY6n/L0IXDAqxP6ap4uebN9OFZzByFOJYvpyJH8shr4uUK9xnpbFgzaQMW114jroBz1Y7 8Bx1A/RiVIr/n4TuRAVoOtELKynPZPKMaSV2Hpl/QB3MibHD85iwvtzHiPzrCcoKedJ5h7SsS8lz bQbxB2XfSXzSbLzPncSn/CY+GwRd6MDH5QnXNJlcl5VcgyWm/HKWXG+CWJA3kvKDPjpHqI8wb2pQ TsC8KTzeT/C8CfQR5k21yui8CcZpGK+ztwHAHu95k2IM+qgcUh+FeVN4vlTzXjSNzJuUEX1U3Ebz JtBHmDftU0bnTdJ7cLvPm6AfwTzDqRz9vKlIIc5pPlbEz2kgTzpvksaKzpvKBs2bpsfowickRpoy PsYnivh5kzTGaOZN0LZAFx6gx18X3O7iYmjPN/C8aSJ1QY1EXdhMR3XhNNriPI0uToP5PMzrgY+v LjBj0AU2oS6E60tIsR4cJ89Vx8PPpYIusBFdYG4jXfgtvuegC0/RUV2Q3oPbXRdmI7EfldCj0wVY Q1qCxD47WRbfZyEP+mzsGpI01mjXkKbIxHhZdHw8yIN4KTeJd7utIWWT59H5Ca4nm47XPOn1jGYN aYlS1LyfqSdgLkTG8IERad6tPyvWKEXNO6mOat6js04ZH53VYT3lAYB9yji+z4qqMWieOvFciNRX eA7k3jG7LJJGNE8d0TzVbfSsaFeKc6Fr6qjmSe/B7f6suFcp9qNH1KPTPHhWPKQU++xv2Pg+C3nQ Z2OfFaWxvshnxYusWNbrCcoKeVJ9kZY10bPiB8TnNlW8zw+IT/lNfI7mWfF+lRjryQSxIG8k5R/p syKssX8Lpx/iwnti9PFpJK5LjVQfmSINNYP0lbAWzJDoRWKt0CaF90PA9+H3tieon5W6v20piazT 4wu2FGkj2qCJ6TNUTFsf7XwzrBdUIr0wygbti0ikF7HvnOmbaIop5vhmjP+mBtd9C+YcaApZc/ii cbq1m61uVar6PEfYWa2ZLPB3Pd2qBz1K9ectAVW7h1MB13u61UdblBpHS0Dtb+HUwGe1dGv6mpXa 6uaA5nQzpwHe3tyt/bxJqdvRFNC+28RpgfubvDpHE6M/2hjQ6Zs4HfBTjV59dSNj6GsI6Gc2cnrg 7zZ4DTsamOTP6gOG9gbOAFzf4E0+Ws8YHfWBZH89lwx8Zr3X2FfHmKrrAsZTdZwReHud1/SZmzHv cAdM77o5E/ADbq/Z4WYsR10Bs87NmYGfcnktVS4m5UJtwDLTxVmAv1vrTdlRy1g/qwmktNdyKcB1 tV7r0Rom1VETtB6o4azAZ9Z4Uy/cy6RV3RtMPXUvnwq87V5v2mdLmfQdS4Np/Uv5NOAHlnrTc5Yy GU9VB9N1S/l04KeqvRlV1WzmhapgxsxqPgN4f5Uvc0cVy322JJjZVsVnAtdV+binlrB8zpIgd2AJ zwGfucTHX1jM2qoWB/mTi3keeNtin+3TRax9+6KgrX8RbwN+YJHPnrOIzXpqYdCuW8TbgZ9c6Muq WshmX6gMZs1YyGcB76/0ZW+vZHM+XRDMbqvks4HrKn05Ty1gHTkLgjkHFvA5wGcs8Dl6K1jnkoqg 42QF7wDeVuFzLqw45vxl+Rxnf7nNCdyUYDxBMWOhcpTzf2qM499Qa2PQ55Ypx6p3ulvUO31ivYP1 IdC79Pdj9E4f0Tvdl6xxw2nZ70i9tiq/fC2rw/p1rvUIW4T17E1PNwt8yjJOdXhZQJWyTKk+0dqt Ai5bzqnXLQ+o31+m1Oxd1q0G/uZyTlN8X0BzbrlSW7e8WwP8xH2cNmVFQHv4PqVuyn3dWuB7V3C6 91cEdOtWMHrZCq8OeF0bpz/XFtAXtzGGN1d49cCntnOGw+0BQ0o7k/xMm9cAXLaSS+5cGUi+3s4Y 97Z7k4G/uZIzFq8KGM+tZEx1K71G4M+s4kwpqwOmw6sY89RVXhPwvas58/XVAXPnasYiW+01A69f w1nOrQlYitcwKVdWey3Ap3ZwKY93BFKsHYz1mTXeFOCytZy1c23Qer2DSd3b4bUCv7KWTy1eF0w9 t5ZJq1/rTQX+zDo+zdoZTHt8HZM+dZ03DfhDnXz69c5gemcnkyHr9KYDr1/PZ7yyPpgxfz2beaXT mwF86gY+8/ENwUzrBpZ7Zr0vEzi1kec6Nwa56xtY/qENPg74lY08P39TkH9lI2ur3+jjgT+7ibdZ Nwdtj29i7VM3+WzAH9rM2z/YHLSv38xmUZt9duD1W/isV7YEs+ZvYbOvbPZlAb9jK5/9+NZgtnUr m/PsFl82cKqLz1nfFcz5YCvreGirLwf4lS7eMX9b0PFKF+us7/I5gD+7zeZ8bdscZ/m2Y847tvmc wP8ZtKxYJfa58+qxapnhFrUsOaGWCe8AsZa5/zf8XAdalhzRMsOwWjb8891QWsaMg5YVkXr9ufrL 17LamgO0t+YCvaCGlptqztPAe2p08o9rquUv1OyT76oplQPPq/XLW2v75HwtrbhWc17gB2v1itdr qxW+2n2K2tpSBfAbtX7FdFef4uNaWtlTe17gHS69MuiqVra69inzXKVK4JdcfiXr7lO+7qKZg67z Ai9065mt7mpmunsfc8NVygAPuf3M7919TNBNsx3u8wI31enZyrpqlq3bx15yl7LAd9X52Rfq+tit dbSqsO68wK/V6VV8fbXq93X7VKG6UhXw2nq/ylffp6qsp9Wm+vMC76nXqz+pr1a/WL9Pvau+VA08 r8Gvbm3oU/MNtOZa/XmBH2rQa15vqNb4GvZpXA2lGuA3GvyagsY+zScNtLan4bzAOxr12mBjtba1 cZ82r7FUC/xyo1/LNvVpX2+kdYcazwu8sEmv62qq1hU0Pay70VimAx5q8ut+39SnCzbJ9R1Nrwrc 3KzXVzZX69nmh/WXm8r0wHc1+/UvNvfpu5rlhsLmVwV+rVlvsLVUG/7Q/LAh1FxmAO5q8Rt8LX2G yhZ5srnlVYGfadEnf9JSnfxiy8PJu1vKkoHnefzJyzx9yTaP3Hit5VWBH/Loja97qo0+z8NGl6fM CHzA4zeqW4PGNzyXjWc8rwp8dFo2/BrFRGgZrJdCn/PJxqplxlvUMlPiedkj50pAy5aQ9XpRy0wR LTPe5vOy2Hr9srVsbWo3O2BVqnZbj7DvWTNZ4Ies3arJVqX6eEpAZbZyKuBnUrrVrhSl5rIloJ6X wqmBv2fp1uy2KLUD5oBmrYXTADdburXHzUrdZHNAe8jMaYHPM3t1l02M3mUK6M6YOB3wDpNXP2Bk DLuNAf01I6cHfsjoNeQZmeRQcsBgNnIG4GeSvcmuZMZ42RBInpfMJQO/ZvAadxsY04A+YOwwcEbg ZoPXFNIz5jx9wHRIz5mAF+q95ss6xuLSBcw9Os4MvEPntdzQMim7tAHLNS1nAX5I603J0zLWkCaQ YtZyKcB7NF6rS8OkXlYHrYUazgr8mtqbukvNpN1QBVM71HwqcJPamxZSMel5qmDaQRWfBrxQ5U2/ xDIZtWwwvYfl04F3sN6MGwybuYsJZlxj+AzgBxlfZh7DciFlMNPE8JnAe5Q+rlbJ8pcUQa5QyXPA ryl8/C4Fa7shD/JrFDwP3KTw2Z6Ws/ZJ8qDtoJy3AS+U++yXaDarlg7ae2jeDnwN7cu6kcRm70oK Zl1N4rOAH0zyZU9KYnOepoLZpiQ+G3gP5cuppVjHJVkwp5Dic4Bflfkc35Cxzn+goGONjHcAN8l8 zs/RMeeDaI7zIMJzMtk/xzPmStwZj9PiHoZF8nF+59D0b6UnPvp2ZP9F7LrxWP9mgh7ibyboId5L rMUZP6LFZ+pysp/th+UfLfxheY3rJx4A2B8tHN93seYxvJewJH4vQepUSH/ydOmJLT+NplDXwnsJ S0TzzWN4F0vd4rtYaoj3EjNwgb6BoVWIf7NGJ7gH4/EulprA9xJP4EJfwngOlz9bPro9Gm/g8y5j 7MDnZckHr5VDHi8fvEdDGmske1sflIsxvpcgBuTx8sHr8dIYo9mj8aZc1A545zfu2hFuz+O0d2so XYC1INCFxcqoLkA7hPbY0wUAe7x1IWUMumBNrAukviJ68Mi1aBrRBWtEF1JuI10IyUVd2KWM6oL0 HtzuuqBSiP3Iphy9LsxSiH32A0V8n4U8qS5IY41k79aHJIZJGR/jQ0W8LkhjjEYX4AO6APuexl0X YP82bs/jtXdrKF2AYoMuwHuvsC7UoY8W1qEaF4xXMG4BH19dSB2DLqQl1gVSX0KK9eA4mTccD8/N BF1Ii+hC6m2kC7DfHXThCB3VBek9uN11oQCJ/WguPTpdgL1bFUjssw5ZfJ+FPOizsXu3pLFGs3cL 4JSJ8aoSxIM8qUZI44FGfA23wPD+hl9hVBOfGXS8z2ri03ITn+J+sJHuBpvYvWCZZP42J8G1ZNIj qx87iTGchlYoRQ39T/UEaCiZE4zXXrChNHSRUtTQH6ujGrps1g7nsll5k7s9ALB3OMd3L1j6GDQ0 I7GGkvoKz6ncltllkTSioRkRDU0fw14w6hb3gg2loelKcW7Vr45qqPQejMdesInU0K8rxX60Tz06 DYW9YAeUYp99g43vs5AHfTZ2L5g01he5F+xXrFjWPyUoK+RJ9UVa1kR7wf5MfG5Uxfv8M/Epv4nP 0ewF26QSYx1KEAvyRlJ+O6nD4fTxJ/icq2Sv7H/QY1mDz7zFNXgu8fvEmH2iojbAGjwX0YZMyf7J sb5bpG/x3SKN4n9/JJGmSNfp87HxPK7z93Haoxb1HZ4lN0zgWny/p8Pa73nZ6hcANsCQ2u9pS/UL ABvwEoYqzS/gJcI9af2e5zEHgA2g0/s99el+AWADjmPcwBxwnPB7M/o9RzP8AsAGfIqxKNMv4FPC g5n9no8wB4ANKOP6Pd/h/ALABlzHmMf7BVwn/DG+3/MnzAFgA2ba+j37bX4BYAPexphu9wt4m/B/ sfd7fos5AGzAHVn9nj1ZfgFgAy5jfCXbL+Ay4Q9m93suYA4AG5CV0+/pyvELABvwC4wMh1/ALwjf 4Oj3vII5AGyAxdnvWeP0CwDb4hzvd3n0BKx/wwd0BM4bm47wt6gjtsTv8vDzmvC3d+T5TdQRW0RH +HF4l0ff4rs8egQacQPfH9AILfpiNCKELk4Loe1fpQSADbDlh9BruDgAsAGdXwsh052UALABp+8M oeXTKQFgA5QFIfRcASUAbIDrrhD6212UALAB3787hBbcQwkAG/CXe0Lo8AxKANiAOTNDqH8mJQBs wCOzQih/NiUAbMCV2SG0aw4lAGyAY24IvTGXEgA2YEthCKXOowSADTgzL4RWFVECwAZoikPoBdzu AGADmuaHEIL2jwE24FhJCFWVUgLABnxSGkLfLaMEgA2YXx5CV8spAWAD/BUhdPcCSgDYgLcWhNA3 KykBYAMmLwyhXy+kBIA9eeF4vyObCI1IlYka0YDTl2I0wgw/+SMbjUbYqaPkeSWsAXMMUY0YkDyb tMccJ4vk7Ska3CvtxYPjiZ9J5NwkJIrLk0+kFT35xBNnw/mYnxW4bK9Ej7IS65HqSImgRziN6lFW RI/st7EemWEvgUycs9Ti9Me0OG9dMwE6BGXpNV2c1mva/tVcAWADbPm9ptfycwWADej8Wq/JdGeu ALABp+/sNS2fnisAbICyoNf0XEGuALABrrt6TX+7K1cA2IDv391rWnBPrgCwAX+5p9d0eEauALAB c2b2mvpn5goAG/DIrF5T/uxcAWADrszuNe2akysAbIBjbq/pjbm5AsAGbCnsNaXOyxUANuDMvF7T qqJcAWADNMW9pheKcwWADWia32tCJbkCwAYcK+k1VZXmCgAb8Elpr+m7ZbkCwAbML+81XS3PFQA2 wF/Ra7p7Qa4AsP0VKsvFigdNHy18L/miYP8zaM5batGXV4/QO6N4VlZoRLsVn/cKSvybblDeoxP8 m25H7zqLnh8woo+f+ObO1O/t2QnXYsQphNmJH4g17xhRy3Oy/LNVCI30N900x4oH/aZbC/syorP/ MMrfdJMlLO9E/qYbnWBtAp6r0zTi/evCqVfyOxuQt5W0s/DzsvTeLhXWGGfEvQPeRvw+msDvNuJX NoxfWEfgiL99GI8RnwW6eJ+PEZ/sTXwuj6wj2NESPL0vwWkxLv00sl6WTtYUoI3Ox5hL+PyY67pL J5ZhRYIyQN5Irqs9pq5gfaSN+LTp4322EZ/ym/hsEHxuEXrLVuLbRvpzWEPC5bfrxVgVCWJB3kjK bye+h303j/UDT+QQ6MdXkkauH+C0jRJjKpMSr7UN1Z5N+ItV+NwNOO2V/C0g5J2kBrdnaSy4vrtJ m4htzxuJ339N4Hcj8Ssbxm9se4Znu/3E5x918T73E5/6m/jsjGnPZciNKoX23B7XFmLbNsxpSkg5 wm17WkybyUvQZt7RieVk9fHlhLyRXPtI2wyspR2G9xV6cY/KSNvMn8kanAmf1ygfXZv5HJ97Eme6 cYZNsmYIeSr54DYjjTVUm6nTiH63JPALeSrJWmQiv7FtBt7HbSU+52jjfW4lPhU38dkQ02YqcQRp ++DIO6NwvLlaMd4duvh4kDeSePfj2oFosF59B6mjVHLveIm+TtOJ8eoTxIO8kdRZeI04tq3F/iZ3 ObnGSUOvrewREbUTPVcsJlr+FvYPeBuXZYM8yuUa8fc/89BxlOhZLNEzk/RzszkdFTOn05E+gkg+ 2P8Pr7G0OUMFwSwoEvVfzlVmqSyU9gdwsV7sAAAAAAAAAAAAADkCAADJAAAA+G5cAHCNIAA6GAAA AP54nOxdeXxV1bVe+yaQkIACGpD5EsbADSRhluliEgZlUPDyez//eL86xD4ECZMCDgziPI8ojshM crQ+21or1cLra6vt0/paBcfWttan1k62tfX5JO9b3znnJhfOCSbccwjhXn6Ltb9vn3vW2nuvvfe5 Z92c+8m/ir5eioyTTpG69lJ3ECjhiFujr8flIhkya96cqSKVs6ZGIUNN3EhPVHWEmI5739bD/iVi C48/L/X4wni2tHdO2xvvdcv9G5T7xnOS5ZJ4hOfOJlo3OTsuyTqcf6O01YLByfBfHtkXI2MkJp1z 3jr53AWXVi2Pzq5aGZ1bfen5iyUr5y3pICfJMOd0Q9qbqMhmuZ+ezk/1dAgs9cdBpzmWJfmqL+fF ZZ17TB1e8ENqL3mhvLbmuXjdY7dW1NUVlEv3Or7Uv3VmnVlbt7ZOcqWdLKXPo6WLHHC0W7ax+rQx 1afcuEQmaK806O35ji+1NQOnaKdHbMiye4y6lxs3WQ3fm+2+z/FXdeL1HuW1p3+vwtXKizHrCzA6 9aOAV3dHL5VC+tpVxlAb6C4U5UaTWyoDpYD4DXIFlANsaxdyNq/HiewnZ8t+vH8/+0MoNq/9Jjg+ 4vARymhyirXfuqf2m2/UaMy0kYnSSV5FZOTL0MnZ5kInIuqPKmoDMjw2x5R4sG192KgHm+XDhtmK dLCtt23t6luRvpWn8PaKxO8KKuRrz5aLdPFeeXT2zJctshAzxdZu2caeq07kKFadLO9Vx/GVump8 BVcdV2sbuOpkJVcdnr/hqqO+LpKt1POhF1KU20JOV5NLiN8gdwnlANu6kJzN63EJrDLK2bIf79/P /khQbF77LcFz27zbXwlK01ed82S3XIxVZ7BUyVOY2h4ze5VnNE31XAW82NwgYszZFRrd3eydDas7 mmDclV7LDvaMseyjiLE23jHm+OruaIlL+1e6un5na5OMsezUGBvI3Ud3J3sXcnelA+BU7N3J3t2A zWryWi5AO7tQVid57m5mJTlbVsL+SvaJUGze3t2wozm8anenU9z03e1d6WSWIs46ynum0mu38Y6z FZ6rbJXnsYs9Y3K5B5ttFniet9rzDF7n9dsVZnhaq2h8XqScYbDnGco8PRvpweaZYs8zXOB5Bu9+ 8O71Is/zercimDn/FfcVrK2mva3dsoM953zbo5jzOb5znvuKu5/M/bheJ/eVnOScb3vonNe1X/cG ew9w94QD4FTsvUH3H91LFqFtymv5EpS1vS6nxyRMPjlb8tEX+eyPhMPZe8qBJOf2FfcdlJu+p7wr F5s23FPeP/o9pTKk65ZEYsoUHZuD2FOOEF8R7vG2dss29oyv3KOIr3ae8eX6So24qnGuX2rcay/G V7tkfOWmxpdetxjER4TabcciiiFnX7dEeG2j/CUU9zpta5JnfDmce+1Tfz1ic3Z8RZK821cJypZm xFcurlkeYnzlH/vPSX6fiDKfk1pP2/LqW5G+/czZC+qOuN5wnbYc7ZZt7Lne5B3FepPvvZ85vrr7 WGL1+MqkTq43+cn1hrfAUtYb7DmLuLfkJ9vBPcrZj7jeED9B/hKKxbYuJGfz9n5mc7bYfZGg2BzX G9qyebevEhSr6euN6Yz9bIcUrfHcizJXrq32ynVH02d6brx9ZCx0rMHMGnvI7POeeR2y9D1Rh4+4 74k8X5G4r6A8eVcFThbEOyRnGqN2s7yQumpEnsYnQN1l38QnxTf56VHvY9r3O99EAw5IN+DT5HXU vU6sfHeUe8hrkF+g/jVi5XsB95afQ/+39KT+Bfk+wFF5FfpnqH+VWPm+wIXyCvTLqH+FWPn+wAPk v6B/Kv2oXyY/EHiQ/AT6JdT/hFj5wcBF8iL0j1H/IrHyQ4Bj8iMZKj9E/Y+IlS8GHgYplh+g/j+J lR+Ocgm44bIP9f9BrHwpymXgSmUv6vcRKz8SeJR8H/oFGUG9l/xo4DHyPPT3UP88sfJjgcfJHujn UL+HWPnTgSfId2W8PIv67xIrPxF4knwH+hnUf4dY+cnAcfk29LdQ/21i5acAnyHfhH4a9d8kVr4C uFL+HfopKad+mvxUlKeBmypPov4bxMpPR3kGuOnyBOqfIFb+TJRniiVnSS3qLWLlZwHPlhro3aiv IVZ+DvDZsgt6J+p3ESt/DvBc2QG9HfU7iJU/Fzgh26C3yjzq7eT1jlnCuXO2Gf2cY08h/OvHdfgZ hLjBP7eUjdJeaX/hZcuWVS1esaR6weIVZEwHQbxdhH9NfZfqKWXRBYsvqloVXX7ZBdHSkpLoRQsu j46MlkaXVS9aFG20ckn1EhVp4IW2y9sLnaWNe5KzuGrlkvNX/JuksG0vrb68akV1Ctfm68vPv7wq 9bg2yy88f9EhXPviUvV10YLFh56hQ3FZtLi+KvVdpQ2rGtbkl0X93oPzlUWXefjamA+l/j6UhOOD 1pR418C5Mm8PShvzYEQ6e8F/JBr1Ia0jcRz7kBmL48EH71l2JB/SNzfzS/ze08xVshEfSpsxFi18 pc7MzVbsw7Gemy2lH04sH479WLTCdTLtV7SZuXki+tByx6IxS/7na1tVffGCRYtSuNyvL6tavqJ6 WVWS1fsDXp+qc4gLpUDeqDOeR/Srq/PmjR/vfZ5COU32B26ju7wWuI2e8vPAbfSWV+siTbRxsIk2 +sor4tOOg+lqRz952a+vmmoj4mdjgPw08PEYLC8FbmOI/DhwGzH5YeA2hskPAo/dUtkXeDtGyPcD tzFKng/cxljZE7iN0+W5wOf5BHm2qe2QptqYJM8EHrtT5FuBj0e5PB24jUp5KnAb0+XJwG2cKVbg NmZKTeA2ZsuuwGP3HNkhPu1I2zXDPNke+FqSkK1pHY8jfSeimdnwk5qZDT/ZOxuu36fUbHj33zfI hp+czIaf5GbD+ZdNzILvl/n4+FDADPib/A60nQnXv/Z5C86/Jd2YEbex8t3kbekh70DextX4W8TK 95R3pZf8Ele2qt8hVr63/Er6yHtwVvUviZWPyq9xhfobjJXq94iV7ye/Rce9j6s+1b8hVn6A/E4G ygcyiPp9YuUHyf/g6u1DKaL+gFj5IvlIhsrH6NyPcOX1IbHyMfm9FMsnuIr5GPpjYuWHyR9kuPxR SlA3HJxi5UvAlcqfpIz6D8TKj5A/y0j5C3Z41X8iVn6UfCqj5a8yhvovxMqPkb9hcP8u46j/Sqz8 OPlMxss/sPt9hl3278TKT5B/ykT5HDuW6n8QKz9J/lcmyxcSp/6cWPm4/B92ni/lDOoviJUvl4NS gX2ykvpLYuUrERxTEdvTUDcVnGLlp5mITIfMQN10cIqVn2Gy5CyTLTOhz2R9FvmZpo3MMm1lNnU2 sfKzTY7MMblyNnVbYuXPNu3kHJMnc6lziZWfZ/LlXH4HSXUesfIJxKf9/aQOh2TBC5Oz7/BZy0/i LToTrm3z9uJYZMIbv5/RjDsnZY3czau/PZJa45tnaubdG38fSn19aHjb8DAfvDPhzbyD1PBW1Vce izTfxfIfixPNh8xYHA8+NDI3G/HB711pjge/ddI/s5HukUjzSt3YKpmZmRkfjpuZeYKNRWZuhrtO HsdXtJm52Wp9aMFj0cj3jX3Plp48+KlywOe+ZL803S8slK7yZuA2usnbgdvoIe8GbqOX/Mr43dP2 s+F3T9vPRlR+7deOgz68X17J10ah/LapNvz6KuJno7+8H/h4DJIPArdRJB8GbmOofBy4jWL5JPDY LZE/Bt6OMvlz4DZGyqeB2xgjfwvcxjj5LPB5Pl7+KWlqh6+NifJ54LEbly8CH48z5MvAbVRIXeA2 phkTuI0ZJitwG2eZNoHbmGVyAo/ds027wK8Z5pr8wNeSc037tI5HQHnwjs3Mg3fyzIPzGWL3FZQn 3nWfv6B58E7JPHjHw/LgZqXMN086zwTT54Gt4rO/FHc1V8hp5krpRr2aWPlu5irpYa6WntDdWX8V +Z5mjfQya6U39dXEyvc266SPWS9R6rXEykfNNdLXbJBC6vXEyvcz10p/c50MoN5ArPwAc70MNDfI INQNZP315AeZG2WwuUmKUDcYnGLli8ANNTdLDHoIOMXKx8wtUmxulWHUNxMrP8zcJsPN7VJCfSux 8iXmDik1d0oZ9e3Eyo8wd8lIc7eMor6TWPlR5h4Zbe6VMdR3Eys/xtwnY81GGUd9L7Hy48z9Mt48 IBOgT2f9/eQnmE0y0Twok6gfIFZ+knlIJpuHJY66yax/iHzcPCJTzKNyBuqmgFOsfDm4CvOYVFI/ Qqx8pdksU83jWIFVP0as/DSzRaabrVg1VT9OrPwMsw2r3HaZCX0m67eRn2l2YGXaKbOptxMrP9vs kjlmN1YU1TuJlT/b1Mg5phargOrdxMrPMxZm7RN8Fse5qFesfALxOZ/8k60rD64PCPH0oqXlwVvl XaLMXcPjYSwydw2P4MMJlXvNzMwT0YfMWBwPPmTm5om3Uh+nI3GC+ZCZmSeiDy14LI5hFtysCj4L bq4IPgturgr8Lm0Psybwu7S9zNrgs+BmfeDjUWg2BG6jv7ku+Cy4uSH4LLi5KfgsuLkl+Cy4uS34 LLi5I/gsuLkr8Hk+0twjaWqHr40x5t7gs+BmY+A2xpsHArcx0TwYfBbcPBx8Ftw8GnwW3GwOIQu+ JYQs+LbArxnOMjsCX0tmmZ0hZMF3Bz4ec01t4DY0n9ZEG42OeUBZ8M7NzIKf4v3X4DfvK9cs+Czn 11CEWfBTklnwzodlwUV/3WSsdIF0dX4fsoB6LBwfLd1kFPRI1I0iVr47cA8ZASlD/Qhi5XsB95ZS 6BLpSV1Gvg9wVIZDD0P9cGLl+wLrN+r6ovlR6mHk+wMPkKHQQzAmQ4mVHwg8CDJQBqO+iFj5wSgX 4f/BYAbhn2Ll9egYuKHJoweRLwYehrMW4+wx6gHkhwOXwKPhjmeKlS8FLoOHpU5LFCs/EngUWjQS LR1B3Yf8aOAx6IHR6KFR1L3IjwUeh94ai14bQ92D/OnAE9C749HL46AVKz8ReBJKEzEiE6i7kp+M /+PgJsspqD+VWPkpKJ8BbgqGOQ5RrHwFypXSCbqjlFN3Jj8VeJqcDH0S6k8mVn468AzpAN0e9R2I lT8TeKbky1mSh/p8YuVnAc9GPM1CVM2kziM/B/hsfP6cI21Rn0Os/DnAc6UNdDbq2xArfy5wQrKg IzKPOpu8/cs49q/ytKYseBdOdS8vWtpz0VvnUwMzz0U/XkfixHqGZOZZ3CneNWMsMnPz+PYhMxbH gw8n0txs6etkM/qhmc/iPvZj0dLnRUvw4USamy19LDL75rF+LvqYEJ6LPiqE56KP8LvDmbbndvaU ssCf29lbSkJ4LvqwwMejn8QCtzFAhoTwXPTBITwXfWAIz0XvH8Jz0QtDeC56NITnovcJfJ6Pkl6B P+t7rPQI4bno3QK3MUG6Bm5jkhSE8Fz0U0J4LnqnEJ6LfnIIz0XvEMJz0fPFx0barhlmSl7ga8ls yQ3huehtAx+PeZIduI2ERPzGvKnr7ld8Lvr8pmfC8+Kyzj2mDi+j2ezzbquo/fS+Cvnas+UiXcql ex1fdvYa1421sLZP9jvaLdtY/diY6kdu/NTIBJy3pEE2ff4h2Xb/jHtBVsP3Zrvvc3ykfnpXRe2y PfVafTdmfUG8IJmBP1Xf1N15c30btlDXQu+jPE68FKO3l/UHyO2l7Gc7XU6PqZXXHazyOrHdDzbn 2rGc/rEojzs293+FMa3/PXgjefKU7JI98jNcKe6Rb5gSr9+iX+XxS/JtzFTP3633YnNNtP5X59MV T+6YHBpPKb8Uz75C/5p8W7tlB3vGVZejiKuu3nHl+JqMp5s/qtfJuOqajKsuqXFVHxN2LLixsT8Z H3Zsadvak9fyXrRxH8XmeB6TZ2NKHjH7wuHc/rKcPlLtxpnipsfWO7LHZEtRDwTW0UZWpQfbLojI qnkurqNy8LFbK44QWcaZ3apNcqbXivGOrNOOIrK6eUeW4ys1IqrGWblq3NWWkdUtGVmnHR5ZAr8j 1LXQ+yjaFiFnR5ZxVjLD8t7kCm1zDVe+hiueuwK6feWuUhbFkHNX96ZFVQ7Wqoe4YuWZC70i6ELP uAqGbWtKPVnviI96sFk+bJitSAfbetuWV9+K9K0zzupfd8R1hqu45Wi3bCVX5MPWme5Hsc708F5n HF/dnStRML4yqZPrTI/kOsMlJmWdcXYee8dxd6D85C6k7dzrtE35vRQrie1+qHWwSi1xrYPdfrKc vrEozk5vrKavMaYTdq7tUrTGc9/J8dm5VnjGepXnsYs914flHmy2WeB53mrPM3id129uzvC0VtH4 NVzKGQZ7nqHM07ORnjOr2PMMF3iewbsfvHu9yPO83q1oMLub9c3fns385m8v7+dfrR5fmagaX6Ha nl36zd9eydnVUw/S7xWmrBSRzrKQ0f8E9BNyKcUip3gxpJpioWwRK78UsoyCWUSx+RWQyygWyhax 8ishqygWyhax8ldArqRYKFvEyl8NWUOxULaIlV8HWU+xULaIld8AuZZioWwRK3895AaKhbJFrPxN kJspFsoWsfK3Qm6jWChbxMrfAbmTYqFsESt/N+QeioWyRaz8fZCNFAtli1j5ByCbKBbKFrHyD0Ee plgoW8TKPwp5jGKhbBEr/zhkCwWrFMXmt0G2UyyULWLld0J2USyULWLlayC1FAtli7g1fcNW2+jt xTF5zlRJ039nSL+V4ZuFL/HJn5b4/gV0o8+m9/fAN++b8SDjQcaDjAcZDzIeZDzIeJDxIONBEzxI x/f5+vnlNg+KN+/7nRLv4wv5qTdoG0tgwyef7WvDJ5/ta2N5CDYuD8HG6hBsXBWCjbUh2LgmBBvX hWDjxhBs3BKCjdtDsHFXCDbuDcHG/SHYeDAEG4+EYGNzCDa2hmBjRwg2dqfZRkBPBundzPxAH+8n g9Q8F9f8gJv9F+YH+iTzA73d/ID9ZJDOslDs7P5CyKUUIad4MaSaIigLsfJLIcsomsETYuVXQC6j CMpCrPxKyCqKoCzEyl8BuZIiKAux8ldD1lAEZSFWfh1kPQVdSLH5DZBrKYKyECt/PeQGiqAsxMrf BLmZIigLsfK3Qm6jCMpCrPwdkDspgrIQK3835B6KoCzEyt8H2UgRlIVY+QcgmyiCshAr/xDkYYqg LMTKPwp5jCIoC/FCxnREtlA07oRY+W2Q7RRBWYiV3wnZRRGUhVj5Gn67w/6GRw2ldT15YyGT2V5e tLS8QFnT8wJl6f2815gHvn8vmvEg40HGg4wHGQ8yHmQ8yHiQ8SDjQRM8SM/f+S9M4VP/7km8ed+/ e/I+vhCfio3fvQRfG35/h+ZnY0kINpaHYOPyEGysDsHGVSHYWBuCjWtCsHFdCDZuDMHGLSHYuD0E G3eFYOPeEGzcH4KNB0Ow8UgINjaHYGNrCDZ2hGBjd5ptHDE3YDo3JzcQjWxzbhW79/4ndKzPDcBT aZgfuKjBcSZZty4uKa/olFR79muw894sHiLy4KZu8Qc3bdrr1gPvJTbrD8lD9PXOQ+Q9XM48BHR9 HqJvMg+hx9fnIcxnuIorklopgS7G1ZZKDOUY8WJINSWGcoxY+aWQZZQYyjFi5VdALqPEUI4RK78S sooSQzlGrPwVkCspMZRjxMpfDVlDiaEcI1Z+HWQ9JYZyjFj5DZBr/7+9a1dpIAqi9y5iIjFib7Nl hFkISUgsFWvBRvwAU4soBARBEXy/n/H9jJ2dEB+tXyUEdGZSmGIWN0UGEy7hkDMn5J7ZDCyEu3uW AciBa9JXEWsMQA5ck76B2GQAcuCa9G3EDgOQA9ek7yH2GYAcuCb9EHHEAOTANekniFMGIAeuST9D nDMAOXBN+iXiigHIgWvSbxC3DEAOXJN+j3hgAHLgmvQK4okByIHrup7GGdP7IPPO2msI2mSvwd2D 4DpwHbgOXAeuA9eB68B10PEdZOkT+Tm1Wb8grpYMcn5QCFmv0N5X+tP/y1ZffTij4DGn4FFS8JhX 8FhQ8FhU8FhW8FhR8FhX8NhS8NhV8DhQ8DhW8CgreFwoeFwreNwpeDwqeFRMuhaTv1P7kvU4rdVc JlOXfTUDXsYk8ZUy/fbD5qSMoCExryloUcqQL6pjgpqwI2KC4WgTaUvSCn22KB6xpHbbWfF3kBOq pCwqWY1J/dLMJm3VTOPMUmbKvtt81FQo7XlJGV9xOyHOS87Mij6vnpDJaM6rN2xez/bFfHr03NU3 W/2/85JnMC7mi5XEHvJNpDPKbtGz0xK/6xZN5s89wqU6GrhwpvSGG86U3z9FVpiH+WgAAEQAZAAA AAAAAAAKAAAAAAAAAAAAAAAAALIlESF/A38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAPAATwRAAAALIECvAIAAAAAgQAAAAKAAAjAAvwDAAAAARBAgAAAP8BAAAIACMAIvEMAAAAvwEA AGAAvwMAAAACAAAQ8AQAAAAGAACAIgAH8GFoAAACBOHCIUVLNcrw5f90d7QWXPX/AD1oAAABAAAA 1HgAAAAAFABAPRrwNWgAAOHCIUVLNcrw5f90d7QWXPWYpgEA1wIAAFUBAACWEgAAHQ8AAMh/XQC4 BFIAA2gAAAD+eNrkvQt8U/Xd+J8WEAG5yZ0eSinlWqAppVxChQIlUOFwh3ITjoVykVvgBMQ+PrHT uc4tmQ63BTOdmy46EeYli1eYZpnxFp955sRdovHupk8U5pyZTv2/T1rIOeTI1wnu9+z153m9TT9t zqfvT3LySTjPh8/ybDbbVngw32ablWezec632Xp1tdnanGez/aydzdY0z2b7eKrNVjRTdtpsebb9 t+XZXunMz23mPyU9+E8/m+033HTNM//swpFtbMuK29pIYBsFRUC60rzqPJvE190gv9ujf9Lvuzy/ Bf2+q2FB632Lq9vazmvNV1jd4eTXJeQ48bW9Oj+Tq20mapo6qLr9yZ+1rbad/FrPPRz03z2rpnYG v872T2ptwPtGaq9pk73fcpjb6jCSHCV83bc1v/6fFrJfd6y2NZ24z2f80R+KpalHapZW/mLGHd/r NzPv2DszBvG9c6He1uKk36ekFf5MMTx0J7/WHYe15j3x8JI+czvEkOfE1+RvWqY/Jvr9qG0TP7yB 2qqpjdCWLqvulC77rN+vLtfRv67udOLY9hx74mu9JoPbNIPbNKOb/ljdCNe1PlbnVtvyebhs4wzP 7dGThz5Rnd96nJ4n/0Se1vvpyudW57WpavXXv9+29QcnHkv99s7zF9Qs/fZlM0/c6t+35eV9rRfn RPY8sNkc2cfkCz3Oa2Fi69cTW79/4tZWlGcba7P+c+Ixyzd83a71edDP+5fatbzGHuJ5uLhNi9+p z8OZPAfDDb//RM0dobj1a/18dLae991an6dTXxc9Wx8n/XXR5nNeK3dx8CC+uFjvFWf5tWLbf/XM pRd0qFnQ7vkZS3ZvFbxWmgzPYZPpORS9Ju6lhhLueBE1dG99TTw1fd+5T02vOU+t1dG/3neu+Plo qjY4VJ/+NZF/hq+JNpaviROPmX57YGVNzdI/7zt5m/l+5jXR5uRrIv9zXxOf/3iKXhP9vuRr4rtI tclved8Z2/qaOPV5OJPn4N/1mniVg8/ji+9Qx/ltPv/YReDKa/E5dKKBt/657kRjr9Zf2Ltsm20X Z96bT/w58eM2p7y/1o15zu69YX8mZ97J+/U4ecxBfvZycH8mPrz8mP0ftpb3b/1n9nu5X6hH5j42 w/H6z3965/7MrU4lnAPKgf22jcuO2U+6GLzanfg61CPz+78e6nHyPpur2trvfnWx/fhzefb0/S3f H7Vvvy3N7//bvdn7tm311f+MVY7ZS/h+W0PeE/fX/+g1L7lxf+ZY9/79Nr0uPZ59037b+j2Zh910 /vVu/VrvN+cb+kPf7DmVv6T189DA7vx+DhrEHX35LfdrV9ZMx2qu1n92eX5LvXNPOd8/a/2j98Ia 22zbDD7B6J93qgxMaP2dvbO/96RnF05g4zl7Ns6XQsH5kp+b8xv6t18O64/z3rx9/F8sP5a/2HC/ Ucd8+SP15+oenhOeT/2we7vmHfscx0y+b69aPN/8dUvu7R3yaWn7M+fX4VDLufp558uj391vi3O7 6Wet53No/4kmmPnvkjtb6urr229bzX3uvo/7873dr/7WfqK/vu7dbzsS2G/rkddyvvz0DM8XV+v5 8gMO6sEdj1ucLy/nt7x+Tne+LLY18CzuyfxXP0fGtPaYEYavv8g5Y9Wffp/f8p59Tduv4D372fE1 +vvMki/2nn2BoVdf8K+8Z/8xv+U9++q22ffsg6NnFx8c3bVcnq2jfz27+Au8Xxg+QzUJPse2PcP3 7HbW79mtj5l+m3mvvuO6k7fZ9+x2J9+z237+e/bnPp6i9+z1X/I9W/+7ov6efVvb7Hv2qc/DmTwH /6737En8oLr1fHo1/6t9z77d4nE+0x7c8w9nvwfrHge/YA9WWnvwwTPowT+2nZ0erPexPTxZGzjo OLeRU3qw/rO781tyfl4P1q81yHThma3v0V+21x7ujCtfTOHveZ/kn91ee+c/V81curRdja3bkRm2 ovVf+lqCqNc+Qg09uaODGv7R+lnn4223d/t42xN94pfp6F/f3u3sXjM45wx7bXvLXnviMcvcXjSl 5s4fqdlb/bHM9Nr2J3vtOf+Hrhn8iOfhfZ6kVTwP/Vt77anPw3/CNYNlnWy2Dvp51PnsvyaWXl85 01bdpuZnHz33BT5/fPnXxPJOLX/Hy+ucfU3EVq7vFlv5RJ9zNunoX68/y6+Jc8/wNdHB+jpa62Om 3+qvhQPnLzh5q3+/5TXR4eRr4tz/Q6+JCTwP7/AkFXfOviZOfR7+E14TzdTRVn9Poo6O/+ZrBqd+ /vgqrhmUtl4T+P/LNYPHeD5HctDj/ODqUz5/6D9z/wddM3jnK/i8evfo//xrBq/azt41A/2c+I7+ 9w9+8BeL8+X3X+CawTqevc22Btt2m9s2svV3nt96vUCnzxl8jn23c8v73eau//5rmv+O/lT4/7P+ VNql5Zrm6K651zT1n/0nXdN86SvoT+m3zn5/0h/PB75gf9rQ2p8eOIP+9PxZ6k8nzhf9muaLXXKv aeo/e/kLnC+76E1beQ4v4xyQWnuS/nvLWvvNl+1N3+cFeAHcCD27ZnvTo/CLf+HvE+dWd8xfkDmv s5+bX8rL/Xyd8xn75P+vqbra/Hm7U5sTMw7690/cf2nlhpb/fzW3eW13zmz5fN3p5OfrjobPnfqv /7J/hznxmTvP6jP3+XktJ8RpPnPnGeYM8k/zubyH4evJra4FrZ+HEzxRn/Wz2cYb4u/3b/m73jiL 8+SczH1u7a9JP+8fhTAcID4gfb//iRwHWnOeLscB6Xi/sPRmvyhokCBOSJ/1u8DC76ICs9/7BSK/ PEmTzpOiEIYDxAek9wuMfhcViPzmF4SlmoIoaJAgTkgXFVj5PSyZ/RYOEPmtHaBJlwyIQhgOEB+Q Fg4w+uk5T+93iNpuocZbqPUWKUGckB6WrPz6FZr97ioU+R0p1KQnCqMQhgPEB6S7Co1+/QpFfp04 1kYOG7lshQnihNSv0Mrv0oFmv85FIr+CIk0aWhSFMBwgPiB1LjL66TlP77d5YFhaMzAKGiSIE9Kl A638ni8y+20ZJPK7bJAmfX1QFMJwgPiAtGWQ0e/5IpHf49R2mBoPU+vhogRxQnq+yMqvotjs92Sx yO+FYk16tTgKYThAfEB6stjoV1Es8hvCsf3J0Z9c/YsTxAmpotjK77uDzX7DSkR+lSWaVF0ShTAc ID4gDSsx+uk5T+931eCwtHdwFDRIECek7w628nuvxOx39RCR3/VDNOlHQ6IQhgPEB6Srhxj93isR +b1CbUep8Si1Hi1JECek90qs/OShZr/Xhor8jg/VpH8OjUIY6LXw2lCjnzxU5DeVY8eRYxy5xg1N ECckeaiV353DzH7Thov85g/XpJXDoxAGei1MG27003Oe3u+mYWFp37AoaJAgTkh3DrPy6zDC7Hfz CJHfoRGa9MCIKISBXgs3jzD6dRgh8vuY2o5R4zFqPTY8QZyQOoyw8ts40uz3yUiRX6dSTepdGoUw 0Gvhk5FGv40jRX4rRoaleSOjoEGCOCFtHGnl91ip2W/VKJHf5lGa5B4VhTDQa2HVKKOfnvP0fvdT 20FqPEitB0sTxAnpsVIrv8GjzX4Pjhb5PT5ak347OgphoNfCg6ONfoNHi/x6cWxHcnQkV8fRCeKE NHi0ld/Xxpj9+pSJ/IaUaZK9LAphoNdCnzKjn57z9H7qmLC0aUwUNEgQJ6SvjbHyS5aZ/XbbRX5X 2TXpO/YohIFeC7vtRr9kmchPo7YYNcaoNVaWIE5IyTIrvwvKzX7PlYv8XinXpP8tj0IY6LXwXLnR 74JykV8Zx5aQo4RcJeUJ4oR0QbmV3w/Hmv3KK0R+Uys06cKKKISBXgvlFUY/Pefp/Xxjw9KVY6Og QYI4If1wrJXfPyrMfteOE/ndNE6TfjYuCmGg18K144x+/6gQ+b1DbS9T48vU+nJFgjgh/aPCyq+u 0uyXqhT5fVypSeeMj0IY6LWVB6RUpdGvrlLkV1sZlqZURkGDBHFCqqu08guPN/vNmSDyWzFBk9ZP iEIY6LUwZ4LRT895er/bqe1GarxxvAYJ4oQUHm/l12Oi2e+OiSK/+ydq0q8mRiEM9Fq4Y6LRr8dE kV87jv2IGj+i1o8mJIgTUo+JVn47J5n92jtEfr0cmlTkiEIY6LXQ3mH003Oe3m/dpLC0fFIUNEgQ J6Sdk6z8fuMw+zVMFvmpkzXJMzkKYaDXQsNko99vHCK/CLXdR433Uet9jgRxQvqNw8pvdJXZL1ol 8tOqNClRFYUw0GshWmX0G10l8hvIsT3J0ZNcPasSxAlpdJWV37cvMPsNmiLyK5uiSY4pUQgDvRYG TTH66TlP7/ffF4SlXRdEQYMEcUL69gVWfn+ZYva7YqrIzzdVk/ZPjUIY6LVwxVSj31+miPz+RG3P UuOz1PrslARxQvrLFCu/WdVmvxerRX7vVGvS36ujEAZ6LbxYbfSbVS3ym8SxY8gxhlxjqhPECWlW tZVfcJrZb/J0kV/tdE1aMj0KYaDXwuTpRj895+n9/NPCkndaFDRIECek4DQrvzYzzH43zBD53T5D k+6dEYUw0GvhhhlGvzYzRH4fUNvb1Pg2tb49PUGckNrMsPK7uMbs92GNyK/dTE3qNjMKYaDXwoc1 Rr+La0R+i2vC0uyaKGiQIE5IF9dY+T0y0+y31CnyW+fUpO3OKISBXgtLnUY/Pefp/e6httuo8TZq vW1mgjghPTLTym/ALLNfaJbILzJLk+KzohAGei2EZhn9BswS+XXl2LbkaEuutrMSxAlpwCwrv/+a bfbrXivyG1irSSNroxAGei10rzX66TlP77dtdliqnx0FDRLECem/Zlv5/aHW7LfjQpHff1+oSd+8 MAphoNfCjguNfn+oFfk9TW2PUuOj1PpobYI4If2h1spvwhyz3zNzRH5/mqNJb86JQhjotfDMHKPf hDkivxEcW0iOQnIVzkkQJ6QJc6z8vj/X7Fcqi/wmyZpUI0chDPRaKJWNfnrO0/s1zw1Ll8+NggYJ 4oT0/blWfu/LZr9r5on8/PM06ZZ5UQgDvRaumWf0e18W+b1BbX+kxj9S6x/lBHFCel+28ls43+z3 1nyR3wfzNcm2IAphoNfOPyC9Nd/ot3C+yG/G/LA0cX4UNEgQJ6SF86387lpg9pu5UOS3eKEmrVkY hTDQa2HmQqOfnvP0fj+hth9Q4w8WaJAgTkh3LbDy67zI7HfrIpHfPYs06fCiKISBXgu3LjL6dV4k 8vuM2v5GjX+j1r8tTBAnpM6LrPy2LDb75S0R+XVdokn9l0QhDPRayFti9NNznt7vosVhadHiKGiQ IE5IWxZb+T25xOy3dqnIb9tSTdq7NAphoNfC2qVGvyeXiPwepra7qfFuar17SYI4IT25xMpv2DKz 35FlIr+nl2nS0WVRCAO9Fo4sM/oNWyby68exXcjRhVxdliWIE9KwZVZ+V9eZ/QqWi/xGLNekccuj EAZ6LRQsN/rpOU/vd2ldWNpaFwUNEsQJ6eo6K7/Xlpv9Llsh8mteoUn7VkQhDPRauGyF0e+15SK/ 56ntKWp8ilqfWp4gTkivLbfym7bS7PfCSpHfGys16djKKISBXgsvrDT6TVsp8qvg2OHkGE6u4SsT xAlp2korv5tXmf0qV4v8ZqzWpHmroxAGei1Urjb66TlP7/fdVWHpG6uioEGCOCHdvMrK75PVZr/r LxL5/eQiTTp4URTCQK+F6y8y+n2yWuT3HrW9To2vU+vrqxPECemT1VZ+q9aY/Y6vEfl9tkaTOq6N QhjotWsOSMfXGP1WrRH5yWvC0vQ1UdAgQZyQVq2x8ntwrdlvviLyu0jRpE1KFMJAr4X5itFPz3l6 vzup7cfU+OO1GiSIE9KDa638+lxs9jt0scjv4Ys1KXZxFMJAr4VDFxv9+lws8uvAsZ9S46fU+qmS IE5IfS628ttdb/brtE7k12+dJpWsi0IY6LXQaZ3RT895er+N9WFpdX0UNEgQJ6Td9VZ+z60z+21e L/K7dL0mXbk+CmGg18Lm9Ua/59aJ/B6jtoeo8SFqfWhdgjghPbfOyq+8wez3eIPI7/kGTXq5IQph oNfC4w1Gv/IGkd9gju1Ljr7k6tuQIE5I5Q1WftduMPsN2Sjyq9ioSVM2RiEM9FoYstHop+c8vd/X NoSlPRuioEGCOCFdu8HKL7XR7HfVJpHfdzdp0o2bohAGei1ctcnol9oo8ktS2++o8XfU+ruNCeKE lNpo5Tdns9nvlc0iv/c2a9JHm6MQBnotvLLZ6Ddns8jvAo4dS46x5Bq7OUGckOZstvK74xKz39Qt Ij95iyYt3xKFMNBrYeoWo5+e8/R+P7wkLF13SRQ0SBAnpDsusfJrv9Xsd9NWkd+dWzXpvq1RCAO9 Fm7aavRrv1Xk9w9qe5ca36XWd7ckiBNS+61Wfg3bzH4fbxP5ddiuST23RyEM9Fr4eJvRr2GbyK9u W1iauy0KGiSIE1LDNiu/6Haz34odIr+NOzRp144ohIFeCyt2GP30nKf3C1PbAWo8QK0HtieIE1J0 u5XfIJfZ736XyO8xlyY964pCGOi1cL/L6DfIJfLrwbHnkuNccp3rShAnpEEuK78rdpr9eu0S+Q3e pUljdkUhDPRa6LXL6KfnPL3fzp1hacPOKGiQIE5IV+y08ntxl9lPVUV+X1M1yatGIQz0WlBVo9+L u0R+v6G2X1Pjr6n117sSxAnpxV1WfpPdZj/NLfJLujXpbXcUwkCvBc1t9JvsFvmN5thichSTq9id IE5Ik91WfjfsNvuV7RH5XbBHk2bviUIY6LVQtsfop+c8vd+3d4elpt1R0CBBnJBu2G3l9+Ees5/v UpHfDy/VpNsujUIY6LXgu9To9+Eekd9fqO0lanyJWl/akyBOSB/usfJbutfs59kr8vPu1ST/3iiE 4QDxAcmz1+i3dK/IbxbHVpGjilxVexPECWnp3hN+Va23U1vnf69vwzkDN7Vp2QnXw+LfR9oM/76u /b/47+vyvoJ/U3dT95a58J92P9O58PPO8lx4Z8u5cFtbX2Z/mX7bMhf+ta/1qu58ci78POEsuHhn 0+fNgrf9ArPgX3Tm26c/yJ2z57Qez+l8+vPR51zUudlZ17kJGsFN7HbO6Xwih7s15+lyuJ3/OK/R +f55TdAMPmJ+d+cLLPzuOsXvI6FfXpdm5zldmqAR3MRu50cmv7uEfj+jtluo8RZqvaWzj9jnvMvS b00Xs98dXUR+d+MXxi+MXxi3u+GOLka/NV1EfnUcu5AcC8m1sIuP2Odc08XKr3NXs9/yriK/tV2b neu7NkEjuIndzuVdjX6du4r8zuFYGzls5LJ19RH7nJ27WvkdPsWvfTeRX5duzc4e3ZqgEdzEbmf7 bka/w0K/MH534XcXfnfhFobDln5bupn97hP6HcHvV/j9Cr9f4XYE7jP5bekm8lvPsWvIsYZca7r5 iH3OLd2s/Pp3N/s1dBf5be3e7NzZvQkawU3sdjZ0N/r17y7y68GxncnRmVydu/uIfc7+3a38njzF r+f5Ir+C85udRec3QSO4id3Onucb/Z4U+v0Kv8P4HcbvMG6/gict/faeb/aLCv2ewu83+P0Gv9/g 9hRETX57zxf57eTYLeTYQq4t5/uIfc6951v5Deth9tvVQ+R3WY9mp6dHEzSCm9jt3NXD6Desh8iv iGP7k6M/ufr38BH7nMN6WPkdPcVvUE+R3/Cezc7RPZugEdzEbuegnka/o0K/3+D3JH5P4vckbr+B o5Z+V/c0+z0r9HsBvwR+CfwSuL0Az5r8ru4p8vNw7F5y7CXX3p4+Yp/z6p5WfuN6mf2u6CXy+0av Zue3ezVBI7iJ3c4rehn9xvUS+Y3m2GHkGEauYb18xD7nuF5Wfq+d4jemt8ivsnez09G7CRrBTex2 jult9HtN6JfA7yh+R/E7ilsCXrP029fb7Pei0O91/P6C31/w+wtur8OLJr99vUV+3+bYq8lxNbmu 7u0j9jn39bbym9bH7OftI/K7vk+zc3+fJmgEN7Hb6e1j9JvWR+Tn4Nhx5BhHrnF9fMQ+57Q+Vn7H TvGb3FfkN71vs3NW3yZoBDex2zm5r9HvmNDvL/i9ht9r+L2G21/gmKXfzX3Nfm8L/Y7j93f8/o7f 33E7Dm+b/G7uK/Lbz7H7yLGPXPv6+oh9zpv7WvnN62f2u6GfyO/H/ZqdwX5N0AhuYrfzhn5Gv3n9 RH6zOHYaOaaRa1o/H7HPOa+fld8np/jN7i/ym9+/2bmkfxM0gpvY7Zzd3+j3idDv7/gdw+8Yfsdw +zt8Yul3sL/Z70Oh36f4tSlogkZwE7udH5r8DvYX+QWp7WZqvJlcN/f3EfucB/tb+a0qMPvdViDy O1TQ7LwXv3vxuxe/Q3BbgdFvVYHIbwnHziPHPHLNK/AR+5yrCqz8Okpmv6WSyG+11Oy8WGqCRnAT u51LJaNfR0nk14ZjP8HvE/w+wa2N5HN2lKz8HjzFr+0AkV+nAc3ObgOaoBHcxG5n2wFGvweFfvfi d5AaD1LrQdzuhQct/TYNMPuFhH4P4fcIfo/g9whuD0HI5LdpgMjvYo5dRY5V5Fo1wEfsc24aYOXX p9DsV18o8ttc2OzcXtgEjeAmdjvrC41+fQpFft04tiM5OpKrY6GP2OfsU2jlFzvFr/tAkV/fgc3O AQOboBHcxG5n94FGv5jQ7xH8HsTvQfwexO0RiFn67R5o9ntU6Pc4fnH84vjFcXscHjX57R4o8tvO sZvIsYlcmwb6iH3O3QOt/EqKzH47ikR+e4qanf9V1ASN4CZ2O3cUGf1KikR+Azi2Dzn6kKtPkY/Y 5ywpsvJ77hS/wkEivyGDmp0jBzVBI7iJ3c7CQUa/54R+cfxi+MXwi+EWh+cs/a4cZPZ7Ruj3O/z+ gN8f8PsDbr+DZ0x+Vw4S+f0Xx+4mx25y7R7kI/Y5rxxk5VdebPa7vFjkd1Vxs/ObxU3QCG5it/Py YqNfebHIbyTHlpCjhFwlxT5in7O82Mrv5VP8SgeL/MYObnZOGNwEjeAmdjtLBxv9Xhb6/QG/5/B7 Dr/ncPsDvGzpd+1gs98fhX6v4Pcmfm/i9yZur8AfTX7XDhb5fZNjryTHleS6crCP2Oe8drCV35QS s981JSK/60qand8vaYJGcBO7ndeUGP2mlIj8JnBsOTnKyVVe4iP2OaeUWPmlTvGbOETkN3VIs7Nm SBM0gpvY7Zw4xOiXEvq9id/L+L2M38u4vQkpS78bh5j93hL6vYvf+/i9j9/7uL0Lb5n8bhwi8vs+ x15LjmvJde0QH7HPeeMQK785Q81+Pxgq8rtpaLPzlqFN0AhuYrfzB0ONfnOGivxqOHYKOaaQa8pQ H7HPOWeold9Hp/jNHCbymzus2blwWBM0gpvY7Zw5zOj3kdDvffxS+KXwS+H2Pnxk6XfHMLPf34R+ H+NnG94EjeAmdjv/ZvK7Y5jI7xZqu5EabyTXjcN8xD7nHcOs/JYPN/vdOlzkd2B4s/Mu/O7C7y78 DsCtw41+y4eL/BZy7BxyzCHXnOE+Yp9z+XArv/YjzH6LRoj8Voxodq4Z0QSN4CZ2OxeNMPq1HyHy s3HsR/h9hN9HuNlG+JztR1j53XeKX95Ikd+5I5udnUc2QSO4id3OvJFGv/uEfnfhdwc13kGtd+B2 F9xn6dcw0ux3t9DvfvwO43cYv8O43Q93m/waRor81nDscnIsJ9fykT5in7NhpJVfz1Kz39pSkd+G 0mbnltImaAQ3sdu5ttTo17NU5NeZY9uToz252pf6iH3OnqVWftFT/LqMEvn1GtXs7D+qCRrBTex2 dhll9IsK/Q7jdx9+9+F3H26HIWrpt2uU2e+I0O/X+D2J35P4PYnbr+GIyW/XKJHfFo5tIEcDuRpG +Yh9zl2jrPwGjTb7bR0t8lNHNzv3jm6CRnATu51bRxv9Bo0W+fXn2J7k6EmunqN9xD7noNFWfs+e 4lcwRuRXPKbZOWxMEzSCm9jtLBhj9HtW6PckflH8ovhFcXsSnrX0u2KM2e8poZ+G31H8juJ3FDcN njL5XTFG5LeXY3eRYxe5do3xEfucV4yx8htTZva7rEzk11TW7Ly6rAkawU3sdl5WZvQbUybyG8ax g8gxiFyDynzEPueYMiu/F0/xG24X+ZXZm53j7E3QCG5it3O43ej3otDvKH7P4vcsfs/idhRetPTz 2s1+Lwj9XsLvNfxew+813F6CF0x+XrvI72qOvYIcV5DrCruP2Of02q38Jpeb/b5RLvLzlTc795U3 QSO4id3Ob5Qb/SaXi/zGcewYcowh15hyH7HPObncyu/tU/wqx4r8qsY2O6eNbYJGcBO7nZVjjX5v C/1ew+9F/F7E70XcXoO3Lf1uGGv2e13o9w5+x/A7ht8x3N6B101+N4wV+e3jWC85vOTyjvUR+5w3 jLXym11h9ru+QuQXqGh23lzRBI3gJnY7r68w+s2uEPlN49jJ5JhMrskVPmKfc3aFld+Hp/hNHyfy qx3X7Jw3rgkawU3sdk4fZ/T7UOh3DL+38Xsbv7dxOwYfWvrdNs7sd1zol8bvE/w+we8T3NJw3OR3 2ziR380cewM5biDXDeN8xD7nbeOs/JZWmv1+XCnyu72y2XmwsgkawU3sdv640ui3tFLkN49jZ5Nj NrlmV/qIfc6llVZ+bceb/eaPF/ktG9/sXDW+CRrBTex2zh9v9Gs7XuT3CX4f4vchfh/i9gm0HW/l FzrF71OhX7sJzc6OE5qgEdzEbuenJr+Q0O8gtd1GjbdR623jfcQ+Z8jSr36C2e/QBJHfL/B7EL8H 8XsQt1/AoQlGv/oJIr9VHLuUHEvJtXSCj9jnrJ9g5dd9otlv9USR37qJzc5NE5ugEdzEbufqiUa/ 7hNFfh05ti052pKr7UQfsc/ZfaKV36On+HWaJPI7f1Kzs8+kJmgEN7Hb2WmS0e9Rod+D+IXwC+EX wu1BeNTSb8cks99DQr8IfjH8YvjFcIvAQya/HZNEfps4tp4c9eSqn+Qj9jl3TLLyK3SY/TY7RH4u R7Nzt6MJGsFN7HZudhj9Ch0ivz4c250c3cnV3eEj9jkLHVZ+z5zi13eyyG/g5GZnyeQmaAQ3sdvZ d7LR7xmhXwy/R/F7FL9HcYvBM5Z+l082+z0u9Psf/J7D7zn8nsPtf+Bxk9/lk0V+uzl2Bzl2kGvH ZB+xz3n5ZCu/0iqz39QqkZ+zqtk5t6oJGsFN7HZOrTL6lVaJ/Eo4tpAcheQqrPIR+5ylVZ838/3D 7i0z38HuX2bmW/y/w/pVzHwf6mCzdeGHv+D2jS5nMvPd5SzPfHe13gXepmDmnfr/1h+3eb2367vA 83pVdz05893F9v92//cXnfn2yzbbNw0zNXpcKJjn8Muj+nnlCf084IIG4ga58OTMSkNrztPlaJAb +7rkHX094AU/sV/+Zs5Mje7zZj+z3+X9RX7f6u+Vv9/fAy5oIG6QL+9v9Huzn8jv99T2DDU+Q63P 9PMT++U3+1n51RSY/f5YIPL7c4FXfr/AAy5oIG6Q/1hg9KspEPmN59hScpSSq7TAT+yXawqs/G6R zH4TB4j8nAO88sIBHnBBA3GDPHGA0e8WSeT3PcklXyN5wAt+Yr98i2TlZys0+/2gUOT300KvfFeh B1zQQNwg/6DQ6GcrFPn9ldreosa3qPWtAX5ifnehld+agWa/vw0U+eUXeeXORR5wQQNxg/y3gUa/ NQNFfgsGuuSZAz3gBT+xX14z0MrvcJHZb9EgkZ8yyCtvGeQBFzQQN8iLBhn9DheJ/H5ObbdS463U /f///wICAAADAgAABAIAAAUCAAAGAgAABwIAAAgCAAAJAgAACgIAAAsCAAAMAgAADQIAAA4CAAAP AgAAEAIAABECAAASAgAAEwIAABQCAAAVAgAAFgIAABcCAAAYAgAAGQIAABoCAAAbAgAAHAIAAB0C AAAeAgAAHwIAACACAAAhAgAAIgIAACMCAAAkAgAAJQIAACYCAAD+////KAIAACkCAAAqAgAAKwIA ACwCAAAtAgAALgIAAC8CAAAwAgAAMQIAADICAAAzAgAANAIAADUCAAA2AgAANwIAADgCAAA5AgAA OgIAADsCAAA8AgAAPQIAAD4CAAA/AgAAQAIAAEECAABCAgAAQwIAAEQCAABFAgAARgIAAEcCAABI AgAASQIAAEoCAABLAgAATAIAAE0CAABOAgAATwIAAFACAABRAgAAUgIAAFMCAABUAgAAVQIAAFYC AABXAgAAWAIAAFkCAABaAgAAWwIAAFwCAABdAgAAXgIAAF8CAABgAgAAYQIAAGICAABjAgAAZAIA AGUCAABmAgAAZwIAAGgCAABpAgAAagIAAGsCAABsAgAAbQIAAG4CAABvAgAAcAIAAHECAAByAgAA cwIAAHQCAAB1AgAAdgIAAHcCAAB4AgAAeQIAAHoCAAB7AgAAfQIAAP3///9+AgAAfwIAAIACAAB6 a5Gf2C8fLrLy619s9ru7WOT3y2Kv/GSxB1zQQNwg311s9OtfLPI7j2PzyJFHrrxiP7Ff7l9s5bd3 sNmvS4nITyrxysNKPOCCBuIGuUuJ0W/vYJHfJYNd8trBHvCCn9gv7x1s5Xe0xOy3dYjIr3GIV756 iAdcQK+FrUOMfkdLRH5PUNsRajxCrUdK/MR++WiJld+4oWa/p4aK/H4/1Cu/NtQDLqDXwlNDjX7j hor8hnJsATkKyFUw1E/sl8cNtfLbN8zsN3y4yG/8cK88bbgHXECvheHDjX77hon8vj7MJV82zANe 8BP75X3DrPyODTf7fWOEyO97I7zyzSM84AJ6LXxjhNHv2HCR36vU9gI1vkCtLwz3E/vlY8Ot/OaN NPu9PlLk99eRXvmTkR5wAb0WXh9p9Js3UuRXzbGV5KgkV+VIP7FfnjfSyu9gqdlv+iiR34JRXnnV KA+4gF4L00cZ/Q6Wivx+VOqSry/1gBf8xH75YKmVX8fRZr8fjxb5/Xy0V35wtAdcQK+FH482+nUc LfL7J7Udp8bj1Hp8lJ/YL3ccbeW3aYzZ79MxIr/zyrxynzIPuIBeC5+OMfptGiPyWznGJc8f4wEv +In98qYxVn6xMrPfarvI7xK7V95t94AL6LWw2m70i5WJ/B6gtkPUeIhaD5X5if1yrMzKr6Tc7PdQ ucjviXKv/Fy5B1xAr4WHyo1+JeUiv94c24kcncjVqdxP7JdLyq38rhxr9utbIfIbWuGVyys84AJ6 LfStMPpdOVbk5x7rkjeP9YAX/MR++cqxVn4vV5j99owT+X19nFe+dpwHXECvhT3jjH4vV4j8fktt j1Pj49T6eIWf2C+/XGHlN6XS7Pe7SpHfq5VeOVXpARfQa+F3lUa/KZUiPzvHDiHHEHINqfQT++Up lVZ+N443+42dIPKrnuCV50zwgAvotTB2gtHvxvEiv++Md8lXjfeAF/zEfvnG8VZ+H00w+103UeT3 o4le+Y6JHnABvRaum2j0+2iCyO9/qe0VanyFWl+Z4Cf2yx9NsPJbPsns9+4kkd8/J3nl9g4PuIBe O6lBfneS0W/5JJHfhZNc8tRJHvCCn9gvL59k5Xefw+w3d7LIb+Vkr9ww2QMuoNfC3MlGv/scIr+f UdtN1HiTwwt+Yr98n8PKr2eV2e9AlcjvgSqvHK3ygAvotXCgyujXs0rkdw7HfkyNH1Prx5P9xH65 Z5WV364LzH7nThH59Z7ilQdN8YAL6LVw7hSj364LRH7rL3DJKy7wgBf8xH551wVWfs9OMfttmCry c0/1yldM9YAL6LWwYarR79kpIr9fUdv91Hg/td4/xU/sl5+dYuU3ptrs9+tqkd9vq73yi9UecAG9 Fn5dbfQbUy3yK+LYXuToRa5e1X5ivzym2srPO83sVzxd5Gef7pUnT/eAC+i1UDzd6OedJvLzTHPJ 6jQPeMFP7Je906z83p5u9muaIfL7zgyvfMMMD7iAXgtNM4x+b08X+SWoTaNGjVq16X5iv/z2dCu/ 2TVmv5dqRH7/W+OVP6zxgAvotfBSjdFvdo3Iz8GxZeQoI1dZjZ/YL8+usfK7babZr8op8rvQ6ZWX Oj3gAnotVDmNfrfNFPntn+mSfTM94AU/sV++baaVX9tZZr/ALJHfz2Z55dAsD7iAXguBWUa/trNE fn+ntneo8R1qfcfpJ/bLbWdZ+dXPNvulZ4v8zqn1yt1rPeACei2kZxv96meL/JbMdsm1sz3gBT+x X66fbeX3aK3Zb9mFIr/1F3rlHRd6wAX0Wlh2odHv0VqR373Udjs13k6tt9f6if3yo7VWfoVzzH6/ mCPy+9Ucr/zMHA+4gF4Lv5hj9CucI/LrxrHtyNGOXO3m+In9cuEcK7/L55r9zpdFfkWyVy6VPeAC ei2cLxv9Lp8r8ts+1yWvm+sBL/iJ/fLlc638/iib/VzzRH6eeV75mnkecAG9FlzzjH5/lEV+cWqL UGOEWiOyn9gv/1G28ps43+z3P/NFfon5Xvmt+R5wAb0W/me+0W/ifJHfSI4dSI6B5Bo430/slyfO t/L7wQKz36iFIj/HQq88c6EHXECvhVELjX4/WCDy++YCl/zfCzzgBT+xX/7BAiu/vy00+31rkchv /yKvfOsiD7iAXgvfWmT0+9tCkd+b1PYnavwTtf5poZ/YL/9toZXfosVmvz8vFvn9fbFXzlviARfQ axc3yH9ebPRbtFjkV7PYJU9a7AEv+In98qLFVn53LzH7OZeK/JYs9cprl3rABfRacC41+t29ROR3 C7X5qdG/xAt+Yr989xIrvy7LzH4/XSbyu3eZVz6yzAMuoNfCT5cZ/bosE/nZOPYDavyAWj9Yyu9d 5pe7LLPy21pn9stfLvLrttwrFyz3gAvotZC/3Oi3tU7kt6bOJS+u84AX/MR+eWudld9Ty81+ygqR 3/YVXvmyFR5wAb0WlBVGv6eWi/wOU9s91HgPtd6z3E/sl59abuU3fKXZ75crRX7xlV75hZUecAG9 Fn650ug3fKXIrz/HdiVHV3J1Xekn9svDV1r5fWOV2U9aLfIbudorV672gAvotSCtNvp9Y5XIb+8q l7xtlQe84Cf2y99YZeX3+mqzX+NFIr9vXuSVr7/IAy6g10LjRUa/11eL/I5S29PU+DS1Pr3aT+yX X19t5Td9jdnv92tEfm+u8crH13jABfRa+P0ao9/0NSK/cRw7ghwjyDVijZ/YL09fY+X347Vmv/GK yK9G8crzFQ+4gF4L4xWj34/Xivz2rXXJzWs94AU/sV/+8Vorv08Vs9/3Lhb53XKxVz50sQdcQK+F 711s9PtUEfkdo7Y3qPENan1D8RP75U8VK7/V9Wa/v9aL/GzrvHKndR5wAT7w13qj3+p6kd+8epc8 o94DXvAT++XV9VZ+D60z+y1YL/Jbs94rb17vARfQa2HBeqPfQ+tEfgep7SfU+BNq/ck6P7Fffmid lV/fBrPfzxtEfocbvPLjDR5wAb0Wft5g9OvbIPLryLGfUeNn1PrZej+xX+7bYOW3Z4PZ77yNIr/+ G73ykI0ecAG9Fs7baPTbs0Hkt2mDS75ogwe84Cf2y3s2WPn9bqPZ75JNIr+9m7zyVZs84AJ6LVyy yej3u40ivxi1PUyND1Prwxv9xH75dxut/MZuNvs9sVnkd3SzV35lswdcQK+FJzYb/cZuFvmVcGw/ cvQjV7/NfmK/PHazld91l5j9hm4R+Y3b4pWnbvGAC+i1MHSL0e+6S0R+V17iki+9xANe8BP75esu sfJ7d4vZ7+tbRX77tnrlm7Z6wAX0Wvj6VqPfu1tEfi9T2/PU+Dy1Pr/FT+yX391i5Td3m9nv1W0i v2PbvPLH2zzgAnotvLrN6Dd3m8hvCsdWkKOCXBXb/MR+ee42K78D281+1TtEfvN2eOUVOzzgAnot VO8w+h3YLvK7cbtL/u52D3jBT+yXD2y38jvXZfb7kUvkd9Dlle93ecAF9Fr4kcvod65L5PcRtb1H je9R63s7/MR++VyXld+GnWa/f+4U+XXc5ZV77fKAC+i18M+dRr8NO0V+y3e6ZHmnB7zgJ/bLG3Za +f16l9lvpSry26R6ZVX1gAvotbBSNfr9epfI7z5qu5Ma76TWO3f5if3yr3dZ+RW7zX4PuEV+MbdX 1twecAG9Fh5wG/2K3SK/nhzbgRwdyNXB7Sf2y8VuK7+m3Wa/3ntEfiV7vHLZHg+4gF4LvfcY/Zp2 i/x27XbJG3d7wAt+Yr/ctNvK76U9Zr/2l4r8el3qlYsu9YALGogb5PaXGv1e2iPye5baHqPGx6j1 sT1+Yr/80p7Pm/m+swOfC9rYbGFu3+zyn7Hn+1p+cFVbm+1hnJPtssc+AAf/pZnvbm04HW2bWme0 O56Y0a7cUHOg5201d/YO1NgeeChzu3TD3TVLr24/88St/n19hlu/X+b7O7/b8v3oD1uOa73Vv6/P eGf+fM2W17O6W9OJWe8XX3zxs+GGGesvO/c9rLXOEzPm5DXNdRtnuY3PK7+raVnrzPt+HtNvI3U3 j+lRHlP9sYhKV464cuiBMVcO7T3qkRk6B8Z45CtHPDJjRckjM1JDrxyqs6LEeG583vnzRc4Z/Tnk I37m/Nafw3Oru+fXtM6wn5zJt32BmXzDHH6v6m4nZ+u7n405er479l+Yo29neIy/x2Pc3Lbl3yr8 8Qwe43/1cf0qX4vnU8cL1FRCTZe1+/xjF4Err8XhEL/b+Lhdd+LfWVTr4rtsm20X27Yafn7ixzvy cx9z7w37MzXmGc5/Q85v6N9+OayflXvz9vF/sfxY/mLD/c69wZc/Uu8b9/Swpe/vkclzb9e8Y5/j mMn37VWL55u/bsm9vUO+nVeSvrbe9vvQftvLwf22zVVt7Xe/uth+/Lk8u55f/zNq337bo9/db4tz u+dn+zPf0+/f8qfldsmdLXX19e23reY+d9/H/fne7ld/az9xzr/u3W87EthvW0aw5Mb9tp/etN+2 fk/LP/Mwnou9W7/We8T5hu/3zZ5H+Uv4z40wn+fwE57PfZxoy9u13K9dWXO1ram5Wv/ZrHaZtfy2 uac8DyfegzZlzpFy2whbkW2BbY5Ntu3h9VJkm8kzu6D13BnTetsHJrSinzMjWn9m/P4Eg7+xLt6q mozntdW5uYo3xA58MZlH5JP87Lm5vNX/i75PdKxueZ31ba1T/313xp6usVW3qVmy+39nLNm9dcZX 0cdPnILGPn5q7+aEs11Enefxwwl88x/5mZ5je3fs+m7vjn2iT3iajv71+m5n0kOcrefHdSd78/n5 1a2fQ07026MWvfnz+vK51T3aVLX6698/8b9HceJx1W+XXjSlxrarzcwTt/r3eS/9Wq/qHid7un4+ O7KPyZn396Iv19/1f+tVxfPwDj9cjkj/Ni1+pz4PZ6uPn6i541fQ0x89t+V14+p49l83tqrzWp7H pt9lXjdf9rUiek1Ez215TWzrmH1N9Heu79bf+USf+sU6+tdn+zXR8wxfE70sXxMnHzNuM6+F+NCT t9nXRK+Tr4me/4deE7ec2/Ka+E7H7Gvi1OfhP+E14eW1XcIX7bljLP+r/ZzztO3sf855+Ymz/zlH r/fuL/g5p771c87dZ/A5J2o7O59zFHiK5/NCkl/CSRfMN3/O0X/2Pb7X5jSfc/Q8izkDprV+Rqk4 w88q75/bcn5t7/jVn1/PfQXn1+Wrz/75pfeKX3zB82t96/n1izM4v54+S+eX/ndYe4eW8+sPHXLP L/1n+vnVVnB+TbPttrltmzLn1YnPxWPO4Bz7lMa8lB8u4vd/mPfVnmNNeac/x9p+iXNsec3ZP8f0 a2aHv8A5dt739ts2tZ5jhy3OMb2easM5Jh1sOcfattZ64hzbmddyjq3+0Zn3MP3z5n/xwze4PZpn Psf0nz2WJ+5h0+hi8wx/16r6gufXv/Mc+TKP95/vbXn+nq75x6VFv+9te+bbH1w6u30v24TrPri0 uEPHiuF8T+dsnCPxL3mOtG3dD3Fe6+O8YHcvmxTSK+9lG4W//v0zOUd03mw9R/La554jb7aeI3mn OUf0v7OPbu0j/4nnxamPseC8GHc2z4ut1//fPC/0v8flt285L663OC/0n+nnRb7gvJhlq9Ofysxz /mXfky7r0rK/panLme5v6X2W97f0sd7f8tjGlv0t3Lbsb/laXq/qPif/7tXb8HeSM7kWdOLvY/lf cpeL8XpS3mn+zna6HS9p1bzjRY9FO17S6qh+KXVCvyRoECOOqdkdLzFVvOMlpjb21dQdfZOQgjRx Ws3d8aL7GHe86LFox0ta/Vb/lPr9/knQIEYcU7M7XmKqeMdLTP09tT1Djc9Q6zP90sRpNXfHi+5j 3PGix6IdL2n1zwUp9f2CJGgQI46p2R0vMVW84yWmjufYUnKUkqu0IE2cVnN3vOg+xh0veiza8ZJW nQNS6sIBSdAgRhxTszteYqp4x0tM/Z6kqddISUhBmjit5u540X2MO170WLTjJa3+tDCl3lWYBA1i xDE1u+Mlpop3vMTUv1LbW9T4FrW+NSBNzO8utPIz7njRY9GOl7SaX5RSOxclQYMYcUzN7niJqeId LzF1wUBNnTkwCSlIE6fV3B0vuo9xx4sei3a8pFVlUErdMigJGsSIY2p2x0tMFe94iak/p7ZbqfFW ar21KE2cVnN3vOg+xh0veiza8ZJWf1mcUp8sToIGMeKYmt3xElPFO15i6nkcm0eOPHLlFaeJ02ru jhfdx7jjRY9FO17SqlSSUoeVJEGDGHFMze54ianiHS8x9ZLBmrp2cBJSkCZOq7k7XnQf444XPRbt eKGXDkmpVw9Jggb0WsjueImp4h0vMfUJajtCjUeo9UhJmjit5u540X2MO170WLTjhV46NKW+NjQJ GtBrIbvjJaaKd7zE1KEcW0COAnIVDE0Tp9XcHS+6j3HHix6LdrzQS4en1GnDk6ABvRayO15iqnjH S0z9+jBNvWxYElKQJk6ruTtedB/jjhc9Fu14oZeOSKk3j0iCBvRayO54ianiHS8x9VVqe4EaX6DW F4anidNq7o4X3ce440WPRTte6KUjU+onI5OgAb0WsjteYqp4x0tMrebYSnJUkqtyZJo4rebueNF9 jDte9Fi044VeOiqlrhqVBA3otZDd8RJTxTteYuqPSjX1+tIkpCBNnFZzd7zoPsYdL3os2vFCLx2d Uh8cnQQN6LWQ3fESU8U7XmLqP6ntODUep9bjo9LEaTV3x4vuY9zxoseiHS/00rKU2qcsCRrQayG7 4yWmine8xNSVYzR1/pgkpCBNnFZzd7zoPsYdL3os2vFCL7Wn1N32JGhAr4XsjpeYKt7xElMfoLZD 1HiIWg+VpYnTau6OF93HuONFj0U7Xuil5Sn1ufIkaECvheyOl5gq3vESU3tzbCdydCJXp/I0cVrN 3fGi+xh3vOixaMcLvbQipZZXJEEDei1kd7zEVPGOl5jqHqupm8cmIQVp4rSau+NF9zHueNFj0Y4X eum4lHrtuCRoQK+F7I6XmCre8RJTf0ttj1Pj49T6eEWaOK3m7njRfYw7XvRYtOOFXlqZUlOVSdCA XgvZHS8xVbzjJabaOXYIOYaQa0hlmjit5u540X2MO170WLTjhV46IaXOmZAEDei1kN3xElPFO15i 6nfGa+pV45OQgjRxWs3d8aL7GHe86LFoxwu9dGJKvWNiEjSg10J2x0tMFe94ian/S22vUOMr1PrK hDRxWs3d8aL7GHe86LFoxwu9dFJKbe9Iggb02kkxNbvjJaaKd7zE1AsnaerUSUlIQZo4rebueNF9 jDte9Fi044VeOjmlNkxOggb0WsjueImp4h0vMfVn1HYTNd7kSEGaOK3m7njRfYw7XvRYtOOFXlqV UqNVSdCAXgvZHS8xVbzjJaaew7EfU+PH1Prx5DRxWs3d8aL7GHe86LFoxwu9dEpKHTQlCRrQayG7 4yWmine8xNT1F2jqiguSkII0cVrN3fGi+xh3vOixaMcLvXRqSr1iahI0oNdCdsdLTBXveImpv6K2 +6nxfmq9f0qaOK3m7njRfYw7XvRYtOOFXlqdUl+sToIG9FrI7niJqeIdLzG1iGN7kaMXuXpVp4nT au6OF93HuONFj0U7Xuil01Pq5OlJ0IBeC9kdLzFVvOMlpnqmaao6LQkpSBOn1dwdL7qPcceLHot2 vNBLZ6TUG2YkQQN6LWR3vMRU8Y6XmJqgNo0aNWrVpqeJ02rujhfdx7jjRY9FO17opTUp9cOaJGhA r4XsjpeYKt7xElMdHFtGjjJyldWkidNq7o4X3ce440WPRTte6KXOlLrUmQQN6LWQ3fESU8U7XmLq /pma6puZhBSkidNq7o4X3ce440WPRTte6KWzUmpoVhI0oNdCdsdLTBXveImpf6e2d6jxHWp9x5km Tqu5O150H+OOFz0W7Xihl9am1O61SdCAXgvZHS8xVbzjJaYuma2ptbOTkII0cVrN3fGi+xh3vOix aMcLvfTClLrjwiRoQK+F7I6XmCre8RJT76W226nxdmq9vTZNnFZzd7xkrofPMfuJdrzQS+ek1Gfm JEEDei1kd7zEVPGOl5jajWPbkaMdudrNSROn1dwdL5nr4XPNfqIdL/RSOaWWyknQgF4L2R0vMVW8 4yWmbp+rqevmJiEFaeK0mrvjJXM9XDb7iXa80EvnpdRr5iVBA3otZHe8xFTxjpeYGqe2CDVGqDUi p4nTau6Ol8z18PlmP9GOF3rp/JT61vwkaECvheyOl5gq3vESU0dy7EByDCTXwPlp4rSau+Mlcz18 gdlPtOOFXrowpc5cmAQN6LWQ3fESU8U7XmLqNxdo6n8vSEIK0sRpNXfHS+Z6+EKzn2jHC710UUq9 dVESNKDXQnbHS0wV73iJqW9S25+o8U/U+qeFaeK0mrvjJXM9fLHZT7TjhV66OKXmLUmCBvTaxTE1 u+Mlpop3vMTUmsWaOmlxElKQJk6ruTteMtfDl5j9RDte6KVLU+rapUnQgF4L2R0vMVW84yWm3kJt fmr0L0lBmjit5u54yVwPX2b2E+14oZcuS6lHliVBA3otZHe8xFTxjhfuw7EfUOMH1PrBUn7vsrSa u+Mlcz28zuwn2vFCL12eUguWJ0EDei1kd7zEVPGOl5i6pk5TF9clIQVp4rSau+Mlcz18udlPtOOF XroipV62Igka0Gshu+Mlpop3vMTUw9R2DzXeQ633LE8Tp9XcHS+Z6+ErzX6iHS/00pUp9YWVSdCA XgvZHS8xVbzjJab259iu5OhKrq4r08RpNXfHS+Z6+Cqzn2jHC710dUqtXJ0EDei1kN3xElPFO15i 6t5VmrptVRJSkCZOq7k7XjLXw1eb/UQ7XuilF6XU6y9Kggb0WsjueImp4h0vMfUotT1NjU9T69Or 08RpNXfHS+Z6+Bqzn2jHC710TUo9viYJGtBrIbvjJaaKd7zE1HEcO4IcI8g1Yk2aOK3m7njJXA9f a/YT7Xihlyopdb6SBA3otZDd8RJTxTteYuq+tZravDYJKUgTp9XcHS+Z6+GK2U+044VeenFKPXRx EjSg10J2x0tMFe94ianHqO0NanyDWt9Q0sRpNXfHS+Z6eL3ZT7TjhfusS6md1iVBA3wgu+Mlpop3 vMTUefWaOqM+CSlIE6fV3B0vmevh68x+oh0v9NL1KXXz+iRoQK+F7I6XmCre8RJTD1LbT6jxJ9T6 k3Vp4rSau+Mlcz28wewn2vFCL21IqY83JEEDei1kd7zEVPGOl5jakWM/o8bPqPWz9WnitJq74yVz PXyD2U+044VeujGlDtmYBA3otZDd8RJTxTteYuqmDZp60YYkpCBNnFZzd7xkrodvNPuJdrzQSzel 1Ks2JUEDei1kd7zEVPGOl5gao7aHqfFhan14Y5o4rebueMlcD99s9hPteKGXbk6pr2xOggb0Wsju eImp4h0vMbWEY/uRox+5+m1OE6fV3B0vmevhl5j9RDte6KVbUurULUnQgF4L2R0vMVW84yWmXnmJ pl56SRJSkCZOq7k7XjLXw7eY/UQ7XuilW1PqTVuToAG9FrI7XmKqeMdLTH2Z2p6nxuep9fktaeK0 mrvjJXM9fJvZT7TjhV66LaV+vC0JGtBrIbvjJaaKd7zE1CkcW0GOCnJVbEsTp9XcHS+Z6+HbzX6i HS/00h0pdcWOJGhAr4XsjpeYKt7xElNv3K6p392ehBSkidNq7o6XzPVwl9lPtOOFXupKqfe7kqAB vRayO15iqnjHS0z9iNreo8b3qPW9HWnitJq74yVzPXyn2U+044Veuiul9tqVBA3otZDd8RJTxTte YurynZoq70xCCtLEaTV3x0vmevgus59oxwu9VE2pqpoEDei1kN3xElPFO15i6n3Udic13kmtd+5K E6fV3B0vmevhbrOfaMcLvdSdUjV3EjSg10J2x0tMFe94iak9ObYDOTqQq4M7TZxWc3e8ZK6H7zb7 iXa80Ev3pNSyPUnQgF4L2R0vMVW84yWm7tqtqRt3JyEFaeK0mrvjJXM9fI/ZT7TjJa32ujSlFl2a BA1ixDE1u+Mlpop3vMTUZ6ntMWp8jFof25MmTqufv+Pl0i4tO16+1uWr2fGS/xX8e8se57XMhfc/ 70znwvue5bnwfpZz4XdunZaZC9dvs3Ph/U7Ohff9fzwL/kVnvuOKeeZbj0Uz33FlVL+IMqFfCIIQ IA4o2ZnvgCKe+Q4ojX2Dyo6+IYhAnDiu5M586z7GmW89Fs18x5Vv9Y8o3+8fgiAEiANKduY7oIhn vgPK76ntGWp8hlqf6Rcnjiu5M9+6j3HmW49FM99x5c8FEeX9ghAEIUAcULIz3wFFPPMdUMZzbCk5 SslVWhAnjiu5M9+6j3HmW49FM99xxTkgoiwcEIIgBIgDSnbmO6CIZ74DyvekoHKNFIIIxInjSu7M t+5jnPnWY9HMd1z5aWFEuaswBEEIEAeU7Mx3QBHPfAeUv1LbW9T4FrW+NSBOzO8utPIzznzrsWjm O67kF0WUzkUhCEKAOKBkZ74DinjmO6AsGBhUZg4MQQTixHEld+Zb9zHOfOuxaOY7riiDIsqWQSEI QoA4oGRnvgOKeOY7oPyc2m6lxlup9daiOHFcyZ351n2MM996LJr5jiu/LI4oTxaHIAgB4oCSnfkO KOKZ74ByHsfmkSOPXHnFceK4kjvzrfsYZ771WDTzHVekkogyrCQEQQgQB5TszHdAEc98B5RLBgeV tYNDEIE4cVzJnfnWfYwz33osmvmmlw6JKFcPCUEQ6LWQnfkOKOKZ74DyBLUdocYj1HqkJE4cV3Jn vnUf48y3HotmvumlQyPKa0NDEAR6LWRnvgOKeOY7oAzl2AJyFJCrYGicOK7kznzrPsaZbz0WzXzT S4dHlGnDQxAEei1kZ74DinjmO6B8fVhQuWxYCCIQJ44ruTPfuo9x5luPRTPf9NIREeXmESEIAr0W sjPfAUU88x1QXqW2F6jxBWp9YXicOK7kznzrPsaZbz0WzXzTS0dGlE9GhiAI9FrIznwHFPHMd0Cp 5thKclSSq3JknDiu5M586z7GmW89Fs1800tHRZRVo0IQBHotZGe+A4p45jug/Kg0qFxfGoIIxInj Su7Mt+5jnPnWY9HMN710dER5cHQIgkCvhezMd0ARz3wHlH9S23FqPE6tx0fFieNK7sy37mOc+dZj 0cw3vbQsovQpC0EQ6LWQnfkOKOKZ74CyckxQmT8mBBGIE8eV3Jlv3cc4863Hoplveqk9ouy2hyAI 9FrIznwHFPHMd0B5gNoOUeMhaj1UFieOK7kz37qPceZbj0Uz3/TS8ojyXHkIgkCvhezMd0ARz3wH lN4c24kcncjVqTxOHFdyZ751H+PMtx6LZr7ppRURpbwiBEGg10J25jugiGe+A4p7bFDZPDYEEYgT x5XcmW/dxzjzrceimW966biIcu24EASBXgvZme+AIp75Dii/pbbHqfFxan28Ik4cV3JnvnUf48y3 HotmvumllRElVRmCINBrITvzHVDEM98Bxc6xQ8gxhFxDKuPEcSV35lv3Mc5867Fo5pteOiGizJkQ giDQayE78x1QxDPfAeU744PKVeNDEIE4cVzJnfnWfYwz33osmvmml06MKHdMDEEQ6LWQnfkOKOKZ 74Dyv9T2CjW+Qq2vTIgTx5XcmW/dxzjzrceimW966aSI0t4RgiDQaycFlOzMd0ARz3wHlAsnBZWp k0IQgThxXMmd+dZ9jDPfeiya+aaXTo4oDZNDEAR6LWRnvgOKeOY7oPyM2m6ixpscEYgTx5XcmW/d xzjzrceimW96aVVEiVaFIAj0WsjOfAcU8cx3QDmHYz+mxo+p9ePJceK4kjvzrfsYZ771WDTzTS+d ElEGTQlBEOi1kJ35Dijime+Asv6CoLLighBEIE4cV3JnvnUf48y3HotmvumlUyPKFVNDEAR6LWRn vgOKeOY7oPyK2u6nxvup9f4pceK4kjvzrfsYZ771WDTzTS+tjigvVocgCPRayM58BxTxzHdAKeLY XuToRa5e1XHiuJI78637GGe+9Vg0800vnR5RJk8PQRDotZCd+Q4o4pnvgOKZFlTUaSGIQJw4ruTO fOs+xplvPRbNfNNLZ0SUG2aEIAj0WsjOfAcU8cx3QElQm0aNGrVq0+PEcSV35lv3Mc5867Fo5pte WhNRPqwJQRDotZCd+Q4o4pnvgOLg2DJylJGrrCZOHFdyZ751H+PMtx6LZr7ppc6IstQZgiDQayE7 8x1QxDPfAWX/zKDimxmCCMSJ40ruzLfuY5z51mPRzDe9dFZECc0KQRDotZCd+Q4o4pnvgPJ3anuH Gt+h1necceK4kjvzrfsYZ771WDTzTS+tjSjda0MQBHotZGe+A4p45jugLJkdVGpnhyACceK4kjvz rfsYZ771WDTzTS+9MKLsuDAEQaDXQnbmO6CIZ74Dyr3Udjs13k6tt9fGieNK7sx35nr4HLOfaOab XjonojwzJwRBoNdCduY7oIhnvgNKN45tR4525Go3J04cV3JnvjPXw+ea/UQz3/RSOaKUyiEIAr0W sjPfAUU88x1Qts8NKuvmhiACceK4kjvznbkeLpv9RDPf9NJ5EeWaeSEIAr0WsjPfAUU88x1Q4tQW ocYItUbkOHFcyZ35zlwPn2/2E81800vnR5S35ocgCPRayM58BxTxzHdAGcmxA8kxkFwD58eJ40ru zHfmevgCs59o5pteujCizFwYgiDQayE78x1QxDPfAeWbC4LKfy8IQQTixHEld+Y7cz18odlPNPNN L10UUW5dFIIg0GshO/MdUMQz3wHlTWr7EzX+iVr/tDBOHFdyZ74z18MXm/1EM9/00sURJW9JCIJA r10cULIz3wFFPPMdUGoWB5VJi0MQgThxXMmd+c5cD19i9hPNfNNLl0aUtUtDEAR6LWRnvgOKeOY7 oNxCbX5q9C+JQJw4ruTOfGeuhy8z+4lmvumlyyLKkWUhCAK9FrIz3wFFPPPNfTj2A2r8gFo/WMrv XRZXcme+M9fD68x+oplveunyiFKwPARBoNdCduY7oIhnvgPKmrqgsrguBBGIE8eV3JnvzPXw5WY/ 0cw3vXRFRLlsRQiCQK+F7Mx3QBHPfAeUw9R2DzXeQ633LI8Tx5Xcme/M9fCVZj/RzDe9dGVEeWFl CIJAr4XszHdAEc98B5T+HNuVHF3J1XVlnDiu5M58Z66HrzL7iWa+6aWrI0rl6hAEgV4L2ZnvgCKe +Q4oe1cFlW2rQhCBOHFcyZ35zlwPX232E81800sviijXXxSCINBrITvzHVDEM98B5Si1PU2NT1Pr 06vjxHEld+Y7cz18jdlPNPNNL10TUY6vCUEQ6LWQnfkOKOKZ74AyjmNHkGMEuUasiRPHldyZ78z1 8LVmP9HMN71UiSjzlRAEgV4L2ZnvgCKe+Q4o+9YGlea1IYhAnDiu5M58Z66HK2Y/0cw3vfTiiHLo 4hAEgV4L2ZnvgCKe+Q4ox6jtDWp8g1rfUOLEcSV35jtzPbze7Cea+eY+6yJKp3UhCAI+kJ35Diji me+AMq8+qMyoD0EE4sRxJXfmO3M9fJ3ZTzTzTS9dH1E2rw9BEOi1kJ35Dijime+AcpDafkKNP6HW n6yLE8eV3JnvzPXwBrOfaOabXtoQUR5vCEEQ6LWQnfkOKOKZ74DSkWM/o8bPqPWz9XHiuJI78525 Hr7B7Cea+aaXbowoQzaGIAj0WsjOfAcU8cx3QNm0IahctCEEEYgTx5Xcme/M9fCNZj/RzDe9dFNE uWpTCIJAr4XszHdAEc98B5QYtT1MjQ9T68Mb48RxJXfmO3M9fLPZTzTzTS/dHFFe2RyCINBrITvz HVDEM98BpYRj+5GjH7n6bY4Tx5Xcme/M9fBLzH6imW966ZaIMnVLCIJAr4XszHdAEc98B5QrLwkq l14SggjEieNK7sx35nr4FrOfaOabXro1oty0NQRBoNdCduY7oIhnvgPKy9T2PDU+T63Pb4kTx5Xc me/M9fBtZj/RzDe9dFtE+XhbCIJAr4XszHdAEc98B5QpHFtBjgpyVWyLE8eV3JnvzPXw7WY/0cw3 vXRHRFmxIwRBoNdCduY7oIhnvgPKjduDyne3hyACceK4kjvznbke7jL7iWa+6aWuiHK/KwRBoNdC duY7oIhnvgPKR9T2HjW+R63v7YgTx5Xcme/M9fCdZj/RzDe9dFdE6bUrBEGg10J25jugiGe+A8ry nUFF3hmCCMSJ40ruzHfmevgus59o5pteqkYUVQ1BEOi1kJ35Dijime+Ach+13UmNd1LrnbvixHEl d+Y7cz3cbfYTzXzTS90RRXOHIAj0WsjOfAcU8cx3QOnJsR3I0YFcHdxx4riSO/OduR6+2+wnmvmm l+6JKGV7QhAEei1kZ74DinjmO6Ds2h1UNu4OQQTixHEld+Y7cz18j9lPNPMdV3pdGlGKLg1BEALE ASU78x1QxDPfAeVZanuMGh+j1sf2xInjyufPfHc/r2Xmu+C8/5yZb2f7lplvuf2Zznz3P8sz3wWW M9+2cX+p0We+9duWme+8vF7VBSdnvvv/h8x81zvMM996LJr5rneM6lfnmNCvFqrATmx3ZGe+7Q7x zLfd0di3yrGjby3UQT1xvSN35lv3Mc5867Fo5rve8a3+dY7v96+FKrAT2x3ZmW+7QzzzbXf8ntqe ocZnqPWZfvXE9Y7cmW/dxzjzrceime96x58L6hzvF9RCFdiJ7Y7szLfdIZ75tjvGc2wpOUrJVVpQ T1zvyJ351n2MM996LJr5rnc4B9Q5Fg6ohSqwE9sd2Zlvu0M88213fE+qclwj1UId1BPXO3JnvnUf 48y3HotmvusdPy2sc9xVWAtVYCe2O7Iz33aHeObb7vgrtb1FjW9R61sD6on53YVWfsaZbz0WzXzX O/KL6hydi2qhCuzEdkd25tvuEM982x0LBlY5Zg6shTqoJ6535M586z7GmW89Fs181zuUQXWOLYNq oQrsxHZHdubb7hDPfNsdP6e2W6nxVmq9taieuN6RO/Ot+xhnvvVYNPNd7/hlcZ3jyeJaqAI7sd2R nfm2O8Qz33bHeRybR448cuUV1xPXO3JnvnUf48y3HotmvusdUkmdY1hJLVSBndjuyM582x3imW+7 45LBVY61g2uhDuqJ6x25M9+6j3HmW49FM9/00iF1jquH1EIV0GshO/Ntd4hnvu2OJ6jtCDUeodYj JfXE9Y7cmW/dxzjzrceimW966dA6x2tDa6EK6LWQnfm2O8Qz33bHUI4tIEcBuQqG1hPXO3JnvnUf 48y3Hotmvumlw+sc04bXQhXQayE78213iGe+7Y6vD6tyXDasFuqgnrjekTvzrfsYZ771WDTzTS8d Uee4eUQtVAG9FrIz33aHeObb7niV2l6gxheo9YXh9cT1jtyZb93HOPOtx6KZb3rpyDrHJyNroQro tZCd+bY7xDPfdkc1x1aSo5JclSPriesduTPfuo9x5luPRTPf9NJRdY5Vo2qhCui1kJ35tjvEM992 x49KqxzXl9ZCHdQT1ztyZ751H+PMtx6LZr7ppaPrHA+OroUqoNdCdubb7hDPfNsd/6S249R4nFqP j6onrnfkznzrPsaZbz0WzXzTS8vqHH3KaqEK6LWQnfm2O8Qz33bHyjFVjvljaqEO6onrHbkz37qP ceZbj0Uz3/RSe51jt70WqoBeC9mZb7tDPPNtdzxAbYeo8RC1HiqrJ6535M586z7GmW89Fs1800vL 6xzPlddCFdBrITvzbXeIZ77tjt4c24kcncjVqbyeuN6RO/Ot+xhnvvVYNPNNL62oc5RX1EIV0Gsh O/Ntd4hnvu0O99gqx+axtVAH9cT1jtyZb93HOPOtx6KZb3rpuDrHteNqoQrotZCd+bY7xDPfdsdv qe1xanycWh+vqCeud+TOfOs+xplvPRbNfNNLK+scqcpaqAJ6LWRnvu0O8cy33WHn2CHkGEKuIZX1 xPWO3Jlv3cc4863HoplveumEOsecCbVQBfTa/6+9KwGvosrSlYRIdnCJ0ZaEELCFRHkXIcEcSglk wWILEJICDCS5IRIggLws4MgoKiPtQo/gFh2ZT2nbhWW+hnQLtvh92i7tfOK0S2u7DqLStCvR1mkX bOa/VZVU1au8d0PeS08yEr6feqfq1c05Vf8599bJ/xLA1nwzkmu+Gf08T6Xr8zRABzhsTl7Nt/DH qfkWtkzzjVp6kU6PXKQBKoBaC9iab0ZyzTejTxHbIcR4CLEeGs9hc/JqvoU/Ts23sGWab9TSfJ0G kgaoAGptPiNb881IrvlmNDVfpYn5GqADHDYnr+Zb+OPUfAtbpvlGLZ2gU90EDVAB1FrA1nwzkmu+ GT2M2LYixq2kAxw2J6/mW/jj1HwLW6b5Ri1VdXpa1QAVQK0FbM03I7nmm9EpOPd7xPg9Yv1+AofN yav5Fv44Nd/Clmm+UUsv0WnYJRqgAqi1gK35ZiTXfDNafLFK8y/WAB3gsDl5Nd/CH6fmW9gyzTdq 6USdrpmoASqAWgvYmm9Gcs03o98htr2IcS9i3XsJh83Jq/kW/jg138KWab5RSwt0erdAA1QAtRaw Nd+M5JpvRpk4NxVjpGKs1AIOm5NX8y38cWq+hS3TfKOWTtZpwmQNUAHUWsDWfDOSa74ZXT1JpcZJ GqADHDYnr+Zb+OPUfAtbpvlGLS3U6e5CDVAB1FrA1nwzkmu+Gb2D2F5GjC8j1pcnc9icvJpv4Y9T 8y1smeYbtbRIp78VaYAKoNYCtuabkVzzzYhwrg9j+DCWr4jD5uTVfAt/nJpvYcs036ilJTqVl2iA CqDWArbmm5Fc882otVilTcUaoAMcNiev5lv449R8C1um+UYtnaJT2xQNUAHUWsDWfDOSa74Z/Q9i +wQxfoJYPynhsDl5Nd/CH6fmW9gyzTdqqabTqZoGqABqLWBrvhnJNd+M5l6qknapBugAh83Jq/kW /jg138KWab5RS6fqtGqqBqgAai1ga74ZyTXfjPYgtocQ40OI9SGNw+bk1Xwb/fBpbv9kmm/U0mk6 vThNA1QAtRawNd+M5JpvRoNxbizGiMVYsdM4bE5ezbfRD5/u9k+m+UYtnaFTzgwNUAHUWsDWfDOS a74ZrZyuUu10DdABDpuTV/Nt9MNnuP2Tab5RS2fqdONMDVAB1FrA1nwzkmu+GR1AbE8hxqcQ61Mz OGxOXs230Q8vdfsn03yjlpbqdKRUA1QAtRawNd+M5JpvRtk4dyjGGIqxhpZy2Jy8mm+jHz7L7Z9M 841aOlun4tkaoAKotYCt+WYk13wz+tkslf55lgboAIfNyav5Nvrhs93+yTTfqKVzdPrFHA1QAdRa wNZ8M5Jrvhn9GbG9jRjfRqxvz+awOXk130Y/vMztn0zzjVpaplPUXA1QAdTaMka25puRXPPNqKhM pfwyDdABDpuTV/Nt9MPnuv2Tab5RS8t1qirXABVArQVszTcjueab0TbEdhdivGuuDnDYnLyab6Mf XuH2T6b5Ri2t0OmJCg1QAdRawNZ8M5JrvvEenPs1YvwasX5dju9bwcmr+Tb64brbP5nmG7V0nk7n zNMAFUCtBWzNNyO55pvRIl2lMl0DdIDD5uTVfBv98Hlu/2Sab9TS+TpdOV8DVAC1FrA134zkmm9G +xHbbsS4G7Hunsdhc/Jqvo1++AK3fzLNN2rpAp3+tEADVAC1FrA134zkmm9GP8G5gzDGIIw1aAGH zcmr+Tb64Ze5/ZNpvlFLK3XKrdQAFUCtBWzNNyO55pvR2stUWnGZBugAh83Jq/k2+uGVbv9kmm/U 0oU63bZQA1QAtRawNd+M5JpvRq8jthcQ4wuI9YVKDpuTV/Nt9MMXuf2Tab5RSxfp9MUiDVAB1FrA 1nwzkmu+GY3DuaMwxiiMNWoRh83Jq/k2+uFVbv9kmm/U0mqdSqs1QAVQawFb881IrvlmtKVKpY1V GqADHDYnr+bb6IdXu/2Tab5RS2t02lWjASqAWgvYmm9Gcs03o3bEdhgxHkash6s5bE5ezbfRD+du /2Sab7ynVqfEWg1QAfgD2JpvRnLNN6OZXKVCrgE6wGFz8mq+jX54rds/meYbtXSxTksXa4AKoNYC tuabkVzzzWgnYrsfMd6PWO+v5bA5eTXfRj+8zu2fTPONWlqn0+/rNEAFUGsBW/PNSK75ZpSAc48j xuOI9fhiDpuTV/Nt9MMvd/sn03yjli7R6dwlGqACqLWArflmJNd8M6q/XKWFl2uADnDYnLyab6Mf vsTtn0zzjVpar9P19RqgAqi1gK35ZiTXfDN6DrE9jhgfR6yPL+GwOXk130Y/fKnbP5nmG7V0qU6H lmqACqDWArbmm5Fc881oBM49G2OcjbHOXsphc/Jqvo1++DK3fzLNN2rpcp0mLtcAFUCtBWzNNyO5 5pvRdctUWrNMA3SAw+bk1Xwb/fDlbv9kmm/U0gadtjZogAqg1gK25puRXPPN6D3E9hpifA2xvrac w+bk1Xwb/fAVbv9kmm/U0hU6fb9CA1QAtRawNd+M5JpvRpfg3LEYYyzGGruCw+bk1Xwb/fCVbv9k mm/U0lU6zV+lASqAWgvYmm9Gcs03o3tXqrR5pQboAIfNyav5NvrhV7j9k2m+UUuv0GnvFRqgAqi1 gK35ZiTXfDP6DrEdRYxHEevRVRw2J6/m2+iHr3b7J9N8o5b6dUr1a4AKoNYCtuabkVzzzWjeapVm rNYAHeCwOXk130Y/3O/2T6b5Ri1t1KmxUQNUALUWsDXfjOSab0aPIrYdiHEHYt3h57A5eTXfRj+8 ye2fTPONWtqk08tNGqACqLWArflmJNd8MzoD58ZjjHiMFd/EYXPyar6Nfniz2z+Z5hu1tEUnX4sG qABqLWBrvhnJNd+M/M0qLWnWAB3gsDl5Nd9GP7zF7Z9M880pdY1OmWs0QAUYbEa25puRXPPN6CXE 9ixifBaxPtvCYXMKrvkuGmhqvmcO7D+a753xinIkFvtw4ohT7HMHw+kBUSei+R4SfR9e3O7UfA82 xysvjzU03se70HzPc7w/qvP4fQVuVXXmJOt7ub6GWOeK2BSs5WOU78S3UH44jm3UtYpbQ57epYa8 POac4vLfPFm0vWGSsTU15OmdGvIh/URDfvUM2MzOkboq0w7F77VVcWxjVRqQDahsbdU0VgfkOcac JhmjYcY0tnCGCmQDaaxhRhy7GgjM4eHwh/sUZb593VxjiZjaqrPZ8KovWbD82g6ufgyunoWLkHlK /8gv8TmQB+DrdagHh8LKr4y+ll9R7vwa2vVnNConFe8oeaOo/NklxlaJiolJLRjamV8Z/SS/tiP+ zxwapC1+0w6VGw/4P8tt8x8DUvLa/MPyHvD78rYAeY4xfRKNT2u1L+/G6mFACnAst7X6s9ztQGB+ lcKfktzQ+XWwMSWv1P96XrD8GoTgH8I3vRpcfbef5Nda+FoNRx48VVG2DgwnvzL7+Pw1rOv5C3ml vHG0SBmwydwa+TWsM78ypfm13pFf608ovwZEML/a8xXlo3Q7v94qNu1QufFB8UfpHxe3A98CMRkf FCdkvAXkOcZMkHwG5Uh+QsbB/Bjg2/SD+e3pR/I/Sm8HAvNrH/y5Iz10fq0v+TZ9X/HCjGD51QKu 1oKj28DVuweeaH6td3DKft3b+SX+ds06vOmX8Pm3ceHkV5Y3v+Ls/Doe5DOBvZhfRe78Gh48v/bE Fxv5JbZGfg3vzK+sfpJfd4pnYsdngNaXmHao3LipZEHW5hIOLAeasm4qWZe1HshzjLlOMsYmWpd1 AzUBywGetYkWZN0JePILY/0hK3R+tecvz9pHA7OC5dc/pQiimXPBo3H9I7/E+jAh3vzbUFPiw8mv EX0tvwLmr3OD/92mW04rrhDrQ2zN/Dq3M79G9JP1oXBumENDdbDRtEPlxpeNeEcTAwqBcu3LxsXa QSDPMeZiyRif1+CcmnKgEGDa5zUYkw/zaKgKMVbiVNnzV6FWyK+6NFh+nYHgk+PNZ5nC+P7z/FWZ ZObX3Unh5NdP+3h+nRc8v3ZOMfMLWzO/zuvMr5/2o/zaXevOr921svzCO5qeBF4FDtd+2fhV7UHA mV9f1cryC+fUHAZeBZ6s/bwGY/LdtV3l178tluXXq7WFPLE2VH5VJZn5dUdS/8gvsT78r0RzfZgU Vn6N7OP5NSr4+vCVS8z1odga+TWqM79G9qP14Tafe324zSdbH27zbS7ZDrQB+303lTzjWw8414fP +GTrw2d8N9B+oA3Y7ttE23x3Al2tD9OYbH3Y5ttHpb5Q68NXEs31YVxS/1gfiv5GW4Lpc3tCOPmV 3df6G4Xu/MoJml87hlxg5JexNfIrpzO/svtRfyM3x93fyM2R9Tdycz4uVoESoDTng+KKnLcAZ3+j IkfW36jIOZhfCpQAas6R/NycdqCr/sb72bL+RknOvuLtOaH6G3sTzP7Gpwn9I79OwwnnwtfrRW8m rPw6v4/3Dy8Iuj5UJo8oVl5fYm6N/LqgM7/O7yfrwzbEf8yhgb/Hb9qhcmOX/9jsx/2Jcx73pwNs zi7/xDn3AHmOMSdKdPT3VU+cs7maAelA4pz7qo/NbgMC80uHP+WzQ+fXkcb0Obr/8Jxg+TUYwY8C R68BV6sS+sf6UPxM/OMk8+9In5ccTn6N7uPrQ1/Q31FWvnFWsfg5mLE18svXmV+j+0l+3YUdQ+vt /BI/uxoq0Rg+UT20/kD1aKAAKKt/orqmfjuQ5xizRjLGhgk19c0TyoACYHT9hglD6+8CAvPrTYwV tzR0fmlUUP/mhLVLguXXFHD1syTzd/YNT+4f+XUrDhzHSXPgzGjH7+zbJ7QdyonkF4tpwot6i78J Heuv3MuLFD6/uPyxm4q2q9zYlv9hYXH5HS93bsV+wXPjfWI/eG7s/2queZ61NflvfV0bE3NGAVvf kQfvvvvu8ZGO693TnDjPirPj1w1iXBfnnTx33ld8r/UVivk7C1txTeNw/6fimo7ANRXX4ukhuxp2 ZJ2zekfWhyv5OIFzVmu0q4GPK6jn49Ys25ElUFDv5EYw/nSHM+IeLrbql7iHcQVjoos68r2j/nWe GuJ3KjpqVGoB66w7YyJRYxDZhSdQY2Id1/h2XOOYZFMrNTKMa3yi17U3c/E2HHgwxYzpg5Rw5roL +/hcN7brZzXUivLCBqMWGNuoa69NLRjbybkLHdc/KgLzXlQP570oR52IDsHbUPPh4AxcG4dmUiPT DjWXVdIPzcspqWU5ZQBjWippYosG5DnGnCjRJP49fWLL0fQxQAaQ1PL39B+aB2f84NFMlmGsP7eE ng+fHpLRUpZR0RxsPrwTZHgEPC4Fnw/2gp4xqhdy8HkcGI+68iaceSs5+LlY1itXRJk+7ML3dnLg 1o7Jo0A47leWKjVKg+N4x+GzY7wcu+XuViPGqABuWWPeIHa/9xtxJddGbcG/56Kfiy5zvO/XP98U LXoaO3efrnyz93RjnD2DotqD+GiMd/NlZaXu1+bYK+OjGWYzI/av2lqV937ZqixVB7BfvV/Gvng1 ionxxdf5W1qVJze3Kgew3fBwq7FPvN/8Mrdzd5hxnbWpVanEe371KN6Pfc3vv8I6atGHt7QqT9zT qnwLY+69rcoDW1uVxS1mOjpz70zrteDYaY79Z9mcip6L/54RcwYKxyLcx7+C/I8lm++L9W0sUNZv LBDHHk427+30gPvQwfMmgyNjUHtGoV5pShnYkKkUK41KE+4qx31ditf1Sh1m2yHWeny0xak0C+OB sY7X2dbrjveeZiHbsW+0I05n/OJH1E7+d8Xha+LxGpNlC970UWzvcvj+6BPn8Hu4/9/VtrOmVvMe D95j8vSAxZF5sI/VtTPF2id4J77+NrWdidw+Bl8HYduxX8FY4hoITjm/36DOV63Kvxa3GzwT9zQY hxux3f/bTdED4lqVx6YkMGGL14rje7XCt47XgyxfUkrbmdgn7K9w/EPghghxWKzBn8D9XIH7OA4H no91c1gc2xtr1rxgHG4wOGIyeJLSDObW41UZXtXiXx3ibuzk7hAHT0c7eOrcl+3g6ijrdU+5eiYO DkNuvoM3P31K73L1X6IiX2+f3FgZG+l6m4gDL3Wz3vqtevtSGPW2OSoyXL1VrBuwYwru407U1W2n uLkqjm3GvsQQXF1scGSswdUyZZVRX2uBJos3XXH0dEf9PM061lM+XmVpV+8/FW8e2Lt8vENSOwf0 gI8jbow8H0Vt+bAbfEy6vVVZZ/Hxwy74KOIpcPBxyE6TjwOsWDv4eJVVOyv/PTw+rgMew/0cgPv4 JYpz1UA3Hx+znrXiQvCx0uDIOPBxDiplA+7klS4eqo45nFl86g73/pH86cm9+Mse896+UPTtmsw3 zlRevPnrNZcOTFXG3/r1mqz4hPKR2CcQCf4c6CF/OvTJSdZ1ntWcqgxpE5GnKufDf7E/HP4I/HWQ yZ+UwV7+iGMzrX3B+CP+jsUFFlf6Iy8Cr7GEFxWR5EXDbX2TF2vF2m+wyYvhp3p5IY4JXgyU1JXL Mb/5lTW4i36jV3eWo65McLweHeZ89h0cmQw/743r3fmsvAfzmfNZQNT7jmcBUY8CnwXEPuezgGiR HYKvyd14FkjuXN9171ngyoBngStDPAuMtMY/5HgWSHY8C1wc4fksM86cz66K885ny+K6M5/l9sn5 rHv86dm9CFW39p+eENNZtyLAnwM95M8/aj4T/BHzWSB/xLFlcX1vPoskL05kPgMvBkSSF2I+64u8 aLDmM8GL97vghTgmeBEbghfzjHtdp1yB0a501BGf9Xw2UgmvR7AxzuwRZMf37hz2cS/0CD69OfLP ZOJ6/bGbPYIma+30xzB6BK9HqEdwu9Uj+A+McCruZ3y8t0fwTZx5TugeQR7msElYN7WAdX6lyejD 1rnmsvGOHpWzb+DstYbDyV/A95l4c3FC73LymR5wMpweqwjnv+FrfDfWVfEn2GNtCqh/TZIea7zl S8dcHu9YV+2JECd/ZnHyPzH4Zyi4IxK8nDw9wfwZczBOVhscGW+tq1YrzUZftanLtZUT2RHoV52R YPar9vYyD3ujX7Xu7pP9qsD1PSWY6/s7Erzr+w0J3VnfX3SyX+XuSyz/MfWrBH/E+j6QP+LYhoST /SoHLxp+TP0qwQvRrwrkhTgmeNFX+lXTE81+1eeJJ/tV/x/6Vf5Ecz57MdE7n+1P7M58ln+yX+Xu S5z9Y+pXCf6I+SyQP+LY/sST/SoHL37yY+pXCV683wUvxDHBi//LftWbiWZvYF1S785hW3qhX1V0 b+SfycRz+/Pd7FettNZOz4fRr7ouQr2BDVZvQOwU+sHLkry9galJZp8idG9gDOanUS7OBeoFnf2B cDn4EBZzS4TP4GF8L+tYc3tBx/rw1shzMBUHvukmB2+wOPhNGBw8IyYyHDwAHMb93ISdR7FO/0sA B8WxPyUpRnzBOLjW4uAYcHAW7mUdVvNL8WSQqRQZ66o6ZQnuruiirlJWdsHN8Y59Zzl6qGkBazBn bystYF9PubwU13E43vgI4nw2pXe5/F4PuBxOr1Vcyy/ga1o3ngnSernXmmb50rEOTXM8E+yLEJff AR7EWBruYyXu5wMpbi6LY7elmOcF4/I6i8tjjXq6ylC0ip8BZHbx84AVwEpHH7arWpsWRFcY6ucG UwLO7y63x1n87u5nebr6jMt067NdvwMBSrGjGY6lDrLtX+P175OF/9sdV8/5mR3v53cCv0J9riLa 8bmKFCsPFeu4eP2/ja7L5tIAFiQBFyQBSWYBAAAAAZYAACF2AAJoATXWBQABA2MDNdYFAQIDLSEj dgABYwMjdgECLSE6VgsAApZsAAQ0AQnWBAACAAIKdAAA4AES1hQAAAD/zMzMAAAAAAAA/8zMzAAA ABPWMAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAABT2A5Ak FTYBGPYDAAAs1gMAAgE11gUAAQLPATXWBQECArkRcNYUAAAA/8zMzAAAAAAAAP/MzMwAAACKVAEA lAAWJAEXJAFJZgEAAAABlgAAIXYAAmgBNdYFAAEDYwM11gUBAgMtISN2AAFjAyN2AQItITpWCwAC lmwACnQAAOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8E AQAAFPYDkCQVNgEY9gMAADXWBQABAs8BNdYFAQICuRGKVAEAlAAWJAEXJAFJZgEAAAABlgAAIXYA AmgBNdYFAAEDYwM11gUBAgMtISN2AAFjAyN2AQItITpWCwAClmwACnQAAOABE9YwAAAA/wQBAAAA AAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYDkCQVNgEY9gMAADXWBQAB As8BNdYFAQICuRGKVAEAlAAWJAEXJAFJZgEAAAABlgAAIXYAAmgBNdYFAAEDYwM11gUBAgMtISN2 AAFjAyN2AQItITpWCwAClmwACnQAAOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQB AAAAAAD/BAEAAAAAAP8EAQAAFPYDkCQVNgEY9gMAADXWBQABAs8BNdYFAQICuRGKVAEAlAAWJAEX JAFJZgEAAAABlgAAIXYAAmgBNdYFAAEDYwM11gUBAgMtISN2AAFjAyN2AQItITpWCwAClmwACnQA AOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYD kCQVNgEY9gMAADXWBQABAs8BNdYFAQICuRGKVAEAlAAWJAEXJAFJZgEAAAABlgAAIXYAAmgBNdYF AAEDYwM11gUBAgMtISN2AAFjAyN2AQItITpWCwAClmwACnQAAOABE9YwAAAA/wQBAAAAAAD/BAEA AAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYDkCQVNgEY9gMAADXWBQABAs8BNdYF AQICuRGKVAEAlAAWJAEXJAFJZgEAAAABlgAAIXYAAmgBNdYFAAEDYwM11gUBAgMtISN2AAFjAyN2 AQItITpWCwAClmwACnQAAOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/ BAEAAAAAAP8EAQAAFPYDkCQVNgEY9gMAADXWBQABAs8BNdYFAQICuRGKVAEAlAAWJAEXJAFJZgEA AAABlgAAIXYAAmgBNdYFAAEDYwM11gUBAgMtISN2AAFjAyN2AQItITpWCwAClmwACnQAAOABE9Yw AAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYDkCQVNgEY 9gMAADXWBQABAs8BNdYFAQICuRGKVAEAlAAWJAEXJAFJZgEAAAABlgAAIXYAAmgBNdYFAAEDYwM1 1gUBAgMtISN2AAFjAyN2AQItITpWCwAClmwACnQAAOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8E AQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAFPYDkCQVNgEY9gMAADXWBQABAs8BNdYFAQICuRGK VAEAlAAWJAEXJAFJZgEAAAABlgAAIXYAAmgBNdYFAAEDYwM11gUBAgMtISN2AAFjAyN2AQItITpW CwAClmwACnQAAOABE9YwAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAA AP8EAQAAFPYDkCQVNgEY9gMAADXWBQABAs8BNdYFAQICuRGKVAEAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAhgJtABIAAQCcAA8ABAAAAAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAAQPH/AgBIAAwAAAAAAAAA AAAGAE4AbwByAG0AYQBsAAAABgAAABSkeAAcAE9KBQBRSgUAX0gBBGFKGABtSAkEc0gJBHRICQSI AAFAAQDyAIgADAQAAAAAAAAAABIASABlAGEAZABpAG4AZwAgADEALABDAGgAYQByADQALABIADEA AAArAAEABiQBByQBCiYAC0YHABOk8AAUpLQAJGQMAQAFQCYATsYIAAAA/wwBBQAAHgA1CIFDSiAA S0ggAE9KAgBRSgIAXAiBXkoCAGFKIAAkAgJAAQDyACQCDAQAAAAAAAAAAOoASABlAGEAZABpAG4A ZwAgADIALABIAGUAYQBkAGkAbgBnACAAMgAgAEMAaABhAHIAMgAsAEgAZQBhAGQAaQBuAGcAIAAy ACAAQwBoAGEAcgAxACAAQwBoAGEAcgAxACwASABlAGEAZABpAG4AZwAgADIAIABDAGgAYQByACAA QwBoAGEAcgAgAEMAaABhAHIAMQAsAEgAZQBhAC4ALgAuACwAaAAyACwAMgAsAGgAZQBhAGQAaQBu AGcAIAAyAFQATwBDACwASABlAGEAZABpAG4AZwAgADIAIABDAGgAYQByADEAIABDAGgAYQByACAA QwBoAGEAcgAgAEMAaABhAHIALABIAGUAYQBkAGkAbgBnACAAMgAgAEMAaABhAHIAIABDAGgAYQBy ACAAQwBoAGEAcgAgAEMAaABhAHIAIABDAGgAYQByACwAQwBoAGEAcgA0ACAAQwBoAGEAcgAgAEMA aABhAHIAMQAgAEMAaABhAHIAIABDAGgAYQByACAAQwBoAGEAcgAsAEMAaABhAHIANAAgAEMAaABh AHIAIABDAGgAYQByADEALABIAGUAYQBkAGkAbgBnACAAMgAgAEMAaABhAHIAIABDAGgAYQByADEA AAATAAIABiQBCiYBC0YHABOk8ABAJgEAIQA1CIFDShgAT0oCAFBKBgBRSgIAXAiBXQiBXkoCAGFK HAAACgEDQAEA8gAKAQwEAAAAAAAAAABcAEgAZQBhAGQAaQBuAGcAIAAzACwAQwBoAGEAcgAzACAA QwBoAGEAcgAsAGgAMwAsADMALABoAGUAYQBkAGkAbgBnACAAMwBUAE8AQwAsAGgAZQBhAGQAaQBu AGcAIAAzAFQATwBDACAAKwAgAEwAZQBmAHQAOgAgACAAMAAiACwARgBpAHIAcwB0ACAAbABpAG4A ZQA6ACAAIAAwACIALABSAGkAZwBoAHQAOgAgACAAMAAuADUAIgAAACEAAwAGJAEKJgILRgcADcYH AdACAWADABOk8AAUpDwAQCYCABYANQiBQ0oWAE9KAgBRSgIAXAiBXkoCAE4ABEABAPIATgAMBAAA AAAAAAAACQBIAGUAYQBkAGkAbgBnACAANAAAABMABAAGJAEKJgMLRgcAE6S0AEAmAwAOADUIgU9K AgBRSgIAXAiBhAAFQAEA8gCEAAwEAAAAAAAAAAASAEgAZQBhAGQAaQBuAGcAIAA1ACwAaAA1ACwA bAA1ACwAaABtAAAAJAAFAAYkAQomBAtGBwANxgcBqAMBOAQAE6S0ABSkPAAzJABAJgQhADUIgU9K AgBQSgYAUUoCAF0IgWFKGgBuSAQEdEgEBHUIAABWAAZAAQDyAFYADAQAAAAAAAAAAAkASABlAGEA ZABpAG4AZwAgADYAAAATAAYABiQBCiYFC0YHABOk8ABAJgUAFgA1CIFDShIAT0oCAFFKAgBcCIFh ShYAVAAHQAEA8gBUAAwEAAAAAAAAAAAJAEgAZQBhAGQAaQBuAGcAIAA3AAAAFAAHAAomBgtGBwAT pPAAFKQ8AEAmBhMANQiBQ0oSAE9KAgBRSgIAYUoWAABWAAhAAQDyAFYADQQAAAAAAAAAAAkASABl AGEAZABpAG4AZwAgADgAAAAUAAgACiYHC0YHABOk8AAUpDwAQCYHFgA1CIFDShIAT0oCAFFKAgBd CIFhShYATgAJQAEAAgBOAAwEAAAAAAAAAAAJAEgAZQBhAGQAaQBuAGcAIAA5AAAADQAJABOk8AAU pDwAQCYIABQAQ0oWAE9KAgBRSgIAXkoCAGFKFgBEAEFA8v+hAEQADAEAAAAAAAAAABYARABlAGYA YQB1AGwAdAAgAFAAYQByAGEAZwByAGEAcABoACAARgBvAG4AdAAAAAAAWgBpQPP/swBaAAwBAAAA AAAAAAAMAFQAYQBiAGwAZQAgAE4AbwByAG0AYQBsAAAAIAA6VgsAF/YDAAA01gYAAQoDbAA01gYA AQUDAABh9gMAAAIACwAEAF9IAAQoAGtA9P/BACgAAAEAAAAAAAAAAAcATgBvACAATABpAHMAdAAA AAIADAAAAAAAVABCQAEA8gBUAAwEAAAAAAAAAAARAEIAbwBkAHkAIABUAGUAeAB0ACwAYgB0ACwA dABlAHgAdAAAAAgADwADJANhJAMPAFBKBgBuSBEEdEgRBHUIAABmAP5PogABAWYADAAAAAAAAAAA ABMAQgBvAGQAeQAgAFQAZQB4AHQAIABDAGgAYQByACAAQwBoAGEAcgAAACcAT0oFAFBKBgBRSgUA X0gBBGFKGABtSAkEbkgRBHNICQR0SBEEdQgAACwA/k8hAfIALAANAwAAAAAAAAAABgBTAHQAeQBs AGUAMwAAAAUAEQBAJgIAAAA6AP5PMQHyADoADQMAAAAAAAAAAAYAUwB0AHkAbABlADIAAAAPABIA DcYHAWADAdACBkAmAQAEAGFKIABYAP5PAQAyAVgADQMAAAAAAAAAAAYAUwB0AHkAbABlADEAAAAl ABMADcYFAAFgAwYPhNACEYQw/ROk8AAUpPAAQCYAXoTQAmCEMP0ADABDSiAAT0oAAFFKAABWAP5P ogBBAVYADAMAAAAAAAAAAAsAIABDAGgAYQByACAAQwBoAGEAcgAxAAAAJwA1CAE2CAFDShoAXAgB XQgBX0gBBGFKGgBtSAkEc0gJBHRICQR1CAAAUgATQAEAAgBSAAUFAAAAAAAAAAAFAFQATwBDACAA MQAAABEAFQANxggAAnYCkCQAChOk8AAAHAA1CIE7CIFPSgAAUUoAAFwIgW1IAARuSAAEdQgBNgBV QKIAYQE2AAwEAAAAAAAAAAAJAEgAeQBwAGUAcgBsAGkAbgBrAAAADAA+KgFCKgJwaAAA/wBQABRA AQACAFAABQUAAAAAAAAAAAUAVABPAEMAIAAyAAAAGQAXAA3GCAACJgOGJAAKD4TKABSkAABehMoA ABIAXQiBYUoUAG1IAARuSAAEdQgBSACZQAEAggFIAAwFAAAAAAAAAAAMAEIAYQBsAGwAbwBvAG4A IABUAGUAeAB0AAAAAgAYABQAQ0oQAE9KBwBRSgcAXkoHAGFKEAA4AP5PAQCSATgADAAAAAAAAAAA AAoAVABhAGIAbABlACAAQgBvAGQAeQAAAAoAGQATpDwAFKQ8AAAALgAoQKIAoQEuAAwEAAAAAAAA AAALAEwAaQBuAGUAIABOAHUAbQBiAGUAcgAAAAAARAAiQAEAAgBEAAwBbAAAAAAAAAAHAEMAYQBw AHQAaQBvAG4AAAAMABsAAyQBE6TwAGEkAQ8ANQiBT0oCAFFKAgBhShQAAEYA/k+iAMEBRgAMAwAA AAAAAAAACgAgAEMAaABhAHIAIABDAGgAYQByAAAAGgA1CAFDShgAX0gBBG1ICQRzSAkEdEgJBHUI AFoA/k+xAdIBWgAMAwAAAAAAAAAAGgBTAHQAeQBsAGUAIABDAGEAcAB0AGkAbwBuACAAKwAgADEA MQAgAHAAdAAgAEIAbwBsAGQAAAACAB0ACgA1CIFDShYAXAiBZgD+T8IB4QFmAAwDAAAAAAAAAAAf AFMAdAB5AGwAZQAgAEMAYQBwAHQAaQBvAG4AIAArACAAMQAxACAAcAB0ACAAQgBvAGwAZAAgAEMA aABhAHIAAAAPAENKFgBPSgIAUUoCAFwIAQA8AP5PAQDyATwADAAAAAAAAAAAAAQATgBvAHQAZQAA ABoAHwANxgUAAdACAA+E0AIRhDD9XoTQAmCEMP0AAFAAFUABAAIAUAAFBQAAAAAAAAAABQBUAE8A QwAgADMAAAAZACAADcYIAAKSBJAkAAoPhJABFKQAAF6EkAEAEgA2CIFhShQAbUgABG5IAAR1CAFU AP5PAQASAlQADAIAAAAAAAAAAAkAUgBlAGYAZQByAGUAbgBjAGUAAAAUACEACiYAC0YGAA3GBAHQ AgATpHgAFABPSgAAUUoAAF5KAgBfSA0EdEgNBFIA/k+xASICUgAMAwAAAAAAAAAAFABTAHQAeQBs AGUAIABDAGEAcAB0AGkAbwBuACAAKwAgAEIAbwBsAGQAAAACACIADgA1CIFPSgAAUUoAAFwIgU4A /k/CATECTgAMAwAAAAAAAAAAGQBTAHQAeQBsAGUAIABDAGEAcAB0AGkAbwBuACAAKwAgAEIAbwBs AGQAIABDAGgAYQByAAAAAwBcCAEAQgAnQKIAQQJCAAwBAAAAAAAAAAARAEMAbwBtAG0AZQBuAHQA IABSAGUAZgBlAHIAZQBuAGMAZQAAAAgAQ0oQAGFKEACGAP5PQQBSAoYADAMAAAAAAAAAACQAUwB0 AHkAbABlACAASABlAGEAZABpAG4AZwAgADQAIAArACAAQQByAGkAYQBsACAAMQAwACAAcAB0ACAA SQB0AGEAbABpAGMAAAAJACUACiYAC0YAAAAZADYIgVBKAwBdCIFhShwAbkgSBHRIEgR1CAAAOAAg QAEAYgI4AAwAAAAAAAAAAAAGAEYAbwBvAHQAZQByAAAADQAmAA3GCAAC4BDAIQECAAQAYUoUAFYA /k+iAKEAVgAMAwAAAAAAAAAADABDAGEAcAB0AGkAbwBuACAAQwBoAGEAcgAAACUANQiBQ0oUAE9K AgBQSgMAUUoCAFwIgW1ICQRzSAkEdEgJBHUIAAA+ABZAAQACAD4ADQUAAAAAAAAAAAUAVABPAEMA IAA0AAAADgAoAA+EWAIUpAAAXoRYAgwAT0oAAFFKAABhShQAPgAXQAEAAgA+AA0FAAAAAAAAAAAF AFQATwBDACAANQAAAA4AKQAPhCADFKQAAF6EIAMMAE9KAABRSgAAYUoUAD4AGEABAAIAPgANBQAA AAAAAAAABQBUAE8AQwAgADYAAAAOACoAD4ToAxSkAABehOgDDABPSgAAUUoAAGFKFAA+ABlAAQAC AD4ADQUAAAAAAAAAAAUAVABPAEMAIAA3AAAADgArAA+EsAQUpAAAXoSwBAwAT0oAAFFKAABhShQA PgAaQAEAAgA+AA0FAAAAAAAAAAAFAFQATwBDACAAOAAAAA4ALAAPhHgFFKQAAF6EeAUMAE9KAABR SgAAYUoUAD4AG0ABAAIAPgANBQAAAAAAAAAABQBUAE8AQwAgADkAAAAOAC0AD4RABhSkAABehEAG DABPSgAAUUoAAGFKFABAACZAogDhAkAADAEAAAAAAAAAABIARgBvAG8AdABuAG8AdABlACAAUgBl AGYAZQByAGUAbgBjAGUAAAADAEgqAQAOAh1AAQDyAg4CDAEAAAAAAAAAAPMARgBvAG8AdABuAG8A dABlACAAVABlAHgAdAAsAGYAbwBvAHQAbgBvAHQAZQAgAHQAZQB4AHQALABmAG8AbwB0AG4AbwB0 AGUAIAB0AGUAeAB0ADEALABmAG8AbwB0AG4AbwB0AGUAIAB0AGUAeAB0ADIALABmAG8AbwB0AG4A bwB0AGUAIAB0AGUAeAB0ADMALABmAG8AbwB0AG4AbwB0AGUAIAB0AGUAeAB0ADQALABmAG8AbwB0 AG4AbwB0AGUAIAB0AGUAeAB0ADUALABmAG8AbwB0AG4AbwB0AGUAIAB0AGUAeAB0ADYALABmAG8A bwB0AG4AbwB0AGUAIAB0AGUAeAB0ADcALABmAG8AbwB0AG4AbwB0AGUAIAB0AGUAeAB0ADEAMQAs AGYAbwBvAHQAbgBvAHQAZQAgAHQAZQB4AHQAMgAxACwAZgBvAG8AdABuAG8AdABlACAAdABlAHgA dAAzADEALABmAG8AbwB0AG4AbwB0AGUAIAB0AGUAeAB0ADQAMQAsAGYAbwBvAHQAbgBvAHQAZQAg AHQAZQB4AHQANQAxACwAZgBvAG8AdABuAG8AdABlACAAdABlAHgAdAA2ADEALABmAG8AbwB0AG4A bwB0AGUAIAB0AGUAeAB0ADgAAAAGAC8AFKQoAAgAQ0oSAGFKFABEAC5AAQACAEQADAEAAAAAAAAA AAsAVABPAEEAIABIAGUAYQBkAGkAbgBnAAAAEAAwAA3GCAACKCOQJAACKiQBBABhShQARABaQAEA EgNEAAwEAAAAAAAAAAAKAFAAbABhAGkAbgAgAFQAZQB4AHQAAAACADEAEwBPSggAUUoIAFwIgV5K CABhShQAAGYAI0ABAAIAZgAFBQAAAAAAAAAAEABUAGEAYgBsAGUAIABvAGYAIABGAGkAZwB1AHIA ZQBzAAAAHgAyAA3GBQABhiQKD4SwARGEUP4UpAAAXoSwAWCEUP4OADsIgW1IAARuSAAEdQgBUAD+ TwEAMgNQAAwDAAAAAAAAAAACAEIAMQAAABYAMwAPhDgCEYTk/hSktABehDgCYITk/hsAT0oAAFBK AwBRSgAAYUoUAG1ICQhzSAkIdQgAAFYA/k+iAEEDVgAMAwAAAAAAAAAADgBIAGUAYQBkAGkAbgBn ACAANAAgAEMAaABhAHIAAAAhADUIAUNKGABcCAFfSAEEYUoYAG1ICQRzSAkEdEgJBHUIAABAAP5P ogBRA0AADAMAAAAAAAAAAAYAUwBwAHIAaQBuAHQAAAAcADYIgUIqAkNKFgBPSgIAUUoCAGFKFABw aAAA/wBQAP5PogBhA1AADAMAAAAAAAAAAAsAIABDAGgAYQByACAAQwBoAGEAcgAyAAAAIQA1CAFD ShgAXAgBX0gBBGFKGABtSAkEc0gJBHRICQR1CAAAWAAwQAEAcgNYAAwAAAAAAAAAAAALAEwAaQBz AHQAIABCAHUAbABsAGUAdAAAABwANwAKJgALRgMADcYEATgEAA+EaAEUpFAAXoRoAQsAXkoCAGFK FABoCAAAWAD+T5EDggNYAAwDAAAAAAAAAAAHAGYAbwByAG0AdQBsAGEAAAAWADgAD4TABhGE4P4T pHgAXoTABmCE4P4aAFBKBABfSA0EYUoUAGgIAG5IBAh0SAQIdQgASAAhQAEAogNIAAwFAAAAAAAA AAANAEkAbgBkAGUAeAAgAEgAZQBhAGQAaQBuAGcAAAACADkAEgA1CIFPSgIAUUoCAFwIgV5KAgA6 AApAAQACADoADQUAAAAAAAAAAAcASQBuAGQAZQB4ACAAMQAAABIAOgAPhMgAEYQ4/16EyABghDj/ AABAAB5AAQCyA0AADAUAAAAAAAAAAAwAQwBvAG0AbQBlAG4AdAAgAFQAZQB4AHQAAAACADsADABP SgAAUEoEAFFKAACcAGVAAQDCA5wADAQAAAAAAAAAABEASABUAE0ATAAgAFAAcgBlAGYAbwByAG0A YQB0AHQAZQBkAAAANwA8AA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQgyCNcJ/AqhC4YMqw1QDkAAAAA AAAAAAAAAAAAAAAAACgAQioBT0oIAFBKBgBRSggAXkoIAGFKFABuSAQEcGgAAAAAdEgEBHUIAFQA NkABANIDVAAMAAAAAAAAAAAADQBMAGkAcwB0ACAAQgB1AGwAbABlAHQAIAAyAAAAGAA9AAomAAtG BAANxgQBOAQAD4TQAl6E0AIIAF5KBQBhShQALgApQKIA4QMuAAwAAAAAAAAAAAALAFAAYQBnAGUA IABOAHUAbQBiAGUAcgAAAAAAWAALQAEA8gNYAAwBAAAAAAAAAAAHAEkAbgBkAGUAeAAgADIAAAAo AD8ADcYIAAIoI5AkCAIOhNACD4SgBRGEMP0qJAFdhNACXoSgBWCEMP0IAFBKBABhShQATgD+TwEA AgROAAwHAAAAAAAAAAANAEIAYQBsAGwAbwBvAG4AIABUAGUAeAB0ADEAAAACAEAAGABDShAAT0oH AFBKBABRSgcAXkoHAGFKEABcAP5PogARBFwADAMAAAAAAAAAAA4ASABlAGEAZABpAG4AZwAgADUA IABDAGgAYQByAAAAJwA1CAE2CAFDShoAXAgBXQgBX0gBBGFKGgBtSAkEc0gJBHRICQR1CAAARgBq QLEDsgNGAAwBAAAAAAAAAAAPAEMAbwBtAG0AZQBuAHQAIABTAHUAYgBqAGUAYwB0AAAAAgBCAAwA T0oFAFBKAABRSgUASgD+T6IAMQRKAAwDAAAAAAAAAAAKACAAWgBjAGgAbgAgAFoAYwBoAG4AAAAd ADUIAVBKAwBcCAFfSAEEbUgJBHNICQR0SAkEdQgAAEYA/k8BAEIERgAMBwAAAAAAAAAACwCN1CDB IADEs8DG0LkgAE3RpMK40jEAAAACAEQAFABDShIAT0oCAFBKCQBRSgIAYUoSAHoA/k8xAFIEegAM AwAAAAAAAAAAJABIAGUAYQBkAGkAbgBnACAAMwAgAEMAaABhAHIAIAArACAAQQByAGkAYQBsACwA SwBlAHIAbgAgAGEAdAAgADEANgAgAHAAdAAAABcARQAGJAAKJgALRgAAE6QAABSkeABAJgkAAADa AP5PIQBiBNoADQMAAAAAAAAAAEMAUwB0AHkAbABlACAASABlAGEAZABpAG4AZwAgADIASABlAGEA ZABpAG4AZwAgADIAIABDAGgAYQByADIASABlAGEAZABpAG4AZwAgADIAIABDAGgAYQByADEAIABD AGgAYQByADEASABlAGEAZABpAG4AZwAgADIAIABDAGgAYQAuAC4ALgAAACUARgAKJgALRgAADcYF AAEYAwYPhEACEYTA/RSkPABehEACYITA/QATAE9KCgBRSgoAXQiBXkoAAGFKFAAA1AD+TyEAcgTU AA0DAAAAAAAAAABEAFMAdAB5AGwAZQAgAEgAZQBhAGQAaQBuAGcAIAAyAEgAZQBhAGQAaQBuAGcA IAAyACAAQwBoAGEAcgAyAEgAZQBhAGQAaQBuAGcAIAAyACAAQwBoAGEAcgAxACAAQwBoAGEAcgAx AEgAZQBhAGQAaQBuAGcAIAAyACAAQwBoAGEALgAuAC4AMQAAACUARwAKJgALRgAADcYFAAFAAgYP hEACEYTA/RSkPABehEACYITA/QALAF0IgV5KAABhShQAAEgA/k8hAIIESAAMAwAAAAAAAAAABgBT AHQAeQBsAGUANAAAACEASAAKJgALRgAADcYFAAFAAgYPhEACEYTA/V6EQAJghMD9AAAAQAD+T1EE kgRAAA0DAAAAAAAAAAAGAFMAdAB5AGwAZQA1AAAAGgBJAA3GBQAB0AIGD4TQAhGEMP1ehNACYIQw /QAAVgD+TwEAogRWAAwDAAAAAAAAAAALAGwAaQBzAHQAXwBpAG4AZABlAG4AdAAAABYASgAOhLsA D4RoAROkeABdhLsAXoRoAQ8AT0oAAFFKAABhShQAaAgAAEQA/k8BALIERAANAwAAAAAAAAAACQBN AHkAIABOAG8AcgBtAGEAbAAAAAgASwADJAFhJAEPAE9KAgBRSgIAYUoUAGgIAABEAP5PAQDCBEQA DAMAAAAAAAAAAAcATAAxAC0AQgBvAGQAeQAAABAATAANxggAAtgJgBYBADEkAAsAQ0oYAGFKFABo CAAAUAD+TwEA0gRQAAwDAAAAAAAAAAAHAEwAMwAtAEIAbwBkAHkAAAAbAE0ADcYLAAOwAdgJgBYA AQAPhLABMSQAXoSwAQALAENKGABhShQAaAgAAFAA/k+iAOEEUAAMAwAAAAAAAAAADQBDAGEAcAB0 AGkAbwBuACAAQwBoAGEAcgAxAAAAHgA1CAFPSgIAUUoCAF9IAQRtSAkEc0gJBHRICQR1CABOAP5P ogDxBE4ADAMAAAAAAAAAAAYAIABDAGgAYQByADEAAAApADUIAU9KAgBQSgQAUUoCAFwIAV9IAQRh ShYAbUgJBHNICQR0SAkEdQgAAE4AWUABAAIFTgAMAQAAAAAAAAAADABEAG8AYwB1AG0AZQBuAHQA IABNAGEAcAAAABcAUAAUpAAALUQgAU3GCgAAAP8AAIAAAAAABABQSgQA0gD+TyEAEgXSAAwDAAAA AAAAAABEAFMAdAB5AGwAZQAgAEgAZQBhAGQAaQBuAGcAIAAyAEgAZQBhAGQAaQBuAGcAIAAyACAA QwBoAGEAcgAyAEgAZQBhAGQAaQBuAGcAIAAyACAAQwBoAGEAcgAxACAAQwBoAGEAcgAxAEgAZQBh AGQAaQBuAGcAIAAyACAAQwBoAGEALgAuAC4AMgAAAC8AUQADJAMKJgALRgAADcYFAAGwAQYPhLAB EYRQ/hOkaAEUpLQAXoSwAWCEUP5hJAMAAADIAP5PIQAiBcgADAMAAAAAAAAAAEQAUwB0AHkAbABl ACAASABlAGEAZABpAG4AZwAgADIASABlAGEAZABpAG4AZwAgADIAIABDAGgAYQByADIASABlAGEA ZABpAG4AZwAgADIAIABDAGgAYQByADEAIABDAGgAYQByADEASABlAGEAZABpAG4AZwAgADIAIABD AGgAYQAuAC4ALgAzAAAAIQBSAAomAAtGAAANxgUAAUACBg+EQAIRhMD9XoRAAmCEwP0ABABhShYA UAD+TwEAMgVQAAwDAAAAAAAAAAAEAHgAbAAyADMAAAAWAFMAAyQCE6RkABSkZABbJAFcJAFhJAIY AENKGABPSgsAUEoLAFFKCwBeSgsAX0gNBEoA/k8BAEIFSgAMAwAAAAAAAAAABAB4AGwAMgAyAAAA EABUABOkZAAUpGQAWyQBXCQBGABDShgAT0oLAFBKCwBRSgsAXkoLAF9IDQREADdAAQBSBUQADAQA AAAAAAAAAA0ATABpAHMAdAAgAEIAdQBsAGwAZQB0ACAAMwAAABAAVQAKJgALRgEADcYEATgEAAAA RgD+T1EBYgVGAAUAAAAAAAAAAAALAFQATwBDACAASABlAGEAZABpAG4AZwAAAAIAVgATADsIgUNK GABPSgIAUUoCAF5KAgAAOAD+TwEAcgU4AAwAAAAAAAAAAAAKAFQAYQBiAGwAZQAgAFQAZQB4AHQA AAAKAFcAE6Q8ABSkPAAAAEoA/k9xBYIFSgAMAAAAAAAAAAAADABUAGEAYgBsAGUAIABCAHUAbABs AGUAdAAAABgAWAAKJgALRgIADcYEAdACAA+EaAFehGgBAAA4AP5PAQCSBTgADAAAAAAAAAAAAAcA UABpAGMAdAB1AHIAZQAAAA8AWQADJAEGJAETpPAAYSQBAAAARgD+TwEAogVGAAwAAAAAAAAAAAAK AEwAaQBzAHQAIABBAGwAcABoAGEAAAAYAFoACiYAC0YFAA3GBAE4BAAPhGgBXoRoAQAAMgD+TwEA sgUyAAwAAAAAAAAAAAAGAEUAZABpAHQAbwByAAAAAgBbAAkAQioCcGgAAP8AAFYA/k+iAMEFVgAM AAAAAAAAAAAACwBFAGQAaQB0AG8AcgAgAEMAaABhAHIAAAAoAEIqAk9KBQBRSgUAX0gBBGFKGABt SAkEcGgAAP8Ac0gJBHRICQR1CABOAP5PAQDSBU4ADAAAAAAAAAAAAAwASABlAGEAZABpAG4AZwBO AG8ATgB1AG0AAAAJAF0ABiQBE6TwAAASADUIgU9KAgBRSgIAXAiBXkoCAGQA/k+iAOEFZAAMAAAA AAAAAAAAEQBIAGUAYQBkAGkAbgBnAE4AbwBOAHUAbQAgAEMAaABhAHIAAAApADUIAU9KAgBRSgIA XAgBXkoCAF9IAQRhShgAbUgJBHNICQR0SAkEdQgAAEwA/k8BAPIFTAAMAAAAAAAAAAAADQBUAGEA YgBsAGUAIABIAGUAYQBkAGkAbgBnAAAADABfAAMkAROkeABhJAELADUIgU9KAgBRSgIAAE4A/k8B AAIGTgAMBQAAAAAAAAAACwCN1CDBIADEs8DG0LkgAE3RpMK40jIAAAAGAGAAFKQAABgAQ0oQAE9K BwBQSgQAUUoHAF5KBwBhShAAPAD+T6IAEQY8AEwBAAAAAAAAAAADAHTHwMmgzAAAHgBDShQAT0oM AFBKDABRSgIAXkoCAGFKFABwaAAAgAAyAP5PsQOyAzIADAUAAAAAAAAAAAYAVLqouiAA/MgcyDEA AAAGAGIAFKQAAAYANQiBXAiBWAD+T6IAMQZYAEwBAAAAAAAAAAAIAHMAYgBhAG4AZQByAGoAMQAA AC8ANQgANggANwgAPioAQioAQ0oUAE9KAgBRSgIAXAgAXQgAXkoCAGFKFABwaAAAAP8APgD+TwEA QgY+AAwAAAAAAAAAAAAHAEYAbwByAG0AdQBsAGEAAAAKAGQAE6R4ABSkAAAMAENKFgBPSggAUUoI ADoAMUABAFIGOgAMBAAAAAAAAAAACwBMAGkAcwB0ACAATgB1AG0AYgBlAHIAAAAJAGUACiYAC0YI AAAAAF4A/k+xA7IDXgAMBQAAAAAAAAAAEABDAG8AbQBtAGUAbgB0ACAAUwB1AGIAagBlAGMAdAAx AAAADgBmAAMkA2EkA2dkIE+EABYANQiBT0oFAFBKAABRSgUAXAiBYUoUAEAAK0ABAHIGQAAMAQAA AAAAAAAADABFAG4AZABuAG8AdABlACAAVABlAHgAdAAAAAYAZwAUpAAACABQSgQAYUoUAIAA/k+i AIEGgAAMAAAAAAAAAAAAIABCAG8AZAB5ACAAVABlAHgAdAAgAEMAaABhAHIALABiAHQAIABDAGgA YQByACwAdABlAHgAdAAgAEMAaABhAHIAAAAnAE9KBQBQSgYAUUoFAF9IAQRhShgAbUgJBG5IEQRz SAkEdEgRBHUIAABOAP5PAQCSBk4ADAIAAAAAAAAAAAwAVABhAGIAbABlACAAaABlAGEAZABlAHIA AAAPAGkAAyQBBiQBE6R4AGEkAQALADUIgU9KAgBRSgIAAKoA/k9BAKIGqgAMAAAAYXkEAAAAIADh BdIF4AXVBd8FIADbBdUF6gXoBeoFIAA0ACAAKwAgANAF1wXoBdkFOgAgACAAMwAuADYAOAAgAOEF JwAnAN4FAAAxAGoABiQACiYFC0YTAA3GCgGABAKlBkALAAYPhAAAEYSY/hOkAAAUpPAAXoQAAGCE mP4AHQA1CIFDShgAT0oAAFFKAABcCIFeSg0AX0gNBGgIAABSAP5PAQCyBlIADAAAAJ4EEQAAAA0A bABpAHMAdAAtAG4AdQBtAGIAZQByAGUAZAAAABkAawADJAMKJgALRiUAFKQ8AGEkA2dkIE+EAAAE AFBKAwBOAP5PogDBBk4ADAIbAJ4EEQAAAAsAIABDAGgAYQByACAAQwBoAGEAcgAzAAAAHwA1CAFP SgIAUEoEAFFKAgBfSAEEbUgJBHNICQR0SAkEAAAAAAABAAAAAgAAAAYAAAAKAAAAFQAAABkAAAAd AAAAIgAAACYAAAAqAAAAMAAAADQAAABGAAAARwAAAEwAAABQAAAAVAAAAFgAAABcAAAAYgAAAGoA AAB5fQAAAQAAAAEAAAABAP////8AAAAAAAAAAP////8AAAAAAQD/////AAAAAAAAAAABAAAAAAAA AAAA/////2kEAAAAAAAAAQAAAAAAAAAAAP////9lBAAAAAAAAAEAAAAAAAAAAAD/////YwQAAAAA AAABAAAAAAAAAAAA/////2IEAAAAAAAAAQAAAAAAAAAAAP////9eBAAAAAAAAAEAAAAAAAAAAAD/ ////XAQAAAAAAAABAAAAAAAAAAAA/////1sEAAAAAAAAAQAAAAAAAAAAAP////9ZBAAAAAAAAAEA AAAAAAAAAAD/////WAQAAAAAAAABAAAAAAAAAAAA/////1YEAAAAAAAAAQAAAAAAAAAAAP////9T BAAAAAAAAAAAAAACAAAAAQD/////AAAAAAAAAAABAAAAAAAAAAAA/////0cEAAAAAAAAAQAAAAAA AAAAAP////9GBAAAAAAAAAEAAAAAAAAAAAD/////RQQAAAAAAAABAAAAAAAAAAAA/////0IEAAAA AAAAAQAAAAAAAAAAAP////9ABAAAAAAAAAEAAAAAAAAAAAD/////PwQAAAAAAAABAAAAAAAAAAAA /////z0EAAAAAAAADQAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAgAAAAYAAAAKAAAAFQAA ABkAAAAdAAAAIgAAACYAAAAqAAAAMAAAADQAAABGAAAARwAAAEwAAABQAAAAVAAAAFgAAABcAAAA YgAAAGoAAABtAAAAAAAAAAAIAQAAAAAIAgAAAAAQAwAAAAAQBAAAAAAQBQAAAAAQBgAAAAAQBwAA AAAQCAAAAAAQCQAAAAAQCgAAAAAQCwAAAAAQDAAAAAAQDQAAAAAIDgAAAAAQDwAAAAAQEAAAAAAQ EQAAAAAQEgAAAAAQEwAAAAAQFAAAAAAQ//8AAAAAAAAAAIYGAAB5fQAABQAAQgEAAAD/////BQA8 QgEAAAD/////DgAAAAQgAAABAAEAoHqZAAAAAAAAIAEAAQACAKB6mQAAAAAABCABABsAAwCgepkA AAAAAAAgAQAdAAQAoHqZAAAAAAAEIAEAKgAFAKB6mQAAAAAAACABABcABgCgepkAAAAAAAQgAQAd AAcAoHqZAAAAAAAAIAEAIQAIAKB6mQAAAAAABCAAAC4ACQCgepkAAAAAAAAgAQAcAAoAoHqZAAAA AAAEIAEAKgALAKB6mQAAAAAAACABACoADACgepkAAAAAAAQkAQAPAA0AoHqZAAAAAAAAJAEAGAAO AKB6mQAAAAAAAAAAAIYGAABgDgAA7xYAAHQiAAAdKAAAeDEAAEE6AACmRwAA808AAKNbAAAhZgAA lWoAAAB7AAB5fQAAAAAcBQAAAQABAAAAAgALAAAAAwAbAQAABAAoAAAABQACAAAABgArAAAABwCW AAAACABMAAAACQARAAAACgC0AwAACwABAAAADAABAAAADQAAAAAAAAAAAAAAAAAIAAAAKgAAACsA AAAxAAAAWAAAAFkAAABuAAAAjwAAAJAAAACaAAAAwgAAANkAAADaAAAAswEAALQBAAC/AQAADQIA AA4CAAASAgAAaQIAAGoCAABzAgAAvwIAAMACAADcAgAA5wIAAOgCAADwAgAAOwQAADwEAABFBAAA hAYAAIYGAACLBgAAnwYAAL4GAAC/BgAACggAADQIAABTCAAAVAgAAKILAACxDAAAwgwAAOEMAADi DAAAYA4AAH8OAADIDgAAyQ4AAHgQAACIEAAAMxEAADQRAACVEwAApBUAAO4WAADvFgAAABcAAIAX AACBFwAAjRcAAOkXAABTGQAAVBkAAIgbAACJGwAA9xsAAPgbAAAmHAAAxRwAAC8dAABrHwAAbiAA AIggAADSIAAA8iAAACUiAAA2IgAAdCIAABAjAAARIwAAMSYAAFwmAABgJgAAfCYAAA4nAABWJwAA yCcAANgnAAAdKAAAOSgAANkoAAAvKQAAPisAAM0tAADOLQAA/i0AALEwAADBMAAAeDEAAJQxAADm MQAAzzIAANAyAADtMgAAlTMAAFY1AAADNgAABDYAABg2AACUNgAA0zYAANQ2AADIOAAASjkAAEE6 AABKOgAAajoAAE87AAD/OwAAAzwAACM8AAAtQAAANkAAAFZAAABXQAAAT0EAANlGAADzRgAAWUcA AKVHAACmRwAAgEgAAMBIAADzSAAAM0kAAGFJAACYSQAAIUoAADxKAAAoSwAA40sAAP9LAACATAAA 2EwAAN1OAAD5TgAAhk8AAPNPAAA/UAAAa1EAAOpTAAD4VAAABlUAACZVAACIWQAAtlkAAA9aAAAQ WgAAr1oAAMhaAADfWgAA9loAAE5bAACjWwAAxFsAAB1cAAAPXwAAGV8AAHJfAABzXwAArF8AALNf AADUXwAACmAAAB5gAAA/YAAAQGAAAGBhAACBYQAAgmEAAE9kAABSaAAAbmgAAH5pAAB/aQAAomkA AOlpAADraQAAFmoAABtqAAAnagAAKGoAAJVqAACXagAAQGsAAEFrAADxbQAA8m0AAH5uAACCbgAA Rm8AAEdvAABQbwAAxHAAAMVwAAAScQAAFXEAAChxAAApcQAALHEAAGpxAABrcQAAiHYAACh4AADZ eAAA83gAAA96AAAAewAAiHsAAPp7AAAKfQAADX0AAA99AAATfQAAF30AACJ9AAAmfQAAKn0AAC99 AAAzfQAAN30AAD19AABBfQAAU30AAFR9AABZfQAAXX0AAGF9AABlfQAAaX0AAG99AAB6fQAAAAEA ACIFAAB2OgIAAAEAAGwkAAADOgIAAAAAAAAAAADFjQQAAAEAACIFAAB2OgIAAAEAAGwkAAADOgIA AAAAAAAAAADFjQQAAAIAACIFAAB2OgIAAAEAAGwkAAADOgIAAAAAAAAAAAA7yAYAAAEAACIFAAB2 OgIAAAEAAEYOAAADOgIAAAEAAEYOAAADOgIAAAEAAEYOAAADOgIAAAIAAE4VAAADOgIAAAAAAAAA AABYAQkAAAEAACIFAAB2OgIAAAEAAGwkAAADOgIAAAAAAAAAAADFjQQAAAEAACIFAAB2OgIAAAEA AGwkAAADOgIAAAAAAAAAAAAulQkAAAEAACIFAAB2OgIAAAEAAGwkAAADOgIAAAAAAAAAAADFjQQA AAMAACIFAAB2OgIAAAEAAGwkAAADOgIAAAAAAAAAAACwAgkAAAEAACIFAAB2OgIAAAMAAGwkAAAD OgIAAAAAAAAAAACw1wcAAAEAACIFAAB2OgIAAAYAAGwkAAADOgIAAAAAAAAAAAC5hQ4AAAEAAJAk AACNrAIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAMAAJAkAAADOgIAAAEA AJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAUAAJAkAAADOgIAAAMAAJAkAAADOgIA AAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAQAAJAkAAADOgIAAgEAAJAkAAB4 XS4AAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAQAAJAkAAADOgIAAAEAAJAkAACBcwIAAAIAAJAk AAADOgIAAAEAAJAkAAADOgIAAAYAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEA AJAkAAADOgIAAAEAAJAkAAB2OgIAAAIAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAB2OgIA AAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAUAAJAkAAADOgIAAAEAAJAkAAAD OgIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAACBcwIAAAIAAJAkAAADOgIAAAEAAJAk AAADOgIAAAMAAJAkAAADOgIAAAMAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAEA AJAkAAADOgIAAAMAAJAkAAADOgIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAIAAJAkAAADOgIA AAEAAJAkAAADOgIAAAMAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAkAAB2OgIAAAEAAJAkAADA 5xsAAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAIAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAk AAADOgIAAAEAAJAkAABInh4AAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAUAAJAkAAADOgIAAAcA AJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAkAAB2OgIAAAEAAJAkAAB2OgIA AAIAAJAkAAADOgIAAAEAAJAkAAAkthsAAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAEAAJAkAAAD OgIAAAEAAJAkAAB2OgIAAAIAAJAkAAADOgIAAAQAAJAkAAADOgIAAAIAAJAkAAADOgIAAAEAAJAk AAADOgIAAAEAAJAkAACBcwIAAAIAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAMA AJAkAAADOgIAAAIAAJAkAAADOgIAAAMAAJAkAAADOgIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIA AAEAAJAkAAADOgIAAAIAAJAkAAADOgIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAAD OgIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAMAAJAkAAADOgIAAAsAAJAk AAADOgIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAIA AJAkAAADOgIAAAEAAJAkAADpXQIAAAEAAJAkAADpXQIAAAEAAJAkAADpXQIAAAEAAJAkAADpXQIA AAEAAJAkAADpXQIAAAIAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAMAAJAkAAADOgIAAAIAAJAkAAAD OgIAAAEAAJAkAABsdAoAAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAUAAJAkAAADOgIABP8AAJAk AAAL8iMAAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAkAAB2OgIAAAEA AJAkAAB2OgIAAAEAAJAkAAADOgIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIA AAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAIAAJAkAAADOgIAAAEAAJAkAADp XQIAAAEAAJAkAADpXQIAAAEAAJAkAADpXQIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAk AAB2OgIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAEA AJAkAAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIA AAEAAJAkAACBcwIAAAEAAJAkAAADOgIAAAEAAJAkAAADOgIAAAMAAJAkAAADOgIAAAEAAJAkAAAD OgIAAAEAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAkAAB2OgIAAAEAAJAkAACBcwIAAAMAAJAk AAADOgIAAAEAAJAkAAADOgIAAAEAAJAkAAB2OgIAAAEAAJAkAAADOgIAAAEAAJAkAAB4aEkAAAEA AJAkAAB2OgIAAAEAAIsCAAB2OgIAAAEAAFUgAAB2OgIAAAAAAAAAAADFjQQAAAEAAIsCAAADOgIA AAEAAIsCAAADOgIAAAIAAFUgAAADOgIAAAAAAAAAAAAAAAAAAAEAAIsCAAADOgIAAgAAAAAAAAAA AAAAAAEAAIsCAAADOgIAAAEAAIsCAAADOgIAAAIAAFUgAAADOgIAAAAAAAAAAACtnQUAAAEAAIsC AAADOgIAAAQAAFUgAAADOgIAAAAAAAAAAACzEQoAAAEAAIsCAAADOgIAAAEAAIsCAAADOgIAAAEA AFUgAAADOgIAAAAAAAAAAACqYwMAAAEAAIsCAAADOgIAAAEAAFUgAAADOgIAAAAAAAAAAACqYwMA AAEAAJAkAAADOgIAAAQAAJAkAAADOgIAAAIAAJAkAAADOgIAAAEAAJAkAAADOgIAAAMAAJAkAAAD OgIAAAIAAJAkAAB2OgIAAAIAAJAkAAD7MQIAAAIAAJAkAAD7MQIAAAIAAJAkAAD7MQIAAAEAAJAk AAADOgIAAgIAAPAAAABHVgEAAAIAAJkAAABHVgEAAAEAALQAAABHVgEAAAIAAPMCAAB2OgIAAAIA AJkAAABHVgEAAAEAALQAAABHVgEAAAIAAJsBAAB2OgIAAAIAAJkAAABHVgEAAAIAAKYAAABHVgEA AAIAAPAAAABHVgEAAAIAAKAAAABHVgEAAAIAABQFAABqAQIAAgIAAPAAAABHVgEAAAIAAPYAAABH VgEAAAIAAJkAAABHVgEAAAIAAJkAAABHVgEAAAIAAAoBAAB2OgIAAAIAAKYAAABHVgEAAAIAAPAA AABHVgEAAAIAAJECAABeyAEAAAAAAIgQAACVEwAAmhQAAKQVAAClFQAA7hYAAO8WAAAAFwAAgBcA AIEXAACNFwAAUxkAAFQZAACIGwAAiRsAAPcbAAD4GwAAen0AAIqNADAAMAAAAAAAAAEAAAAAAAAA AAAAAAQStwdajgAwHDAAAAEAAAAEErcADY0AMF0OAAAEErcHWo4AMBwwAAACAAAABBK3AA2NADBz DwAABBK3B1qOADAcMAAABAAAAAQStwANjQAwchAAAAQStwdajgAwHDAAAAUAAAAEErcADY0AMHkR AAAEErcHWo4AMBwwAAAGAAAABBK3AA2NADB6EQAABBK3B1qOADAcMAAABwAAAAQStwANjQAwsBIA AAQStwdajgAwHDAAAAgAAAAEErcADY0AMLESAAAEErcHUo4AMBwwAAAJAAAABBK3AA2NADDCEgAA BBK3B1KOADAcMAAACgAAAAQStwANjQAwRBMAAAQStwdajgAwHDAAAAsAAAAEErcADY0AMEUTAAAE ErcHUo4AMBwwAAAMAAAABBK3AA2NADBREwAABBK3B1KOADAcMAAADQAAAAQStwANjQAwtxQAAAQS twdSjgAwHDAAAA4AAAAEErcADY0AMLgUAAAEErcHUo4AMBwwAAAPAAAABBK3AA2NADDuFgAABBK3 B1KOADAcMAAAEAAAAAQStwANjQAw7xYAAAQStwdSjgAwHDAAABEAAAAEErcADY0AMFwXAAAEErcH mgAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAABwAAAAAIAAAAKgAAACsAAAAxAAAAWAAAAFkAAABu AAAAjwAAAJAAAACaAAAAwgAAANkAAADaAAAAswEAALQBAAC/AQAADQIAAA4CAAASAgAAaQIAAGoC AABzAgAAvwIAAMACAADcAgAA5wIAAOgCAADwAgAAOwQAADwEAABFBAAAhAYAAIUGAACGBgAAiwYA AJ8GAAC+BgAAvwYAAAoIAAA0CAAAUwgAAFQIAAA9CgAAogsAALEMAADCDAAA4QwAAOIMAABgDgAA fw4AAMgOAADJDgAAeBAAAIgQAAAzEQAANBEAAJUTAACWEwAAmhQAAJsUAACkFQAApRUAAO4WAADv FgAAABcAAIAXAACBFwAAjRcAAOkXAADqFwAAUxkAAFQZAACIGwAAiRsAAPcbAAD4GwAAJhwAAMUc AAAvHQAAHx4AAGsfAABuIAAAiCAAANIgAADyIAAAJSIAADYiAAB0IgAAECMAABEjAAAGJAAAUiUA ADEmAABcJgAAYCYAAHwmAADEJgAADicAAFYnAADIJwAA2CcAAB0oAAA5KAAAiigAANkoAAAvKQAA PisAAM0tAADOLQAA/i0AABYuAACxMAAAwTAAAHgxAACUMQAA5jEAAE4yAADPMgAA0DIAAO0yAACV MwAAVjUAAAQ2AAAYNgAAlDYAANM2AADUNgAA/TcAAMg4AABKOQAAQToAAEo6AABqOgAAazoAAE87 AAD/OwAAAzwAACM8AAAkPAAA1T0AAC1AAAA2QAAAVkAAAFdAAABPQQAA9UUAANlGAADzRgAAWUcA AKVHAACmRwAAgEgAAMBIAADzSAAAM0kAAGFJAACYSQAAIUoAADxKAAAoSwAA40sAAP9LAACATAAA 2EwAAN1OAAD5TgAAhk8AAPNPAAAVUAAAP1AAAGRQAABrUQAAj1EAAOpTAADrUwAA+FQAAAZVAAAm VQAAJ1UAAN9WAAA7WAAAiFkAALZZAAAPWgAAEFoAAK9aAADIWgAA31oAAPZaAABOWwAAo1sAAMRb AAAdXAAAHlwAACRdAAD1XQAAD18AABlfAAByXwAAc18AAKxfAACzXwAA1F8AANVfAAAKYAAAHmAA AD9gAABAYAAALmEAAGBhAACBYQAAgmEAAIlhAABPZAAAWGQAAFJoAABuaAAAfmkAAH9pAACiaQAA 6WkAAOtpAAAWagAAG2oAACdqAAAoagAAMGoAAJRqAACVagAAl2oAAEBrAABBawAAQ2sAAPFtAADy bQAA9G0AAH1uAAB+bgAAgm4AAEZvAABHbwAAUG8AAMRwAADFcAAAyHAAABFxAAAScQAAFXEAAChx AAApcQAALHEAAGpxAABrcQAAbHEAADNzAABkdQAAfXUAAHp9AACrAAAAXzAAAAAAAAAAgAAAAIAB AAAAAAAAAKAHqwAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACgB5sAAAAAMAAAAAAAAACAAAAAgAEA AAQAAAAAoAerAAAAXzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHqwAAAFcwAAAAAAAAAIAAAACAAQAA AAAAAACgB5sAAAAAMAAAAAAAAACAAAAAgAEAAAQAAAAAoAerAAAAXzAAAAAAAAAAgAAAAIABAAAA AAAAAKAHqwAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACgB5sAAAAAMAAAAAAAAACAAAAAgAEAAAQA AAAAoAerAAAAXzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHqwAAAFcwAAAAAAAAAIAAAACAAQAAAAAA AACAB6sAAABXMAAAAAAAAACAAAAAgAEAAAAAAAAAgAerAAAAVzAAAAAAAAAAgAAAAIABAAAAAAAA AKAHqwAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACgB5sAAAAAMAAAAAAAAACAAAAAgAEAAAQAAAAA oAerAAAAXzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHqwAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACg B5sAAAAAMAAAAAAAAACAAAAAgAEAAAQAAAAAoAerAAAAXzAAAAAAAAAAgAAAAIABAAAAAAAAAKAH qwAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACgB5sAAAAAMAAAAAAAAACAAAAAgAEAAAQAAAAAoAer AAAAXzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHqwAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACgB5sA AAAAMAAAAAAAAACAAAAAgAEAAAQAAAAAoAerAAAAXzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHqwAA AFcwAAAAAAAAAIAAAACAAQAAAAAAAACgB5sAAAAAMAAAAAAAAACAAAAAgAEAAAQAAAAAoAerAAAA XzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHqwAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACgB5sAAAAA MAAAAAAAAACAAAAAgAEAAAQAAAAAoAerAAAAXzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHqwAAAFcw AAAAAAAAAIAAAACAAQAAAAAAAACgB5sAAAAAMAAAAAAAAACAAAAAgAEAAAQAAAAAoAeaAAAAADAA AAAAAAAAgAAAAIAAAAAAAAAAAIAHGgEhIAIwAAAAAAAAAIAAAACAAAAAAAAAAACAByoAAAADMAAA AAAAAACAhgYAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgIsGAAAAAAAAAAAAAIAHmgAAAA8wAAAA AAAAAICLBgAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACAiwYAAAAAAAAAAAAAgAcqAAAAAzAAAAAA AAAAgIYGAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIAKCAAAAAAAAAAAAACAB5oAAAAAMAAAAAAA AACACggAAAAAAAAAAAAAgAeaAAAAADAAAAAAAAAAgAoIAAAAAAAAAAAAAIAHmgAAAAAwAAAAAAAA AIAKCAAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACACggAAAAAAAAAAAAAgAcqAhggAzAAAAAAAAAA gIYGAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAICxDAAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA sQwAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgLEMAAAAAAAAAAAAAIAHmgAAAFkwAAAAAAAAAICx DAAAAAAAAAAAAACAB5oAAAAbMAAAAAAAAACAsQwAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgLEM AAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAICxDAAAAAAAAAAAAACAByoCGCADMAEAAAAAAACAhgYA AAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgFsQAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIBbEAAA AAAAAAAAAACAB5oAAAAPMAAAAAAAAACAWxAAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgFsQAAAA AAAIAAAAAIAHmgAAAA8wAAAAAAAAAIBbEAAAAAAACAAAAACIB5oAAAAPMAAAAAAAAACAWxAAAAAA ABAAAAAAiAeaAAAADzAAAAAAAAAAgFsQAAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAIBbEAAAAAAA EAAAAACAB5oAAAAPMAAAAAAAAACAWxAAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgFsQAAAAAAAQ AAAAAIAHOgMYIAQwAAAAAFsQAABbEAAAAAAAEAAAAACAB5IAAAAPMAAAAAAAAACA0hYAAAAAABAA AAAAgAeSAAAADzAAAAAAAAAAgNIWAAAAAAAQAAAAAIAHOgMYIAQwAQAAAFsQAABbEAAAAAAAEAAA AACAB5IAAAAPMAAAAAAAAACAZBcAAAAAABAAAAAAgAeSAAAADzAAAAAAAAAAgGQXAAAAAAAQAAAA AIAHkgAAAA8wAAAAAAAAAIBkFwAAAAAAEAAAAACAB5IAAAAPMAAAAAAAAACAZBcAAAAAABAAAAAA gAeSAAAADzAAAAAAAAAAgGQXAAAAAAAQAAAAAIAHkgAAAA8wAAAAAAAAAIBkFwAAAAAAEAAAAACA B5IAAAAPMAAAAAAAAACAZBcAAAAAABAAAAAAgAeSAAAADzAAAAAAAAAAgGQXAAAAAAAQAAAAAIAH KgIYIAMwAgAAAAAAAICGBgAAAAAAEAAAAACAB5oAAAAPMAAAAAAAAACA2xsAAAAAABAAAAAAgAea AAAADzAAAAAAAAAAgNsbAAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAIDbGwAAAAAAEAAAAACAB5oA AAAPMAAAAAAAAACA2xsAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgNsbAAAAAAAQAAAAAIAHOgMY IAQwAAAAANsbAADbGwAAAAAAEAAAAACAB5oAAAAPMAAAAAAAAACAUSAAAAAAABAAAAAAgAeaAAAA DzAAAAAAAAAAgFEgAAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAIBRIAAAAAAAEAAAAACAByoCGCAD MAMAAAAAAACAhgYAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgAgiAAAAAAAQAAAAAIAHmgAAAA8w AAAAAAAAAIAIIgAAAAAAEAAAAACAB5oAAAAPMAAAAAAAAACACCIAAAAAABAAAAAAgAeaAAAADzAA AAAAAAAAgAgiAAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAIAIIgAAAAAAEAAAAACAB5oAAAAPMAAA AAAAAACACCIAAAAAABAAAAAAgAc6AxggBDAAAAAACCIAAAgiAAAAAAAQAAAAAIAHOgQYIAQwAAAA ABQmAAAIIgAAAAAAEAAAAACAB5oAAAAPMAAAAAAAAACAPyYAAAAAABAAAAAAgAeaAAAAGzAAAAAA AAAAgD8mAAAAAAAQAAAAAIAHmgAlIGswAAAAAAAAAIA/JgAAAAAAEAAAAACAB5oAJSBrMAEAAAAA AACAPyYAAAAAABAAAAAAgAeaACUgazACAAAAAAAAgD8mAAAAAAAQAAAAAIAHOgQYIAQwAQAAABQm AAAIIgAAAAAAEAAAAACAB5oAAAAPMAAAAAAAAACAqycAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAA gKsnAAAAAAAQAAAAAIAHmgAAABswAAAAAAAAAICrJwAAAAAAEAAAAACAB5oAJiBrMAAAAAAAAACA qycAAAAAABAAAAAAgAeaACYgazABAAAAAAAAgKsnAAAAAAAQAAAAAIAHmgAmIGswAgAAAAAAAICr JwAAAAAAEAAAAACAB5oAJiBrMAMAAAAAAACAqycAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgKsn AAAAAAAQAAAAAIAHOgMYIAQwAQAAAAgiAAAIIgAAAAAAEAAAAACABzoEGCAEMAAAAACxLQAACCIA AAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgOEtAAAAAAAQAAAAAIAHOgQYIAQwAQAAALEtAAAIIgAA AAAAEAAAAACAB5oAAAAPMAAAAAAAAACAlDAAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgJQwAAAA AAAQAAAAAIAHmgAAABswAAAAAAAAAICUMAAAAAAAEAAAAACAB5oAJiBrMAQAAAAAAACAlDAAAAAA ABAAAAAAgAeaACYgazAFAAAAAAAAgJQwAAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAICUMAAAAAAA EAAAAACABzoDGCAEMAIAAAAIIgAACCIAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgLMyAAAAAAAQ AAAAAIAHOkMYIAQwAgAAAAgiAAAIIgAAAAAAEAAAAACAB5oAAAAPMAAAAAAAAACAszIAAAAAABAA AAAAgAcqAhggAzAEAAAAAAAAgIYGAAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAIC9NAAAAAAAEAAA AACAB5oAAAAPMAAAAAAAAACAvTQAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgL00AAAAAAAQAAAA AIAHmgAAAAAwAAAAAAAAAIC9NAAAAAAAEAAAAACAB5oAAAAAMAAAAAAAAACAvTQAAAAAABAAAAAA gAeaAAAAADAAAAAAAAAAgL00AAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAIC9NAAAAAAAEAAAAACA ByoCGCADMAUAAAAAAACAhgYAAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgPo4AAAAAAAQAAAAAIAH mgAAAAAwAAAAAAAAAID6OAAAAAAAEAAAAACAB5oAAAAAMAAAAAAAAACA+jgAAAAAABAAAAAAgAea AAAAADAAAAAAAAAAgPo4AAAAAAAQAAAAAIAHKgIYIAMwBgAAAAAAAICGBgAAAAAAEAAAAACAB5oA AAAPMAAAAAAAAACAuDoAAAAAABAAAAAAgAeaAAAAADAAAAAAAAAAgLg6AAAAAAAQAAAAAIAHmgAA AAAwAAAAAAAAAIC4OgAAAAAAEAAAAACAB5oAAAAAMAAAAAAAAACAuDoAAAAAABAAAAAAgAcqAhgg AzAHAAAAAAAAgIYGAAAAAAAQAAAAAIAHmgAAAA8wAAAAAAAAAIDmPgAAAAAAEAAAAACAB5oAAAAP MAAAAAAAAACA5j4AAAAAABAAAAAAgAeaAAAADzAAAAAAAAAAgOY+AAAAAAAQAAAAAIAHmgAAAA8w AAAAAAAAAIDmPgAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA5j4AAAAAAAAAAAAAgAcqAhggAzAI AAAAAAAAgIYGAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAICLRQAAAAAAAAAAAACAB5oAAAAPMAAA AAAAAACAi0UAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgItFAAAAAAAAAAAAAIAHmgAAAA8wAAAA AAAAAICLRQAAAAAAAAAAAACAB5oAAyA3MAAAAAAAAACAi0UAAAAAAAAAAAAAgAeaAAMgNzABAAAA AAAAgItFAAAAAAAAAAAAAIAHmgADIDcwAgAAAAAAAICLRQAAAAAAAAAAAACAB5oAAyA3MAMAAAAA AACAi0UAAAAAAAAAAAAAgAeaAAMgNzAEAAAAAAAAgItFAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAA AICLRQAAAAAAAAAAAACABzoDGCAEMAAAAACLRQAAi0UAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAA gNNIAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIDTSAAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA 00gAAAAAAAAAAAAAgAeaAAAAGzAAAAAAAAAAgNNIAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIDT SAAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA00gAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgNNI AAAAAAAAAAAAAIAHmgAAABswAAAAAAAAAIDTSAAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA00gA AAAAAAAAAAAAgAc6AxggBDABAAAAi0UAAItFAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIClTgAA AAAAAAAAAACABzoDGCAEMAIAAACLRQAAi0UAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgO5OAAAA AAAAAAAAAIAHOgMYIAQwAwAAAItFAACLRQAAAAAAAAAAAACAB5oAAAAAMAAAAAAAAACA108AAAAA AAAAAAAAgAeaAAAAADAAAAAAAAAAgNdPAAAAAAAAAAAAAIAHmgAAAAAwAAAAAAAAAIDXTwAAAAAA AAAAAACAByoCGCADMAkAAAAAAACAhgYAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgGRTAAAAAAAA AAAAAIAHmgAAAA8wAAAAAAAAAIBkUwAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACAZFMAAAAAAAAA AAAAgAeaAAAADzAAAAAAAAAAgGRTAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIBkUwAAAAAAAAAA AACABzoDGCAEMAAAAABkUwAAZFMAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgPRXAAAAAAAAAAAA AIAHmgAAAA8wAAAAAAAAAID0VwAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA9FcAAAAAAAAAAAAA gAeaAAMgNzAFAAAAAAAAgPRXAAAAAAAAAAAAAIAHmgADIDcwBgAAAAAAAID0VwAAAAAAAAAAAACA B5oAAyA3MAcAAAAAAACA9FcAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgPRXAAAAAAAAAAAAAIAH mgAAAA8wAAAAAAAAAID0VwAAAAAAAAAAAACABzoDGCAEMAEAAABkUwAAZFMAAAAAAAAAAAAAgAea AAAADzAAAAAAAAAAgA9aAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIAPWgAAAAAAAAAAAACAB5oA AAAPMAAAAAAAAACAD1oAAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgA9aAAAAAAAAAAAAAIAHmgAA AA8wAAAAAAAAAIAPWgAAAAAAAAAAAACABzoDGCAEMAIAAABkUwAAZFMAAAAAAAAAAAAAgAeaAAAA DzAAAAAAAAAAgHtdAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIB7XQAAAAAAAAAAAACAB5oAAAAP MAAAAAAAAACAe10AAAAAAAAAAAAAgAcqAhggAzAKAAAAAAAAgIYGAAAAAAAAAAAAAIAHmgAAAA8w AAAAAAAAAIAYXgAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACAGF4AAAAAAAAAAAAAgAeaAAAADzAA AAAAAAAAgBheAAAAAAAAAAAAAIAHKgIYIAMwCwAAAAAAAICGBgAAAAAAAAAAAACAB5oAAAAPMAAA AAAAAACAdl4AAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgHZeAAAAAAAAAAAAAIAHmgAAAA8wAAAA AAAAAIB2XgAAAAAAAAAAAACAByoCGCADMAwAAAAAAACAhgYAAAAAAAAAAAAAgAeaAAAADzAAAAAA AAAAgJpfAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAICaXwAAAAAAAAAAAACABzoDGCAEMAAAAACa XwAAml8AAAAAAAAAAAAAgAeaAAAADzAAAAAAAAAAgO5fAAAAAAAAAAAAAIAHOgMYIAQwAQAAAJpf AACaXwAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACAu2IAAAAAAAAAAAAAgAcqAhggAzANAAAAAAAA gIYGAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIC+ZgAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA vmYAAAAAAAAAAAAAgAc6AwogBDAAAAAAAAAAgL5mAAAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIDr ZwAAAAAAAAAAAACAB5oAAAAPMAAAAAAAAACA62cAAAAAAAAAAAAAgAeaAAAAGzAAAAAAAAAAgOtn AAAAAAAAAAAAAIAHqwAAAGkwAAAAAAAAAIDrZwAAAQAAAAAAAACgB6sAAABpMAAAAAAAAACA62cA AAEAAAAAAAAAoAebAAAAADAAAAAAAAAAgOtnAAABAAAEAAAAAKAHqwAAAAAwAAAAAAAAAIDrZwAA AQAAAAAAAACgB6sAAAAAMAAAAAAAAACA62cAAAEAAAAAAAAAoAebAAAAADAAAAAAAAAAgOtnAAAB AAAEAAAAAKAHqwAAAFcwAAAAAAAAAIDrZwAAAQAAAAAAAACgB6sAAABXMAAAAAAAAACA62cAAAEA AAAAAAAAoAebAAAAADAAAAAAAAAAgOtnAAABAAAEAAAAAKAHqwAAAFcwAAAAAAAAAIDrZwAAAQAA AAAAAACgB6sAAABXMAAAAAAAAACA62cAAAEAAAAAAAAAoAebAAAAADAAAAAAAAAAgOtnAAABAAAE AAAAAKAHqwAAAFcwAAAAAAAAAIDrZwAAAQAAAAAAAACgB6sAAABXMAAAAAAAAACA62cAAAEAAAAA AAAAoAebAAAAADAAAAAAAAAAgOtnAAABAAAEAAAAAKAHqwAAAFcwAAAAAAAAAIDrZwAAAQAAAAAA AACgB6sAAABXMAAAAAAAAACA62cAAAEAAAAAAAAAoAebAAAAADAAAAAAAAAAgOtnAAABAAAEAAAA AKAHqwAAAFcwAAAAAAAAAIDrZwAAAQAAAAAAAACgB6sAAABXMAAAAAAAAACA62cAAAEAAAAAAAAA oAebAAAAADAAAAAAAAAAgOtnAAABAAAEAAAAAKAHqwAAAFcwAAAAAAAAAIDrZwAAAQAAAAAAAACg B6sAAABXMAAAAAAAAACA62cAAAEAAAAAAAAAoAebAAAAADAAAAAAAAAAgOtnAAABAAAEAAAAAKAH qwAAAFcwAAAAAAAAAIDrZwAAAQAAAAAAAACgB6sAAABXMAAAAAAAAACA62cAAAEAAAAAAAAAoAeb AAAAADAAAAAAAAAAgOtnAAABAAAEAAAAAKAHqwAAAFcwAAAAAAAAAIDrZwAAAQAAAAAAAACgB6sA AABXMAAAAAAAAACA62cAAAEAAAAAAAAAoAebAAAAADAAAAAAAAAAgOtnAAABAAAEAAAAAKAHmgAA AA8wAAAAAAAAAIDrZwAAAAAAgAAAAACAB5oAAAAPMAAAAAAAAACA62cAAAAAAIAAAAAAgAeaAAAA DzAAAAAAAAAAgOtnAAAAAACAAAAAAIgHOhMKIAQwAQAAAAAAAIC+ZgAAAAAAgAAAAACIB5oAAAAA MAAAAAAAAACAAAAAgAAAAAAAAAAAAAcAAAAACAAAACoAAAArAAAAMQAAAFgAAABZAAAAbgAAAI8A AACQAAAAmgAAAMIAAADZAAAA2gAAALMBAAC0AQAAvwEAAA0CAAAOAgAAEgIAAGkCAABqAgAAcwIA AL8CAADAAgAA3AIAAOcCAADoAgAA8AIAADsEAAA8BAAARQQAAIQGAACFBgAAhgYAAIsGAACfBgAA vgYAAL8GAAAKCAAANAgAAFMIAABUCAAAPQoAAKILAACxDAAAwgwAAOEMAADiDAAAYA4AAH8OAADI DgAAyQ4AAHgQAACIEAAAMxEAADQRAACVEwAAlhMAAJoUAACbFAAApBUAAKUVAADuFgAA7xYAAAAX AACAFwAAgRcAAI0XAADpFwAA6hcAAFMZAABUGQAAiBsAAIkbAAD3GwAA+BsAACYcAADFHAAALx0A AB8eAABrHwAAbiAAAIggAADSIAAA8iAAACUiAAA2IgAAdCIAABAjAAARIwAABiQAAFIlAAAxJgAA XCYAAGAmAAB8JgAAxCYAAA4nAABWJwAAyCcAANgnAAAdKAAAOSgAAIooAADZKAAALykAAD4rAADN LQAAzi0AAP4tAAAWLgAAsTAAAMEwAAB4MQAAlDEAAOYxAABOMgAAzzIAANAyAADtMgAAlTMAADk1 AABWNQAAAzYAAAQ2AAAYNgAAlDYAANM2AADUNgAA/TcAAMg4AABKOQAAQToAAEo6AABqOgAAazoA AE87AAD/OwAAAzwAACM8AAAkPAAA1T0AAC1AAAA2QAAAVkAAAFdAAABPQQAA9UUAANlGAADzRgAA WUcAAKVHAACmRwAAgEgAAMBIAADzSAAAM0kAAGFJAACYSQAAIUoAADxKAAAoSwAA40sAAP9LAACA TAAA2EwAAN1OAAD5TgAAhk8AAPNPAAAVUAAAP1AAAGRQAABrUQAAj1EAAOpTAADrUwAA+FQAAAZV AAAmVQAAJ1UAAN9WAAA7WAAAiFkAALZZAAAPWgAAEFoAAK9aAADIWgAA31oAAPZaAABOWwAAo1sA AMRbAAAdXAAAHlwAACRdAAD1XQAAD18AABlfAAByXwAAc18AAKxfAACzXwAA1F8AANVfAAAKYAAA HmAAAD9gAABAYAAALmEAAGBhAACBYQAAgmEAAIlhAABPZAAAWGQAAFJoAABuaAAAfmkAAH9pAACi aQAA6WkAAOtpAAAWagAAG2oAACdqAAAoagAAMGoAAJRqAACVagAAl2oAAEBrAABBawAAQ2sAAPFt AADybQAA9G0AAH1uAAB+bgAAgm4AAEZvAABHbwAAUG8AAMRwAADFcAAAyHAAABFxAAAScQAAFXEA AChxAAApcQAALHEAAGpxAABrcQAAbHEAADNzAABkdQAAfXUAAF92AACIdgAAKHgAANl4AADaeAAA 83gAAA96AACXegAAAHsAAIh7AAD6ewAAanwAAP58AAAAfQAAAX0AAAN9AAAEfQAABn0AAAd9AAAJ fQAACn0AAAt9AAAMfQAADX0AAA59AAAPfQAAEn0AABN9AAAWfQAAF30AACF9AAAifQAAJX0AACZ9 AAApfQAAKn0AAC59AAAvfQAAMn0AADN9AAA2fQAAN30AADx9AAA9fQAAQH0AAEF9AABSfQAAU30A AFR9AABYfQAAWX0AAFx9AABdfQAAYH0AAGF9AABkfQAAZX0AAGh9AABpfQAAbn0AAG99AAB2fQAA d30AAHp9AACpAAAAXzAAAAAAAAAAgAAAAIABAADQAAAAACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA 0AAAAAAgAJkAAAAAMAAAAAAAAACAAAAAgAEAANQAAAAAIACpAAAAXzAAAAAAAAAAgAAAAIABAADQ AAAAACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAAAAAgAEAANQA AAAAIACpAAAAXzAAAAAAAAAAgAAAAIABAADQAAAAACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA0AAA AAAgAJkAAAAAMAAAAAAAAACAAAAAgAEAANQAAAAAIACpAAAAXzAAAAAAAAAAgAAAAIABAADQAAAA ACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA0AAAAAAAAKkAAABXMAAAAAAAAACAAAAAgAEAANAAAAAA AACpAAAAVzAAAAAAAAAAgAAAAIABAADQAAAAACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA0AAAAAAg AJkAAAAAMAAAAAAAAACAAAAAgAEAANQAAAAAIACpAAAAXzAAAAAAAAAAgAAAAIABAADQAAAAACAA qQAAAFcwAAAAAAAAAIAAAACAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAAAAAgAEAANQAAAAAIACp AAAAXzAAAAAAAAAAgAAAAIABAADQAAAAACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA0AAAAAAgAJkA AAAAMAAAAAAAAACAAAAAgAEAANQAAAAAIACpAAAAXzAAAAAAAAAAgAAAAIABAADQAAAAACAAqQAA AFcwAAAAAAAAAIAAAACAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAAAAAgAEAANQAAAAAIACpAAAA XzAAAAAAAAAAgAAAAIABAADQAAAAACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA0AAAAAAgAJkAAAAA MAAAAAAAAACAAAAAgAEAANQAAAAAIACpAAAAXzAAAAAAAAAAgAAAAIABAADQAAAAACAAqQAAAFcw AAAAAAAAAIAAAACAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAAAAAgAEAANQAAAAAIACpAAAAXzAA AAAAAAAAgAAAAIABAADQAAAAACAAqQAAAFcwAAAAAAAAAIAAAACAAQAA0AAAAAAgAJkAAAAAMAAA AAAAAACAAAAAgAEAANQAAAAAIACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAGAEhIAIwAAAA AAAAAIAAAACAAAAAAAAAAAAAACgAAAADMAAAAAAAAACAhgYAAAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgIsGAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAICLBgAAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAiwYAAAAAAAAAAAAAgAAoAAAAAzAAAAAAAAAAgIYGAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAKCAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACACggAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAA gAoIAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAKCAAAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA CggAAAAAAAAAAAAAAAAoAhggAzAAAAAAAAAAgIYGAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAICx DAAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAsQwAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgLEM AAAAAAAAAAAAAIAAmAAAAFkwAAAAAAAAAICxDAAAAAAAAAAAAACAAJgAAAAbMAAAAAAAAACAsQwA AAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgLEMAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAICxDAAA AAAAAAAAAACAACgCGCADMAEAAAAAAACAhgYAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgHgQAAAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIB4EAAAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAeBAAAAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgHgQAAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIB4EAAAAAAA AAAAAAAIAJgAAAAPMAAAAAAAAACAeBAAAAAAAAAAAAAACACYAAAADzAAAAAAAAAAgHgQAAAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIB4EAAAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAeBAAAAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgHgQAAAAAAAAAAAAAIAAOAMYIAQwAAAAAHgQAAB4EAAAAAAAAAAA AACAAJAAAAAPMAAAAAAAAACA7xYAAAAAAAAAAAAAgACQAAAADzAAAAAAAAAAgO8WAAAAAAAAAAAA AIAAOAMYIAQwAQAAAHgQAAB4EAAAAAAAAAAAAACAAJAAAAAPMAAAAAAAAACAgRcAAAAAAAAAAAAA AACQAAAADzAAAAAAAAAAgIEXAAAAAAAAAAAAAAAAkAAAAA8wAAAAAAAAAICBFwAAAAAAAAAAAAAA AJAAAAAPMAAAAAAAAACAgRcAAAAAAAAAAAAAAACQAAAADzAAAAAAAAAAgIEXAAAAAAAAAAAAAAAA kAAAAA8wAAAAAAAAAICBFwAAAAAAAAAAAAAAAJAAAAAPMAAAAAAAAACAgRcAAAAAAAAAAAAAAACQ AAAADzAAAAAAAAAAgIEXAAAAAAAAAAAAAIAAKAIYIAMwAgAAAAAAAICGBgAAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACA+BsAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgPgbAAAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAID4GwAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA+BsAAAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgPgbAAAAAAAAAAAAAAAAOAMYIAQwAAAAAPgbAAD4GwAAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAbiAAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgG4gAAAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIBuIAAAAAAAAAAAAAAAACgCGCADMAMAAAAAAACAhgYAAAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgCUiAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAlIgAAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAJSIAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgCUiAAAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAlIgAAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAJSIAAAAAAAAAAAAAgAA4AxggBDAAAAAA JSIAACUiAAAAAAAAAAAAAIAAOAQYIAQwAAAAADEmAAAlIgAAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAXCYAAAAAAAAAAAAAAACYAAAAGzAAAAAAAAAAgFwmAAAAAAAAAAAAAIAAmAAlIGswAAAAAAAA AIBcJgAAAAAAAAAAAACAAJgAJSBrMAEAAAAAAACAXCYAAAAAAAAAAAAAgACYACUgazACAAAAAAAA gFwmAAAAAAAAAAAAAIAAOAQYIAQwAQAAADEmAAAlIgAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA yCcAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgMgnAAAAAAAAAAAAAIAAmAAAABswAAAAAAAAAIDI JwAAAAAAAAAAAACAAJgAJiBrMAAAAAAAAACAyCcAAAAAAAAAAAAAgACYACYgazABAAAAAAAAgMgn AAAAAAAAAAAAAIAAmAAmIGswAgAAAAAAAIDIJwAAAAAAAAAAAACAAJgAJiBrMAMAAAAAAACAyCcA AAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgMgnAAAAAAAAAAAAAIAAOAMYIAQwAQAAACUiAAAlIgAA AAAAAAAAAACAADgEGCAEMAAAAADOLQAAJSIAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgP4tAAAA AAAAAAAAAIAAOAQYIAQwAQAAAM4tAAAlIgAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAsTAAAAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgLEwAAAAAAAAAAAAAIAAmAAAABswAAAAAAAAAICxMAAAAAAA AAAAAACAAJgAJiBrMAQAAAAAAACAsTAAAAAAAAAAAAAAgACYACYgazAFAAAAAAAAgLEwAAAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAICxMAAAAAAAAAAAAAAAADgDGCAEMAIAAAAlIgAAJSIAAAAAAAAA AAAAgACYAAAADzAAAAAAAAAAgNAyAAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIDQMgAAAAAAAAAA AACQADiDGCAEMAMAAAAlIgAAJSIAAAAAAAAAAAAAkACYAAAADzAAAAAAAAAAgDk1AAAAAAAAAAAA ABAAmAAAAA8wAAAAAAAAAIA5NQAAAAAAAAAAAACAACgCGCADMAQAAAAAAACAhgYAAAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAQ2AAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAENgAAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACABDYAAAAAAAAAAAAAgACYAAAAADAAAAAAAAAAgAQ2AAAAAAAAAAAAAAAA mAAAAAAwAAAAAAAAAIAENgAAAAAAAAAAAACAAJgAAAAAMAAAAAAAAACABDYAAAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAQ2AAAAAAAAAAAAAAAAKAIYIAMwBQAAAAAAAICGBgAAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAQToAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgEE6AAAAAAAAAAAAAAAAmAAA AAAwAAAAAAAAAIBBOgAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAQToAAAAAAAAAAAAAgAAoAhgg AzAGAAAAAAAAgIYGAAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAID/OwAAAAAAAAAAAAAAAJgAAAAA MAAAAAAAAACA/zsAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgP87AAAAAAAAAAAAAAAAmAAAAAAw AAAAAAAAAID/OwAAAAAAAAAAAACAACgCGCADMAcAAAAAAACAhgYAAAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgC1AAAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAtQAAAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACALUAAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgC1AAAAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAtQAAAAAAAAAAAAACAACgCGCADMAgAAAAAAACAhgYAAAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgNlGAAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIDZRgAAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACA2UYAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgNlGAAAAAAAAAAAAAAAAmAADIDcwAAAAAAAA AIDZRgAAAAAAAAAAAAAAAJgAAyA3MAEAAAAAAACA2UYAAAAAAAAAAAAAAACYAAMgNzACAAAAAAAA gNlGAAAAAAAAAAAAAAAAmAADIDcwAwAAAAAAAIDZRgAAAAAAAAAAAAAAAJgAAyA3MAQAAAAAAACA 2UYAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgNlGAAAAAAAAAAAAAIAAOAMYIAQwAAAAANlGAADZ RgAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAIUoAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgCFK AAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAhSgAAAAAAAAAAAACAAJgAAAAbMAAAAAAAAACAIUoA AAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgCFKAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAhSgAA AAAAAAAAAACAAJgAAAAPMAAAAAAAAACAIUoAAAAAAAAAAAAAgACYAAAAGzAAAAAAAAAAgCFKAAAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAhSgAAAAAAAAAAAACAADgDGCAEMAEAAADZRgAA2UYAAAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgPNPAAAAAAAAAAAAAIAAOAMYIAQwAgAAANlGAADZRgAAAAAA AAAAAACAAJgAAAAPMAAAAAAAAACAP1AAAAAAAAAAAAAAAAA4AxggBDADAAAA2UYAANlGAAAAAAAA AAAAAIAAmAAAAAAwAAAAAAAAAIBrUQAAAAAAAAAAAACAAJgAAAAAMAAAAAAAAACAa1EAAAAAAAAA AAAAgACYAAAAADAAAAAAAAAAgGtRAAAAAAAAAAAAAIAAKAIYIAMwCQAAAAAAAICGBgAAAAAAAAAA AACAAJgAAAAPMAAAAAAAAACA+FQAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgPhUAAAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAID4VAAAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA+FQAAAAAAAAAAAAA gACYAAAADzAAAAAAAAAAgPhUAAAAAAAAAAAAAAAAOAMYIAQwAAAAAPhUAAD4VAAAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACAa1kAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgGtZAAAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAIBrWQAAAAAAAAAAAACAAJgAAyA3MAUAAAAAAACAa1kAAAAAAAAAAAAAgACY AAMgNzAGAAAAAAAAgGtZAAAAAAAAAAAAAIAAmAADIDcwBwAAAAAAAIBrWQAAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACAa1kAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgGtZAAAAAAAAAAAAAIAAOAMY IAQwAQAAANtUAADbVAAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAhlsAAAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgIZbAAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAICGWwAAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAhlsAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgIZbAAAAAAAAAAAAAAAAOAMYIAQw AgAAANtUAADbVAAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA8l4AAAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgPJeAAAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIDyXgAAAAAAAAAAAACAACgCGCADMAoA AAAAAACAhgYAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgI9fAAAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAICPXwAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAj18AAAAAAAAAAAAAAAAoAhggAzALAAAA AAAAgIYGAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIDtXwAAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACA7V8AAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgO1fAAAAAAAAAAAAAAAAKAIYIAMwDAAAAAAA AICGBgAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAEWEAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gBFhAAAAAAAAAAAAAIAAOAMYIAQwAAAAABFhAAARYQAAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA ZWEAAAAAAAAAAAAAgAA4AxggBDABAAAAEWEAABFhAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAy ZAAAAAAAAAAAAAAAACgCGCADMA0AAAAAAACAhgYAAAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgDVo AAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIA1aAAAAAAAAAAAAACAADgDCiAEMAAAAAAAAACANWgA AAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgGJpAAAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIBiaQAA AAAAAAAAAACAAJgAAAAbMAAAAAAAAACAYmkAAAAAAAAAAAAAgACpAAAAaTAAAAAAAAAAgGJpAAAB AADQAAAAACAAqQAAAGkwAAAAAAAAAIBiaQAAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAYmkAAAEA ANQAAAAAIACpAAAAADAAAAAAAAAAgGJpAAABAADQAAAAACAAqQAAAAAwAAAAAAAAAIBiaQAAAQAA 0AAAAAAgAJkAAAAAMAAAAAAAAACAYmkAAAEAANQAAAAAIACpAAAAVzAAAAAAAAAAgGJpAAABAADQ AAAAACAAqQAAAFcwAAAAAAAAAIBiaQAAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAYmkAAAEAANQA AAAAIACpAAAAVzAAAAAAAAAAgGJpAAABAADQAAAAACAAqQAAAFcwAAAAAAAAAIBiaQAAAQAA0AAA AAAgAJkAAAAAMAAAAAAAAACAYmkAAAEAANQAAAAAIACpAAAAVzAAAAAAAAAAgGJpAAABAADQAAAA ACAAqQAAAFcwAAAAAAAAAIBiaQAAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAYmkAAAEAANQAAAAA IACpAAAAVzAAAAAAAAAAgGJpAAABAADQAAAAACAAqQAAAFcwAAAAAAAAAIBiaQAAAQAA0AAAAAAg AJkAAAAAMAAAAAAAAACAYmkAAAEAANQAAAAAIACpAAAAVzAAAAAAAAAAgGJpAAABAADQAAAAACAA qQAAAFcwAAAAAAAAAIBiaQAAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAYmkAAAEAANQAAAAAIACp AAAAVzAAAAAAAAAAgGJpAAABAADQAAAAACAAqQAAAFcwAAAAAAAAAIBiaQAAAQAA0AAAAAAgAJkA AAAAMAAAAAAAAACAYmkAAAEAANQAAAAAIACpAAAAVzAAAAAAAAAAgGJpAAABAADQAAAAACAAqQAA AFcwAAAAAAAAAIBiaQAAAQAA0AAAAAAgAJkAAAAAMAAAAAAAAACAYmkAAAEAANQAAAAAIACpAAAA VzAAAAAAAAAAgGJpAAABAADQAAAAACAAqQAAAFcwAAAAAAAAAIBiaQAAAQAA0AAAAAAgAJkAAAAA MAAAAAAAAACAYmkAAAEAANQAAAAAIACYAAAADzAAAAAAAAAAgGJpAAAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIBiaQAAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAYmkAAAAAAAAAAAAACACYAAAADzAA AAAAAAAAgGJpAAAAAAAAAAAAAAgAmAAAAA8wAAAAAAAAAIBiaQAAAAAAAAAAAACAADgDCiAEMAEA AAAAAACANWgAAAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgEJ2AAAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIBCdgAAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAQnYAAAAAAAAAAAAAEAA4gwogBDACAAAA AAAAgDVoAAAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAADgAAAAEMAAAAAAA AACAAAAAgAAAAAAAAAAAEACYAAAAPDAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAADwwAAAAAAAA AIAAAACAAAAAAAAAAAAQAJgAAAA8MAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAAPDAAAAAAAAAA gAAAAIAAAAAAAAAAABAAmAAAADwwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA AAAAgAAAAAAAAAAAgAeYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIAA AACAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAeYAAAAADAAAAAAAAAAgAAA AIAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACAAAAA gAAAAAAAAAAAgAeYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIAAAACA AAAAAAAAAAAAAJhAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAeYAAAAADAAAAAAAAAAgAAAAIAA AAAAAAAAAIAHmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACAAAAAgAAA AAAAAAAAgAeYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIABmAAAAAAwAAAAAAAAAIAAAACAAAAA AAAAAACAB5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAGYAAAAADAAAAAAAAAAgAAAAIAAAAAA AAAAAIAHmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAAZgAAAAAMAAAAAAAAACAAAAAgAAAAAAA AAAAgAeYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIABmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAA AACAB5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAGYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAA AIAHmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAAZgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAA gAeYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIABmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACA B5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAGYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAH mAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAAZgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAeY AAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIABmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAB5gA AAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAGYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAHmAAA AAAwAAAAAAAAAIAAAACAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAGYAAAA ADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAAZgAAAAA MAAAAAAAAACAAAAAgAAAAAAAAAAAgAeYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIABmAAAAAAw AAAAAAAAAIAAAACAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAGYAAAAADAA AAAAAAAAgAAAAIAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAAZgAAAAAMAAA AAAAAACAAAAAgAAAAAAAAAAAgAeYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAABmAAAAAAwAAAA AAAAAIAAAACAAAAAAAAAAAAAB5gAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAAGYAAAAADAAAAAA AAAAgAAAAIAAAAAAAAAAAAAHSYgAMBUwAAAAAAAAAQAAAAIAAAAAAAAAAABDBwAAAAAIAAAAKgAA ACsAAAAxAAAAWAAAAFkAAABuAAAAjwAAAJAAAACaAAAAwgAAANkAAADaAAAAswEAALQBAAC/AQAA DQIAAA4CAAASAgAAaQIAAGoCAABzAgAAvwIAAMACAADcAgAA5wIAAOgCAADwAgAAOwQAADwEAABF BAAAhAYAAIUGAACGBgAAiwYAAJ8GAAC+BgAAvwYAAAoIAAA0CAAAUwgAAFQIAAA9CgAAogsAALEM AADCDAAA4QwAAOIMAABgDgAAfw4AAMgOAADJDgAAeBAAAIgQAAAzEQAANBEAAJUTAACWEwAAmhQA AJsUAACkFQAApRUAAO4WAADvFgAAABcAAIAXAACBFwAAjRcAAOkXAADqFwAAUxkAAFQZAACIGwAA iRsAAPcbAAD4GwAAJhwAAMUcAAAvHQAAHx4AAGsfAABuIAAAiCAAANIgAADyIAAAJSIAADYiAAB0 IgAAECMAABEjAAAGJAAAUiUAADEmAABcJgAAYCYAAHwmAADEJgAADicAAFYnAADIJwAA2CcAAB0o AAA5KAAAiigAANkoAAAvKQAAPisAAM0tAADOLQAA/i0AABYuAACxMAAAwTAAAHgxAACUMQAA5jEA AE4yAADPMgAA0DIAAO0yAACVMwAAOTUAAFY1AAADNgAABDYAABg2AACUNgAA0zYAANQ2AAD9NwAA yDgAAEo5AABBOgAASjoAAGo6AABrOgAATzsAAP87AAADPAAAIzwAACQ8AADVPQAALUAAADZAAABW QAAAV0AAAE9BAAD1RQAA2UYAAPNGAABZRwAApUcAAKZHAACASAAAwEgAAPNIAAAzSQAAYUkAAJhJ AAAhSgAAPEoAAChLAADjSwAA/0sAAIBMAADYTAAA3U4AAPlOAACGTwAA808AABVQAAA/UAAAZFAA AGtRAACPUQAA6lMAAOtTAAD4VAAABlUAACZVAAAnVQAA31YAADtYAACIWQAAtlkAAA9aAAAQWgAA r1oAAMhaAADfWgAA9loAAE5bAACjWwAAxFsAAB1cAAAeXAAAJF0AAPVdAAAPXwAAGV8AAHJfAABz XwAArF8AALNfAADUXwAA1V8AAApgAAAeYAAAP2AAAEBgAAAuYQAAYGEAAIFhAACCYQAAiWEAAE9k AABYZAAAUmgAAG5oAAB+aQAAf2kAAKJpAADpaQAA62kAABZqAAAbagAAJ2oAAChqAAAwagAAlGoA AJVqAACXagAAQGsAAEFrAABDawAA8W0AAPJtAAD0bQAAfW4AAH5uAACCbgAARm8AAEdvAABQbwAA xHAAAMVwAADIcAAAEXEAABJxAAAVcQAAKHEAAClxAAAscQAAanEAAGtxAABscQAAM3MAAGR1AAB9 dQAAX3YAAIh2AAAoeAAA2XgAANp4AADzeAAAD3oAAJd6AAAAewAAiHsAAPp7AABqfAAAen0AAKkA AABfMAAAAAAAAACAAAAAgAEAAAAAAAAAoAepAAAAVzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHmQAA AAAwAAAAAAAAAIAAAACAAQAABAAAAACgBakAAABfMAAAAAAAAACAAAAAgAEAAAAAAAAAoAepAAAA VzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHmQAAAAAwAAAAAAAAAIAAAACAAQAABAAAAACgBakAAABf MAAAAAAAAACAAAAAgAEAAAAAAAAAoAepAAAAVzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHmQAAAAAw AAAAAAAAAIAAAACAAQAABAAAAACgBakAAABfMAAAAAAAAACAAAAAgAEAAAAAAAAAoAepAAAAVzAA AAAAAAAAgAAAAIABAAAAAAAAAIAHqQAAAFcwAAAAAAAAAIAAAACAAQAAAAAAAACAB6kAAABXMAAA AAAAAACAAAAAgAEAAAAAAAAAoAepAAAAVzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHmQAAAAAwAAAA AAAAAIAAAACAAQAABAAAAACgBakAAABfMAAAAAAAAACAAAAAgAEAAAAAAAAAoAepAAAAVzAAAAAA AAAAgAAAAIABAAAAAAAAAKAHmQAAAAAwAAAAAAAAAIAAAACAAQAABAAAAACgBakAAABfMAAAAAAA AACAAAAAgAEAAAAAAAAAoAepAAAAVzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHmQAAAAAwAAAAAAAA AIAAAACAAQAABAAAAACgBakAAABfMAAAAAAAAACAAAAAgAEAAAAAAAAAoAepAAAAVzAAAAAAAAAA gAAAAIABAAAAAAAAAKAHmQAAAAAwAAAAAAAAAIAAAACAAQAABAAAAACgBakAAABfMAAAAAAAAACA AAAAgAEAAAAAAAAAoAepAAAAVzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHmQAAAAAwAAAAAAAAAIAA AACAAQAABAAAAACgBakAAABfMAAAAAAAAACAAAAAgAEAAAAAAAAAoAepAAAAVzAAAAAAAAAAgAAA AIABAAAAAAAAAKAHmQAAAAAwAAAAAAAAAIAAAACAAQAABAAAAACgBakAAABfMAAAAAAAAACAAAAA gAEAAAAAAAAAoAepAAAAVzAAAAAAAAAAgAAAAIABAAAAAAAAAKAHmQAAAAAwAAAAAAAAAIAAAACA AQAABAAAAACgBZgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAcYASEgAjAAAAAAAAAAgAAAAIAA AAAAAAAAAIAHKAAAAAMwAAAAAAAAAICGBgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAiwYAAAAA AAAAAAAAgAeYAAAADzAAAAAAAAAAgIsGAAAAAAAAAAAAAAAHmAAAAA8wAAAAAAAAAICLBgAAAAAA AAAAAAAABygAAAADMAAAAAAAAACAhgYAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgAoIAAAAAAAA AAAAAIAHmAAAAAAwAAAAAAAAAIAKCAAAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACACggAAAAAAAAA AAAAgAeYAAAAADAAAAAAAAAAgAoIAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIAKCAAAAAAAAAAA AACABygCGCADMAAAAAAAAACAhgYAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgLEMAAAAAAAAAAAA AIAHmAAAAA8wAAAAAAAAAICxDAAAAAAAGAAAAAAAAZgAAAAPMAAAAAAAAACAsQwAAAAAABgAAAAA AAGYAAAAWTAAAAAAAAAAgLEMAAAAAAAYAAAAAAABmAAAABswAAAAAAAAAICxDAAAAAAAAAAAAAAA B5gAAAAPMAAAAAAAAACAsQwAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgLEMAAAAAAAAAAAAAIAH KAIYIAMwAQAAAAAAAICGBgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAWxAAAAAAAAAAAAAAgAeY AAAADzAAAAAAAAAAgFsQAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIBbEAAAAAAAAAAAAACAB5gA AAAPMAAAAAAAAACAWxAAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgFsQAAAAAAAAAAAAAIgHmAAA AA8wAAAAAAAAAIBbEAAAAAAAAAAAAACIB5gAAAAPMAAAAAAAAACAWxAAAAAAAAAAAAAAgAeYAAAA DzAAAAAAAAAAgFsQAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIBbEAAAAAAAAAAAAACAB5gAAAAP MAAAAAAAAACAWxAAAAAAAAAAAAAAgAc4AxggBDAAAAAAWxAAAFsQAAAAAAAAAAAAAIAHkAAAAA8w AAAAAAAAAIDSFgAAAAAAAAAAAACAB5AAAAAPMAAAAAAAAACA0hYAAAAAAAAAAAAAgAc4AxggBDAB AAAAWxAAAFsQAAAAAAAAAAAAAIAHkAAAAA8wAAAAAAAAAIBkFwAAAAAAAAAAAACAB5AAAAAPMAAA AAAAAACAZBcAAAAAAAAAAAAAgAeQAAAADzAAAAAAAAAAgGQXAAAAAAAAAAAAAIAHkAAAAA8wAAAA AAAAAIBkFwAAAAAAAAAAAACAB5AAAAAPMAAAAAAAAACAZBcAAAAAAAAAAAAAgAeQAAAADzAAAAAA AAAAgGQXAAAAAAAAAAAAAIAHkAAAAA8wAAAAAAAAAIBkFwAAAAAAAAAAAACAB5AAAAAPMAAAAAAA AACAZBcAAAAAAAAAAAAAgAcoAhggAzACAAAAAAAAgIYGAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAA AIDbGwAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACA2xsAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAA gNsbAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIDbGwAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACA 2xsAAAAAAAAAAAAAgAc4AxggBDAAAAAA2xsAANsbAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIBR IAAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAUSAAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgFEg AAAAAAAAAAAAAIAHKAIYIAMwAwAAAAAAAICGBgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACACCIA AAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgAgiAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIAIIgAA AAAAAAAAAACAB5gAAAAPMAAAAAAAAACACCIAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgAgiAAAA AAAAAAAAAIAHmAAAAA8wAAAAAAAAAIAIIgAAAAAAAAAAAACABzgDGCAEMAAAAAAIIgAACCIAAAAA AAAAAAAAgAc4BBggBDAAAAAAFCYAAAgiAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIA/JgAAAAAA AAAAAACAB5gAAAAbMAAAAAAAAACAPyYAAAAAAAAAAAAAgAeYACUgazAAAAAAAAAAgD8mAAAAAAAA AAAAAIAHmAAlIGswAQAAAAAAAIA/JgAAAAAAAAAAAACAB5gAJSBrMAIAAAAAAACAPyYAAAAAAAAA AAAAgAc4BBggBDABAAAAFCYAAAgiAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAICrJwAAAAAAAAAA AACAB5gAAAAPMAAAAAAAAACAqycAAAAAAAAAAAAAgAeYAAAAGzAAAAAAAAAAgKsnAAAAAAAAAAAA AIAHmAAmIGswAAAAAAAAAICrJwAAAAAAAAAAAACAB5gAJiBrMAEAAAAAAACAqycAAAAAAAAAAAAA gAeYACYgazACAAAAAAAAgKsnAAAAAAAAAAAAAIAHmAAmIGswAwAAAAAAAICrJwAAAAAAAAAAAACA B5gAAAAPMAAAAAAAAACAqycAAAAAAAAAAAAAgAc4AxggBDABAAAACCIAAAgiAAAAAAAAAAAAAIAH OAQYIAQwAAAAALEtAAAIIgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACA4S0AAAAAAAAAAAAAgAc4 BBggBDABAAAAsS0AAAgiAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAICUMAAAAAAAAAAAAACAB5gA AAAPMAAAAAAAAACAlDAAAAAAAAAAAAAAgAeYAAAAGzAAAAAAAAAAgJQwAAAAAAAAAAAAAIAHmAAm IGswBAAAAAAAAICUMAAAAAAAAAAAAACAB5gAJiBrMAUAAAAAAACAlDAAAAAAAAAAAAAAgAeYAAAA DzAAAAAAAAAAgJQwAAAAAAAAAAAAAIAHOAMYIAQwAgAAAAgiAAAIIgAAAAAAAAAAAACAB5gAAAAP MAAAAAAAAACAszIAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgLMyAAAAAAAAAAAAAJAHOIMYIAQw AwAAAAgiAAAIIgAAAAAAAAAAAACQB5gAAAAPMAAAAAAAAACAHDUAAAAAAAAAAAAAkAeYAAAADzAA AAAAAAAAgBw1AAAAAAAAAAAAAIAHKAIYIAMwBAAAAAAAAICGBgAAAAAAAAAAAACAB5gAAAAPMAAA AAAAAACA5zUAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgOc1AAAAAAAAAAAAAIAHmAAAAA8wAAAA AAAAAIDnNQAAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACA5zUAAAAAAAAAAAAAgAeYAAAAADAAAAAA AAAAgOc1AAAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIDnNQAAAAAAAAAAAACAB5gAAAAPMAAAAAAA AACA5zUAAAAAAAAAAAAAgAcoAhggAzAFAAAAAAAAgIYGAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAA AIAkOgAAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACAJDoAAAAAAAAAAAAAgAeYAAAAADAAAAAAAAAA gCQ6AAAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIAkOgAAAAAAAAAAAACABygCGCADMAYAAAAAAACA hgYAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgOI7AAAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIDi OwAAAAAAAAAAAACAB5gAAAAAMAAAAAAAAACA4jsAAAAAAAAAAAAAgAeYAAAAADAAAAAAAAAAgOI7 AAAAAAAAAAAAAIAHKAIYIAMwBwAAAAAAAICGBgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAEEAA AAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgBBAAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIAQQAAA AAAAAAAAAACAB5gAAAAPMAAAAAAAAACAEEAAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgBBAAAAA AAAAAAAAAIAHKAIYIAMwCAAAAAAAAICGBgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAtUYAAAAA AAAAAAAAgAeYAAAADzAAAAAAAAAAgLVGAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIC1RgAAAAAA AAAAAACAB5gAAAAPMAAAAAAAAACAtUYAAAAAABgAAAAAAAeYAAMgNzAAAAAAAAAAgLVGAAAAAAAA AAAAAIAHmAADIDcwAQAAAAAAAIC1RgAAAAAAAAAAAACAB5gAAyA3MAIAAAAAAACAtUYAAAAAAAAA AAAAgAeYAAMgNzADAAAAAAAAgLVGAAAAAAAAAAAAAIAHmAADIDcwBAAAAAAAAIC1RgAAAAAAAAAA AACAB5gAAAAPMAAAAAAAAACAtUYAAAAAAAAAAAAAgAc4AxggBDAAAAAAtUYAALVGAAAAAAAAAAAA AIAHmAAAAA8wAAAAAAAAAID9SQAAAAAAAAAAAAAAB5gAAAAPMAAAAAAAAACA/UkAAAAAAAAAAAAA AAeYAAAADzAAAAAAAAAAgP1JAAAAAAAAAAAAAAAHmAAAABswAAAAAAAAAID9SQAAAAAAAAAAAAAA B5gAAAAPMAAAAAAAAACA/UkAAAAAAAAAAAAAAAeYAAAADzAAAAAAAAAAgP1JAAAAAAAAAAAAAAAH mAAAAA8wAAAAAAAAAID9SQAAAAAAAAAAAAAAB5gAAAAbMAAAAAAAAACA/UkAAAAAAAAAAAAAAAeQ AAAADzAAAAAAAAAAgP1JAAAAAAAAAAAAAAAHOAMYIAQwAQAAALVGAAC1RgAAAAAAAAAAAACAB5gA AAAPMAAAAAAAAACAz08AAAAAAAAAAAAAgAc4AxggBDACAAAAtUYAALVGAAAAAAAAAAAAAIAHmAAA AA8wAAAAAAAAAIAbUAAAAAAAAAAAAACABzgDGCAEMAMAAAC1RgAAtUYAAAAAAAAAAAAAgAeYAAAA ADAAAAAAAAAAgDRRAAAAAAAAAAAAAIAHmAAAAAAwAAAAAAAAAIA0UQAAAAAAAAAAAACAB5gAAAAA MAAAAAAAAACANFEAAAAAAAAAAAAAgAcoAhggAzAJAAAAAAAAgIYGAAAAAAAAAAAAAIAHmAAAAA8w AAAAAAAAAIDBVAAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAwVQAAAAAAAAAAAAAgAeYAAAADzAA AAAAAAAAgMFUAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIDBVAAAAAAAAAAAAACAB5gAAAAPMAAA AAAAAACAwVQAAAAAAAAAAAAAgAc4AxggBDAAAAAAwVQAAMFUAAAAAAAAAAAAAIAHmAAAAA8wAAAA AAAAAIBRWQAAAAAAAAAAAAAAB5gAAAAPMAAAAAAAAACAUVkAAAAAAAAAAAAAAAeYAAAADzAAAAAA AAAAgFFZAAAAAAAAAAAAAAAHmAADIDcwBQAAAAAAAIBRWQAAAAAAAAAAAAAAB5gAAyA3MAYAAAAA AACAUVkAAAAAAAAAAAAAAAeYAAMgNzAHAAAAAAAAgFFZAAAAAAAAAAAAAAAHmAAAAA8wAAAAAAAA AIBRWQAAAAAAAAAAAAAAB5AAAAAPMAAAAAAAAACAUVkAAAAAAAAAAAAAgAc4AxggBDABAAAAwVQA AMFUAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIBsWwAAAAAAAAAAAAAAB5gAAAAPMAAAAAAAAACA bFsAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgGxbAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIBs WwAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAbFsAAAAAAAAAAAAAgAc4AxggBDACAAAAwVQAAMFU AAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIDYXgAAAAAAAAAAAAAAB5gAAAAPMAAAAAAAAACA2F4A AAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgNheAAAAAAAAAAAAAIAHKAIYIAMwCgAAAAAAAICGBgAA AAAAAAAAAACAB5gAAAAPMAAAAAAAAACAdV8AAAAAAAAAAAAAAAeYAAAADzAAAAAAAAAAgHVfAAAA AAAAAAAAAIAHmAAAAA8wAAAAAAAAAIB1XwAAAAAAAAAAAACABygCGCADMAsAAAAAAACAhgYAAAAA AAAAAAAAgAeYAAAADzAAAAAAAAAAgNNfAAAAAAAAAAAAAAAHmAAAAA8wAAAAAAAAAIDTXwAAAAAA AAAAAACAB5gAAAAPMAAAAAAAAACA018AAAAAAAAAAAAAgAcoAhggAzAMAAAAAAAAgIYGAAAAAAAA AAAAAIAHmAAAAA8wAAAAAAAAAID3YAAAAAAAAAAAAAAAB5gAAAAPMAAAAAAAAACA92AAAAAAAAAA AAAAgAc4AxggBDAAAAAA92AAAPdgAAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIBLYQAAAAAAAAAA AACABzgDGCAEMAEAAAD3YAAA92AAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgBhkAAAAAAAAAAAA AIAHKAIYIAMwDQAAAAAAAICGBgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAG2gAAAAAAAAAAAAA AAeYAAAADzAAAAAAAAAAgBtoAAAAAAAAAAAAAIAHOAMKIAQwAAAAAAAAAIAbaAAAAAAAAAAAAACA B5gAAAAPMAAAAAAAAACASGkAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgEhpAAAAAAAAAAAAAIAH mAAAABswAAAAAAAAAIBIaQAAAAAAAAAAAAAAB6kAAABpMAAAAAAAAACASGkAAAEAAAAAAAAAIAep AAAAaTAAAAAAAAAAgEhpAAABAAAAAAAAACAHmQAAAAAwAAAAAAAAAIBIaQAAAQAABAAAAACgBakA AAAAMAAAAAAAAACASGkAAAEAAAAAAAAAoAepAAAAADAAAAAAAAAAgEhpAAABAAAAAAAAAKAHmQAA AAAwAAAAAAAAAIBIaQAAAQAABAAAAACgBakAAABXMAAAAAAAAACASGkAAAEAAAAAAAAAIAepAAAA VzAAAAAAAAAAgEhpAAABAAAAAAAAACAHmQAAAAAwAAAAAAAAAIBIaQAAAQAABAAAAACgBakAAABX MAAAAAAAAACASGkAAAEAAAAAAAAAIAepAAAAVzAAAAAAAAAAgEhpAAABAAAAAAAAACAHmQAAAAAw AAAAAAAAAIBIaQAAAQAABAAAAACgBakAAABXMAAAAAAAAACASGkAAAEAAAAAAAAAIAepAAAAVzAA AAAAAAAAgEhpAAABAAAAAAAAACAHmQAAAAAwAAAAAAAAAIBIaQAAAQAABAAAAACgBakAAABXMAAA AAAAAACASGkAAAEAAAAAAAAAIAepAAAAVzAAAAAAAAAAgEhpAAABAAAAAAAAACAHmQAAAAAwAAAA AAAAAIBIaQAAAQAABAAAAACgBakAAABXMAAAAAAAAACASGkAAAEAAAAAAAAAIAepAAAAVzAAAAAA AAAAgEhpAAABAAAAAAAAACAHmQAAAAAwAAAAAAAAAIBIaQAAAQAABAAAAACgBakAAABXMAAAAAAA AACASGkAAAEAAAAAAAAAIAepAAAAVzAAAAAAAAAAgEhpAAABAAAAAAAAACAHmQAAAAAwAAAAAAAA AIBIaQAAAQAABAAAAACgBakAAABXMAAAAAAAAACASGkAAAEAAAAAAAAAIAepAAAAVzAAAAAAAAAA gEhpAAABAAAAAAAAACAHmQAAAAAwAAAAAAAAAIBIaQAAAQAABAAAAACgBakAAABXMAAAAAAAAACA SGkAAAEAAAAAAAAAIAepAAAAVzAAAAAAAAAAgEhpAAABAAAAAAAAACAHmQAAAAAwAAAAAAAAAIBI aQAAAQAABAAAAACgBZgAAAAPMAAAAAAAAACASGkAAAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgEhp AAAAAAAAAAAAAIAHmAAAAA8wAAAAAAAAAIBIaQAAAAAAAAAAAACIBzgTCiAEMAAAAAAAAACAG2gA AAAAAAAAAAAACAeYAAAADzAAAAAAAAAAgC11AAAAAAAAAAAAAIAHOAMKIAQwAQCBAgAAggIAAIMC AACEAgAAhQIAAIYCAACHAgAAiAIAAIkCAACKAgAAiwIAAIwCAACNAgAAjgIAAI8CAACQAgAAkQIA AJICAACTAgAAlAIAAJUCAACWAgAAlwIAAJgCAACZAgAAmgIAAJsCAACcAgAAnQIAAJ4CAACfAgAA oAIAAKECAACiAgAAowIAAKQCAAClAgAAqQIAAKcCAACoAgAA/v///6oCAACrAgAArAIAAK0CAACu AgAArwIAALACAACxAgAAsgIAALMCAAC0AgAAtQIAALYCAAC3AgAAuAIAALkCAAC6AgAAuwIAALwC AAC9AgAAvgIAAL8CAADAAgAAwQIAAMICAADDAgAAxAIAAMUCAADGAgAAxwIAAMgCAADJAgAAygIA AMsCAADMAgAAzQIAAM4CAADPAgAA0AIAANECAADSAgAA0wIAANQCAADVAgAA1gIAANcCAADYAgAA 2QIAANoCAADbAgAA3AIAAN0CAADeAgAA3wIAAOACAADhAgAA/v////7///////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////wAAAAAAgBtoAAAA AAAAAAAAAIAHmAAAAA8wAAAAAAAAAIAodgAAAAAAAAAAAACAB5gAAAAPMAAAAAAAAACAKHYAAAAA AAAAAAAAgAeYAAAADzAAAAAAAAAAgCh2AAAAAAAAAAAAAJAHOIMKIAQwAgAAAAAAAIAbaAAAAAAA AAAAAAAQB5gAAAAPMAAAAAAAAACAgHIAAAAAAAAAAAAAAAdoiwAwBTEAAAAAAAABAAAAAgAAAAAA AAAAAJAHmAAAAAAwAAAAAAAAAIAAAACAAAAAgAAAAACQAWiLADAHMQAAAAAAAAEAAAACAAAAAAAA AAAAkAFoiwAwCDEAAAAAAAABAAAAAgAAAAAAAAAAAJABSYgAMA4xAAAAAAAAAQAAAAIAAAAAAAAA AAAQAZgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAAEAAAAAAwAAAAYAAAAGAAAACQAAAAwAAAAM AAAADAAAAA4AAAAOAAAADgAAAA4AAAAOAAAADgAAAA4AAAAOAAAADgAAAA4AAAAOAAAAEQAAAAAG AACeDgAAWRYAAJgWAABIGgAAVB8AALghAAAmJQAA9SsAAHkvAACuMQAAoToAAEY+AACRQAAA/kQA AG1JAACkUAAA9lcAAJdZAAAYXAAAJl4AAIdiAADZZwAAQGoAAJ5tAAAocwAAnXQAAFV2AABrdwAA mHoAAIt8AABjfgAAGoAAANmCAABDhAAASIUAAAc4AQB4OAEAeTgBAEMAAABPAAAAUQAAAFIAAABU AAAAVQAAAFcAAABZAAAAWwAAAF0AAABgAAAAZAAAAGYAAABpAAAAawAAAG0AAABuAAAAcgAAAHQA AAB1AAAAdwAAAHgAAAB7AAAAfQAAAIAAAACDAAAAhgAAAIcAAACJAAAAkAAAAJEAAACSAAAAlAAA AJYAAACYAAAAmgAAAJ0AAACgAAAAAAYAAFgIAACPCAAAswkAAA0KAABpCgAAvwoAAOcKAAA7DAAA hA4AAJ8OAADJFgAA3h8AAPgkAAAlKwAAXC8AAA4wAAAdMQAALzIAAM42AACxOQAATjsAADk+AAAE PwAAakMAADZJAACAUQAAM1IAADxTAAA/WQAA+F0AABBjAAD2YwAAc2gAAC5qAABPbQAAf3IAACdz AACUcwAAQHQAAPF2AAB9dwAARngAAMR5AAARegAAKHoAAGp6AABkfgAA2YEAAJeDAACIhAAAaoUA ABc4AQBpOAEAeTgBAEQAAABGAAAARwAAAEgAAABJAAAASgAAAEsAAABMAAAATQAAAE4AAABQAAAA UwAAAFYAAABYAAAAWgAAAFwAAABeAAAAXwAAAGEAAABiAAAAYwAAAGUAAABnAAAAaAAAAGoAAABs AAAAbwAAAHAAAABxAAAAcwAAAHYAAAB5AAAAegAAAHwAAAB+AAAAfwAAAIEAAACCAAAAhAAAAIUA AACIAAAAigAAAIsAAACMAAAAjQAAAI4AAACPAAAAkwAAAJUAAACXAAAAmQAAAJsAAACeAAAAnwAA AAAGAAB4OAEARQAAAOIAAAASAQAALAEAAC8BAABZAQAAbQEAAHABAACbAQAAsAEAADkOAABRDgAA XQ4AAGEOAAB5DgAAfA4AAIYOAACWDgAAmA4AAJoOAAC2DgAAuQ4AAGAmAAB4JgAAeiYAAIkmAACl JgAApyYAAB0oAAA1KAAANygAAEUoAABhKAAAYygAAHgxAACQMQAAkjEAAKAxAAC8MQAAvjEAAONL AAD7SwAA/UsAAAtMAAAbTAAASkwAAExMAABoTAAAakwAAN1OAAD1TgAA904AAAVPAAAVTwAARE8A AEZPAABiTwAAZE8AAHl9AAATWBT/FYATWBT/FYATWBT/FYATAxT/lYSTXxT/FZwTChT/lYQTDBT/ lYQTOpT/lYATDBT/lYQTOpT/lYATDBT/lYQTOpT/lYQTDBT/lYQTOpT/lYQTChT/lYQTDBT/lYQT OpT/lYwTChT/lYQTDBT/lYQPAADwxAAAAAAABvAYAAAAAggAAAIAAAClAAAAAQAAAAEAAACmAAAA PwAB8IQAAAAyAAfwJAAAAAMEEtzUbRQKmR3dH9Bgkm0+v/8AKg4AAAAAAAD/////AAAAACIAB/Ak AAAAAgSFPzLAAsYVyNPeJ2qlEUlv/wDuZwAAAAAAAP////8AAAAAIgAH8CQAAAACBOHCIUVLNcrw 5f90d7QWXPX/AD1oAAAAAAAA/////wAAAABAAB7xEAAAAP//AAAAAP8AgICAAPcAABAADwAC8HI0 AAAQAAjwCAAAAGEAAAClBAAADwAD8BA0AAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAA AAIACvAIAAAAAAQAAAUAAAAPAAPwABcAAA8ABPCGAAAAAQAJ8BAAAAAAAAAAAAAAAIAWAAC0EgAA AgAK8AgAAAA7BAAAAQIAACMAC/AMAAAAfwDAAcABvwMAACAAcwAi8SoAAACPAwAAAACQAwMAAACR AwAAAACSAwMAAAC/AwACAAIABQAAAAA/BQEAAQAAABDwBAAAAAEAAAAAABHwBAAAAAEAAAAPAATw YAAAALIECvAIAAAAOgQAAAIKAABjAAvwJAAAAH8ABAAEAFgBAAAAAH8BOQA5AL8BAQARAP8BAAAI AD8DAAAQAAAAD/AQAAAAAAAAAAAAAACAFgAAtBIAAAAAEfAEAAAAAQAAAA8ABPBOAAAAEgAK8AgA AAA8BAAAAgoAADMAC/ASAAAAvwEQABAAywHEHQAA/wEIAAgAAAAP8BAAAACiDQAAXAMAAOIRAAA0 BgAAAAAR8AQAAAABAAAADwAE8H4AAAASAArwCAAAAD0EAAACCgAAkwAL8DYAAACAAAAAFQCBAAAA AACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAAHUOAABq BAAABxEAAFIGAAAAABHwBAAAAAEAAAAAAA3wBAAAAAAAFQAPAATwTgAAABIACvAIAAAAPgQAAAIK AAAzAAvwEgAAAL8BEAAQAMsBxB0AAP8BCAAIAAAAD/AQAAAA8gsAAFwDAACiDQAANAYAAAAAEfAE AAAAAQAAAA8ABPB+AAAAEgAK8AgAAAA/BAAAAgoAAJMAC/A2AAAAgAAAABQAgQAAAAAAggAAAAAA gwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAABJDAAALgQAADoNAAC6 BQAAAAAR8AQAAAABAAAAAAAN8AQAAAAAABQADwAE8H4AAAASAArwCAAAAEAEAAACCgAAkwAL8DYA AACAAAAAEwCBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAA AA/wEAAAAHEMAADIBAAAGA0AAFQGAAAAABHwBAAAAAEAAAAAAA3wBAAAAAAAEwAPAATwTgAAABIA CvAIAAAAQQQAAAIKAAAzAAvwEgAAAL8BEAAQAMsBxB0AAP8BCAAIAAAAD/AQAAAAjQYAAFwDAACV CAAANAYAAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABCBAAAAgoAAJMAC/A2AAAAgAAAABIA gQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAAAP BwAAVQQAABoIAACZBgAAAAAR8AQAAAABAAAAAAAN8AQAAAAAABIADwAE8EgAAABCAQrwCAAAAEME AAACCgAAIwAL8AwAAADLASEvAAD/AQgACAAAAA/wEAAAAOIRAADIBAAAUBYAAMkEAAAAABHwBAAA AAEAAAAPAATwSAAAAEIBCvAIAAAARAQAAAIKAAAjAAvwDAAAAMsBIS8AAP8BCAAIAAAAD/AQAAAA lQgAAMgEAADyCwAAyQQAAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABFBAAAAgoAAJMAC/A2 AAAAgAAAABEAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgA AAAP8BAAAACOEwAAEAUAACgUAACcBgAAAAAR8AQAAAABAAAAAAAN8AQAAAAAABEADwAE8H4AAAAS AArwCAAAAEYEAAACCgAAkwAL8DYAAACAAAAAEACBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIA AAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAAMYJAAAQBQAAYAoAAJwGAAAAABHwBAAAAAEAAAAA AA3wBAAAAAAAEAAPAATwfgAAABIACvAIAAAARwQAAAIKAACTAAvwNgAAAIAAAAAPAIEAAAAAAIIA AAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAvwsAAPMHAAC2 DAAAfwkAAAAAEfAEAAAAAQAAAAAADfAEAAAAAAAPAA8ABPBIAAAAQgEK8AgAAABIBAAAAgoAACMA C/AMAAAAywHsCQAA/wEIAAgAAAAP8BAAAAAxBgAA6gYAAFMSAADrBgAAAAAR8AQAAAABAAAADwAE 8EgAAABCAQrwCAAAAEkEAAACCgAAIwAL8AwAAADLAewJAAD/AQgACAAAAA/wEAAAAFMSAAB3BgAA VBIAAOoGAAAAABHwBAAAAAEAAAAPAATwSAAAAEIBCvAIAAAASgQAAIIKAAAjAAvwDAAAAMsB7AkA AP8BCAAIAAAAD/AQAAAAMQYAAG0GAAAyBgAA6gYAAAAAEfAEAAAAAQAAAA8ABPBIAAAAQgEK8AgA AABLBAAAAgoAACMAC/AMAAAAywHsCQAA/wEIAAgAAAAP8BAAAAAgDAAA6gYAACEMAADOBwAAAAAR 8AQAAAABAAAADwAE8EgAAABCAQrwCAAAAEwEAAACCgAAIwAL8AwAAADLAcQdAAD/AQgACAAAAA/w EAAAAPYAAACUCQAAUBYAAJUJAAAAABHwBAAAAAEAAAAPAATwfgAAABIACvAIAAAAUwQAAAIKAACT AAvwNgAAAIAAAAANAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8B AAAIAAAAD/AQAAAAGgQAANMHAAAvCQAA6QkAAAAAEfAEAAAAAQAAAAAADfAEAAAAAAANAA8ABPBU AAAAEgAK8AgAAABUBAAAAgoAAEMAC/AYAAAAgQHY2NgAvwEQABAAywHsCQAA/wEIAAgAAAAP8BAA AAD4BwAA/wwAAAMNAADREAAAAAAR8AQAAAABAAAADwAE8OgBAAACAArwCAAAAFUEAAACCgAA4wAL 8KwBAABCAcUBAABDATgCAABEAQQAAABFwaQAAABGwa4AAAB/AQEAAQCAAQAAAACBAf///wC/ARAA EADAAQAAAADEAQAAAADLAcQdAADOAQAAAAD/ARgAGAApACkA8P8AAB0BAgDxAAsAxQAZAJwALAB2 AEMAUwBeADYAewAfAJ0ADgDAAAQA4gAAAAcBBAApAQ4ASgEfAGgBNgCDAVMAmgF2AKwBnAC5AcUA wwHxAMUBHQHDAUkBuQF0AawBngGaAcUBgwHlAWgBAgJKARkCKQErAgcBNgLiADgCwAA2Ap0AKwJ7 ABkCXgACAkMA5QEsAMUBGQCeAQsAdAECAEkBAAAdAVQAWAACAABAAKwBAACsAQAArAEAAKwBAACs AQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwB AACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAAUggAAMsNAAAXCgAAAxAA AAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABWBAAAAgoAAJMAC/A2AAAAgAAAAAwAgQAAAAAA ggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAADeCAAAnA4A AH8JAAAoEAAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAwADwAE8OgBAAACAArwCAAAAFcEAAACCgAA 4wAL8KwBAABCAWQCAABDAZoBAABEAQQAAABFwaQAAABGwa4AAAB/AQEAAQCAAQAAAACBAf///wC/ ARAAEADAAQAAAADEAQAAAADLAcQdAADOAQAAAAD/ARgAGAApACkA8P8AAM4ABACtAA8AjwAgAHIA OQBVAFgAPgB8ACkApwAXANMADAABAQQAMQEAAGEBBACPAQwAvQEXAOUBKQAKAj4AKAJVAEECcgBU Ao8AYAKtAGQCzgBgAu0AVAIOAUECKwEoAkUBCgJeAeUBdAG9AYUBjwGRAWEBmAExAZoBAQGYAdMA kQGnAIUBfAB0AVgAXgE5AEUBIAArAQ8ADgEEAO0AAADOAFQAWAACAABAAKwBAACsAQAArAEAAKwB AACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAA rAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAAXAoAABoOAADADAAA tA8AAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABYBAAAAgoAAJMAC/A2AAAAgAAAAAsAgQAA AAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAAAMCwAA Tw4AAP0LAADbDwAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAsADwAE8H4AAAASAArwCAAAAFkEAAAC CgAAkwAL8DYAAACAAAAACgCBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIAGwC/AQAA EAD/AQAACAAAAA/wEAAAADQLAADpDgAA2wsAAHUQAAAAABHwBAAAAAEAAAAAAA3wBAAAAAAACgAP AATwSAAAAEIBCvAIAAAAWgQAAAIKAAAjAAvwDAAAAMsBIS8AAP8BCAAIAAAAD/AQAAAAAw0AAOgO AABmEAAA6Q4AAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABbBAAAAgoAAJMAC/A2AAAAgAAA AAkAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAA AAB3DgAADQ8AABEPAACZEAAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAkADwAE8H4AAAASAArwCAAA AFwEAAACCgAAkwAL8DYAAACAAAAACACBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIA GwC/AQAAEAD/AQAACAAAAA/wEAAAAPAJAADyEAAAjAsAADYTAAAAABHwBAAAAAEAAAAAAA3wBAAA AAAACAAPAATwTgAAABIACvAIAAAAXQQAAAIKAAAzAAvwEgAAAL8BEAAQAMsBxB0AAP8BCAAIAAAA D/AQAAAA1wAAAK4OAAANAwAAAxAAAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABeBAAAAgoA AJMAC/A2AAAAgAAAAAcAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA /wEAAAgAAAAP8BAAAACRAQAADQ8AAEYCAAAPEAAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAcADwAE 8LIAAAACAArwCAAAAF8EAAACCgAAwwAL8HYAAABCAZkBAABDAXEAAABEAQQAAABFwRAAAABGwRgA AAB/AQEAAQC/AQAAEADAAQAAAADEAQAAAADLAcQdAADOAQAAAAD/ARgAGAAEAAQA8P8AAEMAywAA AMsAcQCZASwACQAMAAIAAEAArAEAAKwBAACsAQAArACAAAAP8BAAAABsBAAA3Q4AAAUGAABODwAA AAAR8AQAAAABAAAADwAE8KgAAAACAArwCAAAAGAEAAACCgAAowAL8GwAAABCAaUAAABDAWIAAABE AQQAAABFwRAAAABGwRoAAAB/AQEAAQCAAQAAAACBAQAAAAC/ARAAEAD/ARAAGAAEAAQA8P+lAGIA AABiAIQAAAClAGIACgAMAAIAAEAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAAAOQDAADsDgAAiQQA AE4PAAAAABHwBAAAAAEAAAAPAATwqAAAAAIACvAIAAAAYQQAAAIKAACjAAvwbAAAAEIBpQAAAEMB YgAAAEQBBAAAAEXBEAAAAEbBGgAAAH8BAQABAIABAAAAAIEBAAAAAL8BEAAQAP8BEAAYAAQABADw /wAAAAClAAAAIQBiAAAAAAAKAAwAAgAAQACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAA6AUAAN0O AACNBgAAPw8AAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABiBAAAAgoAAJMAC/A2AAAAgAAA AAYAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAA AAC5BAAA8A8AAFMFAAB8EQAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAYADwAE8H4AAAASAArwCAAA AGMEAAACCgAAkwAL8DYAAACAAAAABQCBAAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIA GwC/AQAAEAD/AQAACAAAAA/wEAAAAL4FAABjEQAAsggAAKcTAAAAABHwBAAAAAEAAAAAAA3wBAAA AAAABQAPAATwTgAAABIACvAIAAAAZAQAAAIKAAAzAAvwEgAAAL8BEAAQAMsBxB0AAP8BCAAIAAAA D/AQAAAAZgAAAHkEAACcAgAAzgUAAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABlBAAAAgoA AJMAC/A2AAAAgAAAAAQAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA /wEAAAgAAAAP8BAAAAAgAQAA1gQAANUBAADYBQAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAQADwAE 8LIAAAACAArwCAAAAGYEAAACCgAAwwAL8HYAAABCAZoBAABDAXIAAABEAQQAAABFwRAAAABGwRgA AAB/AQEAAQC/AQAAEADAAQAAAADEAQAAAADLAcQdAADOAQAAAAD/ARgAGAAEAAQA8P8AAEYAzQAA AM0AcgCaAS4ACQAMAAIAAEAArAEAAKwBAACsAQAArACAAAAP8BAAAADNAwAApQQAAGcFAAAXBQAA AAAR8AQAAAABAAAADwAE8KgAAAACAArwCAAAAGcEAAACCgAAowAL8GwAAABCAaQAAABDAWIAAABE AQQAAABFwRAAAABGwRoAAAB/AQEAAQCAAQAAAACBAQAAAAC/ARAAEAD/ARAAGAAEAAQA8P+kAGIA AABiAIMAAACkAGIACgAMAAIAAEAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAAAEYDAAC1BAAA6gMA ABcFAAAAABHwBAAAAAEAAAAPAATwqAAAAAIACvAIAAAAaAQAAAIKAACjAAvwbAAAAEIBowAAAEMB ZAAAAEQBBAAAAEXBEAAAAEbBGgAAAH8BAQABAIABAAAAAIEBAAAAAL8BEAAQAP8BEAAYAAQABADw /wAAAACjAAAAIABkAAAAAAAKAAwAAgAAQACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAASwUAAKUE AADuBQAACQUAAAAAEfAEAAAAAQAAAA8ABPB+AAAAEgAK8AgAAABpBAAAAgoAAJMAC/A2AAAAgAAA AAMAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAA AAAaBAAAuQUAALQEAABFBwAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAMADwAD8NAcAAAPAATwYgAA AAEACfAQAAAAAAAAAAAAAACAFgAAtBIAAAIACvAIAAAAcAQAAAECAAAjAAvwDAAAAH8AgACAAIgD AAAAABMAIvEGAAAAAAUAAAAAAAAQ8AQAAAAAAAAAAAAR8AQAAAABAAAADwAE8GAAAACyBArwCAAA AHEEAAACCgAAYwAL8CQAAAB/AAQABABYAQAAAAB/ATkAOQC/AQEAEQD/AQAACAA/AwAAEAAAAA/w EAAAAAAAAAAAAAAAgBYAALQSAAAAABHwBAAAAAEAAAAPAATwTgAAABIACvAIAAAAcgQAAAIKAAAz AAvwEgAAAL8BEAAQAMsBxB0AAP8BCAAIAAAAD/AQAAAAog0AAFwDAADiEQAANAYAAAAAEfAEAAAA AQAAAA8ABPB+AAAAEgAK8AgAAABzBAAAAgoAAJMAC/A2AAAAgAAAABUAgQAAAAAAggAAAAAAgwAA AAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAAB1DgAAagQAAFQRAAA+BQAA AAAR8AQAAAABAAAAAAAN8AQAAAAAABUADwAE8E4AAAASAArwCAAAAHQEAAACCgAAMwAL8BIAAAC/ ARAAEADLAcQdAAD/AQgACAAAAA/wEAAAAPILAABcAwAAog0AADQGAAAAABHwBAAAAAEAAAAPAATw fgAAABIACvAIAAAAdQQAAAIKAACTAAvwNgAAAIAAAAAUAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAA AIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAASQwAAC4EAACgDQAA6wQAAAAAEfAEAAAA AQAAAAAADfAEAAAAAAAUAA8ABPB+AAAAEgAK8AgAAAB2BAAAAgoAAJMAC/A2AAAAgAAAABMAgQAA AAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAABxDAAA yAQAAHINAACFBQAAAAAR8AQAAAABAAAAAAAN8AQAAAAAABMADwAE8E4AAAASAArwCAAAAHcEAAAC CgAAMwAL8BIAAAC/ARAAEADLAcQdAAD/AQgACAAAAA/wEAAAAI0GAABcAwAAlQgAADQGAAAAABHw BAAAAAEAAAAPAATwfgAAABIACvAIAAAAeAQAAAIKAACTAAvwNgAAAIAAAAASAIEAAAAAAIIAAAAA AIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAADwcAAFUEAABwCAAA YAUAAAAAEfAEAAAAAQAAAAAADfAEAAAAAAASAA8ABPBIAAAAQgEK8AgAAAB5BAAAAgoAACMAC/AM AAAAywEhLwAA/wEIAAgAAAAP8BAAAADiEQAAyAQAAFAWAADJBAAAAAAR8AQAAAABAAAADwAE8EgA AABCAQrwCAAAAHoEAAACCgAAIwAL8AwAAADLASEvAAD/AQgACAAAAA/wEAAAAJUIAADIBAAA8gsA AMkEAAAAABHwBAAAAAEAAAAPAATwfgAAABIACvAIAAAAewQAAAIKAACTAAvwNgAAAIAAAAARAIEA AAAAAIIAAAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAjhMA ABAFAACAFAAAzQUAAAAAEfAEAAAAAQAAAAAADfAEAAAAAAARAA8ABPB+AAAAEgAK8AgAAAB8BAAA AgoAAJMAC/A2AAAAgAAAABAAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEA ABAA/wEAAAgAAAAP8BAAAADGCQAAEAUAALgKAADNBQAAAAAR8AQAAAABAAAAAAAN8AQAAAAAABAA DwAE8H4AAAASAArwCAAAAH0EAAACCgAAkwAL8DYAAACAAAAADwCBAAAAAACCAAAAAACDAAAAAACE AAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAAL8LAADzBwAAHg0AALAIAAAAABHw BAAAAAEAAAAAAA3wBAAAAAAADwAPAATwSAAAAEIBCvAIAAAAfgQAAAIKAAAjAAvwDAAAAMsB7AkA AP8BCAAIAAAAD/AQAAAAMQYAAOoGAABTEgAA6wYAAAAAEfAEAAAAAQAAAA8ABPBIAAAAQgEK8AgA AAB/BAAAAgoAACMAC/AMAAAAywHsCQAA/wEIAAgAAAAP8BAAAABTEgAAdwYAAFQSAADqBgAAAAAR 8AQAAAABAAAADwAE8EgAAABCAQrwCAAAAIAEAACCCgAAIwAL8AwAAADLAewJAAD/AQgACAAAAA/w EAAAADEGAABtBgAAMgYAAOoGAAAAABHwBAAAAAEAAAAPAATwSAAAAEIBCvAIAAAAgQQAAAIKAAAj AAvwDAAAAMsB7AkAAP8BCAAIAAAAD/AQAAAAIAwAAOoGAAAhDAAAzgcAAAAAEfAEAAAAAQAAAA8A BPBIAAAAQgEK8AgAAACCBAAAAgoAACMAC/AMAAAAywHEHQAA/wEIAAgAAAAP8BAAAAD2AAAAlAkA AFAWAACVCQAAAAAR8AQAAAABAAAADwAE8EgAAABCAQrwCAAAAIMEAAACCgAAIwAL8AwAAADLAewJ AAD/AQgACAAAAA/wEAAAAK4BAAB3CgAArwEAAKsMAAAAABHwBAAAAAEAAAAPAATwSAAAAEIBCvAI AAAAhAQAAAIKAAAjAAvwDAAAAMsB7AkAAP8BCAAIAAAAD/AQAAAAeQkAAHcKAAB6CQAArwwAAAAA EfAEAAAAAQAAAA8ABPBIAAAAQgEK8AgAAACFBAAAAgoAACMAC/AMAAAAywHsCQAA/wEIAAgAAAAP 8BAAAAAnAgAAywsAAP4IAADMCwAAAAAR8AQAAAABAAAADwAE8K4AAAACAArwCAAAAIYEAAACCgAA swAL8HIAAABCAYQAAABDAVkAAABEAQQAAABFwRAAAABGwRoAAAB/AQEAAQCAAQAAAACBAQAAAAC/ ARAAEAD/ARAAGACIAwAAAAAEAAQA8P+EAFkAAAAsAIQAAACEAFkACgAMAAIAAEAArAEAAKwBAACs AQAArAFgAIAAAA/wEAAAAK4BAACfCwAAMgIAAPgLAAAAABHwBAAAAAEAAAAPAATwrgAAAAIACvAI AAAAhwQAAAIKAACzAAvwcgAAAEIBhAAAAEMBWQAAAEQBBAAAAEXBEAAAAEbBGgAAAH8BAQABAIAB AAAAAIEBAAAAAL8BEAAQAP8BEAAYAIgDAAAAAAQABADw/wAAAACEACwAAABZAAAAAAAKAAwAAgAA QACsAQAArAEAAKwBAACsAWAAgAAAD/AQAAAA9QgAAJ8LAAB5CQAA+AsAAAAAEfAEAAAAAQAAAA8A BPB+AAAAEgAK8AgAAACIBAAAAgoAAJMAC/A2AAAAgAAAAA4AgQAAAAAAggAAAAAAgwAAAAAAhAAA AAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAADwBAAADQsAAEcGAADKCwAAAAAR8AQA AAABAAAAAAAN8AQAAAAAAA4ADwAE8H4AAAASAArwCAAAAIkEAAACCgAAkwAL8DYAAACAAAAADQCB AAAAAACCAAAAAACDAAAAAACEAAAAAACFAAIAAAC/ABIAGwC/AQAAEAD/AQAACAAAAA/wEAAAABoE AADTBwAAfwkAAMIIAAAAABHwBAAAAAEAAAAAAA3wBAAAAAAADQAPAATwVAAAABIACvAIAAAAigQA AAIKAABDAAvwGAAAAIEB2NjYAL8BEAAQAMsB7AkAAP8BCAAIAAAAD/AQAAAA+AcAAP8MAAADDQAA 0RAAAAAAEfAEAAAAAQAAAA8ABPDuAQAAAgAK8AgAAACLBAAAAgoAAPMAC/CyAQAAQgHFAQAAQwE4 AgAARAEEAAAARcGkAAAARsGuAAAAfwEBAAEAgAEAAAAAgQH///8AvwEQABAAwAEAAAAAxAEAAAAA ywHEHQAAzgEAAAAA/wEYABgAiAMAAAAAKQApAPD/AAAdAQIA8QALAMUAGQCcACwAdgBDAFMAXgA2 AHsAHwCdAA4AwAAEAOIAAAAHAQQAKQEOAEoBHwBoATYAgwFTAJoBdgCsAZwAuQHFAMMB8QDFAR0B wwFJAbkBdAGsAZ4BmgHFAYMB5QFoAQICSgEZAikBKwIHATYC4gA4AsAANgKdACsCewAZAl4AAgJD AOUBLADFARkAngELAHQBAgBJAQAAHQFUAFgAAgAAQACsAQAArAEAAKwBAACsAQAArAEAAKwBAACs AQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwB AACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEA AKwBAACsAQAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAAAFIIAADLDQAAFwoAAAMQAAAAABHwBAAA AAEAAAAPAATwfgAAABIACvAIAAAAjAQAAAIKAACTAAvwNgAAAIAAAAAMAIEAAAAAAIIAAAAAAIMA AAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAA3ggAAJwOAADXCQAAWQ8A AAAAEfAEAAAAAQAAAAAADfAEAAAAAAAMAA8ABPDuAQAAAgAK8AgAAACNBAAAAgoAAPMAC/CyAQAA QgFkAgAAQwGaAQAARAEEAAAARcGkAAAARsGuAAAAfwEBAAEAgAEAAAAAgQH///8AvwEQABAAwAEA AAAAxAEAAAAAywHEHQAAzgEAAAAA/wEYABgAiAMAAAAAKQApAPD/AADOAAQArQAPAI8AIAByADkA VQBYAD4AfAApAKcAFwDTAAwAAQEEADEBAABhAQQAjwEMAL0BFwDlASkACgI+ACgCVQBBAnIAVAKP AGACrQBkAs4AYALtAFQCDgFBAisBKAJFAQoCXgHlAXQBvQGFAY8BkQFhAZgBMQGaAQEBmAHTAJEB pwCFAXwAdAFYAF4BOQBFASAAKwEPAA4BBADtAAAAzgBUAFgAAgAAQACsAQAArAEAAKwBAACsAQAA rAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACs AQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAEAAKwB AACsAQAArAEAAKwBAACsAQAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAAAFwKAAAaDgAAwAwAALQP AAAAABHwBAAAAAEAAAAPAATwfgAAABIACvAIAAAAjgQAAAIKAACTAAvwNgAAAIAAAAALAIEAAAAA AIIAAAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAADAsAAE8O AABjDAAADA8AAAAAEfAEAAAAAQAAAAAADfAEAAAAAAALAA8ABPB+AAAAEgAK8AgAAACPBAAAAgoA AJMAC/A2AAAAgAAAAAoAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsAvwEAABAA /wEAAAgAAAAP8BAAAAA0CwAA6Q4AADUMAACmDwAAAAAR8AQAAAABAAAAAAAN8AQAAAAAAAoADwAE 8EgAAABCAQrwCAAAAJAEAAACCgAAIwAL8AwAAADLASEvAAD/AQgACAAAAA/wEAAAAAMNAADoDgAA ZhAAAOkOAAAAABHwBAAAAAEAAAAPAATwfgAAABIACvAIAAAAkQQAAAIKAACTAAvwNgAAAIAAAAAJ AIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAA dw4AAA0PAABpDwAAyg8AAAAAEfAEAAAAAQAAAAAADfAEAAAAAAAJAA8ABPB+AAAAEgAK8AgAAACS BAAAAgoAAJMAC/A2AAAAgAAAAAgAgQAAAAAAggAAAAAAgwAAAAAAhAAAAAAAhQACAAAAvwASABsA vwEAABAA/wEAAAgAAAAP8BAAAADwCQAA8hAAAOELAAD9EQAAAAAR8AQAAAABAAAAAAAN8AQAAAAA AAgADwAE8E4AAAASAArwCAAAAJMEAAACCgAAMwAL8BIAAAC/ARAAEADLAcQdAAD/AQgACAAAAA/w EAAAANcAAACuDgAADQMAAAMQAAAAABHwBAAAAAEAAAAPAATwfgAAABIACvAIAAAAlAQAAAIKAACT AAvwNgAAAIAAAAAHAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8B AAAIAAAAD/AQAAAAkQEAAA0PAAChAgAAyg8AAAAAEfAEAAAAAQAAAAAADfAEAAAAAAAHAA8ABPC4 AAAAAgAK8AgAAACVBAAAAgoAANMAC/B8AAAAQgGZAQAAQwFxAAAARAEEAAAARcEQAAAARsEYAAAA fwEBAAEAvwEAABAAwAEAAAAAxAEAAAAAywHEHQAAzgEAAAAA/wEYABgAiAMAAAAABAAEAPD/AABD AMsAAADLAHEAmQEsAAkADAACAABAAKwBAACsAQAArAEAAKwAgAAAD/AQAAAAbAQAAN0OAAAFBgAA Tg8AAAAAEfAEAAAAAQAAAA8ABPCuAAAAAgAK8AgAAACWBAAAAgoAALMAC/ByAAAAQgGlAAAAQwFi AAAARAEEAAAARcEQAAAARsEaAAAAfwEBAAEAgAEAAAAAgQEAAAAAvwEQABAA/wEQABgAiAMAAAAA BAAEAPD/pQBiAAAAYgCEAAAApQBiAAoADAACAABAAKwBAACsAQAArAEAAKwBYACAAAAP8BAAAADk AwAA7A4AAIkEAABODwAAAAAR8AQAAAABAAAADwAE8K4AAAACAArwCAAAAJcEAAACCgAAswAL8HIA AABCAaUAAABDAWIAAABEAQQAAABFwRAAAABGwRoAAAB/AQEAAQCAAQAAAACBAQAAAAC/ARAAEAD/ ARAAGACIAwAAAAAEAAQA8P8AAAAApQAAACEAYgAAAAAACgAMAAIAAEAArAEAAKwBAACsAQAArAFg AIAAAA/wEAAAAOgFAADdDgAAjQYAAD8PAAAAABHwBAAAAAEAAAAPAATwfgAAABIACvAIAAAAmAQA AAIKAACTAAvwNgAAAIAAAAAGAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAAAIUAAgAAAL8AEgAbAL8B AAAQAP8BAAAIAAAAD/AQAAAAuQQAAPAPAACrBQAArRAAAAAAEfAEAAAAAQAAAAAADfAEAAAAAAAG AA8ABPB+AAAAEgAK8AgAAACZBAAAAgoAAJMAC/A2AAAAgAAAAAUAgQAAAAAAggAAAAAAgwAAAAAA hAAAAAAAhQACAAAAvwASABsAvwEAABAA/wEAAAgAAAAP8BAAAAC+BQAAYxEAAAgJAABuEgAAAAAR 8AQAAAABAAAAAAAN8AQAAAAAAAUADwAE8E4AAAASAArwCAAAAJoEAAACCgAAMwAL8BIAAAC/ARAA EADLAcQdAAD/AQgACAAAAA/wEAAAAGYAAAB5BAAAnAIAAM4FAAAAABHwBAAAAAEAAAAPAATwfgAA ABIACvAIAAAAmwQAAAIKAACTAAvwNgAAAIAAAAAEAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAAAIUA AgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAIAEAANYEAAAwAgAAkwUAAAAAEfAEAAAAAQAA AAAADfAEAAAAAAAEAA8ABPC4AAAAAgAK8AgAAACcBAAAAgoAANMAC/B8AAAAQgGaAQAAQwFyAAAA RAEEAAAARcEQAAAARsEYAAAAfwEBAAEAvwEAABAAwAEAAAAAxAEAAAAAywHEHQAAzgEAAAAA/wEY ABgAiAMAAAAABAAEAPD/AABGAM0AAADNAHIAmgEuAAkADAACAABAAKwBAACsAQAArAEAAKwAgAAA D/AQAAAAzQMAAKUEAABnBQAAFwUAAAAAEfAEAAAAAQAAAA8ABPCuAAAAAgAK8AgAAACdBAAAAgoA ALMAC/ByAAAAQgGkAAAAQwFiAAAARAEEAAAARcEQAAAARsEaAAAAfwEBAAEAgAEAAAAAgQEAAAAA vwEQABAA/wEQABgAiAMAAAAABAAEAPD/pABiAAAAYgCDAAAApABiAAoADAACAABAAKwBAACsAQAA rAEAAKwBYACAAAAP8BAAAABGAwAAtQQAAOoDAAAXBQAAAAAR8AQAAAABAAAADwAE8K4AAAACAArw CAAAAJ4EAAACCgAAswAL8HIAAABCAaMAAABDAWQAAABEAQQAAABFwRAAAABGwRoAAAB/AQEAAQCA AQAAAACBAQAAAAC/ARAAEAD/ARAAGACIAwAAAAAEAAQA8P8AAAAAowAAACAAZAAAAAAACgAMAAIA AEAArAEAAKwBAACsAQAArAFgAIAAAA/wEAAAAEsFAAClBAAA7gUAAAkFAAAAABHwBAAAAAEAAAAP AATwfgAAABIACvAIAAAAnwQAAAIKAACTAAvwNgAAAIAAAAADAIEAAAAAAIIAAAAAAIMAAAAAAIQA AAAAAIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAAGgQAALkFAAAMBQAAdgYAAAAAEfAE AAAAAQAAAAAADfAEAAAAAAADAA8ABPBIAAAAQgEK8AgAAACgBAAAAgoAACMAC/AMAAAAywHsCQAA /wEIAAgAAAAP8BAAAACdAAAAQAAAAJ4AAAAIAgAAAAAR8AQAAAABAAAADwAE8EgAAABCAQrwCAAA AKEEAAACCgAAIwAL8AwAAADLAewJAAD/AQgACAAAAA/wEAAAAJIMAAAVAAAAkwwAAHkCAAAAABHw BAAAAAEAAAAPAATwSAAAAEIBCvAIAAAAogQAAAIKAAAjAAvwDAAAAMsB7AkAAP8BCAAIAAAAD/AQ AAAAFgEAACUBAAAZDAAAJgEAAAAAEfAEAAAAAQAAAA8ABPCuAAAAAgAK8AgAAACjBAAAAgoAALMA C/ByAAAAQgGFAAAAQwFZAAAARAEEAAAARcEQAAAARsEaAAAAfwEBAAEAgAEAAAAAgQEAAAAAvwEQ ABAA/wEQABgAiAMAAAAABAAEAPD/hQBZAAAALQCFAAAAhQBZAAoADAACAABAAKwBAACsAQAArAEA AKwBYACAAAAP8BAAAACdAAAA+AAAACIBAABRAQAAAAAR8AQAAAABAAAADwAE8K4AAAACAArwCAAA AKQEAAACCgAAswAL8HIAAABCAYUAAABDAVkAAABEAQQAAABFwRAAAABGwRoAAAB/AQEAAQCAAQAA AACBAQAAAAC/ARAAEAD/ARAAGACIAwAAAAAEAAQA8P8AAAAAhQAtAAAAWQAAAAAACgAMAAIAAEAA rAEAAKwBAACsAQAArAFgAIAAAA/wEAAAAA0MAAD4AAAAkgwAAFEBAAAAABHwBAAAAAEAAAAPAATw fgAAABIACvAIAAAApQQAAAIKAACTAAvwNgAAAIAAAAABAIEAAAAAAIIAAAAAAIMAAAAAAIQAAAAA AIUAAgAAAL8AEgAbAL8BAAAQAP8BAAAIAAAAD/AQAAAABAcAAIcAAABbCAAARAEAAAAAEfAEAAAA AQAAAAAADfAEAAAAAAABAA8ABPBCAAAAEgAK8AgAAAABBAAAAA4AAFMAC/AeAAAAvwEAABAAywEA AAAA/wEAAAgABAMJAAAAPwMBAAEAAAAR8AQAAAABAAAAYA4AAHoOAAB5fQAAcAQAAAAAAAAAAAAA gBYAALQSAAB0IAAAAAA7BAAAAAAAAAAAAACAFgAAtBIAAHSAAAAAAP//HgAAAA0AXwBUAG8AYwAx ADQAMgAzADcANQA2ADcAOAANAF8AVABvAGMAMQA0ADIANAA3ADMAMQAwADYADQBfAFQAbwBjADEA NAAyADkAMgAwADgAOQA5AA0AXwBUAG8AYwAxADQAMgAzADcANQA2ADcAOQANAF8AVABvAGMAMQA0 ADIANAA3ADMAMQAwADcADQBfAFQAbwBjADEANAAyADkAMgAwADkAMAAwAA0AXwBUAG8AYwAxADQA MgAzADcANQA2ADgAMAANAF8AVABvAGMAMQA0ADIANAA3ADMAMQAwADgADQBfAFQAbwBjADEANAAy ADkAMgAwADkAMAAxAA0AXwBSAGUAZgAxADQAMQA4ADYANgAzADQAMwANAF8AVABvAGMAMQA0ADIA OQAyADAANgAzADQACwBfADEAMAA4ADMANQAwADQAMgA4ADAACwBfADEAMAA4ADMANQAwADQAMwA0 ADAACwBfADEAMAA4ADMANQAwADQANQA5ADUACwBfADEAMAA4ADkAMAAwADgAOAA4ADUACwBfADEA MAA4ADkAMAAwADgAOQAwADgACwBfADEAMAA4ADkAMAAwADgAOQAxADcACwBfADEAMgAyADAAOQA1 ADkAOQAwADgACwBfADEAMAA4ADMANQAwADYAMgA4ADYACwBfADEAMAA4ADkAMAAwADgAOQAzADAA CwBfADEAMgAyADAAOQA2ADAAMAAwADAACwBfADEAMAA4ADMANQAwADYANwA2ADUACwBfADEAMgAw ADkANAA1ADcAMgA5ADAACwBfADEAMgAwADkANAA1ADcANgA5ADAACwBfADEAMgAwADkANAA1ADgA NwAyADQACwBfADEAMgAwADkANAA1ADkANgAxADgACwBfADEAMAA4ADMANQAwADQANQA0ADAACwBf AFQAbwBjADUAMAA5ADUAMwA2ADUACwBfAFQAbwBjADUAMAA5ADUAMwA3ADkADQBfAFQAbwBjADEA MwAzADUANQAyADUAMAAwAIsGAACLBgAAiwYAABEIAAARCAAAEQgAALEMAACxDAAAsQwAAH8OAAB/ DgAAeCYAAHgmAAB4JgAAeCYAAHgmAAB4JgAAeCYAADUoAAA1KAAANSgAAJAxAAD7SwAA+0sAAPVO AAD1TgAA9U4AAIhZAADraQAA62kAAHp9AAAAAAAAAQAAAAIAAAADAAAABAAAAAUAAAAGAAAABwAA AAgAAAAJAAAACgAAAAsAAEAMAABADQAAQA4AAEAPAABAEAAAQBEAAEASAABAEwAAQBQAAEAVAABA FgAAQBcAAEAYAABAGQAAQBoAAEAbAAAAHAAAAB0AAACeBgAAngYAAJ4GAAAzCAAAMwgAADMIAADB DAAAwQwAAMEMAAC6DgAAxw4AAHgmAAB4JgAAeCYAAHgmAAB4JgAAeCYAAHgmAAA1KAAANSgAADUo AACQMQAA+0sAAPtLAAD1TgAA9U4AAPVOAAC1WQAAFWoAABVqAAB6fQAAAAAAAAgAAAANAAAASQAA AEwAAADaAAAA4QAAABMBAAAsAQAAWgEAAG0BAACcAQAAsAEAAO4BAADzAQAAEgMAABcDAACABAAA hQQAAPkEAAD+BAAAHAUAACEFAADuBQAA8wUAAEUGAABKBgAAaAYAAG0GAAAZBwAAHgcAACQHAAAo BwAASgcAAE8HAAAdCAAAIggAAOAIAADlCAAAzAsAANULAAAFDAAACgwAACAMAAAoDAAAUg4AAFkO AAB7DwAAgg8AAN8QAADlEAAAIxMAACYTAAAXFAAAGxQAACEUAAAmFAAA9RUAAPgVAADsFgAA7RYA AHYYAAB5GAAA8hsAAPUbAAAnHAAAKhwAAPocAAADHQAA6B0AAPEdAADgHgAA4x4AAIkgAACMIAAA NyIAADoiAABkIgAAZyIAAN0iAADiIgAA/SYAAAInAADHKAAAzCgAADIqAAA5KgAALSsAADQrAACY LgAAmy4AAOouAADxLgAAqi8AALsvAABgMAAAZTAAAAUxAAAMMQAALzMAADIzAACPMwAAkjMAABw1 AAAtNQAAGTYAABw2AABNNgAAUDYAAL82AADHNgAAETsAABY7AADrPAAA+TwAAOQ9AADpPQAAnz8A AKQ/AACiRAAAp0QAAF5FAABiRQAAO0YAAEBGAAD0RgAA90YAACJHAAAlRwAAzkcAANNHAADgRwAA 5UcAAEhIAABMSAAA10gAAOhIAABhSQAAaUkAAHJJAACDSQAA6UkAAO1JAADdSgAA7koAANVPAADZ TwAAa1EAAHNRAADsUQAA9FEAAIFTAACJUwAA1FYAANhWAABIVwAAUFcAACVYAAApWAAAeFgAAH1Y AABTXAAAV1wAAFVdAABZXQAAcl0AAHZdAAB+XQAAhl0AALtdAAC/XQAAF14AABteAABEXgAASF4A AFBeAABYXgAAql4AAK5eAADVXgAA2V4AAEBgAABFYAAAdmAAAHtgAACWYAAAmmAAAG9mAAB4ZgAA l2cAAJ1nAAC6aAAAwmgAAJdtAACjbQAALnMAADFzAAAcdwAAIHcAAEl4AABReAAAxXgAAMd4AADk eQAA8HkAABB6AAAUegAAFnoAAB16AAApegAALnoAAJh6AACcegAAvXoAAM56AAABewAABXsAAAd7 AAAMewAAiXsAAI17AACPewAAlHsAAPt7AAD/ewAAAXwAAAZ8AABrfAAAb3wAAHF8AAB4fAAA/nwA AA19AAB6fQAABwAcAAcAHAAHAAUABwAFAAcABQAHAAUABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcABQAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHAAUABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcABwAHAAAAAADaAAAAsgEAAFkNAACSDQAAZxQAAG4UAACcFAAAnxQAAE0W AADtFgAALxkAAEQZAACIGQAAihkAAJYaAACbGgAAIhsAACgbAABoLwAAnC8AAEU+AABJPgAAbj8A AHI/AAAfQAAAIUAAAL1CAADHQgAAlkcAAKNHAAC6UwAAwFMAAAVYAAAPWAAAs2oAALpqAAATawAA IGsAAINrAACRawAA3GsAAOVrAAAzbQAAP20AAH9tAACFbQAA/W0AAAluAABVbgAAZW4AAB9wAAAo cAAA0XAAAN5wAACncQAAuXEAANhxAADicQAAfnIAAIxyAAD3cgAAA3MAAL54AADFeAAAGXkAAB95 AADLeQAA0XkAABZ6AACWegAAnnoAAP96AAB4ewAAhnsAAO17AAD4ewAAXnwAAGh8AABrfAAAb3wA AHF8AAD9fAAA/nwAAA19AAB6fQAABwAFAAcAOgAHADoABwA6AAcABQAHADoABwA6AAcAOgAHADoA BwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcA OgAHADoABwA6AAcAOgAHAAcABwAAAAAACAAAACsAAAAxAAAAWQAAAJoAAADCAAAA2gAAALQBAAC/ AQAA+wEAABICAABqAgAAcwIAAMACAADwAgAAPAQAAEUEAACGBgAAngYAALEMAADCDAAAHQ4AAGAO AAB4EAAAiBAAAAERAAAyEQAA7xYAAAAXAABYFwAAjRcAAG4gAACIIAAAJSIAADUiAABcJgAAXyYA AHwmAADEJgAAyCcAANgnAAD+LQAAFS4AALEwAADBMAAA0DIAAOwyAAA5NQAAVjUAAEE6AABJOgAA /zsAAAI8AAAtQAAANkAAANlGAADzRgAAlkcAAKRHAADASAAA80gAACFKAAA8SgAA808AABVQAAA/ UAAAZFAAAGtRAACPUQAA+FQAAAZVAAD3WQAADloAAK9aAAD2WgAAo1sAAMNbAAAPXwAAGF8AAFpf AABzXwAArF8AALNfAAAKYAAAHmAAAIJhAACJYQAAT2QAAFhkAADraQAACWoAABZqAAAwagAAlWoA AJdqAABBawAAQ2sAAPJtAAD0bQAAfm4AAIJuAABHbwAAUG8AAMVwAADIcAAAEnEAACxxAADaeAAA 83gAAP58AAANfQAAD30AABF9AAATfQAAFX0AABd9AAAgfQAAIn0AACR9AAAmfQAAKH0AACp9AAAt fQAAL30AADF9AAAzfQAANX0AADd9AAA7fQAAPX0AAD99AABBfQAAUX0AAFR9AABXfQAAWX0AAFt9 AABdfQAAX30AAGF9AABjfQAAZX0AAGd9AABpfQAAbX0AAG99AAB1fQAAen0AAAUABwAFAAcABQAH AAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcA BQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAF AAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUA BwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAHAAcABQAHAAUABwAFAAcABQAH AAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcA AAAAAP58AAANfQAAen0AAAcABwAHACYAgv///xw9ErBVAAAAAAAAAAAAAAAAAAAAAAABAIj///8E 5CT9ZQAAAAAAAAAAAAAAAAAAAAAAAQBsEF4C0m/AoP8P/w//D/8P/w//D/8P/w//DwAAT2TSArxl pl7/D/8P/w//D/8P/w//D/8P/w8QAOhXMATCvkhR/w//D/8P/w//D/8P/w//D/8PAACjCgsJ0m/A oP8P/w//D/8P/w//D/8P/w//DwAAayjuCURYorT/D/8P/w//D/8P/w//D/8P/w8AAAknwg8kH6be /w//D/8P/w//D/8P/w//D/8PEADNIXgTAnfGwf8P/w//D/8P/w//D/8P/w//DwAAMHq1FdJvwKD/ D/8P/w//D/8P/w//D/8P/w8AABlgyRkCd8bB/w//D/8P/w//D/8P/w//D/8PAADmepUa0m/AoP8P /w//D/8P/w//D/8P/w//DwAAqSRlIsDWML5rAP8P/w//D/8P/w//D/8P/w8QAOlxESMsf0IR/w// D/8P/w//D2oA/w//D/8PAACHeYQl0m/AoP8P/w//D/8P/w//D/8P/w//DwAAQ1/EJtJvwKD/D/8P /w//D/8P/w//D/8P/w8AAEBXyyrSb8Cg/w//D/8P/w//D/8P/w//D/8PAABdd3krAphWuf8P/w// D/8P/w//D/8P/w//DwAAnTH2MxyPMCz/D/8P/w//D/8P/w//D/8P/w8AALIxED7yUbSR/w//D/8P /w//D/8P/w//D/8PEAAzSadF0m/AoP8P/w//D/8P/w//D/8P/w//DwAAFU60RWYg5mb/D/8P/w// D/8P/w//D/8P/w8QAC8470XSb8Cg/w//D/8P/w//D/8P/w//D/8PAADNPTVJ0m/AoP8P/w//D/8P /w//D/8P/w//DwAAoxx0UdJvwKD/D/8P/w//D/8P/w//D/8P/w8AADhrrFGOEUgL/w//D/8P/w// D/8P/w//D/8PAACmP0NVsEUAJv8P/w//D/8P/w//D/8P/w//DwAAaF/OXppsxmRaAP8P/w//D/8P /w//D/8P/w8QAG94oV+QCgDCAQACAAMABAAFAAYABwAIAP8PAAD+Gi5jUM0SeDwA/w//D/8P/w// D/8P/w//DxAAgVYVZC7tENn/D/8P/w//D/8P/w//D/8P/w8QAMQBQmQCmFa5/w//D/8P/w//D/8P /w//D/8PAAA3W39m0m/AoP8P/w//D/8P/w//D/8P/w//DwAAcSJdb9JvwKD/D/8P/w//D/8P/w// D/8P/w8AALtL6nagoSr/VwD/D/8P/w//D/8P/w//D/8PEAAPN5d3wr5IUf8P/w//D/8P/w//D/8P /w//DwAAwjq2ePR/oGM2AP8P/w//D/8P/w//D/8P/w8QAEFA7HjCvkhR/w//D/8P/w//D/8P/w// D/8PAAABAAAAFwAAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4Q4BBGEmP4VxgUAATgEBl6EOARghJj+ T0oBAFFKAQBvKACHaAAAAACISAAAAQAt8AEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAYAAAPhGgB EYSY/hXGBQABaAEGXoRoAWCEmP4CAAAALgAFAAAAAAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4RY AhGEqP0VxgUAAVgCBl6EWAJghKj9bygAAQAAAAsAAAAAAAEDAAAAAAAAAAAAAAAAAAAAAAMYAAAP hFgCEYSo/RXGBQABWAIGXoRYAmCEqP1vKAADAAAALgABAAMAAAAAAAEDBQAAAAAAAAAAAAAAAAAA AAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1vKAAFAAAALgABAC4AAgABAAAAAAABAwUHAAAA AAAAAAAAAAAAAAADGAAAD4TQAhGEMP0VxgUAAdACBl6E0AJghDD9bygABwAAAC4AAQAuAAIALgAD AAEAAAAAAAEDBQcJAAAAAAAAAAAAAAAAAAMYAAAPhDgEEYTI+xXGBQABOAQGXoQ4BGCEyPtvKAAJ AAAALgABAC4AAgAuAAMALgAEAAEAAAAAAAEDBQcJCwAAAAAAAAAAAAAAAAMYAAAPhDgEEYTI+xXG BQABOAQGXoQ4BGCEyPtvKAALAAAALgABAC4AAgAuAAMALgAEAC4ABQABAAAAAAABAwUHCQsNAAAA AAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygADQAAAC4AAQAuAAIALgADAC4A BAAuAAUALgAGAAEAAAAAAAEDBQcJCw0PAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSg BWCEYPpvKAAPAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAAEAAAAAAAEDBQcJCw0PEQAA AAAAAAACAAAAoAAAAAMAAAC4AAAABAAAAMQAAAAFAAAA3AAAAAYAAADoAAAABwAAAPQAAAAIAAAA GAEAAAkAAAAwAQAAEgAAADwBAAAKAAAAXAEAAAsAAABoAQAADAAAAHQBAAANAAAAgAEAAA4AAACM AQAADwAAAJQBAAAQAAAAnAEAABMAAACkAQAAAgAAAOQEAAAeAAAAEAAAAFN0YWdlMmFuZDMgViZW AAAeAAAABAAAAAAAAAAeAAAAEAAAAEJhc2F2YXJhaiBQYXRpbAAeAAAABAAAAAAAAAAeAAAABAAA AAAAAAAeAAAAHAAAAFYmViBDb250cmlidXRpb24gVGVtcGxhdGUAAAAeAAAAEAAAAEJlaGNldCBT YXJpa2F5YQAeAAAABAAAADIAAAAeAAAAGAAAAE1pY3Jvc29mdCBPZmZpY2UgV29yZAAAAEAAAAAA MBoeAQAAAEAAAAAAjM8qUbrGAUAAAAAAsECQVufGAUAAAAAAsECQVufGAQMAAAAOAAAAAwAAAKcS AAADAAAAV2oAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8A AAUBAgAAAAAAAAAAAAAAAAAAAAAAAgAAAALVzdWcLhsQk5cIACss+a5EAAAABdXN1ZwuGxCTlwgA Kyz5rpABAABMAQAADgAAAAEAAAB4AAAAAgAAAIAAAAAOAAAAjAAAAA8AAACYAAAABQAAAKgAAAAG AAAAsAAAABEAAAC4AAAAFwAAAMAAAAALAAAAyAAAABAAAADQAAAAEwAAANgAAAAWAAAA4AAAAA0A AADoAAAADAAAABYBAAACAAAA6f0AAB4AAAAEAAAAAAAAAB4AAAAEAAAAAAAAAB4AAAAIAAAATm9r aWEAAAADAAAA4gAAAAMAAAA/AAAAAwAAAL98AAADAAAA5hULAAsAAAAAAAAACwAAAAAAAAALAAAA AAAAAAsAAAAAAAAAHhAAAAIAAAAPAAAAU3RhZ2UyYW5kMyBWJlYADwAAAFN0YWdlMmFuZDMgViZW AAwQAAAEAAAAHgAAAAYAAABUaXRsZQADAAAAAQAAAB4AAAAHAAAA7KCc66qpAAMAAAABAAAAAMgB AAAEAAAAAAAAACgAAAABAAAAVgAAAAIAAABeAAAAAwAAAGoAAAACAAAAAgAAAA4AAABfUElEX0xJ TktCQVNFAAMAAAAMAAAAX1BJRF9ITElOS1MAAgAAAOn9AABBAAAAAgAAAAAAAABBAAAAVAEAABIA AAADAAAAEQAlAAMAAAAGAAAAAwAAAAAAAAADAAAABQAAAB8AAAAcAAAAbQBhAGkAbAB0AG8AOgBi AHMAYQByAGkAawBhAHkAYQBAAGgAdQBhAHcAZQBpAC4AYwBvAG0AAAAfAAAAAQAAAAAAATEDAAAA UgBpAAMAAAADAAAAAwAAAAAAAAADAAAABQAAAB8AAAAbAAAAbQBhAGkAbAB0AG8AOgBqAGkAbgBj AGgAbwBlAEAAcwBhAG0AcwB1AG4AZwAuAGMAbwBtAAAAAAAfAAAAAQAAAAAAATEDAAAAawAfAAMA AAAAAAAAAwAAAAAAAAADAAAABQAAAB8AAAAhAAAAbQBhAGkAbAB0AG8AOgBiAGEAcwBhAHYAYQBy AGEAagAuAHAAYQB0AGkAbABAAG4AbwBrAGkAYQAuAGMAbwBtAAAAAAAfAAAAAQAAAAAAATEAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP7/AwoAAP////8GCQIAAAAA AMAAAAAAAABGHwAAAE1pY3Jvc29mdCBPZmZpY2UgV29yZCBEb2N1bWVudAAKAAAATVNXb3JkRG9j ABAAAABXb3JkLkRvY3VtZW50LjgA9DmycQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAMYAAAPhAgHEYT4+BXGBQABCAcGXoQIB2CE+PhvKAARAAAALgABAC4AAgAuAAMALgAEAC4A BQAuAAYALgAHAC4ACAAFAAAAAAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4RoARGEmP4VxgUAAWgB Bl6EaAFghJj+bygAAgAAAA7/AQAAAASAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+ESAMRhFz+FcYF AAFIAwZehEgDYIRc/odoAAAAAIhIAAACAAEAKQABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAA D4TsBBGEXP4VxgUAAewEBl6E7ARghFz+h2gAAAAAiEgAAAIAAgAuAAEAAAAAgAEAAAAAAAAAAAAA AAAAAAAAAAoYAAAPhJAGEYRc/hXGBQABkAYGXoSQBmCEXP6HaAAAAACISAAAAgADAC4AAQAAAASA AQAAAAAAAAAAAAAAAAAAAAAAChgAAA+ENAgRhFz+FcYFAAE0CAZehDQIYIRc/odoAAAAAIhIAAAC AAQAKQABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4TYCRGEXP4VxgUAAdgJBl6E2AlghFz+ h2gAAAAAiEgAAAIABQAuAAEAAAAAgAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhHwLEYRc/hXGBQAB fAsGXoR8C2CEXP6HaAAAAACISAAAAgAGAC4AAQAAAASAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+E IA0RhFz+FcYFAAEgDQZehCANYIRc/odoAAAAAIhIAAACAAcAKQABAAAAAoIBAAAAAAAAAAAAAAAA AAAAAAAKGAAAD4TEDhGEXP4VxgUAAcQOBl6ExA5ghFz+h2gAAAAAiEgAAAIACAAuAAUAAAAAAAEA AAAAAAAAAAAAAAAAAAAAAAMYAAAPhFgCEYSo/RXGBQABWAIGXoRYAmCEqP1vKAABAAAACwAAAAAA AQMAAAAAAAAAAAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAMAAAAuAAEA BAAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAUA AAAuAAEALgACAAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQ AmCEMP1vKAAHAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+EOAQR hMj7FcYFAAE4BAZehDgEYITI+28oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAA AAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI+28oAAsAAAAuAAEALgACAC4AAwAu AAQALgAFAAEAAAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCE YPpvKAANAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAA AxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAA8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4A BgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+ECAcRhPj4FcYFAAEIBwZehAgHYIT4 +G8oABEAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIAAUAAAAAAAEAAAAAAAAAAAAA AAAAAAAAAAMYAAAPhFgCEYSo/RXGBQABWAIGXoRYAmCEqP1vKAABAAAACwAAAAAAAQMAAAAAAAAA AAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAMAAAAuAAEAAwAAAAAAAQMF AAAAAAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAUAAAAuAAEALgAC AAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1vKAAH AAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4 BAZehDgEYITI+28oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAA AxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI+28oAAsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEA AAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAANAAAA LgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAUR hGD6FcYFAAGgBQZehKAFYIRg+m8oAA8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAA AAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+ECAcRhPj4FcYFAAEIBwZehAgHYIT4+G8oABEAAAAu AAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIAAUAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMY AAAPhOQCEYQc/RXGBQAB5AIGXoTkAmCEHP1vKAABAAAACwAAAAAAAQMAAAAAAAAAAAAAAAAAAAAA AxgAAA+E1AMRhBz9FcYFAAHUAwZehNQDYIQc/W8oAAMAAAAuAAEABQAAAAAAAQMFAAAAAAAAAAAA AAAAAAAAAxgAAA+ExAQRhBz9FcYFAAHEBAZehMQEYIQc/W8oAAUAAAAuAAEALgACAAEAAAAAAAED BQcAAAAAAAAAAAAAAAAAAAMYAAAPhLQFEYQc/RXGBQABtAUGXoS0BWCEHP1vKAAHAAAALgABAC4A AgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+E+AcRhMj7FcYFAAH4BwZehPgHYITI +28oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAAAxgAAA+E6AgR hMj7FcYFAAHoCAZehOgIYITI+28oAAsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEAAAAAAAEDBQcJ Cw0AAAAAAAAAAAAAAAMYAAAPhEALEYRg+hXGBQABQAsGXoRAC2CEYPpvKAANAAAALgABAC4AAgAu AAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EMAwRhGD6FcYFAAEw DAZehDAMYIRg+m8oAA8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkL DQ8RAAAAAAAAAAAAAxgAAA+EiA4RhPj4FcYFAAGIDgZehIgOYIT4+G8oABEAAAAuAAEALgACAC4A AwAuAAQALgAFAC4ABgAuAAcALgAIAAEAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhGgBEYSY /hXGBQAB0AIGXoRoAWCEmP5vKAADAFsAAABdAAEAAAAEgAEAAAAAAAAAAAAAAAAAAAAAAAAYAAAP hKAFEYSY/hXGBQABoAUGXoSgBWCEmP4CAAEALgABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAAGAAA D4RwCBGETP8VxgUAAXAIBl6EcAhghEz/AgACAC4AAQAAAACAAQAAAAAAAAAAAAAAAAAAAAAAABgA AA+EQAsRhJj+FcYFAAFACwZehEALYISY/gIAAwAuAAEAAAAEgAEAAAAAAAAAAAAAAAAAAAAAAAAY AAAPhBAOEYSY/hXGBQABEA4GXoQQDmCEmP4CAAQALgABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAA GAAAD4TgEBGETP8VxgUAAeAQBl6E4BBghEz/AgAFAC4AAQAAAACAAQAAAAAAAAAAAAAAAAAAAAAA ABgAAA+EsBMRhJj+FcYFAAGwEwZehLATYISY/gIABgAuAAEAAAAEgAEAAAAAAAAAAAAAAAAAAAAA AAAYAAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP4CAAcALgABAAAAAoIBAAAAAAAAAAAAAAAAAAAA AAAAGAAAD4RQGRGETP8VxgUAAVAZBl6EUBlghEz/AgAIAC4ABQAAAAAAAQAAAAAAAAAAAAAAAAAA AAAAAxgAAA+EwQIRhD/9FcYFAAHBAgZehMECYIQ//W8oAAEAAAALAAAAAAABAwAAAAAAAAAAAAAA AAAAAAADGAAAD4TBAhGEP/0VxgUAAcECBl6EwQJghD/9bygAAwAAAC4AAQABAAAAAAABAwUAAAAA AAAAAAAAAAAAAAADGAAAD4TQAhGEMP0VxgUAAdACBl6E0AJghDD9bygABQAAAC4AAQAuAAIAAgAA AAAAAQMFBwAAAAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAcAAAAu AAEALgACAC4AAwABAAAAAAABAwUHCQAAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6E OARghMj7bygACQAAAC4AAQAuAAIALgADAC4ABAABAAAAAAABAwUHCQsAAAAAAAAAAAAAAAADGAAA D4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAAAAAA AQMFBwkLDQAAAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAA0AAAAuAAEA LgACAC4AAwAuAAQALgAFAC4ABgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAADGAAAD4SgBRGEYPoV xgUAAaAFBl6EoAVghGD6bygADwAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAAB AwUHCQsNDxEAAAAAAAAAAAADGAAAD4QIBxGE+PgVxgUAAQgHBl6ECAdghPj4bygAEQAAAC4AAQAu AAIALgADAC4ABAAuAAUALgAGAC4ABwAuAAgABQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+E WAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAEAAAALAAAAAAABAwAAAAAAAAAAAAAAAAAAAAADGAAA D4RYAhGEqP0VxgUAAVgCBl6EWAJghKj9bygAAwAAAC4AAQADAAAAAAABAwUAAAAAAAAAAAAAAAAA AAADGAAAD4TQAhGEMP0VxgUAAdACBl6E0AJghDD9bygABQAAAC4AAQAuAAIAAQAAAAAAAQMFBwAA AAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAcAAAAuAAEALgACAC4A AwABAAAAAAABAwUHCQAAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygA CQAAAC4AAQAuAAIALgADAC4ABAABAAAAAAABAwUHCQsAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsV xgUAATgEBl6EOARghMj7bygACwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAAAAAAAQMFBwkLDQAA AAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAA0AAAAuAAEALgACAC4AAwAu AAQALgAFAC4ABgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6E oAVghGD6bygADwAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEA AAAAAAAAAAADGAAAD4QIBxGE+PgVxgUAAQgHBl6ECAdghPj4bygAEQAAAC4AAQAuAAIALgADAC4A BAAuAAUALgAGAC4ABwAuAAgABQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EwQIRhD/9FcYF AAHBAgZehMECYIQ//W8oAAEAAAALAAAAAAABAwAAAAAAAAAAAAAAAAAAAAADGAAAD4TBAhGEP/0V xgUAAcECBl6EwQJghD/9bygAAwAAAC4AAQABAAAAAAABAwUAAAAAAAAAAAAAAAAAAAADGAAAD4TQ AhGEMP0VxgUAAdACBl6E0AJghDD9bygABQAAAC4AAQAuAAIAAgAAAAAAAQMFBwAAAAAAAAAAAAAA AAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAcAAAAuAAEALgACAC4AAwABAAAAAAAB AwUHCQAAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACQAAAC4AAQAu AAIALgADAC4ABAABAAAAAAABAwUHCQsAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6E OARghMj7bygACwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAAAAAAAQMFBwkLDQAAAAAAAAAAAAAA AxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4A BgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygA DwAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEAAAAAAAAAAAAD GAAAD4QIBxGE+PgVxgUAAQgHBl6ECAdghPj4bygAEQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAG AC4ABwAuAAgABQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgC YISo/W8oAAEAAAALAAAAAAABAwAAAAAAAAAAAAAAAAAAAAADGAAAD4RYAhGEqP0VxgUAAVgCBl6E WAJghKj9bygAAwAAAC4AAQADAAAAAAABAwUAAAAAAAAAAAAAAAAAAAADGAAAD4TQAhGEMP0VxgUA AdACBl6E0AJghDD9bygABQAAAC4AAQAuAAIAAQAAAAAAAQMFBwAAAAAAAAAAAAAAAAAAAxgAAA+E 0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAcAAAAuAAEALgACAC4AAwABAAAAAAABAwUHCQAAAAAA AAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACQAAAC4AAQAuAAIALgADAC4A BAABAAAAAAABAwUHCQsAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygA CwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAAAAAAAQMFBwkLDQAAAAAAAAAAAAAAAxgAAA+EoAUR hGD6FcYFAAGgBQZehKAFYIRg+m8oAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgABAAAAAAAB AwUHCQsNDwAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygADwAAAC4AAQAu AAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEAAAAAAAAAAAADGAAAD4QIBxGE +PgVxgUAAQgHBl6ECAdghPj4bygAEQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwAuAAgA AQAAAAAQAQAAAAAAAAAAAGgBAAAAAAAADRgAAA+E0AIRhJj+FcYFAAGIAgZehNACYISY/m8oAIdo AAAAAIhIAAACAAAAKQABAAAABAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4QIBxGEMP0VxgUAAQgH Bl6ECAdghDD9bygAAgABACkAAQAAAAKSAQAAAAAAAAAAAGgBAAAAAAAAChgAAA+EcAgRhEz/FcYF AAFwCAZehHAIYIRM/4doAAAAAIhIAAACAAIALgABAAAAAJABAAAAAAAAAAAAaAEAAAAAAAAKGAAA D4RACxGEmP4VxgUAAUALBl6EQAtghJj+h2gAAAAAiEgAAAIAAwAuAAEAAAAEkAEAAAAAAAAAAABo AQAAAAAAAAoYAAAPhBAOEYSY/hXGBQABEA4GXoQQDmCEmP6HaAAAAACISAAAAgAEAC4AAQAAAAKS AQAAAAAAAAAAAGgBAAAAAAAAChgAAA+E4BARhEz/FcYFAAHgEAZehOAQYIRM/4doAAAAAIhIAAAC AAUALgABAAAAAJABAAAAAAAAAAAAaAEAAAAAAAAKGAAAD4SwExGEmP4VxgUAAbATBl6EsBNghJj+ h2gAAAAAiEgAAAIABgAuAAEAAAAEkAEAAAAAAAAAAABoAQAAAAAAAAoYAAAPhIAWEYSY/hXGBQAB gBYGXoSAFmCEmP6HaAAAAACISAAAAgAHAC4AAQAAAAKSAQAAAAAAAAAAAGgBAAAAAAAAChgAAA+E UBkRhEz/FcYFAAFQGQZehFAZYIRM/4doAAAAAIhIAAACAAgALgABAAAAABABAAAAAAAAAAAAAAAA AAAAAAANGAAAD4SwARGEUP4VxgUAAbABBl6EsAFghFD+bygAh2gAAAAAiEgAAAIAAAAuAAEAAAAA EAEDAAAAAAAAAAAAAAAAAAAAAA0YAQAPhEACEYTA/RXGBQABGAMGXoRAAmCEwP1vKACHaAAAAACI SAAAAwAAAC4AAQABAAAAABABAwUAAAAAAAAAAAAAAAAAAAANGAIAD4TQAhGEMP0VxgUAAbABBl6E 0AJghDD9bygAh2gAAAAAiEgAAAUAAAAuAAEALgACAAEAAAAAEAEDBQcAAAAAAAAAAAAAAAAAABQY AwAPhGADEYSg/BXGBQABYAMGXoRgA2CEoPw1CAFDShQAbygAh2gAAAAAiEgAAAcAAAAuAAEALgAC AC4AAwABAAAAABABAwUHCQAAAAAAAAAAAAAAAAANGAQAD4TwAxGEEPwVxgUAAfADBl6E8ANghBD8 bygAh2gAAAAAiEgAAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAQAQMFBwkLAAAAAAAAAAAAAAAA DRgFAA+EgAQRhID7FcYFAAGABAZehIAEYISA+28oAIdoAAAAAIhIAAALAAAALgABAC4AAgAuAAMA LgAEAC4ABQABAAAAABABAwUHCQsNAAAAAAAAAAAAAAANGAYAD4QQBRGE8PoVxgUAARAFBl6EEAVg hPD6bygAh2gAAAAAiEgAAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgABAAAAABABAwUHCQsN DwAAAAAAAAAAAAANGAcAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygAh2gAAAAAiEgAAA8AAAAu AAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAQAQMFBwkLDQ8RAAAAAAAAAAAADRgIAA+E MAYRhND5FcYFAAEwBgZehDAGYITQ+W8oAIdoAAAAAIhIAAARAAAALgABAC4AAgAuAAMALgAEAC4A BQAuAAYALgAHAC4ACAAFAAAAAAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4RYAhGEqP0VxgUAAVgC Bl6EWAJghKj9bygAAQAAAAsAAAAAAAEDAAAAAAAAAAAAAAAAAAAAAAMYAAAPhFgCEYSo/RXGBQAB WAIGXoRYAmCEqP1vKAADAAAALgABAAMAAAAAAAEDBQAAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw /RXGBQAB0AIGXoTQAmCEMP1vKAAFAAAALgABAC4AAgABAAAAAAABAwUHAAAAAAAAAAAAAAAAAAAD GAAAD4TQAhGEMP0VxgUAAdACBl6E0AJghDD9bygABwAAAC4AAQAuAAIALgADAAEAAAAAAAEDBQcJ AAAAAAAAAAAAAAAAAAMYAAAPhDgEEYTI+xXGBQABOAQGXoQ4BGCEyPtvKAAJAAAALgABAC4AAgAu AAMALgAEAAEAAAAAAAEDBQcJCwAAAAAAAAAAAAAAAAMYAAAPhDgEEYTI+xXGBQABOAQGXoQ4BGCE yPtvKAALAAAALgABAC4AAgAuAAMALgAEAC4ABQABAAAAAAABAwUHCQsNAAAAAAAAAAAAAAADGAAA D4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygADQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAAEA AAAAAAEDBQcJCw0PAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAAPAAAA LgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAAEAAAAAAAEDBQcJCw0PEQAAAAAAAAAAAAMYAAAP hAgHEYT4+BXGBQABCAcGXoQIB2CE+PhvKAARAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAH AC4ACAAFAAAAAAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4RYAhGEqP0VxgUAAVgCBl6EWAJghKj9 bygAAQAAAAsAAAAAAAEDAAAAAAAAAAAAAAAAAAAAAAMYAAAPhFgCEYSo/RXGBQABWAIGXoRYAmCE qP1vKAADAAAALgABAAMAAAAAAAEDBQAAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIG XoTQAmCEMP1vKAAFAAAALgABAC4AAgABAAAAAAABAwUHAAAAAAAAAAAAAAAAAAADGAAAD4TQAhGE MP0VxgUAAdACBl6E0AJghDD9bygABwAAAC4AAQAuAAIALgADAAEAAAAAAAEDBQcJAAAAAAAAAAAA AAAAAAMYAAAPhDgEEYTI+xXGBQABOAQGXoQ4BGCEyPtvKAAJAAAALgABAC4AAgAuAAMALgAEAAEA AAAAAAEDBQcJCwAAAAAAAAAAAAAAAAMYAAAPhDgEEYTI+xXGBQABOAQGXoQ4BGCEyPtvKAALAAAA LgABAC4AAgAuAAMALgAEAC4ABQABAAAAAAABAwUHCQsNAAAAAAAAAAAAAAADGAAAD4SgBRGEYPoV xgUAAaAFBl6EoAVghGD6bygADQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAAEAAAAAAAEDBQcJ Cw0PAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAAPAAAALgABAC4AAgAu AAMALgAEAC4ABQAuAAYALgAHAAEAAAAAAAEDBQcJCw0PEQAAAAAAAAAAAAMYAAAPhAgHEYT4+BXG BQABCAcGXoQIB2CE+PhvKAARAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAC4ACAAFAAAA AAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4RYAhGEqP0VxgUAAVgCBl6EWAJghKj9bygAAQAAAAsA AAAAAAEDAAAAAAAAAAAAAAAAAAAAAAMYAAAPhFgCEYSo/RXGBQABWAIGXoRYAmCEqP1vKAADAAAA LgABAAMAAAAAAAEDBQAAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1v KAAFAAAALgABAC4AAgABAAAAAAABAwUHAAAAAAAAAAAAAAAAAAADGAAAD4TQAhGEMP0VxgUAAdAC Bl6E0AJghDD9bygABwAAAC4AAQAuAAIALgADAAEAAAAAAAEDBQcJAAAAAAAAAAAAAAAAAAMYAAAP hDgEEYTI+xXGBQABOAQGXoQ4BGCEyPtvKAAJAAAALgABAC4AAgAuAAMALgAEAAEAAAAAAAEDBQcJ CwAAAAAAAAAAAAAAAAMYAAAPhDgEEYTI+xXGBQABOAQGXoQ4BGCEyPtvKAALAAAALgABAC4AAgAu AAMALgAEAC4ABQABAAAAAAABAwUHCQsNAAAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6E oAVghGD6bygADQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAAEAAAAAAAEDBQcJCw0PAAAAAAAA AAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAAPAAAALgABAC4AAgAuAAMALgAEAC4A BQAuAAYALgAHAAEAAAAAAAEDBQcJCw0PEQAAAAAAAAAAAAMYAAAPhAgHEYT4+BXGBQABCAcGXoQI B2CE+PhvKAARAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAC4ACAAFAAAAAAABAAAAAAAA AAAAAAAAAAAAAAADGAAAD4SEAxGEfPwVxgUAAYQDBl6EhANghHz8bygAAQAAAAsAAAAAAAEDAAAA AAAAAAAAAAAAAAAAAAMYAAAPhIQDEYR8/BXGBQABhAMGXoSEA2CEfPxvKAADAAAALgABAA0AAAAA AAEDBQAAAAAAAAAAAAAAAAAAAAMYAAAPhIQDEYR8/BXGBQABhAMGXoSEA2CEfPxvKAAFAAAALgAB AC4AAgABAAAAAAABAwUHAAAAAAAAAAAAAAAAAAADGAAAD4SEAxGEfPwVxgUAAYQDBl6EhANghHz8 bygABwAAAC4AAQAuAAIALgADAAEAAAAAAAEDBQcJAAAAAAAAAAAAAAAAAAMYAAAPhDgEEYTI+xXG BQABOAQGXoQ4BGCEyPtvKAAJAAAALgABAC4AAgAuAAMALgAEAAEAAAAAAAEDBQcJCwAAAAAAAAAA AAAAAAMYAAAPhDgEEYTI+xXGBQABOAQGXoQ4BGCEyPtvKAALAAAALgABAC4AAgAuAAMALgAEAC4A BQABAAAAAAABAwUHCQsNAAAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygA DQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAAEAAAAAAAEDBQcJCw0PAAAAAAAAAAAAAAMYAAAP hKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAAPAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAH AAEAAAAAAAEDBQcJCw0PEQAAAAAAAAAAAAMYAAAPhAgHEYT4+BXGBQABCAcGXoQIB2CE+PhvKAAR AAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAC4ACAAFAAAAAAABAAAAAAAAAAAAAAAAAAAA AAAHGAAAD4TBAhGEP/0VxgUAAcECBl6EwQJghD/9UEoEAG8oAAEAAAALAAAAAAABAwAAAAAAAAAA AAAAAAAAAAAHGAAAD4TBAhGEP/0VxgUAAcECBl6EwQJghD/9UEoEAG8oAAMAAAAuAAEAAwAAAAAA AQMFAAAAAAAAAAAAAAAAAAAABxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/VBKBABvKAAFAAAA LgABAC4AAgACAAAAAAABAwUHAAAAAAAAAAAAAAAAAAAHGAAAD4TQAhGEMP0VxgUAAdACBl6E0AJg hDD9UEoEAG8oAAcAAAAuAAEALgACAC4AAwABAAAAAAABAwUHCQAAAAAAAAAAAAAAAAAHGAAAD4Q4 BBGEyPsVxgUAATgEBl6EOARghMj7UEoEAG8oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMF BwkLAAAAAAAAAAAAAAAABxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI+1BKBABvKAALAAAALgAB AC4AAgAuAAMALgAEAC4ABQABAAAAAAABAwUHCQsNAAAAAAAAAAAAAAAHGAAAD4SgBRGEYPoVxgUA AaAFBl6EoAVghGD6UEoEAG8oAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgABAAAAAAABAwUH CQsNDwAAAAAAAAAAAAAHGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6UEoEAG8oAA8AAAAuAAEA LgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAABxgAAA+ECAcR hPj4FcYFAAEIBwZehAgHYIT4+FBKBABvKAARAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAH AC4ACAAFAAAAAAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4RoARGEmP4VxgUAAWgBBl6EaAFghJj+ bygAAgAAAA7/AQAAAASAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+ESAMRhFz+FcYFAAFIAwZehEgD YIRc/odoAAAAAIhIAAACAAEAKQABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4TsBBGEXP4V xgUAAewEBl6E7ARghFz+h2gAAAAAiEgAAAIAAgAuAAEAAAAAgAEAAAAAAAAAAAAAAAAAAAAAAAoY AAAPhJAGEYRc/hXGBQABkAYGXoSQBmCEXP6HaAAAAACISAAAAgADAC4AAQAAAASAAQAAAAAAAAAA AAAAAAAAAAAAChgAAA+ENAgRhFz+FcYFAAE0CAZehDQIYIRc/odoAAAAAIhIAAACAAQAKQABAAAA AoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4TYCRGEXP4VxgUAAdgJBl6E2AlghFz+h2gAAAAAiEgA AAIABQAuAAEAAAAAgAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhHwLEYRc/hXGBQABfAsGXoR8C2CE XP6HaAAAAACISAAAAgAGAC4AAQAAAASAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EIA0RhFz+FcYF AAEgDQZehCANYIRc/odoAAAAAIhIAAACAAcAKQABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAA D4TEDhGEXP4VxgUAAcQOBl6ExA5ghFz+h2gAAAAAiEgAAAIACAAuAAUAAAAAAAEAAAAAAAAAAAAA AAAAAAAAAAMYAAAPhFgCEYSo/RXGBQABWAIGXoRYAmCEqP1vKAABAAAACwAAAAAAAQMAAAAAAAAA AAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAMAAAAuAAEAAwAAAAAAAQMF AAAAAAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAUAAAAuAAEALgAC AAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1vKAAH AAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4 BAZehDgEYITI+28oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAA AxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI+28oAAsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEA AAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAANAAAA LgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAUR hGD6FcYFAAGgBQZehKAFYIRg+m8oAA8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAA AAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+ECAcRhPj4FcYFAAEIBwZehAgHYIT4+G8oABEAAAAu AAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIAAEAAAAXEAAAAAAAAAAAAAAAAAAAAAAAABUY AAAPhKQBEYRc/hXGBQABpAEGXoSkAWCEXP5PSg4AUUoOAG8oAIdoAAAAAIhIAAABAGzwAQAAABeQ AAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+ESAMRhFz+FcYFAAFIAwZehEgDYIRc/k9KDgBRSg4AbygA h2gAAAAAiEgAAAEAbvABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4TsBBGEXP4VxgUAAewE Bl6E7ARghFz+T0oOAFFKDgBvKACHaAAAAACISAAAAQB18AEAAAAXkAAAAAAAAAAAAAAAAAAAAAAA ABUYAAAPhJAGEYRc/hXGBQABkAYGXoSQBmCEXP5PSg4AUUoOAG8oAIdoAAAAAIhIAAABAGzwAQAA ABeQAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+ENAgRhFz+FcYFAAE0CAZehDQIYIRc/k9KDgBRSg4A bygAh2gAAAAAiEgAAAEAbvABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4TYCRGEXP4VxgUA AdgJBl6E2AlghFz+T0oOAFFKDgBvKACHaAAAAACISAAAAQB18AEAAAAXkAAAAAAAAAAAAAAAAAAA AAAAABUYAAAPhHwLEYRc/hXGBQABfAsGXoR8C2CEXP5PSg4AUUoOAG8oAIdoAAAAAIhIAAABAGzw AQAAABeQAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EIA0RhFz+FcYFAAEgDQZehCANYIRc/k9KDgBR Sg4AbygAh2gAAAAAiEgAAAEAbvABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4TEDhGEXP4V xgUAAcQOBl6ExA5ghFz+T0oOAFFKDgBvKACHaAAAAACISAAAAQB18AUAAAAAAAEAAAAAAAAAAAAA AAAAAAAAAAMYAAAPhFgCEYSo/RXGBQABWAIGXoRYAmCEqP1vKAABAAAACwAAAAAAAQMAAAAAAAAA AAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAMAAAAuAAEAAwAAAAAAAQMF AAAAAAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAUAAAAuAAEALgAC AAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1vKAAH AAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4 BAZehDgEYITI+28oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAA AxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI+28oAAsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEA AAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAANAAAA LgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAUR hGD6FcYFAAGgBQZehKAFYIRg+m8oAA8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAA AAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+ECAcRhPj4FcYFAAEIBwZehAgHYIT4+G8oABEAAAAu AAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIAAUAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMY AAAPhFgCEYSo/RXGBQABWAIGXoRYAmCEqP1vKAABAAAACwAAAAAAAQMAAAAAAAAAAAAAAAAAAAAA AxgAAA+EWAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAMAAAAuAAEAAwAAAAAAAQMFAAAAAAAAAAAA AAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAUAAAAuAAEALgACAAEAAAAAAAED BQcAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1vKAAHAAAALgABAC4A AgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI +28oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAAAxgAAA+EOAQR hMj7FcYFAAE4BAZehDgEYITI+28oAAsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEAAAAAAAEDBQcJ Cw0AAAAAAAAAAAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAANAAAALgABAC4AAgAu AAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGg BQZehKAFYIRg+m8oAA8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkL DQ8RAAAAAAAAAAAAAxgAAA+ECAcRhPj4FcYFAAEIBwZehAgHYIT4+G8oABEAAAAuAAEALgACAC4A AwAuAAQALgAFAC4ABgAuAAcALgAIAAUAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhFgCEYSo /RXGBQABWAIGXoRYAmCEqP1vKAABAAAACwAAAAAAAQMAAAAAAAAAAAAAAAAAAAAAAxgAAA+EWAIR hKj9FcYFAAFYAgZehFgCYISo/W8oAAMAAAAuAAEAAwAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgA AA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAUAAAAuAAEALgACAAEAAAAAAAEDBQcAAAAAAAAA AAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1vKAAHAAAALgABAC4AAgAuAAMAAQAA AAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI+28oAAkAAAAu AAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4 BAZehDgEYITI+28oAAsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEAAAAAAAEDBQcJCw0AAAAAAAAA AAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAANAAAALgABAC4AAgAuAAMALgAEAC4A BQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg +m8oAA8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAA AAAAAxgAAA+ECAcRhPj4FcYFAAEIBwZehAgHYIT4+G8oABEAAAAuAAEALgACAC4AAwAuAAQALgAF AC4ABgAuAAcALgAIAAUAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhIQDEYR8/BXGBQABhAMG XoSEA2CEfPxvKAABAAAACwAAAAAAAQMAAAAAAAAAAAAAAAAAAAAAAxgAAA+EhAMRhHz8FcYFAAGE AwZehIQDYIR8/G8oAAMAAAAuAAEADwAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgAAA+EhAMRhHz8 FcYFAAGEAwZehIQDYIR8/G8oAAUAAAAuAAEALgACAAMAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMY AAAPhIQDEYR8/BXGBQABhAMGXoSEA2CEfPxvKAAHAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkA AAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI+28oAAkAAAAuAAEALgACAC4A AwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAAAxgAAA+EOAQRhMj7FcYFAAE4BAZehDgEYITI +28oAAsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEAAAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAP hKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAANAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAA AAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAA8AAAAu AAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+E CAcRhPj4FcYFAAEIBwZehAgHYIT4+G8oABEAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcA LgAIAAUAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhAwDEYT0/BXGBQABDAMGXoQMA2CE9Pxv KAABAAAACwAAAAAAAQMAAAAAAAAAAAAAAAAAAAAAAxgAAA+E/AMRhPT8FcYFAAH8AwZehPwDYIT0 /G8oAAMAAAAuAAEACAAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgAAA+E7AQRhPT8FcYFAAHsBAZe hOwEYIT0/G8oAAUAAAAuAAEALgACAAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMYAAAPhNwFEYT0 /BXGBQAB3AUGXoTcBWCE9PxvKAAHAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAA AAAAAxgAAA+E+AcRhMj7FcYFAAH4BwZehPgHYITI+28oAAkAAAAuAAEALgACAC4AAwAuAAQAAQAA AAAAAQMFBwkLAAAAAAAAAAAAAAAAAxgAAA+E6AgRhMj7FcYFAAHoCAZehOgIYITI+28oAAsAAAAu AAEALgACAC4AAwAuAAQALgAFAAEAAAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAPhEALEYRg+hXG BQABQAsGXoRAC2CEYPpvKAANAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkL DQ8AAAAAAAAAAAAAAxgAAA+EMAwRhGD6FcYFAAEwDAZehDAMYIRg+m8oAA8AAAAuAAEALgACAC4A AwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+EiA4RhPj4FcYF AAGIDgZehIgOYIT4+G8oABEAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIAAEAAAAE EAEAAAAAAAAAAABoAQAAAAAAAAAYAAAPhDgEEYSY/hXGBQABOAQGXoQ4BGCEmP4CAAAALgABAAAA BJABAAAAAAAAAAAAaAEAAAAAAAAKGAAAD4SgBRGEmP4VxgUAAaAFBl6EoAVghJj+h2gAAAAAiEgA AAIAAQAuAAEAAAACEgEAAAAAAAAAAABoAQAAAAAAAAoYAAAPhHAIEYRM/xXGBQABcAgGXoRwCGCE TP+HaAAAAACISAAAAgACAC4AAQAAAACQAQAAAAAAAAAAAGgBAAAAAAAAChgAAA+EQAsRhJj+FcYF AAFACwZehEALYISY/odoAAAAAIhIAAACAAMALgABAAAABBABAAAAAAAAAAAAaAEAAAAAAAAKGAAA D4QQDhGEmP4VxgUAARAOBl6EEA5ghJj+h2gAAAAAiEgAAAIABAAuAAEAAAACEgEAAAAAAAAAAABo AQAAAAAAAAoYAAAPhOAQEYRM/xXGBQAB4BAGXoTgEGCETP+HaAAAAACISAAAAgAFAC4AAQAAAACQ AQAAAAAAAAAAAGgBAAAAAAAAChgAAA+EsBMRhJj+FcYFAAGwEwZehLATYISY/odoAAAAAIhIAAAC AAYALgABAAAABJABAAAAAAAAAAAAaAEAAAAAAAAKGAAAD4SAFhGEmP4VxgUAAYAWBl6EgBZghJj+ h2gAAAAAiEgAAAIABwAuAAEAAAACkgEAAAAAAAAAAABoAQAAAAAAAAoYAAAPhFAZEYRM/xXGBQAB UBkGXoRQGWCETP+HaAAAAACISAAAAgAIAC4AAQAAAAAQAQAAAAAAAAAAAAAAAAAAAAAADRgAAA+E sAERhFD+FcYFAAGwAQZehLABYIRQ/m8oAIdoAAAAAIhIAAACAAAALgABAAAAABABAwAAAAAAAAAA AAAAAAAAAAANGAEAD4RAAhGEwP0VxgUAAUACBl6EQAJghMD9bygAh2gAAAAAiEgAAAMAAAAuAAEA AQAAAAAQAQMFAAAAAAAAAAAAAAAAAAAADRgCAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAIdo AAAAAIhIAAAFAAAALgABAC4AAgABAAAAABABAwUHAAAAAAAAAAAAAAAAAAAUGAMAD4RgAxGEoPwV xgUAAWADBl6EYANghKD8NQgBQ0oUAG8oAIdoAAAAAIhIAAAHAAAALgABAC4AAgAuAAMAAQAAAAAQ AQMFBwkAAAAAAAAAAAAAAAAADRgEAA+E8AMRhBD8FcYFAAGoAwZehPADYIQQ/G8oAIdoAAAAAIhI AAAJAAAALgABAC4AAgAuAAMALgAEAAEAAAAAEAEDBQcJCwAAAAAAAAAAAAAAAA0YBQAPhIAEEYSA +xXGBQABgAQGXoSABGCEgPtvKACHaAAAAACISAAACwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAA AAAQAQMFBwkLDQAAAAAAAAAAAAAADRgGAA+EEAURhPD6FcYFAAEQBQZehBAFYITw+m8oAIdoAAAA AIhIAAANAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAQAQMFBwkLDQ8AAAAAAAAAAAAA DRgHAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAIdoAAAAAIhIAAAPAAAALgABAC4AAgAuAAMA LgAEAC4ABQAuAAYALgAHAAEAAAAAEAEDBQcJCw0PEQAAAAAAAAAAAA0YCAAPhDAGEYTQ+RXGBQAB MAYGXoQwBmCE0PlvKACHaAAAAACISAAAEQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwAu AAgAAQAAABcQAAAAAAAAAAAAAGgBAAAAAAAACxgAAA+EOAQRhJj+FcYFAAE4BAZehDgEYISY/k9K CABRSggAbygAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAAAsYAAAPhAgHEYSY/hXGBQABCAcG XoQIB2CEmP5PSggAUUoIAG8oAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAALGAAAD4TYCRGE mP4VxgUAAdgJBl6E2AlghJj+T0oOAFFKDgBvKAABAKfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAA CxgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/k9KAQBRSgEAbygAAQC38AEAAAAXkAAAAAAAAAAA AABoAQAAAAAAAAsYAAAPhHgPEYSY/hXGBQABeA8GXoR4D2CEmP5PSggAUUoIAG8oAAEAbwABAAAA F5AAAAAAAAAAAAAAaAEAAAAAAAALGAAAD4RIEhGEmP4VxgUAAUgSBl6ESBJghJj+T0oOAFFKDgBv KAABAKfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAACxgAAA+EGBURhJj+FcYFAAEYFQZehBgVYISY /k9KAQBRSgEAbygAAQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAAAsYAAAPhOgXEYSY/hXGBQAB 6BcGXoToF2CEmP5PSggAUUoIAG8oAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAALGAAAD4S4 GhGEmP4VxgUAAbgaBl6EuBpghJj+T0oOAFFKDgBvKAABAKfwBQAAAAAAAQAAAAAAAAAAAAAAAAAA AAAABxgAAA+EaAERhJj+FcYFAAFoAQZehGgBYISY/lBKBABvKAACAAAADv8BAAAABIABAAAAAAAA AAAAAAAAAAAAAAAKGAAAD4RIAxGEXP4VxgUAAUgDBl6ESANghFz+h2gAAAAAiEgAAAIAAQApAAEA AAACggEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhOwEEYRc/hXGBQAB7AQGXoTsBGCEXP6HaAAAAACI SAAAAgACAC4AAQAAAACAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EkAYRhFz+FcYFAAGQBgZehJAG YIRc/odoAAAAAIhIAAACAAMALgABAAAABIABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4Q0CBGEXP4V xgUAATQIBl6ENAhghFz+h2gAAAAAiEgAAAIABAApAAEAAAACggEAAAAAAAAAAAAAAAAAAAAAAAoY AAAPhNgJEYRc/hXGBQAB2AkGXoTYCWCEXP6HaAAAAACISAAAAgAFAC4AAQAAAACAAQAAAAAAAAAA AAAAAAAAAAAAChgAAA+EfAsRhFz+FcYFAAF8CwZehHwLYIRc/odoAAAAAIhIAAACAAYALgABAAAA BIABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4QgDRGEXP4VxgUAASANBl6EIA1ghFz+h2gAAAAAiEgA AAIABwApAAEAAAACggEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhMQOEYRc/hXGBQABxA4GXoTEDmCE XP6HaAAAAACISAAAAgAIAC4ABQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EhAMRhHz8FcYF AAGEAwZehIQDYIR8/G8oAAEAAAALAAAAAAABAwAAAAAAAAAAAAAAAAAAAAADGAAAD4SEAxGEfPwV xgUAAYQDBl6EhANghHz8bygAAwAAAC4AAQANAAAAAAABAwUAAAAAAAAAAAAAAAAAAAADGAAAD4SE AxGEfPwVxgUAAYQDBl6EhANghHz8bygABQAAAC4AAQAuAAIAAQAAAAAAAQMFBwAAAAAAAAAAAAAA AAAAAxgAAA+EhAMRhHz8FcYFAAGEAwZehIQDYIR8/G8oAAcAAAAuAAEALgACAC4AAwABAAAAAAAB AwUHCQAAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACQAAAC4AAQAu AAIALgADAC4ABAABAAAAAAABAwUHCQsAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6E OARghMj7bygACwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAAAAAAAQMFBwkLDQAAAAAAAAAAAAAA AxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4A BgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygA DwAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEAAAAAAAAAAAAD GAAAD4QIBxGE+PgVxgUAAQgHBl6ECAdghPj4bygAEQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAG AC4ABwAuAAgABQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgC YISo/W8oAAEAAAALAAAAAAABAwAAAAAAAAAAAAAAAAAAAAADGAAAD4RYAhGEqP0VxgUAAVgCBl6E WAJghKj9bygAAwAAAC4AAQADAAAAAAABAwUAAAAAAAAAAAAAAAAAAAADGAAAD4TQAhGEMP0VxgUA AdACBl6E0AJghDD9bygABQAAAC4AAQAuAAIAAQAAAAAAAQMFBwAAAAAAAAAAAAAAAAAAAxgAAA+E 0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAcAAAAuAAEALgACAC4AAwABAAAAAAABAwUHCQAAAAAA AAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACQAAAC4AAQAuAAIALgADAC4A BAABAAAAAAABAwUHCQsAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygA CwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAAAAAAAQMFBwkLDQAAAAAAAAAAAAAAAxgAAA+EoAUR hGD6FcYFAAGgBQZehKAFYIRg+m8oAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgABAAAAAAAB AwUHCQsNDwAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygADwAAAC4AAQAu AAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEAAAAAAAAAAAADGAAAD4QIBxGE +PgVxgUAAQgHBl6ECAdghPj4bygAEQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwAuAAgA BQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAEA AAALAAAAAAABAwAAAAAAAAAAAAAAAAAAAAADGAAAD4RYAhGEqP0VxgUAAVgCBl6EWAJghKj9bygA AwAAAC4AAQADAAAAAAABAwUAAAAAAAAAAAAAAAAAAAADGAAAD4TQAhGEMP0VxgUAAdACBl6E0AJg hDD9bygABQAAAC4AAQAuAAIAAQAAAAAAAQMFBwAAAAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYF AAHQAgZehNACYIQw/W8oAAcAAAAuAAEALgACAC4AAwABAAAAAAABAwUHCQAAAAAAAAAAAAAAAAAD GAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACQAAAC4AAQAuAAIALgADAC4ABAABAAAAAAAB AwUHCQsAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACwAAAC4AAQAu AAIALgADAC4ABAAuAAUAAQAAAAAAAQMFBwkLDQAAAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGg BQZehKAFYIRg+m8oAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgABAAAAAAABAwUHCQsNDwAA AAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygADwAAAC4AAQAuAAIALgADAC4A BAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEAAAAAAAAAAAADGAAAD4QIBxGE+PgVxgUAAQgH Bl6ECAdghPj4bygAEQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwAuAAgAAQAAABcQAAAA AAAAAAAAAGgBAAAAAAAACxgAAA+E0AIRhJj+FcYFAAHQAgZehNACYISY/k9KAQBRSgEAbygAAQC3 8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAAAsYAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCEmP5PSggA UUoIAG8oAAEAbwABAAAAFxAAAAAAAAAAAAAAaAEAAAAAAAALGAAAD4RwCBGEmP4VxgUAAXAIBl6E cAhghJj+T0oOAFFKDgBvKAABAKfwAQAAABcQAAAAAAAAAAAAAGgBAAAAAAAACxgAAA+EQAsRhJj+ FcYFAAFACwZehEALYISY/k9KAQBRSgEAbygAAQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAAAsY AAAPhBAOEYSY/hXGBQABEA4GXoQQDmCEmP5PSggAUUoIAG8oAAEAbwABAAAAF5AAAAAAAAAAAAAA aAEAAAAAAAALGAAAD4TgEBGEmP4VxgUAAeAQBl6E4BBghJj+T0oOAFFKDgBvKAABAKfwAQAAABeQ AAAAAAAAAAAAAGgBAAAAAAAACxgAAA+EsBMRhJj+FcYFAAGwEwZehLATYISY/k9KAQBRSgEAbygA AQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAAAsYAAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP5P SggAUUoIAG8oAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAALGAAAD4RQGRGEmP4VxgUAAVAZ Bl6EUBlghJj+T0oOAFFKDgBvKAABAKfwBQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EWAIR hKj9FcYFAAFYAgZehFgCYISo/W8oAAEAAAALAAAAAAABAwAAAAAAAAAAAAAAAAAAAAADGAAAD4RY AhGEqP0VxgUAAVgCBl6EWAJghKj9bygAAwAAAC4AAQAEAAAAAAABAwUAAAAAAAAAAAAAAAAAAAAD GAAAD4TQAhGEMP0VxgUAAdACBl6E0AJghDD9bygABQAAAC4AAQAuAAIAAQAAAAAAAQMFBwAAAAAA AAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAAcAAAAuAAEALgACAC4AAwAB AAAAAAABAwUHCQAAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACQAA AC4AAQAuAAIALgADAC4ABAABAAAAAAABAwUHCQsAAAAAAAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUA ATgEBl6EOARghMj7bygACwAAAC4AAQAuAAIALgADAC4ABAAuAAUAAQAAAAAAAQMFBwkLDQAAAAAA AAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAA0AAAAuAAEALgACAC4AAwAuAAQA LgAFAC4ABgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAADGAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVg hGD6bygADwAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEAAAAA AAAAAAADGAAAD4QIBxGE+PgVxgUAAQgHBl6ECAdghPj4bygAEQAAAC4AAQAuAAIALgADAC4ABAAu AAUALgAGAC4ABwAuAAgAAQAAABcQAAAAAAAAAAAAAGgBAAAAAAAACxgAAA+EOAQRhJj+FcYFAAE4 BAZehDgEYISY/k9KAQBRSgEAbygAAQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAAAsYAAAPhAgH EYSY/hXGBQABCAcGXoQIB2CEmP5PSggAUUoIAG8oAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAA AAALGAAAD4TYCRGEmP4VxgUAAdgJBl6E2AlghJj+T0oOAFFKDgBvKAABAKfwAQAAABeQAAAAAAAA AAAAAGgBAAAAAAAACxgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/k9KAQBRSgEAbygAAQC38AEA AAAXkAAAAAAAAAAAAABoAQAAAAAAAAsYAAAPhHgPEYSY/hXGBQABeA8GXoR4D2CEmP5PSggAUUoI AG8oAAEAbwABAAAAFxAAAAAAAAAAAAAAaAEAAAAAAAALGAAAD4RIEhGEmP4VxgUAAUgSBl6ESBJg hJj+T0oOAFFKDgBvKAABAKfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAACxgAAA+EGBURhJj+FcYF AAEYFQZehBgVYISY/k9KAQBRSgEAbygAAQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAAAsYAAAP hOgXEYSY/hXGBQAB6BcGXoToF2CEmP5PSggAUUoIAG8oAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEA AAAAAAALGAAAD4S4GhGEmP4VxgUAAbgaBl6EuBpghJj+T0oOAFFKDgBvKAABAKfwBQAAAAAAAQAA AAAAAAAAAAAAAAAAAAAAAxgAAA+EWAIRhKj9FcYFAAFYAgZehFgCYISo/W8oAAEAAAALAAAAAAAB AwAAAAAAAAAAAAAAAAAAAAADGAAAD4RYAhGEqP0VxgUAAVgCBl6EWAJghKj9bygAAwAAAC4AAQAE AAAAAAABAwUAAAAAAAAAAAAAAAAAAAADGAAAD4TQAhGEMP0VxgUAAdACBl6E0AJghDD9bygABQAA AC4AAQAuAAIAAQAAAAAAAQMFBwAAAAAAAAAAAAAAAAAAAxgAAA+E0AIRhDD9FcYFAAHQAgZehNAC YIQw/W8oAAcAAAAuAAEALgACAC4AAwABAAAAAAABAwUHCQAAAAAAAAAAAAAAAAADGAAAD4Q4BBGE yPsVxgUAATgEBl6EOARghMj7bygACQAAAC4AAQAuAAIALgADAC4ABAABAAAAAAABAwUHCQsAAAAA AAAAAAAAAAADGAAAD4Q4BBGEyPsVxgUAATgEBl6EOARghMj7bygACwAAAC4AAQAuAAIALgADAC4A BAAuAAUAAQAAAAAAAQMFBwkLDQAAAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg +m8oAA0AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAAD GAAAD4SgBRGEYPoVxgUAAaAFBl6EoAVghGD6bygADwAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAG AC4ABwABAAAAAAABAwUHCQsNDxEAAAAAAAAAAAADGAAAD4QIBxGE+PgVxgUAAQgHBl6ECAdghPj4 bygAEQAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwAuAAgAKAAAAIL///8AAAAAAAAAAAAA AAC7S+p2AAAAAAAAAAAAAAAAwjq2eAAAAAAAAAAAAAAAAP4aLmMAAAAAAAAAAAAAAABoX85eAAAA AAAAAAAAAAAACSfCDwAAAAAAAAAAAAAAAG94oV8AAAAAAAAAAAAAAACI////AAAAAAAAAAAAAAAA xAFCZAAAAAAAAAAAAAAAAOhXMAQAAAAAAAAAAAAAAAA4a6xRAAAAAAAAAAAAAAAAXXd5KwAAAAAA AAAAAAAAAE9k0gIAAAAAAAAAAAAAAACyMRA+AAAAAAAAAAAAAAAAgVYVZAAAAAAAAAAAAAAAAM0h eBMAAAAAAAAAAAAAAAAVTrRFAAAAAAAAAAAAAAAAGWDJGQAAAAAAAAAAAAAAAOlxESMAAAAAAAAA AAAAAACjHHRRAAAAAAAAAAAAAAAAnTH2MwAAAAAAAAAAAAAAAG94oV8AAAAAAAAAAAAAAAAPN5d3 AAAAAAAAAAAAAAAAN1t/ZgAAAAAAAAAAAAAAAENfxCYAAAAAAAAAAAAAAAAvOO9FAAAAAAAAAAAA AAAA5nqVGgAAAAAAAAAAAAAAAEBXyyoAAAAAAAAAAAAAAABxIl1vAAAAAAAAAAAAAAAAbBBeAgAA AAAAAAAAAAAAAId5hCUAAAAAAAAAAAAAAADNPTVJAAAAAAAAAAAAAAAAMHq1FQAAAAAAAAAAAAAA AKMKCwkAAAAAAAAAAAAAAAAzSadFAAAAAAAAAAAAAAAAQUDseAAAAAAAAAAAAAAAAKkkZSIAAAAA AAAAAAAAAACpJGUi6AMzAIzJ+QEBAAAAayjuCQAAAAAAAAAAAAAAAKY/Q1UAAAAAAAAAAAAAAAD/ //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////////////////////////////iigAAAEAAAAQAAAA/////////////5gA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA//+YAAAAAAAAAAAAEgCcJTixGQAJBBsACQQPAAkEGQAJBBsA CQQPAAkEGQAJBBsACQQAAAAAAAAAAAAAAAAAAAAAEgDg+mAUKDBW4AkEGwAJBA8ACQQZAAkEGwAJ BA8ACQQZAAkEGwAAAAAAAAAAAAAAAAASAPypYMUZAAkEGwAJBA8ACQQZAAkEGwAJBA8ACQQZAAkE GwAJBAAAEgABAAkEAwAJBAUACQQBAAkEAwAJBAUACQQBAAkEAwAJBAUACQQAAAAAAAAAAAAAEgD/ //////////////////////////////////////////////8AAAAAEgBSfwrVGQAJBBsACQQPAAkE GQAJBBsACQQPAAkEGQAJBBsACQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAOgmuiwFAAkEGwAJBA8ACQQZAAkE GwAJBA8ACQQZAAkEGwAJBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAASAA8ADAQZAAwEGwAMBA8ADAQZAAwEGwAMBA8ADAQZAAwEGwAMBBIABQAJBAMACQQFAAkEAQAJ BAMACQQFAAkEAQAJBAMACQQFAAkEEgAFAAkEAwAJBAUACQQBAAkEAwAJBAUACQQBAAkEAwAJBAUA CQQAAAAAAAAAABIAdtrOxxkACQQbAAkEDwAJBBkACQQbAAkEDwAJBBkACQQbAAkEAAAAABIA4Ppg FCgwVuAJBBsACQQPAAkEGQAJBBsACQQPAAkEGQAJBBsAEgAFAAkEAwAJBAUACQQBAAkEAwAJBAUA CQQBAAkEAwAJBAUACQQSAAUACQQDAAkEBQAJBAEACQQDAAkEBQAJBAEACQQDAAkEBQAJBAAAAAAS AMoiJAQZAAkEGwAJBA8ACQQZAAkEGwAJBA8ACQQZAAkEGwAJBBIAAQAJBAMACQQBAAkEAQAJBAMA CQQFAAkEAQAJBAMACQQFAAkEAAAAABIA//////////////////////////////////////////// ////EgD///////////////////////////////////////////////8AAAAAAAAAABIAAQAJBP// ////////////////////////////////////////AAAAABIA//////////////////////////// ////////////////////EgD///////////////////////////////////////////////8SAOZP vsz//////////////////////////////////////////xIA//////////////////////////// ////////////////////EgDY/X4xGQAJBBsACQQPAAkEGQAJBBsACQQPAAkEGQAJBBsACQQSAKaY eGEDAAkEBQAJBAEACQQDAAkEBQAJBAEACQQDAAkEBQAJBAcAGnRTCQAAAAAAAAAAAAECAAIAay+9 GQAAAAAAAAAAAAECAAIAhE6KKQAAAAAAAAAAAAECAAIAHUMcQwAAAAAAAAAAAAECAAIAAA9pTAAA AAAAAAAAAAECAAIARRnBbwAAAAAAAAAAAAECAAIA/g85ewAAAAAAAAAAAAECAAIATAAAAAQAAAAI AAAA5QAAAAAAAABLAAAAYXkEACAtBQD9EAgA0RYLABt7CwC4IQwAsGMQAJ4EEQDJLhEA6TAbACoA HADJLx0A7lYdADVzJQBKLioAPHgvAEZNMQBsCjgA+gk7AHYTOwB4STsANTtAAPlXQAD0JEcAnxFK AJIHSwDJZUsAIjdQAKIFUgBdZFIANABTAKptUwCdV1QAwlRiAFRLaABlYm0ATUFuAEZidQDEPnsA nBF8AGMefQAUaIIApVqEAF9nhQBFPIkARUSSAExMmADFaJwAzyGjADsfpgDDTagAKXqrAIRdrQAM O64Auza5ACgAwQCBS8EAdTjDAJ05xABIasUAlAnIAKZZyACsEMkAM3DJANBQzABbV9QAhlHXAJ5g 2gBnO9wANnbfAPkG4wDAWOMAoRfsANE19ABfb/gAGin+AAAAAAAIAAAAKgAAACsAAAAxAAAAWAAA AFkAAABuAAAAjwAAAJAAAACaAAAA2gAAALMBAAC0AQAAvwEAAA0CAAAOAgAAEgIAAGkCAABqAgAA cwIAAL8CAADAAgAA3AIAAOcCAADoAgAA8AIAADsEAAA8BAAARQQAAIQGAACFBgAAnhAAANIQAADo FwAALh0AAPEgAAC8IgAABVwAAG5oAAB+aQAA62kAABZqAAAbagAAJ2oAAChqAAAwagAAlGoAAJVq AACXagAAQGsAAEFrAABDawAA8W0AAPJtAAD0bQAAfW4AAH5uAACCbgAARm8AAEdvAABQbwAAxHAA AMVwAADIcAAAEXEAABJxAAAVcQAAKHEAAClxAAAscQAAanEAAGtxAAD+cQAAA3MAADNzAAD+fAAA AH0AAAN9AAAGfQAACX0AAA19AAAOfQAAD30AABN9AAAXfQAAIn0AACZ9AAAqfQAAL30AADN9AAA3 fQAAPX0AAEF9AABTfQAAVH0AAFl9AABdfQAAYX0AAGV9AABpfQAAb30AAHp9AAAIAAAAAgEAAAIB AACeAQAEAgEAAAIBAACeAQAEAgEAAAIBAACeAQAEAgEAAAIBAAACAQAAngEABAIBAAACAQAAngEA BAIBAAACAQAAngEABAIBAAACAQAAngEABAIBAAACAQAAngEABAIBAAACAQAAngEABAIBAAACAQAA lgEABH////4BAAAAf////n////5////+AQAAABUAAAAAAAAAAAAAAAAAAAAIAAAAAgEAAAIBAACe AQAAAgEAAAIBAACeAQAAAgEAAAIBAACeAQAAAgEAAAIBAACeAQAAAgEAAAIBAACeAQAAAgEAAAIB AACeAQAAAgEAAAIBAACeAQAAAgEAAAIBAACeAQAAAgEAAAIBAACeAQAAAgEAAAIBAACWAQAAAQAA AAEAAAA1XwQwAAAAAAEAAAABAAAAAQAAAAEAAAAAAAAAVeYdMFXmHTBV5h0wVeYdMFXmHTBV5h0w VeYdMFXmHTBV5h0wVeYdMFXmHTBV5h0wVeYdMFXmHTBV5h0wVeYdMFXmHTBV5h0wVeYdMFXmHTD/ QAEBAQBhDgAAfQ4AACgv5wIBAAEAeg4AAAAAAAB6DgAAAAAAAAI0AAAAAAAAAAAWAAAAFwAAAH0A AHl9AABQAAAQAEAAAFAAAB4AAAAAUAAAQABAAABQAABwAkAAAP//AgAAAAcAVQBuAGsAbgBvAHcA bgAPAEIAZQBoAGMAZQB0ACAAUwBhAHIAaQBrAGEAeQBhAP//AgAIAAAAAAAAAAAAAAAAAAAAAAAA AAEA//8CAAAAAAAAAP//AAACAP//AAAAAP//AAACAP//AAAAAA8AAABHFpABAAACAgYDBQQFAgME h3oAIAAAAIAIAAAAAAAAAP8BAAAAAAAAVABpAG0AZQBzACAATgBlAHcAIABSAG8AbQBhAG4AAAA1 FpABAgAFBQECAQcGAgUHAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAUwB5AG0AYgBvAGwAAAAzJpAB AAACCwYEAgICAgIEh3oAIAAAAIAIAAAAAAAAAP8BAAAAAAAAQQByAGkAYQBsAAAAOwGQAYEHAgMG AAABAQEBAQEAAAAAAAYJEAAAAAAAAAAAAAgAAAAAAEIAYQB0AGEAbgBnAAAAFLzV0AAAVwKQAYYH AgEGAAMBAQEBAQEAAAAAAA4IEAAAAAAAAAAAAAQAAAAAAFMAaQBtAFMAdQBuAAAAQQByAGkAYQBs ACAAVQBuAGkAYwBvAGQAZQAgAE0AUwAAADMWkAEAAAICBgMFBAUCAwSHegAgAAAAgAgAAAAAAAAA /wEAAAAAAABUAGkAbQBlAHMAAABdEZABgAoCAgYJBAIFCAMEAQAAAAAABwgQAAAAAAAAAAAAAgAA AAAATQBTACAATQBpAG4AYwBoAG8AAABBAHIAaQBhAGwAIABVAG4AaQBjAG8AZABlACAATQBTAAAA NSaQAQAAAgsGBAMFBAQCBId6AGEAAACACAAAAAAAAAD/AQEAAAAAAFQAYQBoAG8AbQBhAAAAPzWQ AQAAAgcDCQICBQIEBId6ACAAAACACAAAAAAAAAD/AQAAAAAAAEMAbwB1AHIAaQBlAHIAIABOAGUA dwAAADkxkAGBBgILBgAAAQEBAQEBAAAAAAAGCRAAAAAAAAAAAAAIAAAAAABEAG8AdAB1AG0AAADL s8DGAAA7IpABAAACCwYEAgICAgIEAwAAAAAAAAAAAAAAAAAAAAEAAAAAAAAASABlAGwAdgBlAHQA aQBjAGEAAABJJpABgAACCwYEAgICAgIE/////////+k/AAAAAAAAAP8BPwAAAAAAQQByAGkAYQBs ACAAVQBuAGkAYwBvAGQAZQAgAE0AUwAAADkRkAGBBgILBgAAAQEBAQEBAAAAAAAGCRAAAAAAAAAA AAAIAAAAAABHAHUAbABpAG0AAAB0rby5AABVBpABsQcAAAAAAAAAAAAAARgAAAAAAAAAAAAAAAAA ACAAAAAAAAAATQBpAHIAaQBhAG0AAABUAGkAbQBlAHMAIABOAGUAdwAgAFIAbwBtAGEAbgAAADsG kAECAAUAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAgAAAAABXAGkAbgBnAGQAaQBuAGcAcwAA ACIABABxiYgYAPDQAuQEaAEAAAAALB2qRiwdqkZqO6gmAgAIAAAApxIAAFdqAAAOAD8AAAAEAAMQ 4gAAAKcSAABXagAADgA/AAAA4gAAAAAAAADpAwDwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AACgBaAFtAC0AIGBPjQAABEAGQBkAAAAGQAAAL98AAC/fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAEADAAAAAA0zg3EA8BAA CNwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASFgAAAAAIPD/DwAAAAAAAAAAAAA9CgAA//// f////3////9/////f////3////9/emJhAAAAAAAyAAAAAAAAAAAAAAAAAAEACwD//xIAAAAAAGUA QwA6AFwAUAByAG8AagBlAGMAdAAgAEYAbwBsAGQAZQByAHMAXABDAHUAcgByAGUAbgB0ACAAUABy AG8AagBlAGMAdABzAFwAVwBpAE0AQQBYAFwAVwBpAE0AQQBYACAARgBvAHIAdQBtAFwATgBXAEcA XABSAGUAbABlAGEAcwBlACAAMQBcAFYAJgBWAFwAVgAmAFYAIABDAG8AbgB0AHIAaQBiAHUAdABp AG8AbgAgAFQAZQBtAHAAbABhAHQAZQAuAGQAbwB0AA4AUwB0AGEAZwBlADIAYQBuAGQAMwAgAFYA JgBWAAAAAAAAAA8AQgBhAHMAYQB2AGEAcgBhAGoAIABQAGEAdABpAGwADwBCAGUAaABjAGUAdAAg AFMAYQByAGkAawBhAHkAYQAAAAAAAAAAAAAAAAAAAAAAAAAAAKQAAAAGAAAAJgAAAAAADAABAAwA AgAMAAMADAAEAAwABQAMAAYADAAHAAwACAAMAAkADAAKAAwACwAMAAwADAANAAwADgAMAA8ADAAQ AAwAEQAMABIADAATAAwAFAAMABUADAAWAAwAFwAMABgADAAZAAwAGgAMABsADAAcAAwAHQAMAB4A DAAfAAwAIAAMACEADAAiAAwAIwAMACQADAAlAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAABAEMAbwBtAHAATwBiAGoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAEgACAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAACUAAABxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA////////////////AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////////8AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP// /////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AA== --_002_5D36713D8A4E7348A7E10DF7437A4B9239FD3DDEszxeml545mbschi_-- From xiayangsong@huawei.com Wed Dec 12 02:53:38 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA8B321F894D; Wed, 12 Dec 2012 02:53:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.849 X-Spam-Level: X-Spam-Status: No, score=-5.849 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, J_CHICKENPOX_22=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8QuLtG1YT33I; Wed, 12 Dec 2012 02:53:38 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id 1182B21F86DB; Wed, 12 Dec 2012 02:53:36 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id AMK49526; Wed, 12 Dec 2012 10:53:36 +0000 (GMT) Received: from LHREML403-HUB.china.huawei.com (10.201.5.217) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Wed, 12 Dec 2012 10:52:45 +0000 Received: from SZXEML405-HUB.china.huawei.com (10.82.67.60) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.1.323.3; Wed, 12 Dec 2012 10:53:34 +0000 Received: from SZXEML539-MBS.china.huawei.com ([169.254.5.165]) by szxeml405-hub.china.huawei.com ([::1]) with mapi id 14.01.0323.003; Wed, 12 Dec 2012 18:53:24 +0800 From: Xiayangsong To: =?iso-8859-1?Q?Ole_Tr=F8an?= , Sheng Jiang Subject: RE: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: AQHN2EcxfDSILmNF202OrnUCcojOD5gUWi2AgACiVvA= Date: Wed, 12 Dec 2012 10:53:24 +0000 Message-ID: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> In-Reply-To: <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.103.48] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Wed, 12 Dec 2012 07:26:29 -0800 Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 10:53:38 -0000 Hi Ole I am a little bit confused what we are talking about. Our draft is necessary when there is no SLAAC. Could you elaborate your viewpoints? Thanks Frank -----Original Message----- From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] On Behalf Of O= le Tr?an Sent: Wednesday, December 12, 2012 5:10 PM To: Sheng Jiang Cc: WG; IPv6 List Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Sheng, >>>> I think the argument given in the draft for operators wanting a >>>> DHCPv6-managed network without ND is flawed. >>>> ND is required for router discovery, neighbour discovery etc anyway. a= nd a >>>> router on the link must be configured >>>> with the onlink prefix regardless. >>>>=20 >>>> while we can clearly make this work, I don't think it is justified to = create a >>>> duplicate mechanism for prefix discovery. >>>> section 3.2 RFC1958. >>>=20 >>> Hi, Ole, >>>=20 >>> Assuming all networks are using SLAAC is not right. >>>=20 >>> In WiMAX NWG IPv6 spec, Revision 6, see the attachment. >>>=20 >>> Stateful (DHCPv6) address configuration is supported. >>> Check Sections 5.11.11.4 and 5.11.12.2. >>>=20 >>> Also, BBF document TR-177 supports stateful address configuration using >> DHCPv6, check Section 4.2. >>>=20 >>> I also know a few ISP desire to use DHCPv6 in their networks. >>=20 >> I make no assumption that all networks are using SLAAC for address >> assignment. >>=20 >> there is no conflict between using ND for prefix assignment and DHCPv6 f= or >> address assignment. >=20 > So, how can you get host generated addresses, like EUI64 address, CGA, or= Privacy address? Particular for CGA, host has to get prefix first, then us= e prefix as part of input to generate host identifier. >=20 > Or you are saying in DHCPv6-managed network, you still use ND to assign p= refix. I don't think that deployment is good idea. that's how the IPv6 protocols are designed. from the beginning. that's how = all DHCPv6 managed networks run today. I don't see the problem? cheers, Ole _______________________________________________ dhcwg mailing list dhcwg@ietf.org https://www.ietf.org/mailman/listinfo/dhcwg From brian.e.carpenter@gmail.com Wed Dec 12 07:39:44 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D904621E804A; Wed, 12 Dec 2012 07:39:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.319 X-Spam-Level: X-Spam-Status: No, score=-101.319 tagged_above=-999 required=5 tests=[AWL=-0.228, BAYES_00=-2.599, J_CHICKENPOX_22=0.6, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7LynJYkBZVAT; Wed, 12 Dec 2012 07:39:43 -0800 (PST) Received: from mail-wg0-f51.google.com (mail-wg0-f51.google.com [74.125.82.51]) by ietfa.amsl.com (Postfix) with ESMTP id D0E2D21E8042; Wed, 12 Dec 2012 07:39:42 -0800 (PST) Received: by mail-wg0-f51.google.com with SMTP id gg4so300659wgb.18 for ; Wed, 12 Dec 2012 07:39:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=s8662U6gCicTl8iagL7WBzB/9UHjkOs+Gh6nB1v5NEU=; b=M9k41pcGRWaQ4sonIG/BB6ajyYpK2GFIhmjHO6FCaMWODy+z3jXaQzjR/HYZjyLLk8 BzyNlt60jrWJLH96HQMio6Map47ECvNwXyI9iK3xBbFcffT8B2+rReXwiV/ViWaENi5M QXi8t/ONTW5wGwHPBLq/VgPk8N9SEMOGfU+RGFwJuimuJq+9s2TLA6jud05DtNpHtE25 nvFkSCILoMvrCiM0NYc9zhU0bqFk/MwLyDvs5Q+3hXSHXB2p2tVwpL78U3c/343ruMqs KV4rfEShZPXcn8LRhSJLtWUyseKpw5GiFdCqjNQGbSEcfEXxpViE9kBSW3Ofyec0VsJx v8Sg== Received: by 10.180.81.232 with SMTP id d8mr3837735wiy.14.1355326781987; Wed, 12 Dec 2012 07:39:41 -0800 (PST) Received: from [192.168.1.65] (host-2-102-219-7.as13285.net. [2.102.219.7]) by mx.google.com with ESMTPS id b1sm21747258wix.11.2012.12.12.07.39.39 (version=SSLv3 cipher=OTHER); Wed, 12 Dec 2012 07:39:40 -0800 (PST) Message-ID: <50C8A559.8090103@gmail.com> Date: Wed, 12 Dec 2012 15:40:09 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Xiayangsong Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 15:39:44 -0000 But all IPv6 nodes are required to support SLAAC and all routers are required to generate RAs. What is the meaning of "no SLAAC"? Regards Brian On 12/12/2012 10:53, Xiayangsong wrote: > Hi Ole > > I am a little bit confused what we are talking about. > Our draft is necessary when there is no SLAAC. > > Could you elaborate your viewpoints? > > Thanks > Frank > > -----Original Message----- > From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] On Behalf Of Ole Tr?an > Sent: Wednesday, December 12, 2012 5:10 PM > To: Sheng Jiang > Cc: WG; IPv6 List > Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" > > Sheng, > >>>>> I think the argument given in the draft for operators wanting a >>>>> DHCPv6-managed network without ND is flawed. >>>>> ND is required for router discovery, neighbour discovery etc anyway. and a >>>>> router on the link must be configured >>>>> with the onlink prefix regardless. >>>>> >>>>> while we can clearly make this work, I don't think it is justified to create a >>>>> duplicate mechanism for prefix discovery. >>>>> section 3.2 RFC1958. >>>> Hi, Ole, >>>> >>>> Assuming all networks are using SLAAC is not right. >>>> >>>> In WiMAX NWG IPv6 spec, Revision 6, see the attachment. >>>> >>>> Stateful (DHCPv6) address configuration is supported. >>>> Check Sections 5.11.11.4 and 5.11.12.2. >>>> >>>> Also, BBF document TR-177 supports stateful address configuration using >>> DHCPv6, check Section 4.2. >>>> I also know a few ISP desire to use DHCPv6 in their networks. >>> I make no assumption that all networks are using SLAAC for address >>> assignment. >>> >>> there is no conflict between using ND for prefix assignment and DHCPv6 for >>> address assignment. >> So, how can you get host generated addresses, like EUI64 address, CGA, or Privacy address? Particular for CGA, host has to get prefix first, then use prefix as part of input to generate host identifier. >> >> Or you are saying in DHCPv6-managed network, you still use ND to assign prefix. I don't think that deployment is good idea. > > that's how the IPv6 protocols are designed. from the beginning. that's how all DHCPv6 managed networks run today. > I don't see the problem? > > cheers, > Ole > > _______________________________________________ > dhcwg mailing list > dhcwg@ietf.org > https://www.ietf.org/mailman/listinfo/dhcwg > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > From rja.lists@gmail.com Wed Dec 12 08:06:42 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9358821F89C4 for ; Wed, 12 Dec 2012 08:06:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iHMdogs+VF25 for ; Wed, 12 Dec 2012 08:06:35 -0800 (PST) Received: from mail-qa0-f44.google.com (mail-qa0-f44.google.com [209.85.216.44]) by ietfa.amsl.com (Postfix) with ESMTP id 9711D21F89C1 for ; Wed, 12 Dec 2012 08:06:33 -0800 (PST) Received: by mail-qa0-f44.google.com with SMTP id z4so4584594qan.10 for ; Wed, 12 Dec 2012 08:06:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; bh=Hnotw9nD29palZaHTtOjgTYbC4Nu8AAGqu8Zo1ekSw0=; b=Sfe15rZY4L1/divXerKloAh0RjN877sVsMeZTt79sDldfCyi3oNyxGdDse0ecvNdyK l4SWY0jONeD8WZYD57JTEu+6m7CiX0AN9/jsXNWvk9rtmqNtm/UnZxrGhAQ2wex/EHCt vNcnojy79HpsMP2ksKaEfTR9qF7mAeeu+VIYNZ/uBs2CCKLd1Q5xpnRYQULVBrW/cFIj 8beVWUzaDTo9IUwqKQ2qDswVh5g/jxVxEjVLkcwOklIuylXDRqPRKsv5W270izPq72fB qzqpQNo7z7QpgKJRZSXDqmKStiX88RwyuXxC2lWWaHXk1zZYghWilpJg6UIKq0D0uUay 5lWw== Received: by 10.224.207.194 with SMTP id fz2mr2750679qab.16.1355328393058; Wed, 12 Dec 2012 08:06:33 -0800 (PST) Received: from [10.30.20.14] (pool-74-110-100-136.nrflva.fios.verizon.net. [74.110.100.136]) by mx.google.com with ESMTPS id u8sm18595817qeu.2.2012.12.12.08.06.31 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 08:06:32 -0800 (PST) From: RJ Atkinson Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: Mail from softwire working group about 4rd Date: Wed, 12 Dec 2012 11:06:30 -0500 Message-Id: <194C5159-AFC3-4B11-AF33-5E47005529DD@gmail.com> To: ipv6@ietf.org Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 16:06:42 -0000 All, I fully agree with Brian Carpenter's note of Tuesday, December 11th at 10:55:05 +0000. I support his perspective as expressed in that note. I have read, but am NOT persuaded by, the responses from Remi Despres to Brian's notes. Further, I note that the combination ( U==1 a&& G==1) already has a well defined meaning -- namely a global-scope multicast identifier. These are not widely deployed today, but there are various folks looking into using precisely those identifiers for global-scope multicasting -- in a way compatible with IEEE 802 definitions of the EUI-64 with (U==1 && G==1). Also, I'll note that the IID portion of an IPv6 address is carefully designed to be algorithmically translatable, from an IEEE 802 standard EUI-64 identifier. That algorithm is trivial, and is universally deployed today, in a wide range of devices. The definitions of U and G bits do NOT derive ab initio from IETF documents, but instead are fundamental parts of the IEEE 802 EUI-64 architecture. The IETF architectural choice to use a (trivially-modified) EUI-64 in the IETF's IPv6 addressing formats was foundational, correct, and ought not be changed at this point. Last, according to the IANA web site (URL below), the IETF *already* has several different ways of mapping IPv4 addresses into IPv6 addresses. The 4rd folks need to show that none of these could be used for their purposes, and also need to show that none of the mapping techniques already used could work. Neither of these have been shown so far. If the 4rd advocates can't make an existing mapping (between IPv4 and IPv6) work, they ought to define a new mapping that does NOT modify the semantics of either the U or G bits. Yours, Ran Atkinson From jouni.nospam@gmail.com Wed Dec 12 08:12:30 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EACC621F84C7 for ; Wed, 12 Dec 2012 08:12:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.449 X-Spam-Level: X-Spam-Status: No, score=-3.449 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mNMlJY9+0ZWS for ; Wed, 12 Dec 2012 08:12:28 -0800 (PST) Received: from mail-la0-f44.google.com (mail-la0-f44.google.com [209.85.215.44]) by ietfa.amsl.com (Postfix) with ESMTP id 83A6921F8503 for ; Wed, 12 Dec 2012 08:12:27 -0800 (PST) Received: by mail-la0-f44.google.com with SMTP id d3so770092lah.31 for ; Wed, 12 Dec 2012 08:12:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=pztHsBaKBJt8IXuA6YIB4yjEmtnOi5h8Cs7SGEAz8Ow=; b=RfVzlwwb+fAMWlpZuyMwRtVlq+wmi52CrY/NcOJbgJz0TGwdMtgLnhhOrmU6Xf3SDY BSOZvAl3J1N647uw7buMTGW4lePGJ45MHN/eiFyfiKQskVE2FL/fYzgpBLwr5ImasH29 xMSq75JbPB1oeAoF38E4eA6cXi551g5ap7/Q3gvb5nZJ+C7yo05DuGlXCKwi12gOOLlo rU96tzUu+EOSZutCAeOA2FoJsZR3wCPSViFIVtzKc8E8Jnl5A88RuL2oUxMk/1BSD58k cMYJ5gXzX4T4ZCTgePU/7BovSSuf76EXRz0/SFdQQStnzTveyw1cA4CD/vpc4VvRKGLL KyjQ== Received: by 10.112.86.232 with SMTP id s8mr680128lbz.86.1355328746189; Wed, 12 Dec 2012 08:12:26 -0800 (PST) Received: from [192.168.250.94] ([194.100.71.98]) by mx.google.com with ESMTPS id fj2sm3867353lbb.6.2012.12.12.08.12.22 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 08:12:25 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: Jouni Korhonen In-Reply-To: Date: Wed, 12 Dec 2012 18:12:20 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <0D6ACA1A-761D-4FD8-A523-E7A9B3C33FB8@gmail.com> References: <50C28653.6030109@ericsson.com> To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= X-Mailer: Apple Mail (2.1499) Cc: 6man chairs <6man-chairs@tools.ietf.org>, IETF IPv6 Mailing List , Suresh Krishnan , Softwire chairs , INT ADs X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 16:12:30 -0000 Remi, On Dec 12, 2012, at 3:29 PM, R=E9mi Despr=E9s = wrote: > Hi, Jouni, >=20 >=20 > 2012-12-12 10:04, Jouni Korhonen : >=20 >>=20 >> Hi, >>=20 >>=20 >> On Dec 8, 2012, at 2:14 AM, Suresh Krishnan = wrote: >>=20 >>> Hi all, >>>=20 >>> The 4rd draft = (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) >>> describes a solution for providing IPv4 connectivity over IPv6. The >>> draft describes the method for mapping 4rd IPv4 addresses to 4rd = IPv6 >>> Addresses. It uses a 4rd specific mark called the V octet in the = first 8 >>=20 >> V-octet was AFAIR first time discussed within the Softwire MAP design = team=20 >> and I had/expressed my concerns already that time. My argumentation = was that >> we cannot just redefine the u & g bit use without actually having it = verified >> against and reflected in RFC4291. Glad to see it happening now ;) >>=20 >> IMHO the current language in RFC4291 does not give enough freedom to = use >> u=3Dg=3D1, since such combination is not specifically left = unused/reserved >> (although u=3Dg=3D1 makes no sense for the current IPv6). >=20 >> IEEE allows MAC >> addresses that have I/G set to 1 and U/L set to 0, which makes me = rather >> uncomfortable with IETF using u=3Dg=3D1 for their own purposes. >=20 > IEEE indeed permits group addresses for multiple interfaces that share = a common address but, as we are in the context of IPv6 UNICAST = addresses, interface all our IEEE-address derived IIDs have g=3D0. IETF = can take advantage of this fact without risk to interfere with IEEE,=20 As I said above the u=3Dg=3D1 (U/L=3D0, I/G=3D1) makes no sense to = current IPv6 use (thus it looks like it could be used for other purposes). However, my point is that now we = would be stepping into IEEE territory, which I am not comfortable with. - JOuni >=20 > For more details, please see my last answer to Bob. >=20 > Regards, > RD >=20 >=20 >=20 >=20 >> - Jouni >>=20 >>=20 >>> bits of the Interface Identifier. There were some concerns raised in >>> softwire about whether such addresses are actually compatible with = the >>> IPv6 addressing architecture. Whether this is actually compatible = with >>> the IPv6 addressing architecture is outside the scope of the = softwire >>> wg. Hence we would like to hear the 6man wg's perspective on this. I >>> would like to request the wg to please go over the NOTE in Section = 4.5 >>> page 18, which explains the issue, and over IANA Considerations = Section >>> 6, and chime in on whether this is acceptable from a 6man = perspective. >>>=20 >>> Thanks >>> Suresh >>> -------------------------------------------------------------------- >>> IETF IPv6 working group mailing list >>> ipv6@ietf.org >>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>> -------------------------------------------------------------------- >>=20 >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- From despres.remi@laposte.net Wed Dec 12 08:15:44 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 470CF21F89E3 for ; Wed, 12 Dec 2012 08:15:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.717 X-Spam-Level: X-Spam-Status: No, score=-1.717 tagged_above=-999 required=5 tests=[AWL=0.232, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zwQS-dw1NHMm for ; Wed, 12 Dec 2012 08:15:43 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.11]) by ietfa.amsl.com (Postfix) with ESMTP id 6B20521F899D for ; Wed, 12 Dec 2012 08:15:39 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id A6353700006B; Wed, 12 Dec 2012 17:15:38 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id 621CB700005D; Wed, 12 Dec 2012 17:15:38 +0100 (CET) X-SFR-UUID: 20121212161538401.621CB700005D@msfrf2208.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <0D6ACA1A-761D-4FD8-A523-E7A9B3C33FB8@gmail.com> Date: Wed, 12 Dec 2012 17:15:38 +0100 Message-Id: <7FCAE94C-2E29-42A6-BC85-2EE6A1AEEB42@laposte.net> References: <50C28653.6030109@ericsson.com> <0D6ACA1A-761D-4FD8-A523-E7A9B3C33FB8@gmail.com> To: Jouni Korhonen X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man chairs <6man-chairs@tools.ietf.org>, INT ADs , IETF IPv6 Mailing List , Suresh Krishnan , Softwire chairs X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 16:15:44 -0000 Le 2012-12-12 =E0 17:12, Jouni Korhonen a =E9crit= : >=20 > Remi, >=20 >=20 > On Dec 12, 2012, at 3:29 PM, R=E9mi Despr=E9s = wrote: >=20 >> Hi, Jouni, >>=20 >>=20 >> 2012-12-12 10:04, Jouni Korhonen : >>=20 >>>=20 >>> Hi, >>>=20 >>>=20 >>> On Dec 8, 2012, at 2:14 AM, Suresh Krishnan = wrote: >>>=20 >>>> Hi all, >>>>=20 >>>> The 4rd draft = (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) >>>> describes a solution for providing IPv4 connectivity over IPv6. The >>>> draft describes the method for mapping 4rd IPv4 addresses to 4rd = IPv6 >>>> Addresses. It uses a 4rd specific mark called the V octet in the = first 8 >>>=20 >>> V-octet was AFAIR first time discussed within the Softwire MAP = design team=20 >>> and I had/expressed my concerns already that time. My argumentation = was that >>> we cannot just redefine the u & g bit use without actually having it = verified >>> against and reflected in RFC4291. Glad to see it happening now ;) >>>=20 >>> IMHO the current language in RFC4291 does not give enough freedom to = use >>> u=3Dg=3D1, since such combination is not specifically left = unused/reserved >>> (although u=3Dg=3D1 makes no sense for the current IPv6). >>=20 >>> IEEE allows MAC >>> addresses that have I/G set to 1 and U/L set to 0, which makes me = rather >>> uncomfortable with IETF using u=3Dg=3D1 for their own purposes. >>=20 >> IEEE indeed permits group addresses for multiple interfaces that = share a common address but, as we are in the context of IPv6 UNICAST = addresses, interface all our IEEE-address derived IIDs have g=3D0. IETF = can take advantage of this fact without risk to interfere with IEEE,=20 >=20 > As I said above the u=3Dg=3D1 (U/L=3D0, I/G=3D1) makes no sense to = current IPv6 use (thus it looks like > it could be used for other purposes). OK. > However, my point is that now we would be stepping into IEEE = territory, which I am not comfortable with. My last answer to Brian answers this concern (I think). RD >=20 > - JOuni >=20 >=20 >>=20 >> For more details, please see my last answer to Bob. >>=20 >> Regards, >> RD >>=20 >>=20 >>=20 >>=20 >>> - Jouni >>>=20 >>>=20 >>>> bits of the Interface Identifier. There were some concerns raised = in >>>> softwire about whether such addresses are actually compatible with = the >>>> IPv6 addressing architecture. Whether this is actually compatible = with >>>> the IPv6 addressing architecture is outside the scope of the = softwire >>>> wg. Hence we would like to hear the 6man wg's perspective on this. = I >>>> would like to request the wg to please go over the NOTE in Section = 4.5 >>>> page 18, which explains the issue, and over IANA Considerations = Section >>>> 6, and chime in on whether this is acceptable from a 6man = perspective. >>>>=20 >>>> Thanks >>>> Suresh >>>> = -------------------------------------------------------------------- >>>> IETF IPv6 working group mailing list >>>> ipv6@ietf.org >>>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>>> = -------------------------------------------------------------------- >>>=20 >>> -------------------------------------------------------------------- >>> IETF IPv6 working group mailing list >>> ipv6@ietf.org >>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>> -------------------------------------------------------------------- >=20 From rogerj@gmail.com Wed Dec 12 08:18:38 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3248621E804D for ; Wed, 12 Dec 2012 08:18:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vEEYWAr1SlFY for ; Wed, 12 Dec 2012 08:18:34 -0800 (PST) Received: from mail-wi0-f170.google.com (mail-wi0-f170.google.com [209.85.212.170]) by ietfa.amsl.com (Postfix) with ESMTP id 8EB7D21E8063 for ; Wed, 12 Dec 2012 08:18:34 -0800 (PST) Received: by mail-wi0-f170.google.com with SMTP id hq7so3248490wib.1 for ; Wed, 12 Dec 2012 08:18:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Vy1ljBvfKySeHrnsrltDOICkTTGIRpiooEoxDC+VerI=; b=TBNPs/n3+k9F1YkHUKQ3m1woEzLr6fHjgjinNOnkGkW795pVGxa8rXKacH2nrMTYqo qKa6SA47rWcZf+FN9OJwdW8dj6Lyv93jR53f3n79txO89POY7TDiGtHe0r4eppaVsT4k tsvIcj4+494XZwKZsQo6onek9O6mg86M5pJj+JWWAeg+Tyox2Pc32uFJLkoqkQRfFT+P /bLuk2ePV+M4+maeGwkfTGzlmp2zExSAIJX9cB1Gq5ZbGi+Nr92HVgzB8wxkpJf7saph 2oNsSkD7j8hZ2MT6kJ3sZCsIJfaXEqWhWhVqlINblcmwig1HzWTKE2JD/S4srXnnEgG7 iA/g== MIME-Version: 1.0 Received: by 10.180.81.39 with SMTP id w7mr2871328wix.15.1355329111721; Wed, 12 Dec 2012 08:18:31 -0800 (PST) Received: by 10.217.44.74 with HTTP; Wed, 12 Dec 2012 08:18:31 -0800 (PST) In-Reply-To: <50C28653.6030109@ericsson.com> References: <50C28653.6030109@ericsson.com> Date: Wed, 12 Dec 2012 17:18:31 +0100 Message-ID: Subject: Re: Mail from softwire working group about 4rd From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: Suresh Krishnan Content-Type: text/plain; charset=ISO-8859-1 Cc: INT ADs , IETF IPv6 Mailing List , Softwire chairs X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 16:18:38 -0000 On Sat, Dec 8, 2012 at 1:14 AM, Suresh Krishnan wrote: > Hi all, > > The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) > describes a solution for providing IPv4 connectivity over IPv6. The > draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 > Addresses. It uses a 4rd specific mark called the V octet in the first 8 > bits of the Interface Identifier. There were some concerns raised in > softwire about whether such addresses are actually compatible with the > IPv6 addressing architecture. Whether this is actually compatible with > the IPv6 addressing architecture is outside the scope of the softwire > wg. Hence we would like to hear the 6man wg's perspective on this. I > would like to request the wg to please go over the NOTE in Section 4.5 > page 18, which explains the issue, and over IANA Considerations Section > 6, and chime in on whether this is acceptable from a 6man perspective. Beside all the other concern being rised that question this draft I have a hard time finding any reason for why we need yet another mapping system. -- Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From despres.remi@laposte.net Wed Dec 12 08:22:26 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DBE221F852D for ; Wed, 12 Dec 2012 08:22:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.763 X-Spam-Level: X-Spam-Status: No, score=-1.763 tagged_above=-999 required=5 tests=[AWL=0.186, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tUK9E5Ckm3d4 for ; Wed, 12 Dec 2012 08:22:24 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.11]) by ietfa.amsl.com (Postfix) with ESMTP id 6156421F89F9 for ; Wed, 12 Dec 2012 08:22:23 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id C04DC7000129; Wed, 12 Dec 2012 17:22:22 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id 8487F7000128; Wed, 12 Dec 2012 17:22:22 +0100 (CET) X-SFR-UUID: 20121212162222542.8487F7000128@msfrf2208.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Wed, 12 Dec 2012 17:22:22 +0100 Message-Id: <7D5E9540-8E66-4AB3-B8B1-1ADA66534020@laposte.net> References: <50C28653.6030109@ericsson.com> To: Roger =?iso-8859-1?q?J=F8rgensen?= X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: INT ADs , IETF IPv6 Mailing List , Suresh Krishnan , Softwire chairs X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 16:22:26 -0000 Le 2012-12-12 =E0 17:18, Roger J=F8rgensen a =E9crit = : > On Sat, Dec 8, 2012 at 1:14 AM, Suresh Krishnan > wrote: >> Hi all, >>=20 >> The 4rd draft (http://tools.ietf.org/html/draft-ietf-softwire-4rd-04) >> describes a solution for providing IPv4 connectivity over IPv6. The >> draft describes the method for mapping 4rd IPv4 addresses to 4rd IPv6 >> Addresses. It uses a 4rd specific mark called the V octet in the = first 8 >> bits of the Interface Identifier. There were some concerns raised in >> softwire about whether such addresses are actually compatible with = the >> IPv6 addressing architecture. Whether this is actually compatible = with >> the IPv6 addressing architecture is outside the scope of the softwire >> wg. Hence we would like to hear the 6man wg's perspective on this. I >> would like to request the wg to please go over the NOTE in Section = 4.5 >> page 18, which explains the issue, and over IANA Considerations = Section >> 6, and chime in on whether this is acceptable from a 6man = perspective. >=20 > Beside all the other concern being rised that question this draft I > have a hard time finding any reason for why we need yet another > mapping system. Can we limit the discussion in 6man to what concerns IPv6 address = formats? (Restarting here the lengthy Softwire discussion would be a waste of = time.) Thanks, RD >=20 >=20 > --=20 >=20 > Roger Jorgensen | ROJO9-RIPE > rogerj@gmail.com | - IPv6 is The Key! > http://www.jorgensen.no | roger@jorgensen.no > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From ran.atkinson@gmail.com Wed Dec 12 08:23:11 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3156121F8531 for ; Wed, 12 Dec 2012 08:23:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LFwt5olJra7y for ; Wed, 12 Dec 2012 08:23:10 -0800 (PST) Received: from mail-qa0-f44.google.com (mail-qa0-f44.google.com [209.85.216.44]) by ietfa.amsl.com (Postfix) with ESMTP id 204C621F8756 for ; Wed, 12 Dec 2012 08:23:10 -0800 (PST) Received: by mail-qa0-f44.google.com with SMTP id z4so4621380qan.10 for ; Wed, 12 Dec 2012 08:23:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; bh=KeyKcOovtXfAx3oRHXfVtl6YlU86M7/KfVZSECChw1w=; b=TEao51mWJu7a6n6pFo3Z3vfnl6UcGVUlv0mt5Q1bcC7jjJQmheeNDYN1idNUnrFVz1 Y9iQAK6zJbdcK0eaZ1FE22w7LpALDUNd/3mYcTF0yM0B6CDxnPWVXrZmqyNOXSVs7SR2 EFUTmzCK3d9FxNBd6oBt3gtgh9Ch2VWxVJhMY0L2QAphEQRgTwAdVw6/+qI1FDPY8WO+ by2OQRcTuicjDCnrCR5cMnLtEfYubpxCIuSSfvVwY7WksDGp5DCg1+9lzqt3SgdwaQrU BeLykuLjxXgMJZCqfOvBFJ2Tuv+rR8mZ54Kfv84o7+2i08tZML0RFrE0nO6VY79A+NMx TB8A== Received: by 10.49.132.199 with SMTP id ow7mr3760717qeb.56.1355329389584; Wed, 12 Dec 2012 08:23:09 -0800 (PST) Received: from [10.30.20.14] (pool-74-110-100-136.nrflva.fios.verizon.net. [74.110.100.136]) by mx.google.com with ESMTPS id eg9sm20486782qab.13.2012.12.12.08.23.07 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 08:23:08 -0800 (PST) From: Ran Atkinson Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: u/g in general [was Mail from softwire working group about 4rd Date: Wed, 12 Dec 2012 11:23:06 -0500 Message-Id: <1C819002-BAAC-4581-9E28-AEE01D43A393@gmail.com> To: ipv6@ietf.org Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 16:23:11 -0000 On Weds 12th December, Remi Despres wrote, in part: > Not sure however that the two proposed questions > are clear enough because today: > - some IIDs have u = 0, and some have u = 1, > - some IIDs have g = 0, and some have g = 1. > The only combination that isn't used is u=g=1. While U==G==1 is not *widely deployed* today, it does have a very clear definition, namely: (U==1 && G==1) defines a global-scope multicast identifier. This is clear not only from a plain-language reading of RFC-4291, Section 2.5.1, but also from the IEEE 802 definition of an EUI-64. Further, an IID formed by algorithmically translating an IEEE 802 MAC Address (e.g. using RFC-4291, Appendix A), whether using a unicast or multicast MAC address, is a widely deployed example of an "interface identifier with universal scope". Yours, Ran From pkern@spike.0x539.de Wed Dec 12 07:37:30 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1743821F85A9 for ; Wed, 12 Dec 2012 07:37:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S1IQ-X2ZPpEu for ; Wed, 12 Dec 2012 07:37:29 -0800 (PST) Received: from stormwind.0x539.de (stormwind.0x539.de [IPv6:2a01:4f8:101:2fff:2:0:fee:1]) by ietfa.amsl.com (Postfix) with ESMTP id 6705721F8533 for ; Wed, 12 Dec 2012 07:37:28 -0800 (PST) Received: from hub.kern.lc ([2a01:4f8:101:2fff:2:0:ffff:1]) by stormwind.0x539.de with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1TioNB-0003Fx-L9; Wed, 12 Dec 2012 16:37:25 +0100 Received: from [2001:470:720c:0:7de2:39ba:2071:a8d8] (helo=spike.0x539.de) by hub.kern.lc with esmtpsa (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1TioNC-0002Ug-F5; Wed, 12 Dec 2012 16:37:26 +0100 Received: from pkern by spike.0x539.de with local (Exim 4.80) (envelope-from ) id 1TioNB-00036U-4h; Wed, 12 Dec 2012 16:37:25 +0100 Date: Wed, 12 Dec 2012 16:37:25 +0100 From: Philipp Kern To: Brian Hamacher Subject: Re: MAC Address Tracking Message-ID: <20121212153725.GA11716@spike.0x539.de> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="RnlQjJ0d97Da+TV1" Content-Disposition: inline In-Reply-To: Organization: The Debian Project (http://www.debian.org) X-Debbugs-No-Ack: yes User-Agent: Mutt/1.5.21 (2010-09-15) X-Mailman-Approved-At: Wed, 12 Dec 2012 08:26:29 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 15:37:30 -0000 --RnlQjJ0d97Da+TV1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, Dec 11, 2012 at 04:04:14PM -0600, Brian Hamacher wrote: > I am looking for a good way to track my users MAC Addresses. I have a > test DHCPv6 server up and running ISC 4.1.1-P1. When I look through my > DHCP logs as well as my leases file I do not see the client MAC Address > anywhere. Do I need to enable an option to allow this to be logged? I > am looking to figure out how I can track what user had what IP Address > at any given time. The MAC Address is traditionally how I have done > this. One way would be to poll your routers' ND tables (like fetching ARP tables in IPv4). As soon as you use relaying you most certainly won't get a useable MAC address from your client, even though it might be possible in the same network segment. (The MAC address is not copied from the wire into the new relayed packet sent by the router to your server.) DHCPv6 uses the so-called client identifier extensively and not the MAC address anymore. So you cannot do any static assignment based on MAC addresses. Kind regards Philipp Kern --RnlQjJ0d97Da+TV1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBCAAGBQJQyKS1AAoJEERuJUU10FbswO4H/0kcB15qCpdARJfXCDDKBVk3 i+YYbUylfdVyom7nrfFgic0hbLcCd1l5RGkeIsMCm2c5tbWJz7WFYJhxjLi3z8Or H70to++xYFMFlvBVQ9nixccFLkNtEFOZ0QwocaUH5XeyIEc2USPH+r243hVlSk34 Zu8vwlzYN9up44YkomeQ3jqwBjvPn0TlNjq7Y7KPGXNqjvVphwTBZtGQL2dia9jt u7b/828TcXB/u/qoiS11nUgy/1vrujg6IhEgwUsgvEdysoUs7ghy7kzB4vHEtO7e is2ET3xr3CCeSIoOfZ5PJbUgpCDc7dlJDOdkcDzZkCAhhGNXvD4IspRUGKzaLVs= =Z0w1 -----END PGP SIGNATURE----- --RnlQjJ0d97Da+TV1-- From Ted.Lemon@nominum.com Wed Dec 12 08:58:50 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6070421E8084; Wed, 12 Dec 2012 08:58:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.579 X-Spam-Level: X-Spam-Status: No, score=-106.579 tagged_above=-999 required=5 tests=[AWL=0.020, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kjmI93wJy5-w; Wed, 12 Dec 2012 08:58:50 -0800 (PST) Received: from exprod7og101.obsmtp.com (exprod7og101.obsmtp.com [64.18.2.155]) by ietfa.amsl.com (Postfix) with ESMTP id D52A821E8043; Wed, 12 Dec 2012 08:58:49 -0800 (PST) Received: from shell-too.nominum.com ([64.89.228.229]) (using TLSv1) by exprod7ob101.postini.com ([64.18.6.12]) with SMTP ID DSNKUMi3yYluQAni0McyLC60OhTzJ+ZKuuMu@postini.com; Wed, 12 Dec 2012 08:58:49 PST Received: from archivist.nominum.com (archivist.nominum.com [64.89.228.108]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by shell-too.nominum.com (Postfix) with ESMTP id 7B0A6108004; Wed, 12 Dec 2012 08:58:49 -0800 (PST) Received: from webmail.nominum.com (cas-02.win.nominum.com [64.89.228.132]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client CN "mail.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by archivist.nominum.com (Postfix) with ESMTPS id 6F62F190052; Wed, 12 Dec 2012 08:58:49 -0800 (PST) (envelope-from Ted.Lemon@nominum.com) Received: from MBX-01.WIN.NOMINUM.COM ([64.89.228.133]) by CAS-02.WIN.NOMINUM.COM ([64.89.228.132]) with mapi id 14.02.0318.004; Wed, 12 Dec 2012 08:58:43 -0800 From: Ted Lemon To: Brian E Carpenter Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: AQHN2EXdSJw5XwopF0Sxa1TFbI7ekpgVZmmAgAAc+ACAAFAegIAAFfIA Date: Wed, 12 Dec 2012 16:58:43 +0000 Message-ID: <8D23D4052ABE7A4490E77B1A012B6307474379E6@mbx-01.win.nominum.com> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <50C8A559.8090103@gmail.com> In-Reply-To: <50C8A559.8090103@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.168.1.10] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: " WG" , IPv6 List , Xiayangsong X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 16:58:50 -0000 On Dec 12, 2012, at 10:40 AM, Brian E Carpenter wrote: > But all IPv6 nodes are required to support SLAAC and all > routers are required to generate RAs. What is the meaning > of "no SLAAC"? A router advertisement that doesn't offer any prefixes where stateless auto= configuration is enabled? From despres.remi@laposte.net Wed Dec 12 09:14:35 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3181721F8936 for ; Wed, 12 Dec 2012 09:14:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.794 X-Spam-Level: X-Spam-Status: No, score=-1.794 tagged_above=-999 required=5 tests=[AWL=0.155, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RXQ0p9HhdecW for ; Wed, 12 Dec 2012 09:14:34 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.11]) by ietfa.amsl.com (Postfix) with ESMTP id 433D321F8920 for ; Wed, 12 Dec 2012 09:14:33 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id 4047070001FA; Wed, 12 Dec 2012 18:14:32 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id 217BC70001F7; Wed, 12 Dec 2012 18:14:32 +0100 (CET) X-SFR-UUID: 20121212171432137.217BC70001F7@msfrf2208.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <194C5159-AFC3-4B11-AF33-5E47005529DD@gmail.com> Date: Wed, 12 Dec 2012 18:14:31 +0100 Message-Id: <5E1D29D9-2718-4104-A8A6-482B4A646E99@laposte.net> References: <194C5159-AFC3-4B11-AF33-5E47005529DD@gmail.com> To: RJ Atkinson X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 17:14:35 -0000 2012-12-12 17:06, RJ Atkinson : > All, >=20 > I fully agree with Brian Carpenter's note of Tuesday, > December 11th at 10:55:05 +0000. I support his > perspective as expressed in that note. >=20 > I have read, but am NOT persuaded by, the responses=20 > from Remi Despres to Brian's notes. Brian suggested an alternative based on a reserved OUI, but I explained = why it wouldn't be sufficient.=20 Explaining technical objections you may have, beyond what follows, would = be appreciated. > Further, I note that the combination ( U=3D=3D1 a&& G=3D=3D1) > already has a well defined meaning -- namely a=20 > global-scope multicast identifier. These are not=20 > widely deployed today, but there are various folks looking > into using precisely those identifiers for global-scope > multicasting -- in a way compatible with IEEE 802=20 > definitions of the EUI-64 with (U=3D=3D1 && G=3D=3D1). Is there any particular IETF reference that you could suggest to read? In any case, IIDs for multicast addresses are out of scope for the IPv6 = addressing architecture of RFC 4291. >=20 > Also, I'll note that the IID portion of an IPv6 address > is carefully designed to be algorithmically translatable, > from an IEEE 802 standard EUI-64 identifier. That algorithm > is trivial, and is universally deployed today, in a=20 > wide range of devices. The definitions of U and G bits > do NOT derive ab initio from IETF documents, but instead > are fundamental parts of the IEEE 802 EUI-64 architecture. > The IETF architectural choice to use a (trivially-modified) > EUI-64 in the IETF's IPv6 addressing formats was foundational,=20 > correct, and ought not be changed at this point. Same view. An important point to be noted is that, in the translation direction = from EUI-64 of IEEE to modified EUI-64 of IETF, the proposed format = implies no change at all. Also, multicast addresses being recognizable by their binary prefix = 1110, they can use IIDs of their own, based on IEEE formats or not, = without conflict with RFC 4291 in which the only specified IIDs are = those of unicast addresses. In other words, reserving a /8 IID prefix for 4rd (and possibly some = others for new types of unicast addresses) won't prevent from using = IEEE-based IIDs with u=3Dg=3D1 for multicast. =20 >=20 > Last, according to the IANA web site (URL below), > the IETF *already* has several different ways of > mapping IPv4 addresses into IPv6 addresses. The > 4rd folks need to show that none of these could be > used for their purposes, and also need to show > that none of the mapping techniques already used > could work. Neither of these have been shown so far. > If the 4rd advocates can't make an existing mapping > (between IPv4 and IPv6) work, they ought to define > a new mapping that does NOT modify the semantics of > either the U or G bits. Reasons why a new format is used for 4rd have been extensively discussed = in Softwire. If you are really interested , we can continue, but offline.=20 Where 6man has to be involved is to conclude whether the new IID format = is an acceptable new usage of the openness of RFC 4291 to new = unicast-address technologies, and if not to explain why.=20 Regards, RD >=20 > Yours, >=20 > Ran Atkinson >=20 >=20 >=20 >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From despres.remi@laposte.net Wed Dec 12 09:21:20 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64E3D21F899D for ; Wed, 12 Dec 2012 09:21:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.816 X-Spam-Level: X-Spam-Status: No, score=-1.816 tagged_above=-999 required=5 tests=[AWL=0.133, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CInrDJCV7jLz for ; Wed, 12 Dec 2012 09:21:20 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.11]) by ietfa.amsl.com (Postfix) with ESMTP id 99BB521F88F8 for ; Wed, 12 Dec 2012 09:21:16 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id EBDF37000188; Wed, 12 Dec 2012 18:21:15 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2208.sfr.fr (SMTP Server) with ESMTP id CF03E7000167; Wed, 12 Dec 2012 18:21:15 +0100 (CET) X-SFR-UUID: 20121212172115848.CF03E7000167@msfrf2208.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: u/g in general [was Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <1C819002-BAAC-4581-9E28-AEE01D43A393@gmail.com> Date: Wed, 12 Dec 2012 18:21:15 +0100 Message-Id: <8E6C367D-5556-427C-A05D-F38DDE7EB8C9@laposte.net> References: <1C819002-BAAC-4581-9E28-AEE01D43A393@gmail.com> To: Ran Atkinson X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 17:21:20 -0000 Le 2012-12-12 =E0 17:23, Ran Atkinson a =E9crit = : >=20 > On Weds 12th December, Remi Despres wrote, in part: >> Not sure however that the two proposed questions=20 >> are clear enough because today: >> - some IIDs have u =3D 0, and some have u =3D 1, >> - some IIDs have g =3D 0, and some have g =3D 1.=20 >> The only combination that isn't used is u=3Dg=3D1. >=20 > While U=3D=3DG=3D=3D1 is not *widely deployed* today, My point was only about IIDs of UNICAST addresses, those in scope of RFC = 4291. Do you know any deployment with u=3Dg=3D1 in this context ? =20 RD > it does have a very clear definition, namely: >=20 > (U=3D=3D1 && G=3D=3D1) defines a global-scope=20 > multicast identifier. >=20 > This is clear not only from a plain-language > reading of RFC-4291, Section 2.5.1, but also=20 > from the IEEE 802 definition of an EUI-64. >=20 > Further, an IID formed by algorithmically translating > an IEEE 802 MAC Address (e.g. using RFC-4291, > Appendix A), whether using a unicast or multicast > MAC address, is a widely deployed example of an > "interface identifier with universal scope". >=20 > Yours, >=20 > Ran >=20 >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From iesg-secretary@ietf.org Wed Dec 12 09:24:07 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 996FD21F88C1; Wed, 12 Dec 2012 09:24:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.321 X-Spam-Level: X-Spam-Status: No, score=-102.321 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, SARE_SUB_OBFU_Z=0.259, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ou2ADK0logmi; Wed, 12 Dec 2012 09:24:07 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AB1A21F8506; Wed, 12 Dec 2012 09:24:07 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce Subject: SECOND Last Call: (Applicability Statement for the use of IPv6 UDP Datagrams with Zero Checksums) to Proposed Standard X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121212172407.27240.46576.idtracker@ietfa.amsl.com> Date: Wed, 12 Dec 2012 09:24:07 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ietf@ietf.org List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 17:24:07 -0000 The IESG has received a request from the IPv6 Maintenance WG (6man) to consider the following document: - 'Applicability Statement for the use of IPv6 UDP Datagrams with Zero Checksums' as Proposed Standard This Last Call is the second IETF Last Call for this document. The first Last Call was to publish this document as an Informational document. The draft has been restructured as an applicability statement and is intended to be published as a Proposed Standard. The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2012-12-26. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document provides an applicability statement for the use of UDP transport checksums with IPv6. It defines recommendations and requirements for the use of IPv6 UDP datagrams with a zero UDP checksum. It describes the issues and design principles that need to be considered when UDP is used with IPv6 to support tunnel encapsulations and examines the role of the IPv6 UDP transport checksum. An appendix presents a summary of the trade-offs that were considered in evaluating the safety of the update to RFC 2460 that updates use of the UDP checksum with IPv6. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-6man-udpzero/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-6man-udpzero/ballot/ No IPR declarations have been submitted directly on this I-D. From ran.atkinson@gmail.com Wed Dec 12 09:26:51 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBEBE21F88F8 for ; Wed, 12 Dec 2012 09:26:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jKS8iDB8onb8 for ; Wed, 12 Dec 2012 09:26:49 -0800 (PST) Received: from mail-qa0-f44.google.com (mail-qa0-f44.google.com [209.85.216.44]) by ietfa.amsl.com (Postfix) with ESMTP id 80E7921F88B7 for ; Wed, 12 Dec 2012 09:26:45 -0800 (PST) Received: by mail-qa0-f44.google.com with SMTP id z4so4769169qan.10 for ; Wed, 12 Dec 2012 09:26:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; bh=0p4GUDBUaZ8Cdks59ZKG9RiMOriz4H20gObFLLf5Cqs=; b=WRKby3/XBjuhEOqJUg/7w2PXCaVFrHvpgKj843DI7Vosnt19bISnpub/D1O6SssrLd laEjgSrbJ2lW8ptszzibviklWzMppcX08ewURUiR57Xa7lffAt24n9S+ck5zhPihVS0E WK2byb47SXuaB9uLmn0Pyq8kOaKxC46Fl5+MuP/uS8qrpjjSfJN4Nbgr9VbOdsJWhz0x e7xS9Y+zr2cMMLQHv1WMkmsyXZ/+cS5S2YLn7+ZFyq78yjbilTTnTrfqGuRuCMXVhMpN lwPF+x8sn45qrUM/8mwe7mS/0LY7nRgNa8WZhQsPi/OOItJ/j1fIizlipyhra5ENbQ4X s21Q== Received: by 10.224.190.7 with SMTP id dg7mr3305702qab.19.1355333205038; Wed, 12 Dec 2012 09:26:45 -0800 (PST) Received: from [10.30.20.14] (pool-74-110-100-136.nrflva.fios.verizon.net. [74.110.100.136]) by mx.google.com with ESMTPS id x9sm18765761qen.1.2012.12.12.09.26.43 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 09:26:44 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Apple Message framework v1283) Subject: Re: u/g in general [was Mail from softwire working group about 4rd From: Ran Atkinson In-Reply-To: <8E6C367D-5556-427C-A05D-F38DDE7EB8C9@laposte.net> Date: Wed, 12 Dec 2012 12:26:43 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: References: <1C819002-BAAC-4581-9E28-AEE01D43A393@gmail.com> <8E6C367D-5556-427C-A05D-F38DDE7EB8C9@laposte.net> To: ipv6@ietf.org X-Mailer: Apple Mail (2.1283) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 17:26:52 -0000 On 12 Dec 2012, at 12:21 , R=E9mi Despr=E9s wrote: > Do you know any deployment with u=3Dg=3D1 in this context ? =20 There is limited use today of IPv6 addresses that have apparent unicast routing prefixes, but contain multicast group IDs in the low-order 64-bits ("IID"). Yours, Ran From bob.hinden@gmail.com Wed Dec 12 09:30:18 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E18121F884B for ; Wed, 12 Dec 2012 09:30:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.406 X-Spam-Level: X-Spam-Status: No, score=-103.406 tagged_above=-999 required=5 tests=[AWL=-0.066, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, SARE_SUB_OBFU_Z=0.259, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WsWJUPk4ONMZ for ; Wed, 12 Dec 2012 09:30:17 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id 2492621F86F9 for ; Wed, 12 Dec 2012 09:30:16 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id w11so527853bku.31 for ; Wed, 12 Dec 2012 09:30:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :cc:to:mime-version:x-mailer; bh=v8Ck5jopojcxPgqtCY4HlQjGEgmQHzyKrQUMqTG/SRE=; b=nnREIm0CUi9cp1+k/2J2SYGD/g06UvfIObFFIP9bFJPPdOpEOZtaMgq3EC+QEVisfI tiouLfOc37fTnt9oxKt5U8Ys9Dw45z90LH2sOUW/MqK/7/NoNHmJyjxQ8EE1eyHaUchJ 6JznON6UJjYAs3s3BHZyYam87xXN0XXqj33fbe6aApF7r1BWL/nAI3Kmw9Ynm97SnqrQ VHX0QOWyNZnt3TgYMqDFkej5OiEeJ0iNIAb8sFOZxGnWhuEEbIAANA59z3kIHV4BHPC9 GITiybZbWK9AtnOsjweyyO6o7qRf+dei4EaM0aqpmXBVfCqDrbieJUFtC/Wu6PxdxU47 ReXA== Received: by 10.204.127.11 with SMTP id e11mr945625bks.0.1355333415218; Wed, 12 Dec 2012 09:30:15 -0800 (PST) Received: from [10.0.0.38] (c-24-130-151-138.hsd1.ca.comcast.net. [24.130.151.138]) by mx.google.com with ESMTPS id hm8sm21086457bkc.10.2012.12.12.09.30.13 (version=SSLv3 cipher=OTHER); Wed, 12 Dec 2012 09:30:14 -0800 (PST) From: Bob Hinden Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Subject: 6MAN WG Last Call: Date: Wed, 12 Dec 2012 09:30:09 -0800 Message-Id: To: "ipv6@ietf.org Mailing List" Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) Cc: Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 17:30:18 -0000 Restarting the w.g. last call to correct the intended status. It is = intended for Proposed Standard, not Informational. This message starts a two week 6MAN Working Group on advancing: Title : Applicability Statement for the use of IPv6 = UDP Datagrams with Zero Checksums Author(s) : Godred Fairhurst Magnus Westerlund Filename : draft-ietf-6man-udpzero-08.txt Pages : 37 Date : 2012-12-11 https://datatracker.ietf.org/doc/draft-ietf-6man-udpzero/ as a Proposed Standard. This last call is being done given the number = of changes and the time since the earlier last calls. The changes were = discussed at the Atlanta IETF 6man session. The authors believe these = changes will resolve the open IESG Discusses. Our AD will start a = concurrent IETF last call as well. Substantive comments and statements of support for advancing this = document should be directed to the mailing list. Editorial suggestions = can be sent to the authors. This last call will end on 27 December = 2012. Regards, Bob Hinden & Ole Tr=F8an=20 From rja.lists@gmail.com Wed Dec 12 09:38:23 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0407D21E80D3 for ; Wed, 12 Dec 2012 09:38:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UKmN5DZalFcV for ; Wed, 12 Dec 2012 09:38:21 -0800 (PST) Received: from mail-qa0-f51.google.com (mail-qa0-f51.google.com [209.85.216.51]) by ietfa.amsl.com (Postfix) with ESMTP id 43F9E21E805A for ; Wed, 12 Dec 2012 09:38:15 -0800 (PST) Received: by mail-qa0-f51.google.com with SMTP id i20so1352570qad.10 for ; Wed, 12 Dec 2012 09:38:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; bh=RshhfdLFE8+uvNK9l/V8Z6U9mhblcEpVQ65mGBJlMLw=; b=e8Rh0Klwan7z/q4WqP43rKx4efAt7FNbVBxtfm1F916Ka6srZeHmtQwfXq26GVxQQI j/6T+yAb5HHkqA1HkIdzPYobz1t8NFOK+UiBdks3oou7BpgzjEIzHOMK8kv5cQ5uGGK0 FLM5PJrCKOY25cWhfaRsBJTWT61ok3Psl5l5dy+pvy2BxDRFn9KCkmIarL52AjL50xfX Nw+x0UNFdlWRFDdW9luvmuJl9/yYWZrZCb14t3Fjc0yIkdqkGC1tYGHi/yetWev7Vb+N 3XN76g28/QbYbdpHKK4P3a1jAyalxzIvlKJtaYwSuUNfOrUGvVAXrVd2T3AYUL7b/cEV r0tA== Received: by 10.229.114.214 with SMTP id f22mr875818qcq.35.1355333893914; Wed, 12 Dec 2012 09:38:13 -0800 (PST) Received: from [10.30.20.14] (pool-74-110-100-136.nrflva.fios.verizon.net. [74.110.100.136]) by mx.google.com with ESMTPS id gv5sm20657130qab.11.2012.12.12.09.38.12 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 09:38:13 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Apple Message framework v1283) Subject: Re: Mail from softwire working group about 4rd From: RJ Atkinson In-Reply-To: <5E1D29D9-2718-4104-A8A6-482B4A646E99@laposte.net> Date: Wed, 12 Dec 2012 12:38:11 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <9ECFEE48-07B4-4311-A00B-75DE816B2B11@gmail.com> References: <194C5159-AFC3-4B11-AF33-5E47005529DD@gmail.com> <5E1D29D9-2718-4104-A8A6-482B4A646E99@laposte.net> To: ipv6@ietf.org X-Mailer: Apple Mail (2.1283) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 17:38:23 -0000 On 12 Dec 2012, at 12:14 , R=E9mi Despr=E9s wrote: > In any case, IIDs for multicast addresses are out of scope for the = IPv6 addressing architecture of RFC 4291. Disagree. It is clear that RFC-4291 has reserved=20 the use of G=3D=3DU=3D=3D1 for multicast identifiers. > An important point to be noted is that, in the translation direction > from EUI-64 of IEEE to modified EUI-64 of IETF, the proposed format > implies no change at all. It *breaks* the reverse mapping, however, whereas today the *bi-directional* mapping works reliably. > In other words, reserving a /8 IID prefix for 4rd (and possibly > some others for new types of unicast addresses) won't prevent > from using IEEE-based IIDs with u=3Dg=3D1 for multicast. Incorrect. =20 As a trivial example, one can use a unicast routing prefix=20 to specify an RP location, along with a multicast group-id (so that the RP knows to multicast RPF the packet). This has the potential to reduce the state required in inter-domain=20 routers, to give an example of why this approach can be useful. > Reasons why a new format is used for 4rd have been extensively > discussed in Softwire. If you are really interested, > we can continue, but offline.=20 Those reasons are directly relevant to the 6MAN WG decision about this proposal, so those reasons need to be articulated here, on-list. Softwire and 6MAN are different WGs. IETF rules do not assume every member of one WG also belongs to a different WG. > Where 6man has to be involved is to conclude whether the new > IID format is an acceptable new usage of the openness of > RFC 4291 to new unicast-address technologies, > and if not to explain why.=20 The language you keep quoting was inserted to leave the door open for GSE/8+8. Please don't twist the words to try to justify something that the text really does not support. Further, under IETF rules, the burden of proof/justification=20 is entirely on the folks advocating change to the IPv6 specs,=20 NOT on the 6MAN WG. Yours, Ran From alexandru.petrescu@gmail.com Wed Dec 12 09:56:29 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27C6F1F0CCD for ; Wed, 12 Dec 2012 09:56:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.174 X-Spam-Level: X-Spam-Status: No, score=-10.174 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NgYE6edrgrSw for ; Wed, 12 Dec 2012 09:56:18 -0800 (PST) Received: from oxalide-out.extra.cea.fr (oxalide-out.extra.cea.fr [132.168.224.8]) by ietfa.amsl.com (Postfix) with ESMTP id AEE0D1F0CC5 for ; Wed, 12 Dec 2012 09:55:59 -0800 (PST) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide.extra.cea.fr (8.14.2/8.14.2/CEAnet-Internet-out-2.3) with ESMTP id qBCHtv3a003037 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 12 Dec 2012 18:55:57 +0100 Received: from muguet2.intra.cea.fr (muguet2.intra.cea.fr [132.166.192.7]) by pisaure.intra.cea.fr (8.14.4/8.14.4) with ESMTP id qBCHtvY2007823 for ; Wed, 12 Dec 2012 18:55:57 +0100 (envelope-from alexandru.petrescu@gmail.com) Received: from [127.0.0.1] (is010446-4.intra.cea.fr [10.8.33.116]) by muguet2.intra.cea.fr (8.13.8/8.13.8/CEAnet-Intranet-out-1.2) with ESMTP id qBCHtjRQ027146 for ; Wed, 12 Dec 2012 18:55:57 +0100 Message-ID: <50C8C522.4040702@gmail.com> Date: Wed, 12 Dec 2012 18:55:46 +0100 From: Alexandru Petrescu User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: ipv6@ietf.org Subject: Re: u/g in general [was Mail from softwire working group about 4rd References: <1C819002-BAAC-4581-9E28-AEE01D43A393@gmail.com> <8E6C367D-5556-427C-A05D-F38DDE7EB8C9@laposte.net> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 17:56:30 -0000 Le 12/12/2012 18:26, Ran Atkinson a écrit : > > On 12 Dec 2012, at 12:21 , Rémi Després wrote: >> Do you know any deployment with u=g=1 in this context ? > > There is limited use today of IPv6 addresses that have apparent > unicast routing prefixes, but contain multicast group IDs in the > low-order 64-bits ("IID"). Interesting to know, thanks. But, this wouldn't make the ug(ly) bits mandatory in unicast, would it. In addition, together with the ug bits, the 64bit fixed length of the IID (regardless of Ethernet) is another factor posing problems to deployments (e.g. ISP delivering /64 to end user, and end-user doing non-natural things like duplicating same address on two interfaces, or alternatively hopelessly waiting of DHCPv6-PD deployment on otherwise IPv6 ptp cellular links available now). If the ug bits didnt exist, and if the 64bit IID length were not fixed, then we could have happy ISPs delivering /64 on ptp links that end user would naturally split ('subnet') into /65 and longer without wait, and without need of DHCPv6 on these /65 links (i.e. use RA SLAAC with /65 on Ethernet). YOurs, Alex > > Yours, > > Ran > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list ipv6@ietf.org Administrative > Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > > From otroan@employees.org Wed Dec 12 10:48:14 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4492821F87FB; Wed, 12 Dec 2012 10:48:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0kHIL5m+OSok; Wed, 12 Dec 2012 10:48:12 -0800 (PST) Received: from ams-iport-4.cisco.com (ams-iport-4.cisco.com [144.254.224.147]) by ietfa.amsl.com (Postfix) with ESMTP id E065A21F880A; Wed, 12 Dec 2012 10:48:04 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArkHANzQyFCQ/khM/2dsb2JhbABFg0i7UBZzgh4BAQQBeQULC0ZXBogeBr1vkC1hA5t0il2CdA X-IronPort-AV: E=Sophos;i="4.84,267,1355097600"; d="scan'208";a="10390704" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-4.cisco.com with ESMTP; 12 Dec 2012 18:48:03 +0000 Received: from [10.61.104.202] (dhcp-10-61-104-202.cisco.com [10.61.104.202]) by ams-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qBCIm3SX014857 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 12 Dec 2012 18:48:03 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: Date: Wed, 12 Dec 2012 19:48:02 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> To: Xiayangsong X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 18:48:14 -0000 Hi, > I am a little bit confused what we are talking about. > Our draft is necessary when there is no SLAAC. >=20 > Could you elaborate your viewpoints? the PIO option in RA has several functions. 1) with the A-flag on, it is used by SLAAC. 2) with the L-flag on, it is used for onlink determination (prefix = discovery). "when there is no SLAAC" does that mean? - there is no RA - there is an empty RA (no PIO) - the PIO has A-flag off if I understand your draft correctly, you want a DHCPv6 alternative to = the RA PIO option. generally we try to avoid duplicate mechanisms, so could you please give = a use case? cheers, Ole= From tjc@ecs.soton.ac.uk Wed Dec 12 11:06:29 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5F7021E80F4; Wed, 12 Dec 2012 11:06:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.449 X-Spam-Level: X-Spam-Status: No, score=-4.449 tagged_above=-999 required=5 tests=[AWL=-2.151, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GcJkXeHKusNL; Wed, 12 Dec 2012 11:06:28 -0800 (PST) Received: from falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [IPv6:2001:630:d0:f102::25e]) by ietfa.amsl.com (Postfix) with ESMTP id E873921E80F7; Wed, 12 Dec 2012 11:06:27 -0800 (PST) Received: from falcon.ecs.soton.ac.uk (localhost [127.0.0.1]) by falcon.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id qBCJ6JlQ021483; Wed, 12 Dec 2012 19:06:19 GMT X-DKIM: Sendmail DKIM Filter v2.8.2 falcon.ecs.soton.ac.uk qBCJ6JlQ021483 DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=ecs.soton.ac.uk; s=200903; t=1355339180; bh=zxhpGw/XI7HUUhaT6ABw58VT+AM=; h=Mime-Version:Subject:From:In-Reply-To:Date:Cc:References:To; b=iDTVO0iSZtlKCocZ+8lONiNZjSkK2vEgx+xPA3xe8giuuGV7g44sOyGH5NCmxlC6I p2zNTMiKWr4pVsRiiP0sHzzuhqkBn2KubK+3YPx8gBVoU9+4aZlPM50DLQS7i3Z/yg F6oxmvrGEtUcqAnEuWtOA/+uERR47FSfIAwQq4t4= Received: from gander.ecs.soton.ac.uk (gander.ecs.soton.ac.uk [2001:630:d0:f102::25d]) by falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [2001:630:d0:f102::25e]) envelope-from with ESMTP (valid=N/A) id oBBJ6J0430653669Qz ret-id none; Wed, 12 Dec 2012 19:06:20 +0000 Received: from [192.168.1.102] (host213-123-213-183.in-addr.btopenworld.com [213.123.213.183]) (authenticated bits=0) by gander.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id qBCJ4wqk017904 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 12 Dec 2012 19:04:59 GMT Content-Type: multipart/alternative; boundary="Apple-Mail=_291E5DFF-E717-4EE1-90A0-B88052B5B3D5" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" From: Tim Chown In-Reply-To: <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> Date: Wed, 12 Dec 2012 19:04:58 +0000 Message-ID: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> <808EE39B-C43F-42E4-94DA-216655DBB16E@ecs.soton.ac.uk> To: =?iso-8859-1?Q?Ole_Tr=F8an?= X-Mailer: Apple Mail (2.1499) X-ECS-MailScanner: Found to be clean, Found to be clean X-smtpf-Report: sid=oBBJ6J043065366900; tid=oBBJ6J0430653669Qz; client=relay,ipv6; mail=; rcpt=; nrcpt=4:0; fails=0 X-ECS-MailScanner-Information: Please contact the ISP for more information X-ECS-MailScanner-ID: qBCJ6JlQ021483 X-ECS-MailScanner-From: tjc@ecs.soton.ac.uk Cc: " WG" , IPv6 List , Xiayangsong X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 19:06:30 -0000 --Apple-Mail=_291E5DFF-E717-4EE1-90A0-B88052B5B3D5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 On 12 Dec 2012, at 18:48, Ole Tr=F8an wrote: > Hi, >=20 >> I am a little bit confused what we are talking about. >> Our draft is necessary when there is no SLAAC. >>=20 >> Could you elaborate your viewpoints? >=20 > the PIO option in RA has several functions. >=20 > 1) with the A-flag on, it is used by SLAAC. > 2) with the L-flag on, it is used for onlink determination (prefix = discovery). >=20 > "when there is no SLAAC" does that mean? > - there is no RA > - there is an empty RA (no PIO) > - the PIO has A-flag off >=20 > if I understand your draft correctly, you want a DHCPv6 alternative to = the RA PIO option. > generally we try to avoid duplicate mechanisms, so could you please = give a use case? And so we end up back at http://tools.ietf.org/html/draft-droms-dhc-dhcpv6-default-router-00 and http://www.ietf.org/mail-archive/web/dhcwg/current/msg09715.html Tim= --Apple-Mail=_291E5DFF-E717-4EE1-90A0-B88052B5B3D5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=iso-8859-1 otroan@employees.org> = wrote:
Hi,

I am a little bit = confused what we are talking about.
Our draft is necessary when there = is no SLAAC.

Could you elaborate your = viewpoints?

the PIO option in RA has several = functions.

1) with the A-flag on, it is used by SLAAC.
2) with = the L-flag on, it is used for onlink determination (prefix = discovery).

"when there is no SLAAC" does that mean?
- there = is no RA
- there is an empty RA (no PIO)
- the PIO has A-flag = off

if I understand your draft correctly, you want a DHCPv6 = alternative to the RA PIO option.
generally we try to avoid duplicate = mechanisms, so could you please give a use = case?

And so we end up back = at
and
=

Tim
= --Apple-Mail=_291E5DFF-E717-4EE1-90A0-B88052B5B3D5-- From rdroms.ietf@gmail.com Wed Dec 12 11:12:24 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E535721E80C0; Wed, 12 Dec 2012 11:12:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.628 X-Spam-Level: X-Spam-Status: No, score=-103.628 tagged_above=-999 required=5 tests=[AWL=-0.029, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZRqUTBifN7Af; Wed, 12 Dec 2012 11:12:21 -0800 (PST) Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id 856E021E808D; Wed, 12 Dec 2012 11:12:21 -0800 (PST) Received: by mail-vc0-f172.google.com with SMTP id fw7so1190368vcb.31 for ; Wed, 12 Dec 2012 11:12:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=IcojSsmJqxsROHSNHqwtbDLdq6AuHSpCIQJ4VU/NIao=; b=lTeMeyBjVvXeRD4nWQAAQpBwdpSNeLnbilPPtu6g2Pu6cXqI41awL7BftJWwvm0y6E b/58CGATSJaA8UR5cmaeYVe1dJ1L/O4TJ9pov7PTjCBzc9MP6UVNp9AdrCGC4dYr9fNL VcDOAXz58PdvXD7t2WiFDPDiTIslobb01CvRwhvpyTVCmNpOvHGayEzcPQnrxpr1vTV/ ioxyEpD5ja9kIcN91WlM2cVi14KuZJUlxrj7C137/fefi8mF9Ql4WkMteaf2fK3eG8p6 xOaa1PQK3Ugu2dsnZF9PTEYtwgT9SPl7eQBVZNhyIjM76zYwkmbgf6NgP/Szy0f9RsuS iyog== Received: by 10.220.115.72 with SMTP id h8mr1104540vcq.43.1355339540885; Wed, 12 Dec 2012 11:12:20 -0800 (PST) Received: from [161.44.65.173] ([161.44.65.173]) by mx.google.com with ESMTPS id bm2sm9366865vdc.6.2012.12.12.11.12.15 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 11:12:19 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" From: Ralph Droms In-Reply-To: Date: Wed, 12 Dec 2012 14:12:14 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <0A8BA132-205F-4076-AA55-196CE62ECDCB@gmail.com> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> <808EE39B-C43F-42E4-94DA-216655DBB16E@ecs.soton.ac.uk> To: Tim Chown X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 19:12:24 -0000 On Dec 12, 2012, at 2:04 PM 12/12/12, Tim Chown = wrote: > On 12 Dec 2012, at 18:48, Ole Tr=F8an wrote: >=20 >> Hi, >>=20 >>> I am a little bit confused what we are talking about. >>> Our draft is necessary when there is no SLAAC. >>>=20 >>> Could you elaborate your viewpoints? >>=20 >> the PIO option in RA has several functions. >>=20 >> 1) with the A-flag on, it is used by SLAAC. >> 2) with the L-flag on, it is used for onlink determination (prefix = discovery). >>=20 >> "when there is no SLAAC" does that mean? >> - there is no RA >> - there is an empty RA (no PIO) >> - the PIO has A-flag off >>=20 >> if I understand your draft correctly, you want a DHCPv6 alternative = to the RA PIO option. >> generally we try to avoid duplicate mechanisms, so could you please = give a use case? >=20 > And so we end up back at > http://tools.ietf.org/html/draft-droms-dhc-dhcpv6-default-router-00 > and > http://www.ietf.org/mail-archive/web/dhcwg/current/msg09715.html plus =E7a change, plus c'est la m=EAme chose (English translation: Groundhog Day*) - Ralph *http://en.wikipedia.org/wiki/Groundhog_Day_(film) >=20 > Tim > _______________________________________________ > dhcwg mailing list > dhcwg@ietf.org > https://www.ietf.org/mailman/listinfo/dhcwg From rja.lists@gmail.com Wed Dec 12 11:12:27 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8B0B21E810E for ; Wed, 12 Dec 2012 11:12:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M51Nz6wwx8PS for ; Wed, 12 Dec 2012 11:12:25 -0800 (PST) Received: from mail-qa0-f51.google.com (mail-qa0-f51.google.com [209.85.216.51]) by ietfa.amsl.com (Postfix) with ESMTP id 8476621E80C0 for ; Wed, 12 Dec 2012 11:12:25 -0800 (PST) Received: by mail-qa0-f51.google.com with SMTP id i20so1559831qad.10 for ; Wed, 12 Dec 2012 11:12:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; bh=V24o2cI2eE/whcoo0IvplF7pyPdXwBf7/IyfOghsfmw=; b=coARWxKH8e11ALLloHASSF3HE0URNtCpHW+HyvXUBYrcb8mxNDjqV2AgyR/dWdf15T 4/cSC2iknjjrb44UwAE/xwILmoX9ID0X4Hc0DbHe4AjiLiYKAgttjlvik0UwdcBHpChO 7oHAF2PG6xUhmPwWhdL/0U+egDti2yEiCysRP7WatecTJFa82X69h8QeARPDEq/te+3S hD94vXrXMb0d33/J+jWDo7BBup4+2lOI6xifXRxqPjXIW97s4kV2VaL86UThDWUhwU72 Iw4zABxvJlY+RdhY9KcxOsmraeVa04tZUFbZa5/GJK0uLmYgevrRopFY9BKo7oz/azXz 9OBg== Received: by 10.49.96.33 with SMTP id dp1mr5232163qeb.60.1355339544155; Wed, 12 Dec 2012 11:12:24 -0800 (PST) Received: from [10.30.20.14] (pool-74-110-100-136.nrflva.fios.verizon.net. [74.110.100.136]) by mx.google.com with ESMTPS id fl1sm20873180qab.14.2012.12.12.11.12.22 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 12 Dec 2012 11:12:23 -0800 (PST) From: RJ Atkinson Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: Mail from softwire working group about 4rd Date: Wed, 12 Dec 2012 14:12:21 -0500 Message-Id: <6FE342D5-A360-4B9F-8CCF-11DC7A12F4EA@gmail.com> To: ipv6@ietf.org Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 19:12:27 -0000 On Weds, 12th December, Jouni Korhonen wrote, in part: > However, my point is that now we would be stepping into > IEEE territory, which I am not comfortable with. Exactly so, and the cited reason (avoiding intrusion on IEEE 802's standards) is sufficient reason for the 6MAN WG not to approve this proposal. Ran From tjc@ecs.soton.ac.uk Wed Dec 12 11:12:35 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C53A221E808D for ; Wed, 12 Dec 2012 11:12:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.523 X-Spam-Level: X-Spam-Status: No, score=-3.523 tagged_above=-999 required=5 tests=[AWL=-0.925, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bkn3CEi1uljf for ; Wed, 12 Dec 2012 11:12:35 -0800 (PST) Received: from falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [IPv6:2001:630:d0:f102::25e]) by ietfa.amsl.com (Postfix) with ESMTP id 4745C21E8124 for ; Wed, 12 Dec 2012 11:12:34 -0800 (PST) Received: from falcon.ecs.soton.ac.uk (localhost [127.0.0.1]) by falcon.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id qBCJCKoq022336; Wed, 12 Dec 2012 19:12:20 GMT X-DKIM: Sendmail DKIM Filter v2.8.2 falcon.ecs.soton.ac.uk qBCJCKoq022336 DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=ecs.soton.ac.uk; s=200903; t=1355339541; bh=Peii+mJRBixhZnP9haLpkbOekQ0=; h=Mime-Version:Subject:From:In-Reply-To:Date:Cc:References:To; b=T0T9haW0r6VxemLwXuGMq+b3SRgD5DkI3CGSfE5MHO7qVWRUFB4yHeEdu9GEeGSKb m1k3Pdbi+xeZRpu/i9aYYM74D0hqzfjnnUj5XME+mW67wraMNdTeZAO7z9BwnGah53 qS5RKpYS2xzTe0kwRLmY9wXLNjMBHXhk9pprL148= Received: from gander.ecs.soton.ac.uk (gander.ecs.soton.ac.uk [2001:630:d0:f102::25d]) by falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [2001:630:d0:f102::25e]) envelope-from with ESMTP (valid=N/A) id oBBJCK0430653691Zd ret-id none; Wed, 12 Dec 2012 19:12:21 +0000 Received: from [192.168.1.102] (host213-123-213-183.in-addr.btopenworld.com [213.123.213.183]) (authenticated bits=0) by gander.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id qBCJB15o019139 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 12 Dec 2012 19:11:02 GMT Content-Type: multipart/alternative; boundary="Apple-Mail=_0CC23CFB-012A-4596-A39F-08FF070DB16D" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: MAC Address Tracking From: Tim Chown In-Reply-To: <20121212153725.GA11716@spike.0x539.de> Date: Wed, 12 Dec 2012 19:11:01 +0000 Message-ID: References: <20121212153725.GA11716@spike.0x539.de> To: Philipp Kern X-Mailer: Apple Mail (2.1499) X-ECS-MailScanner: Found to be clean, Found to be clean X-smtpf-Report: sid=oBBJCK043065369100; tid=oBBJCK0430653691Zd; client=relay,ipv6; mail=; rcpt=; nrcpt=3:0; fails=0 X-ECS-MailScanner-Information: Please contact the ISP for more information X-ECS-MailScanner-ID: qBCJCKoq022336 X-ECS-MailScanner-From: tjc@ecs.soton.ac.uk Cc: Brian Hamacher , ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 19:12:35 -0000 --Apple-Mail=_0CC23CFB-012A-4596-A39F-08FF070DB16D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On 12 Dec 2012, at 15:37, Philipp Kern wrote: > On Tue, Dec 11, 2012 at 04:04:14PM -0600, Brian Hamacher wrote: >> I am looking for a good way to track my users MAC Addresses. I have = a >> test DHCPv6 server up and running ISC 4.1.1-P1. When I look through = my >> DHCP logs as well as my leases file I do not see the client MAC = Address >> anywhere. Do I need to enable an option to allow this to be logged? = I >> am looking to figure out how I can track what user had what IP = Address >> at any given time. The MAC Address is traditionally how I have done >> this. >=20 > One way would be to poll your routers' ND tables (like fetching ARP = tables > in IPv4). As soon as you use relaying you most certainly won't get a > useable MAC address from your client, even though it might be possible = in > the same network segment. (The MAC address is not copied from the wire > into the new relayed packet sent by the router to your server.) >=20 > DHCPv6 uses the so-called client identifier extensively and not the = MAC > address anymore. So you cannot do any static assignment based on MAC > addresses. Well there is this: = http://tools.ietf.org/html/draft-ietf-dhc-dhcpv6-client-link-layer-addr-op= t-03 Not sure of implementations as yet, but three Cisco authors may be a = clue. We simply use a open source package that queries switch/router devices = and builds the IP/MAC/port relationships from that. Tim= --Apple-Mail=_0CC23CFB-012A-4596-A39F-08FF070DB16D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii pkern@debian.org> = wrote:
On Tue, Dec 11, 2012 at 04:04:14PM -0600, Brian Hamacher = wrote:
I am looking for a good way to track = my users MAC Addresses.  I have a
test DHCPv6 server up and = running ISC 4.1.1-P1.  When I look through my
DHCP logs as well = as my leases file I do not see the client MAC Address
anywhere. =  Do I need to enable an option to allow this to be logged? =  I
am looking to figure out how I can track what user had what = IP Address
at any given time.  The MAC Address is traditionally = how I have done
this.

One way would be to poll = your routers' ND tables (like fetching ARP tables
in IPv4). As soon = as you use relaying you most certainly won't get a
useable MAC = address from your client, even though it might be possible in
the = same network segment. (The MAC address is not copied from the = wire
into the new relayed packet sent by the router to your = server.)

DHCPv6 uses the so-called client identifier extensively = and not the MAC
address anymore. So you cannot do any static = assignment based on = MAC
addresses.

Well there is = this:

Not sure of = implementations as yet, but three Cisco authors may be a = clue.

We simply use a open source package that = queries switch/router devices and builds the IP/MAC/port relationships = from that.

Tim
= --Apple-Mail=_0CC23CFB-012A-4596-A39F-08FF070DB16D-- From markzzzsmith@yahoo.com.au Wed Dec 12 12:09:40 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37B8411E80D2 for ; Wed, 12 Dec 2012 12:09:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.892 X-Spam-Level: X-Spam-Status: No, score=-0.892 tagged_above=-999 required=5 tests=[AWL=-1.207, BAYES_40=-0.185, FROM_LOCAL_NOVOWEL=0.5] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6ih11l7LFv7J for ; Wed, 12 Dec 2012 12:09:39 -0800 (PST) Received: from nm18-vm0.bullet.mail.bf1.yahoo.com (nm18-vm0.bullet.mail.bf1.yahoo.com [98.139.213.138]) by ietfa.amsl.com (Postfix) with ESMTP id 24C9C11E80A5 for ; Wed, 12 Dec 2012 12:09:39 -0800 (PST) Received: from [98.139.212.150] by nm18.bullet.mail.bf1.yahoo.com with NNFMP; 12 Dec 2012 20:09:38 -0000 Received: from [98.139.212.192] by tm7.bullet.mail.bf1.yahoo.com with NNFMP; 12 Dec 2012 20:09:38 -0000 Received: from [127.0.0.1] by omp1001.mail.bf1.yahoo.com with NNFMP; 12 Dec 2012 20:09:38 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 552157.16820.bm@omp1001.mail.bf1.yahoo.com Received: (qmail 89733 invoked by uid 60001); 12 Dec 2012 20:09:38 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.au; s=s1024; t=1355342978; bh=mGjXe6E7yS+zy3yq9ah3wQgeQyJS58gdUosKwIOqFIg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=bHaO7X2c/xt6c+up3fx9OuJXSKY3Qm/9epVa1KY6ams5XeUl63zU+ffLJLqnvqPBKVj11VcQSAAYVtrE61pwBjoGpE2ysSYPvBtfw82tHxBcPETfqtsdb6+7i8EOrlByn1nJR7/fmbR4QwafzWbDuTqCZkzQMv3lw/91S3Q6r7c= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.au; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=ecwENGyWl+UG9dIR2zuenPtQWL04NHQe4wVpmHX9ZEuG4JRz3wtCYxk6TDf5TYG87XJ1EthzhWDtBD4e6mi8/mfbpf1tVbJLgW88g+xw+5icggKLrp5Uq0+gcTq1FAR1bjpRohBUjHx14sQyrwrigMRVFzaT/X443JvF4+ecpRw=; X-YMail-OSG: 2zeYftoVM1lMzek3n8M1Gj4taPXz019eTpaK6r_8mgxOmte KEWMTZ0L3XGW0o97IEC3stRqi_HJ514PHixLCoILIKSYPyNNaKFsCbooHvkZ T.VbWXazBAYElRGvSHoR.JgLP88.9ylQyhwYKL6PmTh4DwLNcSLL.oWqOnag qndv_65akk8h3MaSeyvVIceglTUviCRFOh5BwrCqsvy5FOi_M63f6vnkV_hV C.PL8WGyEaTbII7.sPFSRLFWtKVhNV3MGL1T93xJnspU0iQ3mOS7.FcT4oJx 9hAVGqAJaz54.F_AChWgqwDb6DLw_4oG82hLOxnM7WGqYU_qKIuApQj0Wr2T ltO7B_Pk79ySFdul7xIIoudeZ.nBFQdK7QmnZXbvF2QiO942metsG__h7M0y _P6eW9z3gKhyl.qFMpNxmQ6klKVgcEFsyoX.OR1mkzfysi3BbFergo1mCBKe 0q8KtZ42N85mQLOO.fJK_DDPFkqaFgYsyQJLlDc7Cphcgfo9d73r_Gs3kefc UrJoeBU7_WkVQL6YZpJgpezKj Received: from [150.101.221.237] by web142503.mail.bf1.yahoo.com via HTTP; Wed, 12 Dec 2012 12:09:38 PST X-Rocket-MIMEInfo: 001.001, Cj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo.IEZyb206IEJyaWFuIEhhbWFjaGVyIDxiaGFtYWNoZXJAd2VzdGlhbmV0LmNvbT4KPlRvOiBpcHY2QGlldGYub3JnIAo.U2VudDogV2VkbmVzZGF5LCAxMiBEZWNlbWJlciAyMDEyIDk6MDQgQU0KPlN1YmplY3Q6IE1BQyBBZGRyZXNzIFRyYWNraW5nCj4gCj4KPkkgYW0gbG9va2luZyBmb3IgYSBnb29kIHdheSB0byB0cmFjayBteSB1c2VycyBNQUMgQWRkcmVzc2VzLsKgIEkgaGF2ZSBhIHRlc3QgREhDUHY2IHNlcnZlciB1cCBhbmQgcnVubmluZyABMAEBAQE- X-Mailer: YahooMailWebService/0.8.128.478 References: Message-ID: <1355342978.89240.YahooMailNeo@web142503.mail.bf1.yahoo.com> Date: Wed, 12 Dec 2012 12:09:38 -0800 (PST) From: Mark Smith Subject: Re: MAC Address Tracking To: Brian Hamacher In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: Mark Smith List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 20:09:40 -0000 =0A>________________________________=0A> From: Brian Hamacher =0A>To: ipv6@ietf.org =0A>Sent: Wednesday, 12 December 2012 9:0= 4 AM=0A>Subject: MAC Address Tracking=0A> =0A>=0A>I am looking for a good w= ay to track my users MAC Addresses.=A0 I have a test DHCPv6 server up and r= unning ISC 4.1.1-P1.=A0 When I look through my DHCP logs as well as my leas= es file I do not see the client MAC Address anywhere.=A0 Do I need to enabl= e an option to allow this to be logged?=A0 I am looking to figure out how I= can track what user had what IP Address at any given time.=A0 The MAC Addr= ess is traditionally how I have done this.=0A>=A0=0A=0AAssuming MAC address= =3D user is fundamentally assuming that a device is exclusively used by th= at one user. Mobile devices (e.g. tablets, smartphones) might suggest that = assumption is becoming more true, however I think it actually might make it= less true - mobile devices are also a lot easier to share or steal, than f= ixed location devices like desktop PCs. It might be worth considering movin= g to a user authentication model such as 802.1x to track your network users= identities=A0(i.e. use what they know to identify them, rather than what t= hey have).=0A=0A>Any thoughts would be appreciated.=0A>=A0=0A>Thank You=0A>= =A0=0A>Brian=0A>=A0=0A>----------------------------------------------------= ----------------=0A>IETF IPv6 working group mailing list=0A>ipv6@ietf.org= =0A>Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6=0A>= --------------------------------------------------------------------=0A>=0A= >=0A> From otroan@employees.org Wed Dec 12 13:33:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59AC221E8034 for ; Wed, 12 Dec 2012 13:33:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LD3c9-BIfAIo for ; Wed, 12 Dec 2012 13:33:23 -0800 (PST) Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id D3C4021F8848 for ; Wed, 12 Dec 2012 13:33:05 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArkHAET3yFCrRDoJ/2dsb2JhbABFg0i7URZzgh4BAQQBOj8FCwtGVwaIHgW+Aoxmg0dhA5t0il2CdIFs X-IronPort-AV: E=Sophos;i="4.84,269,1355097600"; d="scan'208";a="63834607" Received: from mtv-core-4.cisco.com ([171.68.58.9]) by mtv-iport-3.cisco.com with ESMTP; 12 Dec 2012 21:33:03 +0000 Received: from [10.61.104.202] (dhcp-10-61-104-202.cisco.com [10.61.104.202]) by mtv-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBCLWxOt010418 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 12 Dec 2012 21:33:01 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: u/g in general [was Mail from softwire working group about 4rd] From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: <50C86E63.2050305@gmail.com> Date: Wed, 12 Dec 2012 22:32:58 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <19CC3860-8914-4FFA-BAF9-C680A0B52F57@employees.org> References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> <50C86E63.2050305@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Cc: 6man , Bob Hinden , Suresh Krishnan , softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2012 21:33:28 -0000 > I think the only way to make progress on this question is to > discuss two points in a much more general way: >=20 > 1. Does the current mapping of the "u" bit in the modified EUI format = have any value? >=20 > 2. Does the current mapping of the "g" bit in the modified EUI format = have any value? >=20 > If the answer to these questions is "no" we could start by saying that = they > are *not* mapped from an IEEE EUI into a modified EUI, and then = consider > how to use them in future. or we could consider the interface-id as 64 bits without any implied = meaning attached to any of the bits. cheers, Ole= From raul.villafani@gmail.com Wed Dec 12 17:49:30 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92D8B21F8AC7 for ; Wed, 12 Dec 2012 17:49:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.998 X-Spam-Level: X-Spam-Status: No, score=-0.998 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18uCckNNBRQy for ; Wed, 12 Dec 2012 17:49:30 -0800 (PST) Received: from mail-we0-f172.google.com (mail-we0-f172.google.com [74.125.82.172]) by ietfa.amsl.com (Postfix) with ESMTP id D717521F8AC6 for ; Wed, 12 Dec 2012 17:49:29 -0800 (PST) Received: by mail-we0-f172.google.com with SMTP id r3so654096wey.31 for ; Wed, 12 Dec 2012 17:49:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=j8Ikp83GjdmYWUrUNH4TxfLOYBhQnH9La1ExDebeNIQ=; b=MR3QyqmYyYv/axGcJJW4SXxGAj0E+eCcmWpGF9uPOTFam7eIs5JgLgB7hftBNHWzTZ 7reqzsFB4aDpFVpEE89uAiFt+8f35R8+ATFgrW5A1hQLsAuNmiAXCQ8i4xihn0lQpkzK 764ervO327M/S+MArZGzcOU4eeOdZeqtFYUzc8y2UR8yABJhr34454lc9ESx+bEv9UC4 1biI9oS2s5Xw5in9mwJZm1Ejz24UO/Broe85qEZVIubROIKMVJWU0fgjWF/UdH1ltP6t c8PiFYZ+qfuQNWiG6xrSmF/cYkPndiPh8ApTk1jm5R//1T1IpBOn2EpzlgkSn5Af8vlx Canw== MIME-Version: 1.0 Received: by 10.180.7.199 with SMTP id l7mr228739wia.15.1355363368939; Wed, 12 Dec 2012 17:49:28 -0800 (PST) Received: by 10.216.4.17 with HTTP; Wed, 12 Dec 2012 17:49:28 -0800 (PST) Date: Wed, 12 Dec 2012 20:49:28 -0500 Message-ID: Subject: Normas o Estandares de Auditoria sobre NGN From: Raul Villafani To: ipv6@ietf.org Content-Type: multipart/alternative; boundary=f46d0444049025b14e04d0b2207c X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 01:49:30 -0000 --f46d0444049025b14e04d0b2207c Content-Type: text/plain; charset=ISO-8859-1 Saludos, Si alguien tuviese conocimiento sobre Normas o Estandares de Auditoria que se apliquen a las Infraestructura de Redes de Nueva Generacion, Infraestructura de Telecomunicaciones, Redes de Nuevas Tecnologia, IP Multimedia Subsystem, Insfraestructura de Operadores de Telefonica Fija u Operadores de Moviles. Pueda copiarla a la Lista o mi email. Gracias Exitos y Feliz Navidad !!! raul.villafani@gmail.com --f46d0444049025b14e04d0b2207c Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Saludos,
Si alguien tuviese conocimiento=A0sobre Normas o Es= tandares de Auditoria que se apliquen a las Infraestructura de Redes de Nue= va Generacion, Infraestructura de Telecomunicaciones, Redes de Nuevas Tecno= logia, IP Multimedia Subsystem, Insfraestructura de Operadores de Telefonic= a Fija u Operadores de=A0Moviles. Pueda copiarla a la Lista o mi email. =A0= Gracias
Exitos y Feliz Navidad !!!
r= aul.villafani@gmail.com
--f46d0444049025b14e04d0b2207c-- From jiangsheng@huawei.com Wed Dec 12 19:41:46 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5232F21F869F; Wed, 12 Dec 2012 19:41:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.399 X-Spam-Level: X-Spam-Status: No, score=-6.399 tagged_above=-999 required=5 tests=[AWL=-0.100, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4gS9dooOJ3vi; Wed, 12 Dec 2012 19:41:45 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id C44AC21F861E; Wed, 12 Dec 2012 19:41:44 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml204-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id AML08775; Thu, 13 Dec 2012 03:41:43 +0000 (GMT) Received: from LHREML402-HUB.china.huawei.com (10.201.5.241) by lhreml204-edg.china.huawei.com (172.18.7.223) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 13 Dec 2012 03:40:29 +0000 Received: from SZXEML415-HUB.china.huawei.com (10.82.67.154) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 13 Dec 2012 03:41:17 +0000 Received: from SZXEML545-MBS.china.huawei.com ([169.254.2.174]) by szxeml415-hub.china.huawei.com ([10.82.67.154]) with mapi id 14.01.0323.003; Thu, 13 Dec 2012 11:41:11 +0800 From: Sheng Jiang To: =?utf-8?B?T2xlIFRyw7hhbg==?= , Xiayangsong Subject: RE: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: Ac3TeMv/pnhXVKXKQIm8jrwjt/ulh///z9SA//alzmCAEprOAP//ea5QgACPBoCAABz4AIAAhJwA//7lmZA= Date: Thu, 13 Dec 2012 03:41:10 +0000 Message-ID: <5D36713D8A4E7348A7E10DF7437A4B9239FD46D6@szxeml545-mbs.china.huawei.com> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> In-Reply-To: <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> Accept-Language: en-GB, zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.111.98.140] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 03:41:46 -0000 Pj4gSSBhbSBhIGxpdHRsZSBiaXQgY29uZnVzZWQgd2hhdCB3ZSBhcmUgdGFsa2luZyBhYm91dC4N Cj4+IE91ciBkcmFmdCBpcyBuZWNlc3Nhcnkgd2hlbiB0aGVyZSBpcyBubyBTTEFBQy4NCj4+DQo+ PiBDb3VsZCB5b3UgZWxhYm9yYXRlIHlvdXIgdmlld3BvaW50cz8NCj4NCj50aGUgUElPIG9wdGlv biBpbiBSQSBoYXMgc2V2ZXJhbCBmdW5jdGlvbnMuDQo+DQo+MSkgd2l0aCB0aGUgQS1mbGFnIG9u LCBpdCBpcyB1c2VkIGJ5IFNMQUFDLg0KPjIpIHdpdGggdGhlIEwtZmxhZyBvbiwgaXQgaXMgdXNl ZCBmb3Igb25saW5rIGRldGVybWluYXRpb24gKHByZWZpeCBkaXNjb3ZlcnkpLg0KPg0KPiJ3aGVu IHRoZXJlIGlzIG5vIFNMQUFDIiBkb2VzIHRoYXQgbWVhbj8NCj4gLSB0aGVyZSBpcyBubyBSQQ0K PiAtIHRoZXJlIGlzIGFuIGVtcHR5IFJBIChubyBQSU8pDQo+IC0gdGhlIFBJTyBoYXMgQS1mbGFn IG9mZg0KPg0KPmlmIEkgdW5kZXJzdGFuZCB5b3VyIGRyYWZ0IGNvcnJlY3RseSwgeW91IHdhbnQg YSBESENQdjYgYWx0ZXJuYXRpdmUgdG8gdGhlIFJBDQo+UElPIG9wdGlvbi4NCj5nZW5lcmFsbHkg d2UgdHJ5IHRvIGF2b2lkIGR1cGxpY2F0ZSBtZWNoYW5pc21zLCBzbyBjb3VsZCB5b3UgcGxlYXNl IGdpdmUgYQ0KPnVzZSBjYXNlPw0KDQpJZiB0aGUgY3VycmVudCBmb3JtIG9mIG91ciBkcmFmdCBt aXNsZWFkZWQgeW91LCB3ZSBjYW4gbW9kaWZ5IG91ciBkcmFmdCBpbiBmdXR1cmUgdmVyc2lvbi4g T3VyIG1vdGl2YXRpb24gaXMgdGhlc2UgdHdvIHNjZW5hcmlvcyB5b3Ugc3RhdGVkLiANCg0KLSB0 aGVyZSBpcyBubyBSQQ0KLSB0aGVyZSBpcyBhbiBlbXB0eSBSQSAobm8gUElPKQ0KDQpCZXN0IHJl Z2FyZHMsDQoNClNoZW5nDQoNCj5jaGVlcnMsDQo+T2xlDQo= From fgont@si6networks.com Wed Dec 12 19:47:44 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C03B121F88A0 for ; Wed, 12 Dec 2012 19:47:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JEsK89V-jC1P for ; Wed, 12 Dec 2012 19:47:43 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 60BE621F8890 for ; Wed, 12 Dec 2012 19:47:43 -0800 (PST) Received: from [186.134.22.212] (helo=[192.168.123.127]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TizlS-0003QJ-8D; Thu, 13 Dec 2012 04:47:14 +0100 Message-ID: <50C94FBA.4000808@si6networks.com> Date: Thu, 13 Dec 2012 00:47:06 -0300 From: Fernando Gont Organization: SI6 Networks User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian Hamacher Subject: Re: MAC Address Tracking References: In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 03:47:44 -0000 On 12/11/2012 07:04 PM, Brian Hamacher wrote: > I am looking for a good way to track my users MAC Addresses. I have a > test DHCPv6 server up and running ISC 4.1.1-P1. When I look through my > DHCP logs as well as my leases file I do not see the client MAC Address > anywhere. Do I need to enable an option to allow this to be logged? I > am looking to figure out how I can track what user had what IP Address > at any given time. The MAC Address is traditionally how I have done this. You may want to try ipv6mon: Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From xiayangsong@huawei.com Wed Dec 12 16:19:14 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47F9A21F8A52; Wed, 12 Dec 2012 16:19:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.099 X-Spam-Level: X-Spam-Status: No, score=-6.099 tagged_above=-999 required=5 tests=[AWL=0.200, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FzpHAoM3tfgG; Wed, 12 Dec 2012 16:19:13 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id C483A1F0CB9; Wed, 12 Dec 2012 16:19:12 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id ANU03688; Thu, 13 Dec 2012 00:19:11 +0000 (GMT) Received: from LHREML404-HUB.china.huawei.com (10.201.5.218) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 13 Dec 2012 00:18:19 +0000 Received: from SZXEML407-HUB.china.huawei.com (10.82.67.94) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 13 Dec 2012 08:19:10 +0800 Received: from SZXEML539-MBS.china.huawei.com ([169.254.5.165]) by szxeml407-hub.china.huawei.com ([10.82.67.94]) with mapi id 14.01.0323.003; Thu, 13 Dec 2012 08:19:00 +0800 From: Xiayangsong To: =?iso-8859-1?Q?Ole_Tr=F8an?= Subject: RE: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: AQHN2EcxfDSILmNF202OrnUCcojOD5gUWi2AgACiVvD///8/AIAA4CFw Date: Thu, 13 Dec 2012 00:19:00 +0000 Message-ID: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> In-Reply-To: <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.103.48] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Thu, 13 Dec 2012 00:11:36 -0800 Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 00:19:14 -0000 Hi Ole There is no ND at all, that is, no NA/NS/RA/RS etc. You can check the document Sheng sent out in previous emails. In WiMAX, DHCPv6 is mandatory while ND is optional. In a word, in some scenarios, DHCPv6 is the only way to configure IP address.=20 By the way, operators are more familiar to DHCP than ND,=20 and they get used to DHCP for address management. You are right that we should avoid duplicate mechanisms for the SAME scenario. However, this is different. Thanks Frank -----Original Message----- From: Ole Tr=F8an [mailto:otroan@employees.org]=20 Sent: Thursday, December 13, 2012 2:48 AM To: Xiayangsong Cc: Sheng Jiang; WG; IPv6 List Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Hi, > I am a little bit confused what we are talking about. > Our draft is necessary when there is no SLAAC. >=20 > Could you elaborate your viewpoints? the PIO option in RA has several functions. 1) with the A-flag on, it is used by SLAAC. 2) with the L-flag on, it is used for onlink determination (prefix discover= y). "when there is no SLAAC" does that mean? - there is no RA - there is an empty RA (no PIO) - the PIO has A-flag off if I understand your draft correctly, you want a DHCPv6 alternative to the = RA PIO option. generally we try to avoid duplicate mechanisms, so could you please give a = use case? cheers, Ole From xiayangsong@huawei.com Wed Dec 12 16:25:19 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E0ED1F0CD2; Wed, 12 Dec 2012 16:25:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.999 X-Spam-Level: X-Spam-Status: No, score=-5.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_22=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BkVrNakhOK3F; Wed, 12 Dec 2012 16:25:19 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id 030701F0CC1; Wed, 12 Dec 2012 16:25:17 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id ANU03920; Thu, 13 Dec 2012 00:25:16 +0000 (GMT) Received: from LHREML403-HUB.china.huawei.com (10.201.5.217) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 13 Dec 2012 00:24:24 +0000 Received: from SZXEML454-HUB.china.huawei.com (10.82.67.197) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 13 Dec 2012 00:25:15 +0000 Received: from SZXEML539-MBS.china.huawei.com ([169.254.5.165]) by SZXEML454-HUB.china.huawei.com ([10.82.67.197]) with mapi id 14.01.0323.003; Thu, 13 Dec 2012 08:25:06 +0800 From: Xiayangsong To: Brian E Carpenter Subject: RE: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: AQHN2EcxfDSILmNF202OrnUCcojOD5gUWi2AgACiVvD//8rAgIABF/jw Date: Thu, 13 Dec 2012 00:25:05 +0000 Message-ID: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <50C8A559.8090103@gmail.com> In-Reply-To: <50C8A559.8090103@gmail.com> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.103.48] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Thu, 13 Dec 2012 00:11:37 -0800 Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 00:25:19 -0000 SGkgQnJpYW4NCg0KUHJvYmFibHksIEkgYW0gbWlzc2luZyBzb21ldGhpbmcuDQp3aGljaCBkb2N1 bWVudHMgc2F5ICIgYWxsIElQdjYgbm9kZXMgYXJlIHJlcXVpcmVkIHRvIHN1cHBvcnQgU0xBQUMg Ij8NCg0KSnVzdCBJIG1lbnRpb25lZCBpbiBwcmV2aW91cyBlbWFpbCwgU0xBQUMgaXMgb3B0aW9u YWwgV2lNQVggZGVwbG95bWVudC4NCg0KVGhhbmsNCkZyYW5rDQoNCi0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQpGcm9tOiBCcmlhbiBFIENhcnBlbnRlciBbbWFpbHRvOmJyaWFuLmUuY2FycGVu dGVyQGdtYWlsLmNvbV0gDQpTZW50OiBXZWRuZXNkYXksIERlY2VtYmVyIDEyLCAyMDEyIDExOjQw IFBNDQpUbzogWGlheWFuZ3NvbmcNCkNjOiBPbGUgVHLDuGFuOyBTaGVuZyBKaWFuZzsgPGRoY3dn QGlldGYub3JnPiBXRzsgSVB2NiBMaXN0DQpTdWJqZWN0OiBSZTogW2RoY3dnXSBSZXZpZXcgb2Yg ZHJhZnQgIlByZWZpeCBBc3NpZ25tZW50IGluIERIQ1B2NiINCg0KQnV0IGFsbCBJUHY2IG5vZGVz IGFyZSByZXF1aXJlZCB0byBzdXBwb3J0IFNMQUFDIGFuZCBhbGwNCnJvdXRlcnMgYXJlIHJlcXVp cmVkIHRvIGdlbmVyYXRlIFJBcy4gV2hhdCBpcyB0aGUgbWVhbmluZw0Kb2YgIm5vIFNMQUFDIj8N Cg0KUmVnYXJkcw0KICAgQnJpYW4NCg0KT24gMTIvMTIvMjAxMiAxMDo1MywgWGlheWFuZ3Nvbmcg d3JvdGU6DQo+IEhpIE9sZQ0KPiANCj4gSSBhbSBhIGxpdHRsZSBiaXQgY29uZnVzZWQgd2hhdCB3 ZSBhcmUgdGFsa2luZyBhYm91dC4NCj4gT3VyIGRyYWZ0IGlzIG5lY2Vzc2FyeSB3aGVuIHRoZXJl IGlzIG5vIFNMQUFDLg0KPiANCj4gQ291bGQgeW91IGVsYWJvcmF0ZSB5b3VyIHZpZXdwb2ludHM/ DQo+IA0KPiBUaGFua3MNCj4gRnJhbmsNCj4gDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQo+IEZyb206IGRoY3dnLWJvdW5jZXNAaWV0Zi5vcmcgW21haWx0bzpkaGN3Zy1ib3VuY2VzQGll dGYub3JnXSBPbiBCZWhhbGYgT2YgT2xlIFRyP2FuDQo+IFNlbnQ6IFdlZG5lc2RheSwgRGVjZW1i ZXIgMTIsIDIwMTIgNToxMCBQTQ0KPiBUbzogU2hlbmcgSmlhbmcNCj4gQ2M6IDxkaGN3Z0BpZXRm Lm9yZz4gV0c7IElQdjYgTGlzdA0KPiBTdWJqZWN0OiBSZTogW2RoY3dnXSBSZXZpZXcgb2YgZHJh ZnQgIlByZWZpeCBBc3NpZ25tZW50IGluIERIQ1B2NiINCj4gDQo+IFNoZW5nLA0KPiANCj4+Pj4+ IEkgdGhpbmsgdGhlIGFyZ3VtZW50IGdpdmVuIGluIHRoZSBkcmFmdCBmb3Igb3BlcmF0b3JzIHdh bnRpbmcgYQ0KPj4+Pj4gREhDUHY2LW1hbmFnZWQgbmV0d29yayB3aXRob3V0IE5EIGlzIGZsYXdl ZC4NCj4+Pj4+IE5EIGlzIHJlcXVpcmVkIGZvciByb3V0ZXIgZGlzY292ZXJ5LCBuZWlnaGJvdXIg ZGlzY292ZXJ5IGV0YyBhbnl3YXkuIGFuZCBhDQo+Pj4+PiByb3V0ZXIgb24gdGhlIGxpbmsgbXVz dCBiZSBjb25maWd1cmVkDQo+Pj4+PiB3aXRoIHRoZSBvbmxpbmsgcHJlZml4IHJlZ2FyZGxlc3Mu DQo+Pj4+Pg0KPj4+Pj4gd2hpbGUgd2UgY2FuIGNsZWFybHkgbWFrZSB0aGlzIHdvcmssIEkgZG9u J3QgdGhpbmsgaXQgaXMganVzdGlmaWVkIHRvIGNyZWF0ZSBhDQo+Pj4+PiBkdXBsaWNhdGUgbWVj aGFuaXNtIGZvciBwcmVmaXggZGlzY292ZXJ5Lg0KPj4+Pj4gc2VjdGlvbiAzLjIgUkZDMTk1OC4N Cj4+Pj4gSGksIE9sZSwNCj4+Pj4NCj4+Pj4gQXNzdW1pbmcgYWxsIG5ldHdvcmtzIGFyZSB1c2lu ZyBTTEFBQyBpcyBub3QgcmlnaHQuDQo+Pj4+DQo+Pj4+IEluIFdpTUFYIE5XRyBJUHY2IHNwZWMs IFJldmlzaW9uIDYsIHNlZSB0aGUgYXR0YWNobWVudC4NCj4+Pj4NCj4+Pj4gU3RhdGVmdWwgKERI Q1B2NikgYWRkcmVzcyBjb25maWd1cmF0aW9uIGlzIHN1cHBvcnRlZC4NCj4+Pj4gQ2hlY2sgU2Vj dGlvbnMgNS4xMS4xMS40IGFuZCA1LjExLjEyLjIuDQo+Pj4+DQo+Pj4+IEFsc28sIEJCRiBkb2N1 bWVudCBUUi0xNzcgc3VwcG9ydHMgc3RhdGVmdWwgYWRkcmVzcyBjb25maWd1cmF0aW9uIHVzaW5n DQo+Pj4gREhDUHY2LCBjaGVjayBTZWN0aW9uIDQuMi4NCj4+Pj4gSSBhbHNvIGtub3cgYSBmZXcg SVNQIGRlc2lyZSB0byB1c2UgREhDUHY2IGluIHRoZWlyIG5ldHdvcmtzLg0KPj4+IEkgbWFrZSBu byBhc3N1bXB0aW9uIHRoYXQgYWxsIG5ldHdvcmtzIGFyZSB1c2luZyBTTEFBQyBmb3IgYWRkcmVz cw0KPj4+IGFzc2lnbm1lbnQuDQo+Pj4NCj4+PiB0aGVyZSBpcyBubyBjb25mbGljdCBiZXR3ZWVu IHVzaW5nIE5EIGZvciBwcmVmaXggYXNzaWdubWVudCBhbmQgREhDUHY2IGZvcg0KPj4+IGFkZHJl c3MgYXNzaWdubWVudC4NCj4+IFNvLCBob3cgY2FuIHlvdSBnZXQgaG9zdCBnZW5lcmF0ZWQgYWRk cmVzc2VzLCBsaWtlIEVVSTY0IGFkZHJlc3MsIENHQSwgb3IgUHJpdmFjeSBhZGRyZXNzPyBQYXJ0 aWN1bGFyIGZvciBDR0EsIGhvc3QgaGFzIHRvIGdldCBwcmVmaXggZmlyc3QsIHRoZW4gdXNlIHBy ZWZpeCBhcyBwYXJ0IG9mIGlucHV0IHRvIGdlbmVyYXRlIGhvc3QgaWRlbnRpZmllci4NCj4+DQo+ PiBPciB5b3UgYXJlIHNheWluZyBpbiBESENQdjYtbWFuYWdlZCBuZXR3b3JrLCB5b3Ugc3RpbGwg dXNlIE5EIHRvIGFzc2lnbiBwcmVmaXguIEkgZG9uJ3QgdGhpbmsgdGhhdCBkZXBsb3ltZW50IGlz IGdvb2QgaWRlYS4NCj4gDQo+IHRoYXQncyBob3cgdGhlIElQdjYgcHJvdG9jb2xzIGFyZSBkZXNp Z25lZC4gZnJvbSB0aGUgYmVnaW5uaW5nLiB0aGF0J3MgaG93IGFsbCBESENQdjYgbWFuYWdlZCBu ZXR3b3JrcyBydW4gdG9kYXkuDQo+IEkgZG9uJ3Qgc2VlIHRoZSBwcm9ibGVtPw0KPiANCj4gY2hl ZXJzLA0KPiBPbGUNCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+IGRoY3dnIG1haWxpbmcgbGlzdA0KPiBkaGN3Z0BpZXRmLm9yZw0KPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RoY3dnDQo+IC0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ IElFVEYgSVB2NiB3b3JraW5nIGdyb3VwIG1haWxpbmcgbGlzdA0KPiBpcHY2QGlldGYub3JnDQo+ IEFkbWluaXN0cmF0aXZlIFJlcXVlc3RzOiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2lwdjYNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo= From brian.e.carpenter@gmail.com Thu Dec 13 00:12:55 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 849B221F8562 for ; Thu, 13 Dec 2012 00:12:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.464 X-Spam-Level: X-Spam-Status: No, score=-101.464 tagged_above=-999 required=5 tests=[AWL=-0.073, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pZLIattsgfNi for ; Thu, 13 Dec 2012 00:12:55 -0800 (PST) Received: from mail-wi0-f180.google.com (mail-wi0-f180.google.com [209.85.212.180]) by ietfa.amsl.com (Postfix) with ESMTP id B964321F8561 for ; Thu, 13 Dec 2012 00:12:54 -0800 (PST) Received: by mail-wi0-f180.google.com with SMTP id hj13so1297636wib.13 for ; Thu, 13 Dec 2012 00:12:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=MHdrLV6X2M11MgePl5J+H74B/ujnP7ix9L4djw+5Zv4=; b=FqzN/kxEHHagVBD4Nz+SEO8J0+OcwhRRZ1k6P1nHhAEjskzYJwQRTYtHfHP1qrAF+K t29QKKnqX8P7y/yP/BNe9TU3rQsbb2qZ/6Po+OzmuoFEj5XtjV2z08A51Uobt7BszOgx /d4RVa2UVvodSSpz8iAz94F7l7RTcPnrq3wSv7dhOPY1pND5bY8DIzWXtEz/l3DaZNqx rAmEYb71Imco8VneLjYhcyNOLiZi14oa7+g7e76LWHLZuCg+9md1DsOkAyVPgFVVe7O2 +rCL0HlNEX5f2njrdPpNQegKTUcwZ69PxozUjS82mZlnYDBrLnbe33t82bUlzachy1cm 3TQQ== Received: by 10.180.78.1 with SMTP id x1mr27107421wiw.17.1355386373913; Thu, 13 Dec 2012 00:12:53 -0800 (PST) Received: from [192.168.1.65] (host-2-102-216-160.as13285.net. [2.102.216.160]) by mx.google.com with ESMTPS id s10sm1307322wiw.4.2012.12.13.00.12.52 (version=SSLv3 cipher=OTHER); Thu, 13 Dec 2012 00:12:53 -0800 (PST) Message-ID: <50C98E23.3020400@gmail.com> Date: Thu, 13 Dec 2012 08:13:23 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: =?UTF-8?B?T2xlIFRyw7hhbg==?= Subject: Re: u/g in general [was Mail from softwire working group about 4rd] References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> <50C86E63.2050305@gmail.com> <19CC3860-8914-4FFA-BAF9-C680A0B52F57@employees.org> In-Reply-To: <19CC3860-8914-4FFA-BAF9-C680A0B52F57@employees.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: 6man , Bob Hinden , Suresh Krishnan , softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 08:12:55 -0000 On 12/12/2012 21:32, Ole Tr=C3=B8an wrote: >> I think the only way to make progress on this question is to >> discuss two points in a much more general way: >> >> 1. Does the current mapping of the "u" bit in the modified EUI format = have any value? >> >> 2. Does the current mapping of the "g" bit in the modified EUI format = have any value? >> >> If the answer to these questions is "no" we could start by saying that= they >> are *not* mapped from an IEEE EUI into a modified EUI, and then consid= er >> how to use them in future. >=20 > or we could consider the interface-id as 64 bits without any implied me= aning attached to > any of the bits. We could certainly discuss that, but first I'd like to understand if the = mapping of the u/g bits into layer 3 addresses has any value in practice. I believe it's true that the u bit has no value for ILNP. At one point th= ere was a thought that it had potential value for 8+8. Maybe Ran Atkinson can com= ment. Does the g bit have any value in multicast? (Obviously it has value in th= e MAC address, but here we are talking about the IP address.) Brian From otroan@employees.org Thu Dec 13 00:13:49 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25C0221F8AA2; Thu, 13 Dec 2012 00:13:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T+xaDjJxF5gj; Thu, 13 Dec 2012 00:13:48 -0800 (PST) Received: from ams-iport-4.cisco.com (ams-iport-4.cisco.com [144.254.224.147]) by ietfa.amsl.com (Postfix) with ESMTP id E7DD421F889E; Thu, 13 Dec 2012 00:13:47 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkgIAGmNyVCQ/khR/2dsb2JhbABFg0i7KBZzgh4BAQQBeQULC0ZXBogeBr46kC1hA6ZRgnQ X-IronPort-AV: E=Sophos;i="4.84,273,1355097600"; d="scan'208";a="10416934" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-4.cisco.com with ESMTP; 13 Dec 2012 08:13:46 +0000 Received: from dhcp-lys01-vla250-10-147-112-51.cisco.com (dhcp-lys01-vla250-10-147-112-51.cisco.com [10.147.112.51]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBD8Djnn027981 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 13 Dec 2012 08:13:46 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: Date: Thu, 13 Dec 2012 09:13:45 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <51B09765-C765-45D5-8AA6-D24ADB72D558@employees.org> To: Xiayangsong X-Mailer: Apple Mail (2.1499) Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 08:13:49 -0000 > There is no ND at all, that is, no NA/NS/RA/RS etc. the document you references states that ND is used like for any other = IPv6 link. where do you get the "no ND" from? as a thought experiment, how would a link without ND function? how do you do router discovery, and address resolution? > You can check the document Sheng sent out in previous > emails. In WiMAX, DHCPv6 is mandatory while ND is optional. > In a word, in some scenarios, DHCPv6 is the only way > to configure IP address.=20 can you give me the reference in the document. as far as I can see it = states no such thing. what it does mention is "prefix management" on the AR. for that you can = use IA_PD. > By the way, operators are more familiar to DHCP than ND,=20 > and they get used to DHCP for address management. no-one is saying that you cannot use DHCPV6 address management. that is already supported with todays specifications. > You are right that we should avoid duplicate mechanisms > for the SAME scenario. However, this is different. I may be somewhat dense, could someone else try to explain to me what = the scenario is? cheers, Ole= From otroan@employees.org Thu Dec 13 00:24:41 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFA5A21F8B03 for ; Thu, 13 Dec 2012 00:24:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u25lg3oAZs+6 for ; Thu, 13 Dec 2012 00:24:40 -0800 (PST) Received: from ams-iport-3.cisco.com (ams-iport-3.cisco.com [144.254.224.146]) by ietfa.amsl.com (Postfix) with ESMTP id D67AC21F8AC7 for ; Thu, 13 Dec 2012 00:24:39 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkgIAD+QyVCQ/khL/2dsb2JhbABFg0i7KBZzgh4BAQQBOj8FCwtGVwaIHga+QIxmg0dhA6ZRgnSBbA X-IronPort-AV: E=Sophos;i="4.84,273,1355097600"; d="scan'208";a="10406822" Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-3.cisco.com with ESMTP; 13 Dec 2012 08:24:27 +0000 Received: from dhcp-lys01-vla250-10-147-112-51.cisco.com (dhcp-lys01-vla250-10-147-112-51.cisco.com [10.147.112.51]) by ams-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qBD8OQkB018201 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 13 Dec 2012 08:24:26 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: u/g in general [was Mail from softwire working group about 4rd] From: =?iso-8859-1?Q?Ole_Tr=F8an?= In-Reply-To: <50C98E23.3020400@gmail.com> Date: Thu, 13 Dec 2012 09:24:25 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> <50C86E63.2050305@gmail.com> <19CC3860-8914-4FFA-BAF9-C680A0B52F57@employees.org> <50C98E23.3020400@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Cc: 6man , Bob Hinden , Suresh Krishnan , softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 08:24:41 -0000 Brian, >>> I think the only way to make progress on this question is to >>> discuss two points in a much more general way: >>>=20 >>> 1. Does the current mapping of the "u" bit in the modified EUI = format have any value? >>>=20 >>> 2. Does the current mapping of the "g" bit in the modified EUI = format have any value? >>>=20 >>> If the answer to these questions is "no" we could start by saying = that they >>> are *not* mapped from an IEEE EUI into a modified EUI, and then = consider >>> how to use them in future. >>=20 >> or we could consider the interface-id as 64 bits without any implied = meaning attached to >> any of the bits. >=20 > We could certainly discuss that, but first I'd like to understand if = the mapping > of the u/g bits into layer 3 addresses has any value in practice. >=20 > I believe it's true that the u bit has no value for ILNP. At one point = there was > a thought that it had potential value for 8+8. Maybe Ran Atkinson can = comment. that's my reading of ILNP as well. the interface-id must be unique = within your locator set, but that's no different than how IPv6 works today. > Does the g bit have any value in multicast? (Obviously it has value in = the MAC address, > but here we are talking about the IP address.) as far as I know, none of our implementations do anything based on the = values of the u/g bits. cheers, Ole= From brian.e.carpenter@gmail.com Thu Dec 13 00:29:45 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2483721F8AAC; Thu, 13 Dec 2012 00:29:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.312 X-Spam-Level: X-Spam-Status: No, score=-101.312 tagged_above=-999 required=5 tests=[AWL=-0.221, BAYES_00=-2.599, J_CHICKENPOX_22=0.6, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l-eynbS85vrF; Thu, 13 Dec 2012 00:29:44 -0800 (PST) Received: from mail-wi0-f174.google.com (mail-wi0-f174.google.com [209.85.212.174]) by ietfa.amsl.com (Postfix) with ESMTP id 037EB21F8AB4; Thu, 13 Dec 2012 00:29:43 -0800 (PST) Received: by mail-wi0-f174.google.com with SMTP id hm9so3771187wib.13 for ; Thu, 13 Dec 2012 00:29:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=ulizwNKN3+JX0ewN3LU4Nu9sC8FIUiy3fTpdODWvAQU=; b=w1Lj1pJooFhnaANJLSE1jpymp7YO9/bHQQfN407K6CBr2/hJ8UfGccOFZ85MB1M4Wn Ze/iSE3ZSYnDaaiI11kG0Ypc45xGbuUOZ1JwIurVKLB6a6gvBP8Ks766X9VAhr6Zr3gS WNVZFIF5U8L0m6kcBdUakF8wbyM+9CMxRhIWFmpBuhfVngXQLk6fyhKQ2/LhsAwDbNd9 61GqnfgsrfZwL9C3iNsOTNmsSCXQVWPmSQ4AmT0MkNaOj+xQ32UtfCkn2SkgrIZCT4yd Z0hYbSJDFbdTaTZLIFj6f0JALRyzLlLsIeHhILGhvURm5U8Zw4yC/hQkoCKD6hpLgNoU HX1A== Received: by 10.180.104.136 with SMTP id ge8mr1570334wib.2.1355387383181; Thu, 13 Dec 2012 00:29:43 -0800 (PST) Received: from [192.168.1.65] (host-2-102-216-160.as13285.net. [2.102.216.160]) by mx.google.com with ESMTPS id fv2sm6684644wib.4.2012.12.13.00.29.40 (version=SSLv3 cipher=OTHER); Thu, 13 Dec 2012 00:29:41 -0800 (PST) Message-ID: <50C99213.7070000@gmail.com> Date: Thu, 13 Dec 2012 08:30:11 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Xiayangsong Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <50C8A559.8090103@gmail.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 08:29:45 -0000 Frank, On 13/12/2012 00:25, Xiayangsong wrote: > Hi Brian >=20 > Probably, I am missing something. > which documents say " all IPv6 nodes are required to support SLAAC "? RFC 6434 says this: 5.9.2. IPv6 Stateless Address Autoconfiguration - RFC 4862 Hosts MUST support IPv6 Stateless Address Autoconfiguration as defined in [RFC4862]. Configuration of static address(es) may be supported as well. Nodes that are routers MUST be able to generate link-local addresses as described in [RFC4862]. =2E.. 12. Router-Specific Functionality =2E.. 12.2. Neighbor Discovery for IPv6 - RFC 4861 Sending Router Advertisements and processing Router Solicitations MUST be supported. It seems clear to me that SLAAC and RA are required functionalities. If you can justify a scenario where RAs do not include PIO, you can justify your proposal. But you cannot say there is no SLAAC. > Just I mentioned in previous email, SLAAC is optional WiMAX deployment.= That is another problem. Brian >=20 > Thank > Frank >=20 > -----Original Message----- > From: Brian E Carpenter [mailto:brian.e.carpenter@gmail.com]=20 > Sent: Wednesday, December 12, 2012 11:40 PM > To: Xiayangsong > Cc: Ole Tr=C3=B8an; Sheng Jiang; WG; IPv6 List > Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" >=20 > But all IPv6 nodes are required to support SLAAC and all > routers are required to generate RAs. What is the meaning > of "no SLAAC"? >=20 > Regards > Brian >=20 > On 12/12/2012 10:53, Xiayangsong wrote: >> Hi Ole >> >> I am a little bit confused what we are talking about. >> Our draft is necessary when there is no SLAAC. >> >> Could you elaborate your viewpoints? >> >> Thanks >> Frank >> >> -----Original Message----- >> From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] On Behalf= Of Ole Tr?an >> Sent: Wednesday, December 12, 2012 5:10 PM >> To: Sheng Jiang >> Cc: WG; IPv6 List >> Subject: Re: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" >> >> Sheng, >> >>>>>> I think the argument given in the draft for operators wanting a >>>>>> DHCPv6-managed network without ND is flawed. >>>>>> ND is required for router discovery, neighbour discovery etc anywa= y. and a >>>>>> router on the link must be configured >>>>>> with the onlink prefix regardless. >>>>>> >>>>>> while we can clearly make this work, I don't think it is justified= to create a >>>>>> duplicate mechanism for prefix discovery. >>>>>> section 3.2 RFC1958. >>>>> Hi, Ole, >>>>> >>>>> Assuming all networks are using SLAAC is not right. >>>>> >>>>> In WiMAX NWG IPv6 spec, Revision 6, see the attachment. >>>>> >>>>> Stateful (DHCPv6) address configuration is supported. >>>>> Check Sections 5.11.11.4 and 5.11.12.2. >>>>> >>>>> Also, BBF document TR-177 supports stateful address configuration u= sing >>>> DHCPv6, check Section 4.2. >>>>> I also know a few ISP desire to use DHCPv6 in their networks. >>>> I make no assumption that all networks are using SLAAC for address >>>> assignment. >>>> >>>> there is no conflict between using ND for prefix assignment and DHCP= v6 for >>>> address assignment. >>> So, how can you get host generated addresses, like EUI64 address, CGA= , or Privacy address? Particular for CGA, host has to get prefix first, t= hen use prefix as part of input to generate host identifier. >>> >>> Or you are saying in DHCPv6-managed network, you still use ND to assi= gn prefix. I don't think that deployment is good idea. >> that's how the IPv6 protocols are designed. from the beginning. that's= how all DHCPv6 managed networks run today. >> I don't see the problem? >> >> cheers, >> Ole >> >> _______________________________________________ >> dhcwg mailing list >> dhcwg@ietf.org >> https://www.ietf.org/mailman/listinfo/dhcwg >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >> From despres.remi@laposte.net Thu Dec 13 01:13:52 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3F6621F86D9 for ; Thu, 13 Dec 2012 01:13:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.833 X-Spam-Level: X-Spam-Status: No, score=-1.833 tagged_above=-999 required=5 tests=[AWL=0.116, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ov18gK-6FM2O for ; Thu, 13 Dec 2012 01:13:52 -0800 (PST) Received: from smtp25.services.sfr.fr (smtp25.services.sfr.fr [93.17.128.119]) by ietfa.amsl.com (Postfix) with ESMTP id D546521F86D6 for ; Thu, 13 Dec 2012 01:13:51 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2506.sfr.fr (SMTP Server) with ESMTP id A2F1A7000062; Thu, 13 Dec 2012 10:13:41 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2506.sfr.fr (SMTP Server) with ESMTP id D6EDE700005C; Thu, 13 Dec 2012 10:13:40 +0100 (CET) X-SFR-UUID: 20121213091340880.D6EDE700005C@msfrf2506.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: u/g in general [was Mail from softwire working group about 4rd] From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50C98E23.3020400@gmail.com> Date: Thu, 13 Dec 2012 10:13:40 +0100 Message-Id: <215FF909-023E-4CA1-A81B-F4FA66693D4F@laposte.net> References: <50C71109.5080205@gmail.com> <55BD00A3-5941-44D8-B3AC-A20C7DADA41E@laposte.net> <70CCE683-9251-47A1-96E5-16420A010B50@laposte.net> <50C86E63.2050305@gmail.com> <19CC3860-8914-4FFA-BAF9-C680A0B52F57@employees.org> <50C98E23.3020400@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man , Bob Hinden , Suresh Krishnan , softwire-chairs@tools.ietf.org, int-ads@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 09:13:52 -0000 Le 2012-12-13 =E0 09:13, Brian E Carpenter = a =E9crit : > On 12/12/2012 21:32, Ole Tr=F8an wrote: >>> I think the only way to make progress on this question is to >>> discuss two points in a much more general way: >>>=20 >>> 1. Does the current mapping of the "u" bit in the modified EUI = format have any value? >>>=20 >>> 2. Does the current mapping of the "g" bit in the modified EUI = format have any value? >>>=20 >>> If the answer to these questions is "no" we could start by saying = that they >>> are *not* mapped from an IEEE EUI into a modified EUI, and then = consider >>> how to use them in future. >>=20 >> or we could consider the interface-id as 64 bits without any implied = meaning attached to >> any of the bits. >=20 > We could certainly discuss that, but first I'd like to understand if = the mapping > of the u/g bits into layer 3 addresses has any value in practice. >=20 > I believe it's true that the u bit has no value for ILNP. At one point = there was > a thought that it had potential value for 8+8. Maybe Ran Atkinson can = comment. >=20 > Does the g bit have any value in multicast? (Obviously it has value in = the MAC address, > but here we are talking about the IP address.) IPv6 unicast addresses having the group bit set to 1 *already exist* = (with the privacy option where all bits other than u=3D0 can take any = values).=20 It is therefore ONLY the IPv6-address multicast prefix that determines = that an IPv6 address is multicast. (In my understanding, this doesn't depend on any original thoughts about = possible other uses of the g bit.) Another point is that, in RFC 4291, interface IDs are introduced ONLY = for unicast addresses. For multicast addresses, what is introduced is = Group IDs.=20 IPv6 group IDs have no link, in any RFC that I know, with IIDs. (And = even less with modified EUI-64).=20 RD >=20 > Brian >=20 From raimis@litnet.lt Thu Dec 13 01:53:50 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5C4B21F8AA2 for ; Thu, 13 Dec 2012 01:53:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TUtQX0COp3Om for ; Thu, 13 Dec 2012 01:53:50 -0800 (PST) Received: from mx-1.ktu.lt (mx-1.ktu.lt [IPv6:2001:778::61]) by ietfa.amsl.com (Postfix) with ESMTP id DE42121F8AA0 for ; Thu, 13 Dec 2012 01:53:49 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mx-1.ktu.lt (Postfix) with ESMTP id 8E39F37BC1; Thu, 13 Dec 2012 11:53:47 +0200 (EET) X-Virus-Scanned: amavisd-new at mx-1.ktu.lt Received: from mx-1.ktu.lt ([127.0.0.1]) by localhost (mx-1.ktu.lt [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id lOMMn99T9Jpr; Thu, 13 Dec 2012 11:53:47 +0200 (EET) Received: from varnys.litnet.lt (varnys.litnet.lt [193.219.61.86]) by smtp.ktu.lt (Postfix) with ESMTP id 2844D37BB1; Thu, 13 Dec 2012 11:53:46 +0200 (EET) Received: by varnys.litnet.lt (Postfix, from userid 33) id D0AE712297; Thu, 13 Dec 2012 11:53:46 +0200 (EET) Received: from vpn-gw.ktu.lt (vpn-gw.ktu.lt [193.219.170.65]) by pastas.ktu.lt (Horde Framework) with HTTP; Thu, 13 Dec 2012 11:53:46 +0200 Date: Thu, 13 Dec 2012 11:53:46 +0200 Message-ID: <20121213115346.Horde.4u5NaYZ9ZXxQyaWqxGwH8rA@pastas.ktu.lt> From: Raimundas Tuminauskas To: Brian Hamacher Subject: Re: MAC Address Tracking References: In-Reply-To: User-Agent: Internet Messaging Program (IMP) H4 (5.0.9) Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes MIME-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 09:53:50 -0000 Dear Brian, you might want to try https://github.com/fln/addrwatch it works the similar way as arpwatch, and is independent from any software (keeps track of privacy extensions, slaac, etc.) and as such has its own advantaged and downsides. /Raimundas Brian Hamacher ra=C5=A1=C4=97: > I am looking for a good way to track my users MAC Addresses. I have a > test DHCPv6 server up and running ISC 4.1.1-P1. When I look through my > DHCP logs as well as my leases file I do not see the client MAC Address > anywhere. Do I need to enable an option to allow this to be logged? I > am looking to figure out how I can track what user had what IP Address > at any given time. The MAC Address is traditionally how I have done > this. > > > > Any thoughts would be appreciated. > > > > Thank You > > > > Brian sincerely, Raimundas Tuminauskas KTU ITPI / LITNET NOC From despres.remi@laposte.net Thu Dec 13 02:49:02 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65AFD21F899B for ; Thu, 13 Dec 2012 02:49:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.846 X-Spam-Level: X-Spam-Status: No, score=-1.846 tagged_above=-999 required=5 tests=[AWL=0.103, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iqlPu5E9LYys for ; Thu, 13 Dec 2012 02:49:01 -0800 (PST) Received: from smtp24.services.sfr.fr (smtp24.services.sfr.fr [93.17.128.81]) by ietfa.amsl.com (Postfix) with ESMTP id BCE2721F8997 for ; Thu, 13 Dec 2012 02:49:01 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2402.sfr.fr (SMTP Server) with ESMTP id F3B3A700004E; Thu, 13 Dec 2012 11:48:59 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2402.sfr.fr (SMTP Server) with ESMTP id B89787000056; Thu, 13 Dec 2012 11:48:59 +0100 (CET) X-SFR-UUID: 20121213104859756.B89787000056@msfrf2402.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: u/g in general [was Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Thu, 13 Dec 2012 11:48:59 +0100 Message-Id: References: <1C819002-BAAC-4581-9E28-AEE01D43A393@gmail.com> <8E6C367D-5556-427C-A05D-F38DDE7EB8C9@laposte.net> To: Ran Atkinson X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 10:49:02 -0000 2012-12-12 18:26, Ran Atkinson : >=20 > On 12 Dec 2012, at 12:21 , R=E9mi Despr=E9s wrote: >> Do you know any deployment with u=3Dg=3D1 in this context ? =20 >=20 > There is limited use today of IPv6 addresses that have > apparent unicast routing prefixes, but contain multicast > group IDs in the low-order 64-bits ("IID"). Is this in the context of ILNP? If yes, could you point to a particular point of the specification? Thanks, RD >=20 > Yours, >=20 > Ran >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From despres.remi@laposte.net Thu Dec 13 07:46:54 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC24121F8B44 for ; Thu, 13 Dec 2012 07:46:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.856 X-Spam-Level: X-Spam-Status: No, score=-1.856 tagged_above=-999 required=5 tests=[AWL=0.093, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fcAFHQfSDHNf for ; Thu, 13 Dec 2012 07:46:54 -0800 (PST) Received: from smtp25.services.sfr.fr (smtp25.services.sfr.fr [93.17.128.119]) by ietfa.amsl.com (Postfix) with ESMTP id D598421F8B3B for ; Thu, 13 Dec 2012 07:46:53 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2508.sfr.fr (SMTP Server) with ESMTP id CEB227000042; Thu, 13 Dec 2012 16:46:52 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2508.sfr.fr (SMTP Server) with ESMTP id 8B8217000072; Thu, 13 Dec 2012 16:46:52 +0100 (CET) X-SFR-UUID: 20121213154652571.8B8217000072@msfrf2508.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <9ECFEE48-07B4-4311-A00B-75DE816B2B11@gmail.com> Date: Thu, 13 Dec 2012 16:46:52 +0100 Message-Id: <177B6FAB-928F-483E-9334-397DB26FAA10@laposte.net> References: <194C5159-AFC3-4B11-AF33-5E47005529DD@gmail.com> <5E1D29D9-2718-4104-A8A6-482B4A646E99@laposte.net> <9ECFEE48-07B4-4311-A00B-75DE816B2B11@gmail.com> To: RJ Atkinson X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 15:46:55 -0000 2012-12-12 18:38, RJ Atkinson : >=20 > On 12 Dec 2012, at 12:14 , R=E9mi Despr=E9s wrote: >> In any case, IIDs for multicast addresses are out of scope for the = IPv6 addressing architecture of RFC 4291. >=20 > Disagree. It is clear that RFC-4291 has reserved=20 > the use of G=3D=3DU=3D=3D1 for multicast identifiers. Different understanding. >=20 >> An important point to be noted is that, in the translation direction >> from EUI-64 of IEEE to modified EUI-64 of IETF, the proposed format >> implies no change at all. >=20 > It *breaks* the reverse mapping, however, whereas today > the *bi-directional* mapping works reliably. Reverse mapping, whose use I still don't see, cannot work the privacy = option of RFC 4941: with it, individual IIDs can have g=3D1 while = remaining those of unicast addresses. >> In other words, reserving a /8 IID prefix for 4rd (and possibly >> some others for new types of unicast addresses) won't prevent >> from using IEEE-based IIDs with u=3Dg=3D1 for multicast. >=20 > Incorrect. =20 >=20 > As a trivial example, one can use a unicast routing prefix=20 > to specify an RP location, along with a multicast group-id > (so that the RP knows to multicast RPF the packet). This > has the potential to reduce the state required in inter-domain=20 > routers, to give an example of why this approach can be useful. I suppose you implicitly refer to the ILNS of RFC 6740. As said in the RFC itself, I-LVs of ILNS and IPv6 addresses are "*not* = equivalent".=20 In particular, I-LVs contain "Node" IDs where IPv6 addresses contain = "Interface" IDs. In any case, it remains unclear why, in I-LVs starting with the /64 of = unicast addresses, it would be useful to permit the group bit to be set = in their node IDs. Explanation welcome. =20 =20 > ... Regards, RD= From brian@innovationslab.net Thu Dec 13 10:57:21 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B03CB21F897F for ; Thu, 13 Dec 2012 10:57:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.586 X-Spam-Level: X-Spam-Status: No, score=-102.586 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6xXGAHepoEtg for ; Thu, 13 Dec 2012 10:57:20 -0800 (PST) Received: from uillean.fuaim.com (uillean.fuaim.com [206.197.161.140]) by ietfa.amsl.com (Postfix) with ESMTP id 7FA3321F88E4 for ; Thu, 13 Dec 2012 10:57:14 -0800 (PST) Received: from clairseach.fuaim.com (clairseach-high.fuaim.com [206.197.161.158]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by uillean.fuaim.com (Postfix) with ESMTP id 6DF1988180; Thu, 13 Dec 2012 10:57:14 -0800 (PST) Received: from clemson.local (c-69-140-213-249.hsd1.md.comcast.net [69.140.213.249]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by clairseach.fuaim.com (Postfix) with ESMTP id 17523140039; Thu, 13 Dec 2012 10:57:13 -0800 (PST) Message-ID: <50CA2508.1030003@innovationslab.net> Date: Thu, 13 Dec 2012 13:57:12 -0500 From: Brian Haberman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: 6man WG , draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org Subject: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 18:57:21 -0000 All, I have performed my initial AD review of this draft. The following are my comments on the content. I am open to discussing these in order to move this document forward... Substantive ---------------- * It would be quite useful to explicitly define "atomic fragment" prior to using it in the document. This could be done in the Introduction in a formal manner and the use of "atomic fragments" in the Abstract can be re-worded. * The Introduction needs to provide more motivation as to why we should allow these atomic fragments to exist. Please provide the rationale discussed on the mailing list about how v4/v6 translators use the fragmentation information. * The core source of this attack is that some implementations have predictable algorithms for generating the Fragmentation ID, allowing attackers to launch these types of attacks. It would be good to reference that work in this draft as well. * What is the purpose of the indented paragraph within the first bullet of the list in section 2? Is it a quote from one of the two referenced RFCs? * It is not clear to me why the document spends much time on discussing ICMP-based attacks on the source of traffic, especially ones that ignore existing RFCs, when the issue is really with devices that don't do the right thing on the receiving end. * I am rather disappointed with the Security Considerations section given that this draft is addressing a perceived security vulnerability. In fact, I would like to ask the WG if the solution actually creates an attack vector on receiving hosts. An on-device path could modify packets with Fragmentation headers by setting Offset=0 and M=0. This would cause the receiver to blindly treat the packet as an atomic and pass it up to the upper-layer protocol. Is this an acceptable risk? Obviously, packets protected by IPsec would be immune to this attack. At a minimum, the Security Considerations should spend some time discussing the potential new attacks based on these rules. Editorial ------------ - Abstract * s/IPv6 specification allows/IPv6 specifications allow/ - Introduction * s/[RFC2460] allowed/[RFC2460] allows/ * s/[RFC5722] forbid/[RFC5722] forbids/ * Provide a forward pointer to Appendix A in paragraph 4 Regards, Brian From bs7652@att.com Thu Dec 13 11:27:07 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1554C21F8846; Thu, 13 Dec 2012 11:27:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8UAnTFRNC4n5; Thu, 13 Dec 2012 11:27:06 -0800 (PST) Received: from nbfkord-smmo07.seg.att.com (nbfkord-smmo07.seg.att.com [209.65.160.93]) by ietfa.amsl.com (Postfix) with ESMTP id 3BDA921F8667; Thu, 13 Dec 2012 11:27:06 -0800 (PST) Received: from unknown [144.160.20.146] (EHLO nbfkord-smmo07.seg.att.com) by nbfkord-smmo07.seg.att.com(mxl_mta-6.11.0-12) with ESMTP id a0c2ac05.2aab0225c940.453519.00-567.1261473.nbfkord-smmo07.seg.att.com (envelope-from ); Thu, 13 Dec 2012 19:27:06 +0000 (UTC) X-MXL-Hash: 50ca2c0a09d3238b-6d15147e8af72d4655d5b1f489505111db3f4804 Received: from unknown [144.160.20.146] (EHLO mlpd194.enaf.sfdc.sbc.com) by nbfkord-smmo07.seg.att.com(mxl_mta-6.11.0-12) over TLS secured channel with ESMTP id 60c2ac05.0.453505.00-350.1261436.nbfkord-smmo07.seg.att.com (envelope-from ); Thu, 13 Dec 2012 19:27:03 +0000 (UTC) X-MXL-Hash: 50ca2c0765614c46-07f4fd332b63e88fb0c1a4362bfa9ae3275495f6 Received: from enaf.sfdc.sbc.com (localhost.localdomain [127.0.0.1]) by mlpd194.enaf.sfdc.sbc.com (8.14.5/8.14.5) with ESMTP id qBDJR1Rs007380; Thu, 13 Dec 2012 14:27:02 -0500 Received: from sflint04.pst.cso.att.com (sflint04.pst.cso.att.com [144.154.234.231]) by mlpd194.enaf.sfdc.sbc.com (8.14.5/8.14.5) with ESMTP id qBDJQt8P007328 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 13 Dec 2012 14:26:56 -0500 Received: from GAALPA1MSGHUB9E.ITServices.sbc.com (gaalpa1msghub9e.itservices.sbc.com [130.8.36.91]) by sflint04.pst.cso.att.com (RSA Interceptor); Thu, 13 Dec 2012 14:26:40 -0500 Received: from GAALPA1MSGUSR9L.ITServices.sbc.com ([130.8.36.69]) by GAALPA1MSGHUB9E.ITServices.sbc.com ([130.8.36.91]) with mapi id 14.02.0318.001; Thu, 13 Dec 2012 14:26:40 -0500 From: "STARK, BARBARA H" To: Xiayangsong Subject: RE: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Topic: [dhcwg] Review of draft "Prefix Assignment in DHCPv6" Thread-Index: AQHN2EXWVDPM6W64WEumU0LX6nT9sJgVNB6AgAAc+ACAAFAegIAAkqqAgACHiYCAABCYoA== Date: Thu, 13 Dec 2012 19:26:40 +0000 Message-ID: <2D09D61DDFA73D4C884805CC7865E611302168ED@GAALPA1MSGUSR9L.ITServices.sbc.com> References: <5D36713D8A4E7348A7E10DF7437A4B9239FCFF2E@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3DDE@szxeml545-mbs.china.huawei.com> <5D36713D8A4E7348A7E10DF7437A4B9239FD3FF0@szxeml545-mbs.china.huawei.com> <0181F4E0-D1FC-42B9-8C80-8B57FCF88CF5@employees.org> <50C8A559.8090103@gmail.com> <50C99213.7070000@gmail.com> In-Reply-To: <50C99213.7070000@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [130.10.171.52] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)] X-MAIL-FROM: X-SOURCE-IP: [144.160.20.146] X-AnalysisOut: [v=2.0 cv=TO3yvSZa c=1 sm=0 a=Qs8R1XBwmid1qBFB/a8mmA==:17 a] X-AnalysisOut: [=W74e7bWCSRAA:10 a=ILal01uo-soA:10 a=ofMgfj31e3cA:10 a=BLc] X-AnalysisOut: [eEmwcHowA:10 a=IkcTkHD0fZMA:10 a=zQP7CpKOAAAA:8 a=XIqpo32R] X-AnalysisOut: [AAAA:8 a=794P58EulqsA:10 a=Lqza4clpX3661RfRwiUA:9 a=QEXdDO] X-AnalysisOut: [2ut3YA:10] Cc: " WG" , IPv6 List X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 19:27:07 -0000 PiBKdXN0IEkgbWVudGlvbmVkIGluIHByZXZpb3VzIGVtYWlsLCBTTEFBQyBpcyBvcHRpb25hbCBX aU1BWCBkZXBsb3ltZW50Lg0KDQpUaGUgYXR0ZW1wdCB0byBjcmVhdGUgYW4gYWNjZXNzIG5ldHdv cmsgd2l0aG91dCBSQS9SUyBpcyBub3RoaW5nIG5ldy4NCk90aGVyIChlLmcuLCBEU0wsIFBPTikg YWNjZXNzIG5ldHdvcmsgdGVjaG5vbG9naWVzIGhhdmUgY29uc2lkZXJlZCB0aGlzIGFuZCBkZXRl cm1pbmVkIHRoYXQgdGhlIGJpZ2dlc3QgbWlzc2luZyBwaWVjZSBpcyByb3V0ZSBpbmZvLiBXaGlj aCBpcyB0aGUgcmVhc29uIGJlaGluZCBkcmFmdC1pZXRmLW1pZi1kaGNwdjYtcm91dGUtb3B0aW9u LiBCdXQgb24gcG9pbnQtdG8tcG9pbnQgbGlua3MgaXQgaXMgcG9zc2libGUgdG8gYXNzdW1lIHRo ZSBuZXh0IGhvcCwgc28gdGhhdCByb3V0ZSBpbmZvIGlzbid0IG5lZWRlZC4gQSBzb2x1dGlvbiB3 aXRob3V0IFJBIGlzIHNpbXBsZSBvbiBwb2ludC10by1wb2ludCBsaW5rcy4NCg0KSSBiZWxpZXZl IHRoZSBleGlzdGluZyBhZGRyZXNzIGFuZCBwcmVmaXggREhDUHY2IG9wdGlvbnMgYXJlIHN1ZmZp Y2llbnQgdG8gc3VwcG9ydCB3aGF0IHlvdSBzZWVtIHRvIGJlIHRyeWluZyB0byBkby4gVW5sZXNz IHRoZSBnb2FsIGlzIHRvIGJlIGFibGUgdG8gc2hhcmUgYSBzaW5nbGUgcHJlZml4IGFtb25nIG11 bHRpcGxlIFdpTUFYIGVuZHBvaW50cz8gSSdtIG5vdCBmYW1pbGlhciB3aXRoIHByZWZpeCBzaGFy aW5nIGFjcm9zcyBwb2ludC10by1wb2ludCBjb25uZWN0aW9ucywgc28gSSdtIGd1ZXNzaW5nIHRo ZSBleHBlY3RhdGlvbiBpcyBvbmUgLzY0IHByZWZpeCBwZXIgV2lNQVggZW5kcG9pbnQ/DQogDQpJ biB3aGljaCBjYXNlLCBpdCB3b3VsZCBhcHBlYXIgdGhhdCBhIGhvc3QgY291bGQgcmVxdWVzdCBh IC82NCBJQV9QRCwgYW5kIHRoZW4gdXNlIHRoYXQgcHJlZml4IGZvciB3aGF0ZXZlciBpdCB3YW50 ZWQuIFRoZSBob3N0IGRvZXNuJ3QgaGF2ZSB0byBiZSBhIHJvdXRlciwgb3Igb2ZmZXIgdGhlIHBy ZWZpeCB0byBhbnkgb3RoZXIgaG9zdC4gSXQgY2FuIGNyZWF0ZSBhbnkgYWRkcmVzc2VzIGl0IHdh bnRzIGZvciBpdHNlbGYuIEluIHRoZSBDRSBSb3V0ZXIgKFJGQyA2MjA0KSByZXF1aXJlbWVudHMs IHRoZSAidW5udW1iZXJlZCIgbW9kZWwgaXMgYWxyZWFkeSBkZXNjcmliZWQsIHdoZXJlIHRoZSBS QSBjb250YWlucyBubyAiQSIgcHJlZml4IGFuZCBubyBJQV9OQSBpcyBvZmZlcmVkOyBzbyBpdCB0 YWtlcyBhZGRyZXNzZXMgZm9yIGl0c2VsZiBmcm9tIHRoZSBJQV9QRC4gWW91ciBwcm9wb3NhbCBz ZWVtcyB0byBiZSBleGFjdGx5IHRoaXMsIHdpdGggdGhlIG9ubHkgZGlmZmVyZW5jZSBiZWluZyB0 aGF0IHRoZSBDRSByb3V0ZXIgZG9lcyB0cnkgdG8gYWxzbyBvZmZlciB0aGUgSUFfUEQgcHJlZml4 IG9uIGl0cyBMQU4uIEJ1dCBzaW5jZSB0aGVyZSdzIG5vdGhpbmcgcG9saWNpbmcgdGhpcyAodGhl IGFjY2VzcyBuZXR3b3JrIGhhcyBubyBjbHVlIHdoYXQgdXNlIHRoZSBJQV9QRCBpcyBwdXQgdG8p LCB0aGVyZSdzIG5vdGhpbmcgdG8gcHJldmVudCB0aGUgaG9zdCBmcm9tIGp1c3Qga2VlcGluZyB0 aGUgZW50aXJlIElBX1BEIGZvciBpdHNlbGYuIFdoeSBkb2VzIHRoaXMgbm90IG1lZXQgeW91ciBu ZWVkPw0KDQpGb3IgYSBXaU1BWC1kZWZpbmVkIGVuZHBvaW50IHVzaW5nIElBX1BEIHdvdWxkIGJl IG5vIG1vcmUgZGlmZmljdWx0IHRoYXQgd2hhdCB5b3UgYXJlIHByb3Bvc2luZy4gSW4gZmFjdCwg aXQgd291bGQgYmUgcHJldHR5IG11Y2ggdGhlIHNhbWUuIEZvciB0aGUgREhDUHY2IHNlcnZlciBp dCB3b3VsZCBiZSBzaW1wbGVyLCBiZWNhdXNlIHRoZSBzZXJ2ZXIgd291bGQgbm90IG5lZWQgdG8g aGF2ZSBkaWZmZXJlbnQgb3B0aW9ucyB0aGF0IGZ1bmN0aW9uIGlkZW50aWNhbGx5IChmcm9tIHRo ZSBzZXJ2ZXIncyBwZXJzcGVjdGl2ZSkuIFRoZSBESENQdjYgc2VydmVyIHRydWx5IGRvZXMgbm90 IGNhcmUgd2hhdCB1c2UgdGhlIElBX1BEIHByZWZpeCBpcyBwdXQgdG8sIG9yIHdoZXRoZXIgdGhl IHJlcXVlc3RpbmcgREhDUHY2IGNsaWVudCBpcyByZWFsbHkgYSAicmVxdWVzdGluZyByb3V0ZXIi IG9yIGp1c3QgYSBkZXZpY2Ugd2hvIHdhbnRzIGEgcHJlZml4IGFsbCB0byBpdHNlbGYuDQpCYXJi YXJhDQo= From rja.lists@gmail.com Thu Dec 13 11:58:36 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6510621F886B for ; Thu, 13 Dec 2012 11:58:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N4CMsfw2umgZ for ; Thu, 13 Dec 2012 11:58:36 -0800 (PST) Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id D214F21F8867 for ; Thu, 13 Dec 2012 11:58:35 -0800 (PST) Received: by mail-vc0-f172.google.com with SMTP id fw7so2920907vcb.31 for ; Thu, 13 Dec 2012 11:58:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; bh=b8cD7RDjP+OaBUk8wXWSlW5MdVJEPYLCp1D0wJMw3yE=; b=i4lJ/pSB99b4U1lsI/cqOMKn5D98swCoJEmd8VxX7HG2OIDfxCMU3xodtgs9efHL9u fRMoTGovglDzeaH+1jpMaTpiUw3CrDJvEv/f+ImeLCIZq9MymcmjHT70IXrtor28b2ES Ti3/GiqD+P8VhlElDUjMXWs3KmFqRE/bfPBWyVTyJ2+eQb0dG37ZWjvDMvY/aQL1vXXw 65EzE9/XAeiWAWpVlDJyEPGLSWCqvANgBcQoMTiC8fHol2U+EtD+GmLiXwQYAYnyjgVu YSFn6l8QFEJXXpdr3XB0hC8uFVi1vHgLMYjFaqwgo0AVK6wutqtteOxV440Dt251yR/P ESzQ== Received: by 10.220.153.201 with SMTP id l9mr5488253vcw.33.1355428715169; Thu, 13 Dec 2012 11:58:35 -0800 (PST) Received: from [10.30.20.13] (pool-74-110-100-136.nrflva.fios.verizon.net. [74.110.100.136]) by mx.google.com with ESMTPS id ko19sm1740108veb.1.2012.12.13.11.58.33 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 13 Dec 2012 11:58:34 -0800 (PST) From: RJ Atkinson Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: u/g in general [was Mail from softwire working group about 4rd] Date: Thu, 13 Dec 2012 14:58:32 -0500 Message-Id: <505AB8A6-86CF-460E-8C15-BA77B46FA315@gmail.com> To: ipv6@ietf.org Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 19:58:36 -0000 Aside: I'm departing on travel today, and will be offline for several days. I apologise in advance for the brevity of this note, but I lack time to write a longer note. Earlier Brian Carpenter wrote: > I believe it's true that the u bit has no value for ILNP. > At one point there was a thought that it had potential value > for 8+8. Maybe Ran Atkinson can comment. The U bit does have value for ILNP. The ILNP RFCs do specifically mention the U bit, and also the G bit. There are also published ILNP papers (e.g. JSAC paper circa page 1321) that reference this, and (in some cases) provide more context on deployment scenarios and operational usage than the plain specifications do. The G bit also does have value, particularly when translating between IEEE 802 and IPv6 (or ILNPv6) -- which is/can-be a bi-directional translation. So the translation and mapping between/with IEEE EUI-64s does have value for both IEEE 802/1394 and also for IP/ILNP. Yours, Ran From rja.lists@gmail.com Thu Dec 13 12:05:49 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA21021F8AF4 for ; Thu, 13 Dec 2012 12:05:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OVTdIElRRpQk for ; Thu, 13 Dec 2012 12:05:49 -0800 (PST) Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id 2923121F8AF3 for ; Thu, 13 Dec 2012 12:05:49 -0800 (PST) Received: by mail-vc0-f172.google.com with SMTP id fw7so2930911vcb.31 for ; Thu, 13 Dec 2012 12:05:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; bh=MzCJY5Arax9CNj3qyg5Ifn5ez/9gebqV5SV8TvkDGv8=; b=iNquuxD+chjsnM+ifqUUHWFekZZQe8DJG6kAfGlDKfnIncMLwYhGhnWYMbG/Q+/fXW 958CnDJ5CQT2WOMBZ2lXLem6a6M1Ao9GZSs22+GYdvqlEFbhpCSgY8qn6onYguf2vU7h 9lewwSclRfBRton8RXR0we0faIzFDsoznw91dqTDWJp+k9lZDq8FZ5vvr7FuLrMaVBR7 cvWaFvwpB5mDnfv+iUTOp/VAhv+S+UAI5eHm0VjEi3y5BjAYAUZI90zeiu2ZhAL5cZYB PfqGL9sxnnBkKbNZ11KtaInLQwal1Or511IBdp/hFukQMvxc2Lf4Gngg+XYftqe/8wr1 FQ+Q== Received: by 10.221.11.205 with SMTP id pf13mr5372171vcb.70.1355429148579; Thu, 13 Dec 2012 12:05:48 -0800 (PST) Received: from [10.30.20.13] (pool-74-110-100-136.nrflva.fios.verizon.net. [74.110.100.136]) by mx.google.com with ESMTPS id gl6sm1738811vec.4.2012.12.13.12.05.46 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 13 Dec 2012 12:05:47 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Apple Message framework v1283) Subject: Re: Mail from softwire working group about 4rd From: RJ Atkinson In-Reply-To: <177B6FAB-928F-483E-9334-397DB26FAA10@laposte.net> Date: Thu, 13 Dec 2012 15:05:45 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <5D052607-7734-47B8-8B71-ABDD51CF86F2@gmail.com> References: <194C5159-AFC3-4B11-AF33-5E47005529DD@gmail.com> <5E1D29D9-2718-4104-A8A6-482B4A646E99@laposte.net> <9ECFEE48-07B4-4311-A00B-75DE816B2B11@gmail.com> <177B6FAB-928F-483E-9334-397DB26FAA10@laposte.net> To: ipv6@ietf.org X-Mailer: Apple Mail (2.1283) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 20:05:49 -0000 On 13 Dec 2012, at 10:46 , R=E9mi Despr=E9s wrote: > Reverse mapping, whose use I still don't see, > cannot work the privacy option of RFC 4941 It still works fine, because the scope bit=20 is set to local scope for the RFC-4941 uses (RFC-4941, Section 3.2.1, Step 3). Under IEEE 802 rules, as best I understand them, all bets are off once the scope bit has been set to local. If the 4RD folks want to do something special when (U=3D=3D0), as far as I know there aren't any issues. It is the=20 apparent insistence upon changing the semantics of=20 the (U=3D=3D1) and (G=3D=3D1) combination that is problematic. Yours, Ran PS: I'm now offline due to travel, and expect to be offline for several days. From despres.remi@laposte.net Fri Dec 14 03:02:32 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 088ED21F871F for ; Fri, 14 Dec 2012 03:02:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.865 X-Spam-Level: X-Spam-Status: No, score=-1.865 tagged_above=-999 required=5 tests=[AWL=0.085, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rZzWUFtmLk6r for ; Fri, 14 Dec 2012 03:02:31 -0800 (PST) Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.10]) by ietfa.amsl.com (Postfix) with ESMTP id 48DA321F8711 for ; Fri, 14 Dec 2012 03:02:30 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2204.sfr.fr (SMTP Server) with ESMTP id AA1437000098; Fri, 14 Dec 2012 12:02:29 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2204.sfr.fr (SMTP Server) with ESMTP id 6A4B47000087; Fri, 14 Dec 2012 12:02:29 +0100 (CET) X-SFR-UUID: 20121214110229435.6A4B47000087@msfrf2204.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Mail from softwire working group about 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <5D052607-7734-47B8-8B71-ABDD51CF86F2@gmail.com> Date: Fri, 14 Dec 2012 12:02:28 +0100 Message-Id: References: <194C5159-AFC3-4B11-AF33-5E47005529DD@gmail.com> <5E1D29D9-2718-4104-A8A6-482B4A646E99@laposte.net> <9ECFEE48-07B4-4311-A00B-75DE816B2B11@gmail.com> <177B6FAB-928F-483E-9334-397DB26FAA10@laposte.net> <5D052607-7734-47B8-8B71-ABDD51CF86F2@gmail.com> To: RJ Atkinson X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Dec 2012 11:02:32 -0000 2012-12-13 21:05, RJ Atkinson : >=20 > On 13 Dec 2012, at 10:46 , R=E9mi Despr=E9s wrote: >> Reverse mapping, whose use I still don't see, >> cannot work the privacy option of RFC 4941 >=20 > It still works fine, because the scope bit=20 > is set to local scope for the RFC-4941 uses > (RFC-4941, Section 3.2.1, Step 3). >=20 > Under IEEE 802 rules, as best I understand them, > all bets are off once the scope bit has been set > to local. In IEEE, g=3D1 always specifies that the MAC address is a group address, = BOTH for universal and local scopes.=20 > If the 4RD folks want to do something special when (U=3D=3D0), > as far as I know there aren't any issues. =20 This wouldn't work because 4rd needs a guarantee that its IIDs differ = from those of the privacy option. > It is the=20 > apparent insistence upon changing the semantics of=20 > the (U=3D=3D1) and (G=3D=3D1) combination that is problematic. The proposal is only to use the u=3Dg=3D1 pattern (never used so far in = IIDs of unicast addresses) as the escape pattern permitting to specify = new IID types (for IPv6 unicast addresses): - u=3D0 =3D> all other bits have any values (privacy option) - u=3D1 and g=3D0 =3D> all other bits comply with IEEE EUI-64 - u=3Dg=3D1 =3D> all other bits have an IETF defined format, determined = by an IID type whose pattern is registered by IANA. Regards, RD PS: Note that, to simultaneously run ILNP and 4rd in a site with a = guarantee that they won't interfere, it is sufficient that ILNP node IDs = are without u=3Dg=3D1. Each experiment thus deals with its exclusive = addresses its own way. =20 >=20 > Yours, >=20 > Ran >=20 >=20 > PS: I'm now offline due to travel, and expect to be > offline for several days. >=20 >=20 >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From bob.hinden@gmail.com Mon Dec 17 05:25:08 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 574C721F8A59 for ; Mon, 17 Dec 2012 05:25:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9Y1quOoXPXEu for ; Mon, 17 Dec 2012 05:25:07 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id 8AD8D21F8A51 for ; Mon, 17 Dec 2012 05:25:07 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id w11so2742216bku.31 for ; Mon, 17 Dec 2012 05:25:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :cc:to:mime-version:x-mailer; bh=i3RATMypVnHFd1TvmUYcAGFrDQtvyfzXQ44G+3RMgDQ=; b=GDXFaSFPcwLFmWc6+I3ykNbAkN8DaomIEhT3PnDvku1/bZ6gEdAem1VFpIY3m9Mgq/ RcfN+uLXqYCVsO5PAHZ8CFv0R9wqRcEJ+f+rZoYysvG4OtP/JjAxzCci1skt2f8dqtiO ffjNJYQVmr8Z240/IsyAbD1BLQYZbyUrcbGcpxdBePp2Xi5RfDGqAbWG847Mdj4a0QrA AqbUuknjs4r9ZOLXTLxBlnBHDtxJdcwe/5lQ6dmWkV6jEfGpPM0qJA3fyuhSmGt8kLcb sZzx0nUDdeawOdh5fxqvEMjPiwOc4jaDe5oqrsTBnuIK/3SiaO8QQf4FyhobZMhffE2J BqKw== Received: by 10.204.129.214 with SMTP id p22mr5857783bks.47.1355750706677; Mon, 17 Dec 2012 05:25:06 -0800 (PST) Received: from [172.24.250.200] (dyn32-131.checkpoint.com. [194.29.32.131]) by mx.google.com with ESMTPS id i20sm9337236bkw.5.2012.12.17.05.25.04 (version=SSLv3 cipher=OTHER); Mon, 17 Dec 2012 05:25:06 -0800 (PST) From: Bob Hinden Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Subject: 6MAN WG Last Call: Date: Mon, 17 Dec 2012 15:25:00 +0200 Message-Id: <52C0977E-F8C2-4977-864D-78311FDE50C9@gmail.com> To: "ipv6@ietf.org Mailing List" Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) Cc: Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2012 13:25:08 -0000 All, This message starts a three week (to account for the holidays) 6MAN = Working Group on advancing: Title : A method for Generating Stable = Privacy-Enhanced Addresses with IPv6 Stateless Address Autoconfiguration (SLAAC) Author(s) : Fernando Gont Filename : = draft-ietf-6man-stable-privacy-addresses-01.txt Pages : 17 Date : 2012-10-07 = http://datatracker.ietf.org/doc/draft-ietf-6man-stable-privacy-addresses/ as a Proposed Standard. Substantive comments and statements of support = for advancing this document should be directed to the mailing list. = Editorial suggestions can be sent to the author. This last call will = end on 7 January 2013. The chairs would also like to solicit a few people to do a detailed = review of this document. Please contact the chairs directly. Regards, Bob Hinden & Ole Tr=F8an=20 From rafiee@hpi.uni-potsdam.de Mon Dec 17 05:48:03 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2ECC621F87D0 for ; Mon, 17 Dec 2012 05:48:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.788 X-Spam-Level: X-Spam-Status: No, score=-0.788 tagged_above=-999 required=5 tests=[AWL=1.461, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EwsF3QYaDJBC for ; Mon, 17 Dec 2012 05:48:02 -0800 (PST) Received: from mail3.hpi.uni-potsdam.de (mail3.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17b]) by ietfa.amsl.com (Postfix) with ESMTP id 77B1621F8555 for ; Mon, 17 Dec 2012 05:48:01 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail3.hpi.uni-potsdam.de (Postfix) with ESMTP id 69199169E7B; Mon, 17 Dec 2012 14:48:00 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Mon, 17 Dec 2012 14:47:59 +0100 From: "Rafiee, Hosnieh" To: Bob Hinden Date: Mon, 17 Dec 2012 14:47:58 +0100 Subject: RE: 6MAN WG Last Call: Thread-Topic: 6MAN WG Last Call: Thread-Index: Ac3cWf913vJXMHUZRY+yVRKrI/tSvQAAR/YQ Message-ID: References: <52C0977E-F8C2-4977-864D-78311FDE50C9@gmail.com> In-Reply-To: <52C0977E-F8C2-4977-864D-78311FDE50C9@gmail.com> Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2012 13:48:03 -0000 Hello, I have one question regarding this draft What is the main difference of your approach with RFC 3972 and 4941? As explained in section 3 of this draft, F() is a cryptography algorithm. I= n both ,privacy extension and RFC 3972 (if sec value is 0), discussed almos= t the same approach as you described here, One of the input might only be d= ifferent.=20 Moreover, in security consideration you explained that a node can generate = the same IID if it goes to other network. But it depends on the approach us= ed in RFC 4941. So, If a node uses CGA, it will not generate the same IID = as before. Also in RFC 4941 talked about the stable storage that prevent th= e node generates the same IID as it compare it with the previous generated = values. Thank you, Hosnieh -----Original Message----- From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of Bob= Hinden Sent: Montag, 17. Dezember 2012 14:25 To: ipv6@ietf.org Mailing List Cc: Bob Hinden Subject: 6MAN WG Last Call: All, This message starts a three week (to account for the holidays) 6MAN Working= Group on advancing: Title : A method for Generating Stable Privacy-Enhanced Addresse= s with IPv6 Stateless Address Autoconfiguration (SLAAC) Author(s) : Fernando Gont Filename : draft-ietf-6man-stable-privacy-addresses-01.txt Pages : 17 Date : 2012-10-07 http://datatracker.ietf.org/doc/draft-ietf-6man-stable-privacy-addre= sses/ as a Proposed Standard. Substantive comments and statements of support for= advancing this document should be directed to the mailing list. Editorial= suggestions can be sent to the author. This last call will end on 7 Janua= ry 2013. The chairs would also like to solicit a few people to do a detailed review = of this document. Please contact the chairs directly. Regards, Bob Hinden & Ole Tr=F8an=20 -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 -------------------------------------------------------------------- From rafiee@hpi.uni-potsdam.de Mon Dec 17 07:19:02 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 837F421F87C7 for ; Mon, 17 Dec 2012 07:19:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.081 X-Spam-Level: X-Spam-Status: No, score=-1.081 tagged_above=-999 required=5 tests=[AWL=1.169, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e0auCHDkR6Ze for ; Mon, 17 Dec 2012 07:19:02 -0800 (PST) Received: from mail2.hpi.uni-potsdam.de (mail2.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17a]) by ietfa.amsl.com (Postfix) with ESMTP id ED38021F87B6 for ; Mon, 17 Dec 2012 07:19:01 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail2.hpi.uni-potsdam.de (Postfix) with ESMTP id 0F5C2D2C98; Mon, 17 Dec 2012 16:18:58 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Mon, 17 Dec 2012 16:18:57 +0100 From: "Rafiee, Hosnieh" To: "ipv6@ietf.org" Date: Mon, 17 Dec 2012 16:18:56 +0100 Subject: FW: 6MAN WG Last Call: Thread-Topic: 6MAN WG Last Call: Thread-Index: Ac3cWf913vJXMHUZRY+yVRKrI/tSvQAAR/YQAAMno1A= Message-ID: Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "bob.hinden@gmail.com" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2012 15:19:02 -0000 Follow-up To clarify my question from my last email, I raise three important issues h= ere: 1 - The assumption made in this draft is not true because, according to RFC= 4941, the IID is randomly generated and so will never be the same value (T= he use of stable storage in the first approach and the use of CGA in the se= cond approach prevent the generation of the same value) 2 - It takes the same cryptographic approach as explained for CGA in RFC 39= 72 (sec value 0). The main reason for using CGA is because of the generatio= n of a random IID, regardless of ,whether or not, it is used in SEND. Now t= he real question is what are the differences between this algorithm and tho= se explained in RFC 3972 and RFC 4941? 3- the result of these false assumptions is that the possibility of attacks= is probable is false too. Thank you, Hosnieh -----Original Message----- From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of Bob= Hinden Sent: Montag, 17. Dezember 2012 14:25 To: ipv6@ietf.org Mailing List Cc: Bob Hinden Subject: 6MAN WG Last Call: All, This message starts a three week (to account for the holidays) 6MAN Working= Group on advancing: Title : A method for Generating Stable Privacy-Enhanced Addresse= s with IPv6 Stateless Address Autoconfiguration (SLAAC) Author(s) : Fernando Gont Filename : draft-ietf-6man-stable-privacy-addresses-01.txt Pages : 17 Date : 2012-10-07 http://datatracker.ietf.org/doc/draft-ietf-6man-stable-privacy-addre= sses/ as a Proposed Standard. Substantive comments and statements of support for= advancing this document should be directed to the mailing list. Editorial= suggestions can be sent to the author. This last call will end on 7 Janua= ry 2013. The chairs would also like to solicit a few people to do a detailed review = of this document. Please contact the chairs directly. Regards, Bob Hinden & Ole Tr=F8an=20 -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 -------------------------------------------------------------------- From fgont@si6networks.com Mon Dec 17 07:54:59 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A22421F8B10 for ; Mon, 17 Dec 2012 07:54:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.296 X-Spam-Level: X-Spam-Status: No, score=-2.296 tagged_above=-999 required=5 tests=[AWL=0.303, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XGjy2P2CSdCP for ; Mon, 17 Dec 2012 07:54:58 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 61D4821F8B0E for ; Mon, 17 Dec 2012 07:54:57 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.123.124]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tkd1O-0001VK-Q2; Mon, 17 Dec 2012 16:54:27 +0100 Message-ID: <50CF402E.80706@si6networks.com> Date: Mon, 17 Dec 2012 12:54:22 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian Haberman Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments References: <50CA2508.1030003@innovationslab.net> In-Reply-To: <50CA2508.1030003@innovationslab.net> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org, 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2012 15:54:59 -0000 Hi, Brian, Thanks so much for your feedback! -- Please find my comments inline... On 12/13/2012 03:57 PM, Brian Haberman wrote: > Substantive > ---------------- > > * It would be quite useful to explicitly define "atomic fragment" prior > to using it in the document. This could be done in the Introduction in > a formal manner and the use of "atomic fragments" in the Abstract can be > re-worded. How about this: * Change the first sentence of the Abstract to: "The IPv6 specification allows packets to contain a Fragment Header without the packet being actually fragmented into multiple pieces (we refer to these packets as "atomic fragments")." * Change the last sentence of the third para of "1. Introduction" to: "The resulting packets will thus *not* be actually fragmented into several pieces, but just include a Fragment Header with both the "Fragment Offset" and the "M" bit set to 0 (we refer to these packets as "atomic fragments")." * Have a new new section right after "Introduction", with the following contents: ---- cut here ---- 2. Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. IPv6 atomic fragments IPv6 packets that contain a Fragment Header with the Fragment Offset set to 0 and the M bit set to 0. ---- cut here ---- > * The Introduction needs to provide more motivation as to why we should > allow these atomic fragments to exist. Please provide the rationale > discussed on the mailing list about how v4/v6 translators use the > fragmentation information. How about incorporating this text as a parenthetical note (indented text) right after the third para of Section 1: "IPv6/IPv4 translators employ the Fragment Identification information found in the Fragment Header to select an appropriate Fragment Identification value for the resulting IPv4 fragments". > * The core source of this attack is that some implementations have > predictable algorithms for generating the Fragmentation ID, allowing > attackers to launch these types of attacks. It would be good to > reference that work in this draft as well. draft-gont-6man-predictable-fragment-id is referenced as "[PREDICTABLE-ID]" throughout this document. Is there anything I'm missing? > * What is the purpose of the indented paragraph within the first bullet > of the list in section 2? Is it a quote from one of the two referenced > RFCs? The bullet notes that some implementations fail to validate the ICMPv6 error messages. The indented text notes that it may be virtually impossible to do so (i.e., a clarification). > * It is not clear to me why the document spends much time on discussing > ICMP-based attacks on the source of traffic, especially ones that ignore > existing RFCs, when the issue is really with devices that don't do the > right thing on the receiving end. Because by means of ICMPv6-based attacks an attacker can *trigger* the use of IPv6 atomic fragments. Without such ability, an attacker could only leverage atomic fragments for communication flows that legitimately employ them. > * I am rather disappointed with the Security Considerations section > given that this draft is addressing a perceived security vulnerability. Well, the Sec Cons section is "as simple as it can be". I could certainly make it longer, if deemed appropriate... But I personally think that it says what it needs to say: this document eliminates the aforementioned attack vector. > In fact, I would like to ask the WG if the solution actually creates an > attack vector on receiving hosts. An on-device path could modify > packets with Fragmentation headers by setting Offset=0 and M=0. This > would cause the receiver to blindly treat the packet as an atomic and > pass it up to the upper-layer protocol. If the attacker is on path -- and essentially a man in the middle -- why would he bother to do this if he can simply blackhole the legtimate atomic-fragment, and create/send a new one? That said, it's simple: Since atomic-fragments are... atomic :-), you don't really need to wait for anything else to process them. This means that you do not need to mix atomic fragments with any other queued fragments, you do not need to queue the atomic fragments waiting for anything else, etc. This simplifies the processing, isolates atomic-fragment processing from any other packets, etc. I cannot really see how this could introduce a new attack vector. > Is this an acceptable risk? > Obviously, packets protected by IPsec would be immune to this attack. At > a minimum, the Security Considerations should spend some time discussing > the potential new attacks based on these rules. I fail to see the attack vector you're describing. i.e., this behaviour doesn't allow an attacker to do anything he couldn't do already... Am I missing something? And, if so, could you please elaborate? > - Introduction > * s/[RFC2460] allowed/[RFC2460] allows/ > * s/[RFC5722] forbid/[RFC5722] forbids/ > * Provide a forward pointer to Appendix A in paragraph 4 Will do. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From fgont@si6networks.com Mon Dec 17 08:31:58 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 877FF21F8B48 for ; Mon, 17 Dec 2012 08:31:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.357 X-Spam-Level: X-Spam-Status: No, score=-2.357 tagged_above=-999 required=5 tests=[AWL=0.242, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4D1iKy7RPdej for ; Mon, 17 Dec 2012 08:31:58 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id E443821F8795 for ; Mon, 17 Dec 2012 08:31:57 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.123.124]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TkdbR-0002TW-MU; Mon, 17 Dec 2012 17:31:52 +0100 Message-ID: <50CF48E8.10708@si6networks.com> Date: Mon, 17 Dec 2012 13:31:36 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Rafiee, Hosnieh" Subject: Re: FW: 6MAN WG Last Call: References: In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "bob.hinden@gmail.com" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2012 16:31:58 -0000 Hi, Hosnieh, Thanks so much for your feedback! Please find my comments inline... On 12/17/2012 12:18 PM, Rafiee, Hosnieh wrote: > Follow-up > > To clarify my question from my last email, I raise three important > issues here: > > 1 - The assumption made in this draft is not true because, according What's the "assumption" you're referring to? > 2 - It takes the same cryptographic approach as explained for CGA in > RFC 3972 (sec value 0). The main reason for using CGA is because of > the generation of a random IID, regardless of ,whether or not, it is > used in SEND. Now the real question is what are the differences > between this algorithm and those explained in RFC 3972 and RFC 4941? RFC4941 generates random addresses that change over time -- they are not stable within the same network. And they are generated *in addition* to the traditional SLAAC addresses. When it comes to CGAs, Some of them include: * draft-ietf-6man-stable-privacy-addresses is simpler, and has fewer requirements on the host. e.g., each host can use whatever hash algorithm they want, since no other host will need to "verify" the address. * The goal of CGAs is that you do have access to all the input materials to the hash function and know all of the implementation details, such that any node can regenerate/verify the IID. The goal of *stable-privacy-addresses is that you *cannot* generate the IIDs (hence we rely on a secret key). * It doesn't make much sense to use CGAs along with Privacy addresses (RFC4941) -- or else an attacker would always use RFC4941, such that hosts cannot verify the CGAs. OTOH, *stable-privacy-addresses are orthogonal to RFC 4941. > 3- the result of these false assumptions is that the possibility of > attacks is probable is false too. Please state what are the "assumptions" you're referring to. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From rafiee@hpi.uni-potsdam.de Mon Dec 17 15:25:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E4A01F0CE2 for ; Mon, 17 Dec 2012 15:25:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.187 X-Spam-Level: X-Spam-Status: No, score=-1.187 tagged_above=-999 required=5 tests=[AWL=1.062, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pGICKn4uxfxd for ; Mon, 17 Dec 2012 15:25:28 -0800 (PST) Received: from mail3.hpi.uni-potsdam.de (mail3.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17b]) by ietfa.amsl.com (Postfix) with ESMTP id A0AF81F0CB2 for ; Mon, 17 Dec 2012 15:25:27 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail3.hpi.uni-potsdam.de (Postfix) with ESMTP id 65840169EA3; Tue, 18 Dec 2012 00:25:21 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Tue, 18 Dec 2012 00:25:20 +0100 From: "Rafiee, Hosnieh" To: Fernando Gont Date: Tue, 18 Dec 2012 00:25:18 +0100 Subject: RE: FW: 6MAN WG Last Call: Thread-Topic: FW: 6MAN WG Last Call: Thread-Index: Ac3cdBUpQKUE8ORtTvi52J+pxfjOXgAKEyag Message-ID: References: <50CF48E8.10708@si6networks.com> In-Reply-To: <50CF48E8.10708@si6networks.com> Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "bob.hinden@gmail.com" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2012 23:25:28 -0000 Thank you for your response, please find my reply below -----Original Message----- From: Fernando Gont [mailto:fgont@si6networks.com]=20 Sent: Monday, December 17, 2012 5:32 PM To: Rafiee, Hosnieh Cc: ipv6@ietf.org; bob.hinden@gmail.com Subject: Re: FW: 6MAN WG Last Call: Hi, Hosnieh, Thanks so much for your feedback! Please find my comments inline... On 12/17/2012 12:18 PM, Rafiee, Hosnieh wrote: > Follow-up >=20 > To clarify my question from my last email, I raise three important=20 > issues here: >=20 > 1 - The assumption made in this draft is not true because, according >>What's the "assumption" you're referring to? - One of your assumption is that the privacy extension is often disabled in= nodes on the network. But this is not true. By default, the Windows OS us= es the privacy extension to generate its IID and, based on the statistics (= bad news or good news), Windows is the most popular OS in the world! For servers you cannot have changeable IP addresses so you must use another= approach to solve your problem with DNS. Usually a fixed range of IP addre= sses are used with servers. But for clients, if they care about privacy, th= en they use the algorithm explained in section 3.2 of RFC 4941. According t= o this algorithm, they do not start new connections with old IP addresses. = So how can an attacker track them by only using their IP addresses? The att= acker can do this only by trying to map the hostname to the IP address of t= hat node. In your approach this attack is still possible otherwise the host= name and IP address are changed at the same time and that is rare! Moreover, if a node does not change its IID in the same subnet, it will sti= ll be vulnerable to privacy related attacks. Now the question is, If you al= so want to use life time for this IID or IP address, then it becomes exactl= y the same as RFC privacy extension.=20 As explained in the section 2 of your draft o The resulting interface identifiers remain constant/stable for each prefix used with SLAAC within each subnet. That is, the algorithm generates the same interface identifier when configuring an address belonging to the same prefix within the same subnet. This is the same as for the privacy extension RFC where the same IID is ge= nerated for each prefix for a certain time Your draft: We note that of use of the algorithm specified in this document is (to a large extent) orthogonal to the use of "Privacy Extensions" [RFC4941]. Hosts that do not implement/use "Privacy Extensions" would have the benefit that they would not be subject to the host- tracking and host scanning issues discussed in the previous section. On the other hand, in the case of hosts employing "Privacy Extensions", the method specified in this document would prevent host scanning attacks and correlation of node activities across networks (see Appendix A). If a host wants to implement something, it can also implement privacy exten= sions. Concerning host scanning attacks, if the attacker is inside a networ= k that uses stateless autoconfiguration, then it is not feasible for him to= do host scanning. Generally, for IPv6, a host scanning attack is not a goo= d method because of the IPv6 large address space. What an attacker might do= is find the host IP addresses and just listen to the messages (NDP or DHCP= v6) exchanged between hosts on that network and . if it is an outside attac= ker, then attacking DNS and finding all the necessary information is easier= than doing host scanning. Thus this is not one of the desired types of att= ack for use in IPv6 networks. > 2 - It takes the same cryptographic approach as explained for CGA in=20 > RFC 3972 (sec value 0). The main reason for using CGA is because of=20 > the generation of a random IID, regardless of ,whether or not, it is=20 > used in SEND. Now the real question is what are the differences=20 > between this algorithm and those explained in RFC 3972 and RFC 4941? >RFC4941 generates random addresses that change over time -- they are not s= table within the same network and they are generated *in addition* to the t= raditional SLAAC addresses. >When it comes to CGAs, Some of them include: >* draft-ietf-6man-stable-privacy-addresses is simpler, and has fewer requi= rements on the host. e.g., each host can use whatever hash algorithm they w= ant, since no other host will need to "verify" the address. When using CGA a host can use another algorithm, but as you also mentioned,= the other host would have to support that algorithm.=20 >* The goal of CGAs is that you do have access to all the input materials t= o the hash function and know all of the implementation details, such that a= ny node can regenerate/verify the IID. The goal of >*stable-privacy-address= es is that you *cannot* generate the IIDs (hence we rely on a secret key). In the privacy extension the use of CGA is also mentioned as a way of gener= ating a random IID. However, that RFC does not explain CGA in detail as to = how to use that algorithm. It appears to be missing from that RFC. So, my s= uggestion is, as you used almost the same algorithm for the CGA generation= as for the IID (except using one different input for hashing and omit the= condition like if in CGA use the sec value equal to 0), then you could exp= lain your approach the better by explaining the section that is missing fr= om the privacy extension RFC that I pointed out earlier.=20 >* It doesn't make much sense to use CGAs along with Privacy addresses >(RFC4941) -- or else an attacker would always use RFC4941, such that hosts= cannot verify the CGAs. OTOH, *stable-privacy-addresses are orthogonal to = RFC 4941. Why doesn't it make sense? We are not talking about the attacker, we are ta= lking about nodes that want to prevent privacy related attacks as I explain= ed in the prior paragraph. So, when you use a sec value of 0 (you do not ca= re a lot about security), then you will get a fast randomly generated addre= ss. > 3- the result of these false assumptions is that the possibility of=20 > attacks is probable is false too. >Please state what are the "assumptions" you're referring to. From fgont@si6networks.com Mon Dec 17 18:02:21 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 267C421F8A52 for ; Mon, 17 Dec 2012 18:02:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ajyXvh5rpwj7 for ; Mon, 17 Dec 2012 18:02:15 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 6C31221E803F for ; Mon, 17 Dec 2012 18:02:14 -0800 (PST) Received: from [186.134.26.57] (helo=[192.168.123.126]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TkmUX-0008UU-Ux; Tue, 18 Dec 2012 03:01:10 +0100 Message-ID: <50CFCE5F.4070804@si6networks.com> Date: Mon, 17 Dec 2012 23:01:03 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Rafiee, Hosnieh" Subject: Re: FW: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: "bob.hinden@gmail.com" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 02:02:21 -0000 Hi, Hosnieh, On 12/17/2012 08:25 PM, Rafiee, Hosnieh wrote: >> To clarify my question from my last email, I raise three important >> issues here: >> >> 1 - The assumption made in this draft is not true because, >> according > >>> What's the "assumption" you're referring to? > - One of your assumption is that the privacy extension is often > disabled in nodes on the network. But this is not true. The document never makes such assumption. Actually, whether that happens or not is kind of irrelevant for this document. What the document does mention regarding RFC4941 is: * *stable-privacy-addresses are orthogonal to RFC4941 * stable-privacy-addresses are valuable even if you implement RFC4941 * If you disable RFC4941, stable-privacy-addresses brings most of the benefits of RFC4941. That said, many deployments result in RFC4941-addresses being turned off (e.g., see the slideware of many of Ron Broesma's presentations). It's not that they are turned off by default, but rather that they are manually turned off. > By default, > the Windows OS uses the privacy extension to generate its IID and, > based on the statistics (bad news or good news), Windows is the most > popular OS in the world! As noted above, many deployments turn off privacy addresses. > DNS. Usually a fixed range of IP addresses are used with servers. But > for clients, if they care about privacy, then they use the algorithm > explained in section 3.2 of RFC 4941. According to this algorithm, > they do not start new connections with old IP addresses. So how can > an attacker track them by only using their IP addresses? RFC4941-addresses are generated *in addition* to the traditional SLAAC addresses. And as long as such addresses are there, you can be tracked (please see the whole Appendinx in draft-ietf-6man-stable-privacy-addresses). > rare! Moreover, if a node does not change its IID in the same subnet, > it will still be vulnerable to privacy related attacks. The only attack he will be vulnerable to is an attacker correlating different connections from the same node (which is, IMO, less of an issue when compared with a node being tracked across networks). That said, please check: * Escudero, A. 2002. PRIVACY EXTENSIONS FOR STATELESS ADDRESS AUTOCONFIGURATION IN IPV6 - ‘REQUIREMENTS FOR UNOBSERVABILITY. RVK02, Stockholm. Available at: * Dupont, F., Savola, P. 2004. RFC 3041 Considered Harmful. IETF Internet-Draft (draft-dupont-ipv6-rfc3041harmful-05.txt), work in progress. > Now the > question is, If you also want to use life time for this IID or IP > address, then it becomes exactly the same as RFC privacy extension. Nobody even suggested that. For instance, if these addresses had a lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the first place. > As explained in the section 2 of your draft o The resulting > interface identifiers remain constant/stable for each prefix used > with SLAAC within each subnet. That is, the algorithm generates the > same interface identifier when configuring an address belonging to > the same prefix within the same subnet. This is the same as for the > privacy extension RFC where the same IID is generated for each prefix > for a certain time With RFC4941, you don't get the same IID when you return to the same subnet. i.e., RFC4941-addresses are not stable within the same subnet. > Your draft: We note that of use of the algorithm specified in this > document is (to a large extent) orthogonal to the use of "Privacy > Extensions" [RFC4941]. Hosts that do not implement/use "Privacy > Extensions" would have the benefit that they would not be subject to > the host- tracking and host scanning issues discussed in the previous > section. On the other hand, in the case of hosts employing "Privacy > Extensions", the method specified in this document would prevent > host scanning attacks and correlation of node activities across > networks (see Appendix A). If a host wants to implement something, it > can also implement privacy extensions. In some network deployments, RFC4941 addresses are deemed as undesirable. > Concerning host scanning > attacks, if the attacker is inside a network that uses stateless > autoconfiguration, then it is not feasible for him to do host > scanning. Generally, for IPv6, a host scanning attack is not a good > method because of the IPv6 large address space. This is simply not true. Please check: > What an attacker > might do is find the host IP addresses and just listen to the > messages (NDP or DHCPv6) exchanged between hosts on that network and > . if it is an outside attacker, then attacking DNS and finding all > the necessary information is easier than doing host scanning. Thus > this is not one of the desired types of attack for use in IPv6 > networks. This whole topic is discussed in >> * draft-ietf-6man-stable-privacy-addresses is simpler, and has >> fewer requirements on the host. e.g., each host can use whatever >> hash algorithm they want, since no other host will need to "verify" >> the address. > When using CGA a host can use another algorithm, but as you also > mentioned, the other host would have to support that algorithm. And you need to tell which algorithm is in use -- in other words, the whole thing needs to be specific at the "bit level". This is not the case for *stable-privacy-addresses. >> * The goal of CGAs is that you do have access to all the input >> materials to the hash function and know all of the implementation >> details, such that any node can regenerate/verify the IID. The goal >> of >*stable-privacy-addresses is that you *cannot* generate the >> IIDs (hence we rely on a secret key). > In the privacy extension the use of CGA is also mentioned as a way of > generating a random IID. However, that RFC does not explain CGA in > detail as to how to use that algorithm. It appears to be missing from > that RFC. So, my suggestion is, as you used almost the same algorithm > for the CGA generation as for the IID (except using one different > input for hashing and omit the condition like if in CGA use the sec > value equal to 0), then you could explain your approach the better by > explaining the section that is missing from the privacy extension RFC > that I pointed out earlier. Please take a look at the CGA spec. It includes too many things that are needed for CGAs to be verified. -- Nothing of that is needed for the purpose of *stable-privacy-addresses. In stable-privacy we require a secret (CGAs don't), we also include the possible network ID, etc. So yeah, both approaches use hashes... bot lots of things use hashes... >> * It doesn't make much sense to use CGAs along with Privacy >> addresses (RFC4941) -- or else an attacker would always use >> RFC4941, such that hosts cannot verify the CGAs. OTOH, >> *stable-privacy-addresses are orthogonal to RFC 4941. > Why doesn't it make sense? We are not talking about the attacker, we > are talking about nodes that want to prevent privacy related attacks > as I explained in the prior paragraph. So, when you use a sec value > of 0 (you do not care a lot about security), then you will get a fast > randomly generated address. This would be a use of CGAs that is completely different from the goals specified in RFC 3972. And there are lots and lots of details that are different: * In 3972, there's no secret. Hence, the attacker might be able to compute the IID himself (assuming the algorithm and the input parameters are known). * If the CGA Modifier changes (as they are suposed to), then the addresses are not contant within the same network (each time you generate a CGA, the IID would be different). [yes, one could change the spec and now argue tha the "Modifier" is now the secret key, but....] * The remove 3 bits from the number of bits we can randomize. ... and the list could continue. Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From brian.e.carpenter@gmail.com Tue Dec 18 00:06:14 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A48931F0CE4 for ; Tue, 18 Dec 2012 00:06:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.597 X-Spam-Level: X-Spam-Status: No, score=-101.597 tagged_above=-999 required=5 tests=[AWL=0.094, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4kupJBRbR4BA for ; Tue, 18 Dec 2012 00:06:13 -0800 (PST) Received: from mail-wg0-f44.google.com (mail-wg0-f44.google.com [74.125.82.44]) by ietfa.amsl.com (Postfix) with ESMTP id 7C4FF21F84DC for ; Tue, 18 Dec 2012 00:06:13 -0800 (PST) Received: by mail-wg0-f44.google.com with SMTP id dr12so131103wgb.23 for ; Tue, 18 Dec 2012 00:06:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=ALb8LMXkhV1iFu8jKPK5P1i4fjM27bEoDvBOMOuFEes=; b=Lk9RS8m3uCacG7GYV2wcOpuNnXANWaWFUS22NJ3YHFilogyN54hJKCBdJR7vHPC0Pw JHnu0wdrghhWhSvKoYINY/FiWfyFOFzl0jkO3Al9f6YROi0sj3O2fHHUWvzWwbX+7v1K ZNfYql4Qv8xAu5Skq4Oip6Yfq0dSfiC2KzyzkZ/j2cmjH/nSBuIwoKxbRgRTGe60Hqrh ijdJ6+jp/ghYjik5HjX9TBK5a+zpHN2/4cg/TYVl22JyIwRjvKGo4iti4G7OTnyXHlti 2J6unQkiDfd1hXr+OvNdsNZzpdYGWcb3aOxDx6gQImyG4q4V6WLjol6p8zQNLNMWxi4A 40jA== X-Received: by 10.194.76.99 with SMTP id j3mr2134309wjw.47.1355817972637; Tue, 18 Dec 2012 00:06:12 -0800 (PST) Received: from [192.168.1.65] (host-2-102-217-180.as13285.net. [2.102.217.180]) by mx.google.com with ESMTPS id hg17sm14753272wib.1.2012.12.18.00.06.10 (version=SSLv3 cipher=OTHER); Tue, 18 Dec 2012 00:06:11 -0800 (PST) Message-ID: <50D023F7.5030507@gmail.com> Date: Tue, 18 Dec 2012 08:06:15 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Fernando Gont Subject: Re: FW: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> In-Reply-To: <50CFCE5F.4070804@si6networks.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "bob.hinden@gmail.com" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 08:06:14 -0000 On 18/12/2012 02:01, Fernando Gont wrote: ... > Nobody even suggested that. For instance, if these addresses had a > lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the > first place. I suggest that you add a discussion of site renumbering considerations. The problems described in draft-ietf-6renum-static-problem need to be avoided. Brian From fgont@si6networks.com Tue Dec 18 05:42:14 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED1BD21F8652 for ; Tue, 18 Dec 2012 05:42:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.423 X-Spam-Level: X-Spam-Status: No, score=-2.423 tagged_above=-999 required=5 tests=[AWL=0.176, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2iW8GZAjAfew for ; Tue, 18 Dec 2012 05:42:13 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 4061121F85CB for ; Tue, 18 Dec 2012 05:42:12 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.123.124]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TkxQl-0000U3-1c; Tue, 18 Dec 2012 14:42:00 +0100 Message-ID: <50D0729E.5020603@si6networks.com> Date: Tue, 18 Dec 2012 10:41:50 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian E Carpenter Subject: Re: FW: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> In-Reply-To: <50D023F7.5030507@gmail.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "bob.hinden@gmail.com" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 13:42:14 -0000 Hi, Brian, On 12/18/2012 05:06 AM, Brian E Carpenter wrote: > On 18/12/2012 02:01, Fernando Gont wrote: > ... >> Nobody even suggested that. For instance, if these addresses had a >> lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the >> first place. > > I suggest that you add a discussion of site renumbering considerations. > The problems described in draft-ietf-6renum-static-problem need > to be avoided. Could you please elaborate what you have in mind? (i.e., how you think this should be addressed, without rehashing the whole discussion in the aforementioned I-D -- I guess one or two paragraphs, and a reference to draft-ietf-6renum-static-problem?) Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From otroan@employees.org Tue Dec 18 05:56:07 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEFD321F8842 for ; Tue, 18 Dec 2012 05:56:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.449 X-Spam-Level: X-Spam-Status: No, score=-10.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k3abiVAaPzYF for ; Tue, 18 Dec 2012 05:56:05 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by ietfa.amsl.com (Postfix) with ESMTP id 9E0C921F880E for ; Tue, 18 Dec 2012 05:56:05 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AuIGAMB10FCQ/khN/2dsb2JhbABEg0i6XhZzgh4BAQQBOj8QCw44VwaIIAaoFpBLkCthA6ZSgnQ X-IronPort-AV: E=Sophos;i="4.84,309,1355097600"; d="scan'208";a="148516959" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-1.cisco.com with ESMTP; 18 Dec 2012 13:55:54 +0000 Received: from dhcp-lys01-vla250-10-147-112-193.cisco.com (dhcp-lys01-vla250-10-147-112-193.cisco.com [10.147.112.193]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBIDtrRh011858 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Tue, 18 Dec 2012 13:55:54 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: 6MAN WG Last Call: From: Ole Troan In-Reply-To: <50D0729E.5020603@si6networks.com> Date: Tue, 18 Dec 2012 14:55:53 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D0729E.5020603@si6networks.com> To: Fernando Gont X-Mailer: Apple Mail (2.1499) Cc: "ipv6@ietf.org" , "bob.hinden@gmail.com" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 13:56:07 -0000 >>> Nobody even suggested that. For instance, if these addresses had a >>> lifetime (in the RFC4941 sense), they wouldn't be called "stable" in = the >>> first place. >>=20 >> I suggest that you add a discussion of site renumbering = considerations. >> The problems described in draft-ietf-6renum-static-problem need >> to be avoided. >=20 > Could you please elaborate what you have in mind? (i.e., how you think > this should be addressed, without rehashing the whole discussion in = the > aforementioned I-D -- I guess one or two paragraphs, and a reference = to > draft-ietf-6renum-static-problem?) my understanding was that addresses based on these interface-ids would = have the same address lifetime properties as RFC4861 addresses. is it the draft's reference to "static addresses" that creates the = confusion? cheers, Ole= From fgont@si6networks.com Tue Dec 18 06:14:02 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6E2121F85D3 for ; Tue, 18 Dec 2012 06:14:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.445 X-Spam-Level: X-Spam-Status: No, score=-2.445 tagged_above=-999 required=5 tests=[AWL=0.154, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FT8sTr+rd0gY for ; Tue, 18 Dec 2012 06:14:00 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 7F5F021F8550 for ; Tue, 18 Dec 2012 06:14:00 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.123.124]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tkxva-0001F9-SY; Tue, 18 Dec 2012 15:13:53 +0100 Message-ID: <50D07A15.6000601@si6networks.com> Date: Tue, 18 Dec 2012 11:13:41 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ole Troan Subject: Re: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D0729E.5020603@si6networks.com> <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> In-Reply-To: <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" , "bob.hinden@gmail.com" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 14:14:02 -0000 On 12/18/2012 10:55 AM, Ole Troan wrote: >>>> Nobody even suggested that. For instance, if these addresses had a >>>> lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the >>>> first place. >>> >>> I suggest that you add a discussion of site renumbering considerations. >>> The problems described in draft-ietf-6renum-static-problem need >>> to be avoided. >> >> Could you please elaborate what you have in mind? (i.e., how you think >> this should be addressed, without rehashing the whole discussion in the >> aforementioned I-D -- I guess one or two paragraphs, and a reference to >> draft-ietf-6renum-static-problem?) > > my understanding was that addresses based on these interface-ids would have the same address lifetime properties as RFC4861 addresses. Agreed. What I meant in my response to Hosnieh is that these addresses behave (in terms of lifetimes) in the same way as traditional slaac addresses, but do not vary over time as RFC4941-addresses. So it's not clear to me what's the concern here. > is it the draft's reference to "static addresses" that creates the confusion? I had the impression that Brian suggested to include something along the lines of "while having table addresses is nice, beware that you should probably not rely strongly on them being stable, since a renumbering event could make them change" (e.g., DNS is always valuable to contact servers, even if the addresses are stable, etc.). Maybe he can elaborate.... :-) Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From brian.e.carpenter@gmail.com Tue Dec 18 06:35:54 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A4B121F8A2F for ; Tue, 18 Dec 2012 06:35:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.582 X-Spam-Level: X-Spam-Status: No, score=-103.582 tagged_above=-999 required=5 tests=[AWL=0.017, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oSj1rBaZUdyF for ; Tue, 18 Dec 2012 06:35:53 -0800 (PST) Received: from mail-bk0-f47.google.com (mail-bk0-f47.google.com [209.85.214.47]) by ietfa.amsl.com (Postfix) with ESMTP id BB34021F88DB for ; Tue, 18 Dec 2012 06:35:52 -0800 (PST) Received: by mail-bk0-f47.google.com with SMTP id j4so369664bkw.34 for ; Tue, 18 Dec 2012 06:35:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=IrjMGPVG7XyYgzhCs+f58RkNRYTf8Y+w4ogWw3XIuc4=; b=SoN5kRWCwml1Gds7GWyY6iif0NHp22M2t8BmCaU8UItdPAw3ybfnEMQVZVIdCQ4NP7 yDbNPHKrxwxAJgLnKhdQEoUimzhbI/TlihtL/+gUOZ6jpw63ygiNCLkhJnassDi41ONo jPWgBOKiezedrSKuWlCH0FyvXSgAvmO6ZkSh2YCxobshg2xEaGG+/5jOguXlLuDyp4UR JkFPC2020PFFlZ/p+KUjLGoon2kzIjpXVfYb30znGDp2TNlN4y2nA+ELPLjkcYqzIEgv a7liVsZxm9nyoK8y5tsl3cAPlDWUIR0me0JJjiQDLqyAyG0v8GMAJBzwIeqn7VDjziMq czLw== X-Received: by 10.205.129.17 with SMTP id hg17mr828869bkc.41.1355841351718; Tue, 18 Dec 2012 06:35:51 -0800 (PST) Received: from [128.232.110.102] (c102.al.cl.cam.ac.uk. [128.232.110.102]) by mx.google.com with ESMTPS id q22sm1512526bkv.16.2012.12.18.06.35.48 (version=SSLv3 cipher=OTHER); Tue, 18 Dec 2012 06:35:50 -0800 (PST) Message-ID: <50D07F4A.1070303@gmail.com> Date: Tue, 18 Dec 2012 14:35:54 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Fernando Gont Subject: Re: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D0729E.5020603@si6networks.com> <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> <50D07A15.6000601@si6networks.com> In-Reply-To: <50D07A15.6000601@si6networks.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" , "bob.hinden@gmail.com" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 14:35:54 -0000 On 18/12/2012 14:13, Fernando Gont wrote: > On 12/18/2012 10:55 AM, Ole Troan wrote: >>>>> Nobody even suggested that. For instance, if these addresses had a >>>>> lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the >>>>> first place. >>>> I suggest that you add a discussion of site renumbering considerations. >>>> The problems described in draft-ietf-6renum-static-problem need >>>> to be avoided. >>> Could you please elaborate what you have in mind? (i.e., how you think >>> this should be addressed, without rehashing the whole discussion in the >>> aforementioned I-D -- I guess one or two paragraphs, and a reference to >>> draft-ietf-6renum-static-problem?) >> my understanding was that addresses based on these interface-ids would have the same address lifetime properties as RFC4861 addresses. > > Agreed. What I meant in my response to Hosnieh is that these addresses > behave (in terms of lifetimes) in the same way as traditional slaac > addresses, but do not vary over time as RFC4941-addresses. > > So it's not clear to me what's the concern here. The concern is that we are still mainly ignoring the renumbering problem, and in some years time this will be serious for users. But if you add "From the point of view of renumbering, these addresses behave like RFC4941 addresses" the point is covered. > >> is it the draft's reference to "static addresses" that creates the confusion? > > I had the impression that Brian suggested to include something along the > lines of "while having table addresses is nice, beware that you should > probably not rely strongly on them being stable, since a renumbering > event could make them change" (e.g., DNS is always valuable to contact > servers, even if the addresses are stable, etc.). Maybe he can > elaborate.... :-) I think the above is enough. Brian > > Cheers, From otroan@employees.org Tue Dec 18 06:40:23 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F03421F8A67 for ; Tue, 18 Dec 2012 06:40:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.459 X-Spam-Level: X-Spam-Status: No, score=-10.459 tagged_above=-999 required=5 tests=[AWL=0.140, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T08XuxHX-7G6 for ; Tue, 18 Dec 2012 06:40:22 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id 5EE9521F8A43 for ; Tue, 18 Dec 2012 06:40:22 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AtsOAEB/0FCQ/khL/2dsb2JhbABEg0i5WAEDAQN+FnOCHgEBBAE6PwULC0ZXBoggBqgZkEmQK2EDplKCdA X-IronPort-AV: E=Sophos;i="4.84,309,1355097600"; d="scan'208";a="79206540" Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-2.cisco.com with ESMTP; 18 Dec 2012 14:40:21 +0000 Received: from dhcp-lys01-vla250-10-147-112-193.cisco.com (dhcp-lys01-vla250-10-147-112-193.cisco.com [10.147.112.193]) by ams-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qBIEeKQT018486 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Tue, 18 Dec 2012 14:40:21 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: 6MAN WG Last Call: From: Ole Troan In-Reply-To: <50D07F4A.1070303@gmail.com> Date: Tue, 18 Dec 2012 15:40:20 +0100 Content-Transfer-Encoding: 7bit Message-Id: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D0729E.5020603@si6networks.com> <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> <50D07A15.6000601@si6networks.com> <50D07F4A.1070303@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Cc: Fernando Gont , "bob.hinden@gmail.com" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 14:40:23 -0000 > The concern is that we are still mainly ignoring the renumbering > problem, and in some years time this will be serious for users. > But if you add "From the point of view of renumbering, these addresses > behave like RFC4941 addresses" the point is covered. ... behave like RFC4862 addresses. cheers, Ole From brian.e.carpenter@gmail.com Tue Dec 18 06:43:06 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7668221F8A94 for ; Tue, 18 Dec 2012 06:43:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.586 X-Spam-Level: X-Spam-Status: No, score=-103.586 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id re+R75a9nKUI for ; Tue, 18 Dec 2012 06:43:06 -0800 (PST) Received: from mail-wi0-f182.google.com (mail-wi0-f182.google.com [209.85.212.182]) by ietfa.amsl.com (Postfix) with ESMTP id B72C521F8A88 for ; Tue, 18 Dec 2012 06:43:05 -0800 (PST) Received: by mail-wi0-f182.google.com with SMTP id hn14so442302wib.9 for ; Tue, 18 Dec 2012 06:43:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=rL5O1YIkf4MS+RKYYrgVD9iIgcYRPrxV2WJIkxSGhIE=; b=LfU4bPFnsYx+rJGBc8sR5NBlyxmHlPA6VLKnkYvQk/loDJSAsKMmrmIIl+8pUk1j/i luWm3QGS0EWJak4ReKCp+XnxGStcUePV4DTzUs5Q63HLz9yuHUymiNRbRtLl07YjqIPN 6DJLqNCo0C7gYS1emgP7HDwdKkJ52kSM5soRbFv+IKX3+JMifyb9EHCKos+pl3mewt2G W9MQjGAvTGNmJL0svcDEzHGWdqEAzyQNBx1K5bggKYHNhgJ7li8rT+d1O2QtllPSGhB1 Wv2ATg1FiD0VvW88QxuyIXUyg7OtPOCYEgQxEddUMfMaJ7iPaabu9z4EV3YJcMxoYran 8t6A== X-Received: by 10.194.79.34 with SMTP id g2mr5004622wjx.17.1355841784764; Tue, 18 Dec 2012 06:43:04 -0800 (PST) Received: from [128.232.100.154] (c0154.aw.cl.cam.ac.uk. [128.232.100.154]) by mx.google.com with ESMTPS id s10sm2974959wiw.4.2012.12.18.06.43.02 (version=SSLv3 cipher=OTHER); Tue, 18 Dec 2012 06:43:03 -0800 (PST) Message-ID: <50D080FC.40503@gmail.com> Date: Tue, 18 Dec 2012 14:43:08 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Ole Troan Subject: Re: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D0729E.5020603@si6networks.com> <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> <50D07A15.6000601@si6networks.com> <50D07F4A.1070303@gmail.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: Fernando Gont , "bob.hinden@gmail.com" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 14:43:06 -0000 On 18/12/2012 14:40, Ole Troan wrote: >> The concern is that we are still mainly ignoring the renumbering >> problem, and in some years time this will be serious for users. >> But if you add "From the point of view of renumbering, these addresses >> behave like RFC4941 addresses" the point is covered. > > ... behave like RFC4862 addresses. Yes, sorry, didn't put my brain on straight today. Brian From fgont@si6networks.com Tue Dec 18 06:53:53 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9281F21F8739 for ; Tue, 18 Dec 2012 06:53:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.462 X-Spam-Level: X-Spam-Status: No, score=-2.462 tagged_above=-999 required=5 tests=[AWL=0.137, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gz9fTFibFIr0 for ; Tue, 18 Dec 2012 06:53:53 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id CB7C821F8A64 for ; Tue, 18 Dec 2012 06:53:52 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.123.124]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TkyYC-0002DT-NJ; Tue, 18 Dec 2012 15:53:45 +0100 Message-ID: <50D0836C.6050101@si6networks.com> Date: Tue, 18 Dec 2012 11:53:32 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian E Carpenter Subject: Re: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D0729E.5020603@si6networks.com> <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> <50D07A15.6000601@si6networks.com> <50D07F4A.1070303@gmail.com> In-Reply-To: <50D07F4A.1070303@gmail.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" , "bob.hinden@gmail.com" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 14:53:53 -0000 On 12/18/2012 11:35 AM, Brian E Carpenter wrote: >> Agreed. What I meant in my response to Hosnieh is that these addresses >> behave (in terms of lifetimes) in the same way as traditional slaac >> addresses, but do not vary over time as RFC4941-addresses. >> >> So it's not clear to me what's the concern here. > > The concern is that we are still mainly ignoring the renumbering > problem, and in some years time this will be serious for users. > But if you add "From the point of view of renumbering, these addresses > behave like RFC4941 addresses" the point is covered. I think this should be RFC4862 rather than RFC4941. SO, how about this text in the intro to address the point you've raised: "Form the point of view of renumbering, these addresses behave as the traditional addresses resulting from SLAAC [rfc4862]" ? Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From brian@innovationslab.net Tue Dec 18 08:32:49 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AC1321F8A4E for ; Tue, 18 Dec 2012 08:32:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.59 X-Spam-Level: X-Spam-Status: No, score=-102.59 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y+LMzXzYTUHL for ; Tue, 18 Dec 2012 08:32:48 -0800 (PST) Received: from uillean.fuaim.com (uillean.fuaim.com [206.197.161.140]) by ietfa.amsl.com (Postfix) with ESMTP id 414EA21F8A0A for ; Tue, 18 Dec 2012 08:32:48 -0800 (PST) Received: from clairseach.fuaim.com (clairseach-high.fuaim.com [206.197.161.158]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by uillean.fuaim.com (Postfix) with ESMTP id 1891C88162; Tue, 18 Dec 2012 08:32:48 -0800 (PST) Received: from clemson.local (c-69-140-213-249.hsd1.md.comcast.net [69.140.213.249]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by clairseach.fuaim.com (Postfix) with ESMTP id 8427014003A; Tue, 18 Dec 2012 08:32:47 -0800 (PST) Message-ID: <50D09AAE.6000601@innovationslab.net> Date: Tue, 18 Dec 2012 11:32:46 -0500 From: Brian Haberman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Fernando Gont Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> In-Reply-To: <50CF402E.80706@si6networks.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org, 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 16:32:49 -0000 On 12/17/12 10:54 AM, Fernando Gont wrote: > Hi, Brian, > > Thanks so much for your feedback! -- Please find my comments inline... > > > On 12/13/2012 03:57 PM, Brian Haberman wrote: >> Substantive >> ---------------- >> >> * It would be quite useful to explicitly define "atomic fragment" prior >> to using it in the document. This could be done in the Introduction in >> a formal manner and the use of "atomic fragments" in the Abstract can be >> re-worded. > > How about this: > > * Change the first sentence of the Abstract to: > "The IPv6 specification allows packets to contain a Fragment Header > without the packet being actually fragmented into multiple pieces > (we refer to these packets as "atomic fragments")." > > > * Change the last sentence of the third para of "1. Introduction" to: > "The resulting packets > will thus *not* be actually fragmented into several pieces, but just > include a Fragment Header with both the "Fragment Offset" and the "M" > bit set to 0 (we refer to these packets as "atomic fragments")." > > > * Have a new new section right after "Introduction", with the following > contents: > > ---- cut here ---- > 2. Terminology > > The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", > "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this > document are to be interpreted as described in RFC 2119 [RFC2119]. > > IPv6 atomic fragments > IPv6 packets that contain a Fragment Header with the Fragment > Offset set to 0 and the M bit set to 0. > ---- cut here ---- > The above sounds reasonable. > > >> * The Introduction needs to provide more motivation as to why we should >> allow these atomic fragments to exist. Please provide the rationale >> discussed on the mailing list about how v4/v6 translators use the >> fragmentation information. > > How about incorporating this text as a parenthetical note (indented > text) right after the third para of Section 1: > > "IPv6/IPv4 translators employ the Fragment Identification information > found in the Fragment Header to select an appropriate Fragment > Identification value for the resulting IPv4 fragments". > I am fine with adding the above text. Not sure that it needs to be indented though. > > >> * The core source of this attack is that some implementations have >> predictable algorithms for generating the Fragmentation ID, allowing >> attackers to launch these types of attacks. It would be good to >> reference that work in this draft as well. > > draft-gont-6man-predictable-fragment-id is referenced as > "[PREDICTABLE-ID]" throughout this document. Is there anything I'm missing? > After re-reading the portions containing the above reference, I don't think there are any needed changes for this point. > > >> * What is the purpose of the indented paragraph within the first bullet >> of the list in section 2? Is it a quote from one of the two referenced >> RFCs? > > The bullet notes that some implementations fail to validate the ICMPv6 > error messages. The indented text notes that it may be virtually > impossible to do so (i.e., a clarification). > I would suggest just making that text a part of the bulleted text. Typically, indented text is a quotation. > > >> * It is not clear to me why the document spends much time on discussing >> ICMP-based attacks on the source of traffic, especially ones that ignore >> existing RFCs, when the issue is really with devices that don't do the >> right thing on the receiving end. > > Because by means of ICMPv6-based attacks an attacker can *trigger* the > use of IPv6 atomic fragments. Without such ability, an attacker could > only leverage atomic fragments for communication flows that legitimately > employ them. > The point of this draft is to fix the re-assembly behavior at the receiver. There are a variety of ways for an attack to be launched that do not involve anything being sent to the sender, ICMP or not. > > >> * I am rather disappointed with the Security Considerations section >> given that this draft is addressing a perceived security vulnerability. > > Well, the Sec Cons section is "as simple as it can be". I could > certainly make it longer, if deemed appropriate... But I personally > think that it says what it needs to say: this document eliminates the > aforementioned attack vector. > > > >> In fact, I would like to ask the WG if the solution actually creates an >> attack vector on receiving hosts. An on-device path could modify >> packets with Fragmentation headers by setting Offset=0 and M=0. This >> would cause the receiver to blindly treat the packet as an atomic and >> pass it up to the upper-layer protocol. > > If the attacker is on path -- and essentially a man in the middle -- why > would he bother to do this if he can simply blackhole the legtimate > atomic-fragment, and create/send a new one? No, these are not legitimate atomic fragments. Let's say that a source fragments a packet into three packets. The attacker sees one of these packets and changes the offset and/or M to 0 in order to make that one fragment look like an atomic. The receiver processes the modified fragment as atomic and passes it up to the upper-layer protocol. My question to the WG is whether or not people see that as an issue. Regards, Brian From brian.e.carpenter@gmail.com Tue Dec 18 08:51:26 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9598C21F8991 for ; Tue, 18 Dec 2012 08:51:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.599 X-Spam-Level: X-Spam-Status: No, score=-101.599 tagged_above=-999 required=5 tests=[AWL=0.092, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JbK2GHlEZ1No for ; Tue, 18 Dec 2012 08:51:25 -0800 (PST) Received: from mail-ee0-f44.google.com (mail-ee0-f44.google.com [74.125.83.44]) by ietfa.amsl.com (Postfix) with ESMTP id D68DF21F861E for ; Tue, 18 Dec 2012 08:51:23 -0800 (PST) Received: by mail-ee0-f44.google.com with SMTP id b47so491489eek.3 for ; Tue, 18 Dec 2012 08:51:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=AlQQov+dDbPrdvJ1iN24llF21gjnHK1pwd8otjtu8k8=; b=TVARXl4Yy3qD3oDZ5KLAyYJanF2MXEPNK8zdUVYCZv3LI5WbfCP56Cl403OJJWhf0I vMd61flFwdJNyvWLyhLZqo7OBH2LlGD6w2CAAMrsoylPPQGSwzv+6lrGdAhnzaWitpMW 5X+Ka9u7hinHgBttXouw06vbDDAUWRvm3B8JeAoynIcxI7jfL/eMZsz34joSqLuQhHfM ifAxLp0s3P6KqPoFwCo+7m6VB0cBwil1JuHicx21+NVZ02GlCb04NBPZxGqV7sLBumWr G9muWVzUKadcbpxr8UDsF1iaNDCz5nSn1XBu5hSQPgtnzczE8tno3Z7hffI68MN1ON7o 8/qw== X-Received: by 10.14.219.72 with SMTP id l48mr6993754eep.37.1355849482797; Tue, 18 Dec 2012 08:51:22 -0800 (PST) Received: from [192.168.1.65] (host-2-102-217-180.as13285.net. [2.102.217.180]) by mx.google.com with ESMTPS id v46sm4229632eep.1.2012.12.18.08.51.20 (version=SSLv3 cipher=OTHER); Tue, 18 Dec 2012 08:51:21 -0800 (PST) Message-ID: <50D09F0E.6090104@gmail.com> Date: Tue, 18 Dec 2012 16:51:26 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Fernando Gont Subject: Re: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D0729E.5020603@si6networks.com> <1F1A3D65-A0F2-46E3-9F9A-8E16AC8F25DE@employees.org> <50D07A15.6000601@si6networks.com> <50D07F4A.1070303@gmail.com> <50D0836C.6050101@si6networks.com> In-Reply-To: <50D0836C.6050101@si6networks.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" , "bob.hinden@gmail.com" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 16:51:26 -0000 Yes, thanks. Regards Brian Carpenter On 18/12/2012 14:53, Fernando Gont wrote: > On 12/18/2012 11:35 AM, Brian E Carpenter wrote: >>> Agreed. What I meant in my response to Hosnieh is that these addresses >>> behave (in terms of lifetimes) in the same way as traditional slaac >>> addresses, but do not vary over time as RFC4941-addresses. >>> >>> So it's not clear to me what's the concern here. >> The concern is that we are still mainly ignoring the renumbering >> problem, and in some years time this will be serious for users. >> But if you add "From the point of view of renumbering, these addresses >> behave like RFC4941 addresses" the point is covered. > > I think this should be RFC4862 rather than RFC4941. SO, how about this > text in the intro to address the point you've raised: > > "Form the point of view of renumbering, these addresses behave as the > traditional addresses resulting from SLAAC [rfc4862]" > > ? > > Thanks! > > Best regards, From Fred.L.Templin@boeing.com Tue Dec 18 11:13:35 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E514921F85A2 for ; Tue, 18 Dec 2012 11:13:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VeuB-9Jsu-xq for ; Tue, 18 Dec 2012 11:13:35 -0800 (PST) Received: from slb-mbsout-01.boeing.com (slb-mbsout-01.boeing.com [130.76.64.128]) by ietfa.amsl.com (Postfix) with ESMTP id 718D421F859C for ; Tue, 18 Dec 2012 11:13:35 -0800 (PST) Received: from slb-mbsout-01.boeing.com (localhost.localdomain [127.0.0.1]) by slb-mbsout-01.boeing.com (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with ESMTP id qBIJDYwj002174 for ; Tue, 18 Dec 2012 11:13:34 -0800 Received: from XCH-NWHT-11.nw.nos.boeing.com (xch-nwht-11.nw.nos.boeing.com [130.247.25.114]) by slb-mbsout-01.boeing.com (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id qBIJDVOs002154 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=OK); Tue, 18 Dec 2012 11:13:32 -0800 Received: from XCH-NW-01V.nw.nos.boeing.com ([130.247.64.97]) by XCH-NWHT-11.nw.nos.boeing.com ([130.247.25.114]) with mapi; Tue, 18 Dec 2012 11:13:31 -0800 From: "Templin, Fred L" To: Fernando Gont Date: Tue, 18 Dec 2012 11:13:29 -0800 Subject: RE: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Topic: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Index: Ac3dPV1iMd5hj307QsKyBM+AljA9uQAFbFrA Message-ID: References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> In-Reply-To: <50D09AAE.6000601@innovationslab.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-TM-AS-MML: No Cc: "draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org" , 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 19:13:36 -0000 I have a question about this document. Is a middlebox permitted to fragment an "atomic" fragment before forwarding the packet on to the next hop? If not, why not - after all, that's why the host inserted the fragment header in the first place. If so, then shouldn't the draft say something about the permissible behavior of middleboxes when forwarding an "atomic" fragment (e.g., "a middlebox is permitted to perform fragmentation on an "atomic" fragment before forwarding to the next hop")? Thanks - Fred fred.l.templin@boeing.com From fgont@si6networks.com Tue Dec 18 12:32:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DA5D21F85DA for ; Tue, 18 Dec 2012 12:32:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.476 X-Spam-Level: X-Spam-Status: No, score=-2.476 tagged_above=-999 required=5 tests=[AWL=0.123, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ao0l5UM8GttL for ; Tue, 18 Dec 2012 12:32:27 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 6889921F85EF for ; Tue, 18 Dec 2012 12:32:27 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.123.124]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tl3pe-0001sv-G1; Tue, 18 Dec 2012 21:32:14 +0100 Message-ID: <50D0CB40.5070103@si6networks.com> Date: Tue, 18 Dec 2012 17:00:00 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Templin, Fred L" Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org" , 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 20:32:28 -0000 Hi, Fred, On 12/18/2012 04:13 PM, Templin, Fred L wrote: > I have a question about this document. Is a middlebox permitted > to fragment an "atomic" fragment before forwarding the packet > on to the next hop? If not, why not - after all, that's why the > host inserted the fragment header in the first place. My take is that an *IPv6* middle-box is not permitted to fragment the packet. The IPv6/IPv4 translator is, from an IPv6 point of view, a host/end-point/end-system (that's where the v6 world ends for that packet). As to the "why not", I'd guess the reason is "only IPv6 hosts fragment packets" > If so, > then shouldn't the draft say something about the permissible > behavior of middleboxes when forwarding an "atomic" fragment > (e.g., "a middlebox is permitted to perform fragmentation on > an "atomic" fragment before forwarding to the next hop")? Why should there be a difference between fragmenting an atomic fragment and e.g. re-fragmenting a non-atomic fragment? Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From fgont@si6networks.com Tue Dec 18 12:33:00 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0957321F861E for ; Tue, 18 Dec 2012 12:33:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.487 X-Spam-Level: X-Spam-Status: No, score=-2.487 tagged_above=-999 required=5 tests=[AWL=0.112, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PuOYqtGf4n-1 for ; Tue, 18 Dec 2012 12:32:59 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id E179921E8045 for ; Tue, 18 Dec 2012 12:32:58 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.123.124]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tl3py-0001tA-PZ; Tue, 18 Dec 2012 21:32:33 +0100 Message-ID: <50D0CF0C.8070000@si6networks.com> Date: Tue, 18 Dec 2012 17:16:12 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian Haberman Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> In-Reply-To: <50D09AAE.6000601@innovationslab.net> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org, 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 20:33:00 -0000 Hi, Brian, On 12/18/2012 01:32 PM, Brian Haberman wrote: >> Thanks so much for your feedback! -- Please find my comments inline... >> >> >> On 12/13/2012 03:57 PM, Brian Haberman wrote: >>> Substantive >>> ---------------- >>> >>> * It would be quite useful to explicitly define "atomic fragment" prior >>> to using it in the document. This could be done in the Introduction in >>> a formal manner and the use of "atomic fragments" in the Abstract can be >>> re-worded. >> >> How about this: [....] > > The above sounds reasonable. I will apply these changes to the next rev. >>> * The Introduction needs to provide more motivation as to why we should >>> allow these atomic fragments to exist. Please provide the rationale >>> discussed on the mailing list about how v4/v6 translators use the >>> fragmentation information. >> >> How about incorporating this text as a parenthetical note (indented >> text) right after the third para of Section 1: >> >> "IPv6/IPv4 translators employ the Fragment Identification information >> found in the Fragment Header to select an appropriate Fragment >> Identification value for the resulting IPv4 fragments". > > I am fine with adding the above text. Not sure that it needs to be > indented though. The way I use indented text is to include info that is essentially a "clarification" of something, but that you don't need to read to understand the document. >>> * What is the purpose of the indented paragraph within the first bullet >>> of the list in section 2? Is it a quote from one of the two referenced >>> RFCs? >> >> The bullet notes that some implementations fail to validate the ICMPv6 >> error messages. The indented text notes that it may be virtually >> impossible to do so (i.e., a clarification). > > I would suggest just making that text a part of the bulleted text. > Typically, indented text is a quotation. OK, will do. >>> * It is not clear to me why the document spends much time on discussing >>> ICMP-based attacks on the source of traffic, especially ones that ignore >>> existing RFCs, when the issue is really with devices that don't do the >>> right thing on the receiving end. >> >> Because by means of ICMPv6-based attacks an attacker can *trigger* the >> use of IPv6 atomic fragments. Without such ability, an attacker could >> only leverage atomic fragments for communication flows that legitimately >> employ them. > > The point of this draft is to fix the re-assembly behavior at the > receiver. There are a variety of ways for an attack to be launched that > do not involve anything being sent to the sender, ICMP or not. That note is meant to be a warning along the lines of "look, the trouble here s not just attacks against existing atomic-fragment traffic, since an attacker can actually trigger the generation of such atomic-fragments for any communication flow.". i.e., it notes that, at the end of the day, this change benefits not only communication flows already employing atomic fragments, but rather *all* communication flows, since it is trivial to trigger generation of atomic fragments. I guess one might argue that part of this could be moved to the Sec Cons section... but I thought it was too important/central to comment on it only at the Sec Cons section. >>> In fact, I would like to ask the WG if the solution actually >>> creates an >>> attack vector on receiving hosts. An on-device path could modify >>> packets with Fragmentation headers by setting Offset=0 and M=0. This >>> would cause the receiver to blindly treat the packet as an atomic and >>> pass it up to the upper-layer protocol. >> >> If the attacker is on path -- and essentially a man in the middle -- why >> would he bother to do this if he can simply blackhole the legtimate >> atomic-fragment, and create/send a new one? > > No, these are not legitimate atomic fragments. Let's say that a source > fragments a packet into three packets. The attacker sees one of these > packets and changes the offset and/or M to 0 in order to make that one > fragment look like an atomic. What would be the difference between this, and simply removing the fragments from the net, and re-send the packets as e.g., non-fragmented traffic? i.e., the bottom-line is that once the attacker becomes on-path (not to mention "man in the middle"), this is kind of "game over". Things become pretty much "IPsec or death". > The receiver processes the modified fragment as atomic and passes it up > to the upper-layer protocol. My question to the WG is whether or not > people see that as an issue. Me, I don't see any issues here. For instance, it is very likely that, as a result of this, some upper layer checksum will fail, and end the packet will be drooped by the destination system. Also, as noted above, if I was an attacker and for some reason wanted a legitimate fragment to be "passed up" without any further processing/reassembly, I'd simply re-encapsulate such contents in a non-fragmented packet (e.g., rather than clearing the M and FO bits, I'd simply remove the Frag header). In any case, I wonder what the "goal" that you think the attacker would have in mind... because if the attacker is a MITM or is simply on-path, and the goal is DoS, he can simply drop packet or corrupt them, rather than playing with this particular issue. Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From jmh@joelhalpern.com Tue Dec 18 15:50:50 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A4171F0CDF for ; Tue, 18 Dec 2012 15:50:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.863 X-Spam-Level: X-Spam-Status: No, score=-101.863 tagged_above=-999 required=5 tests=[AWL=-0.198, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_101=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h1Ect1Ib9HvO for ; Tue, 18 Dec 2012 15:50:49 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 1F4661F0CB3 for ; Tue, 18 Dec 2012 15:50:49 -0800 (PST) Received: from mailc2.tigertech.net (mailc2.tigertech.net [208.80.4.156]) by morbo.tigertech.net (Postfix) with ESMTP id 1B88EA63F0 for ; Tue, 18 Dec 2012 15:50:47 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailc2.tigertech.net (Postfix) with ESMTP id 4A4882014E3 for ; Tue, 18 Dec 2012 15:50:46 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at c2.tigertech.net Received: from [10.10.10.104] (pool-70-106-135-81.clppva.east.verizon.net [70.106.135.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailc2.tigertech.net (Postfix) with ESMTPSA id B0C972014E5 for ; Tue, 18 Dec 2012 15:50:45 -0800 (PST) Message-ID: <50D10150.40801@joelhalpern.com> Date: Tue, 18 Dec 2012 18:50:40 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "ipv6@ietf.org" Subject: IIDs, u and g bits, and 4rd Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 23:50:50 -0000 In reading the discussion,a nd trying to think through what I understand to be correct, it seems that there is an unforeseen ambiguity in the way the current documents about IPv6 IIDs are written. I think that there are two possible meanings, ad we should decide explicitly which one we want. 1) u=1 means that the IID is derived from an IEEE OUI (of some form). With that meaning, u=1, g=1 is clearly some sort of multi-entity identifier. And we should say that somewhere. 2) u=1, g=1 was unforeseen, and we don't know what it means. In that case, we ought to figure out how we want that portion of the IID space used, and write it down clearly. It seems to me that allowing this space to be used for special-semantic IIDs (with suitable care so that the entire ecosystem is not affected by them) is a very reasonable path. It seems unlikely that there is actual practice in the wild with u=1, g=1 under either interpretation. We do now have a request to start using it (4rd). So we should decide. Yours, Joel From fred@cisco.com Tue Dec 18 16:35:37 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69D4C21E805D for ; Tue, 18 Dec 2012 16:35:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.261 X-Spam-Level: X-Spam-Status: No, score=-110.261 tagged_above=-999 required=5 tests=[AWL=-0.262, BAYES_00=-2.599, J_CHICKENPOX_101=0.6, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VK2A6lrD-W0I for ; Tue, 18 Dec 2012 16:35:36 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) by ietfa.amsl.com (Postfix) with ESMTP id 9377A21E8047 for ; Tue, 18 Dec 2012 16:35:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1709; q=dns/txt; s=iport; t=1355877336; x=1357086936; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=08smhnAroH5Ros0c9KXH46qP3BPzeYM36kIWmcRbqjM=; b=jol242o4VANSVhqZauwMTe0oG7JAVzLTjBbYqkOc/5WLlPpIxiidEil7 9MY7e2L9MFFc3wkGr9yP6u66zsBYdQUtSfj8L3zMx/MOsVWU/fyEP2V+q W9/sxYeY6jETdQAt9ZGG6BFaESe9UmHELRghGAewVEsWJEyV9eqnaqv4T w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAJwL0VCtJXHB/2dsb2JhbABFviYWc4IeAQEBAwEBAQE3NAsFCwIBCCIUECcLJQIEDgUIiAUGDKonjgwEjEmDYmEDplKCZw2CIg X-IronPort-AV: E=Sophos;i="4.84,311,1355097600"; d="scan'208";a="154428163" Received: from rcdn-core2-6.cisco.com ([173.37.113.193]) by rcdn-iport-6.cisco.com with ESMTP; 19 Dec 2012 00:35:36 +0000 Received: from xhc-aln-x10.cisco.com (xhc-aln-x10.cisco.com [173.36.12.84]) by rcdn-core2-6.cisco.com (8.14.5/8.14.5) with ESMTP id qBJ0ZZMa003310 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 19 Dec 2012 00:35:36 GMT Received: from xmb-rcd-x09.cisco.com ([169.254.9.13]) by xhc-aln-x10.cisco.com ([173.36.12.84]) with mapi id 14.02.0318.004; Tue, 18 Dec 2012 18:35:35 -0600 From: "Fred Baker (fred)" To: "Joel M. Halpern" Subject: Re: IIDs, u and g bits, and 4rd Thread-Topic: IIDs, u and g bits, and 4rd Thread-Index: AQHN3XqQ4f0Vxg86Hk69uGLb6pZQf5gfqyCA Date: Wed, 19 Dec 2012 00:35:35 +0000 Message-ID: <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> References: <50D10150.40801@joelhalpern.com> In-Reply-To: <50D10150.40801@joelhalpern.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.19.64.116] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 00:35:37 -0000 Why do we care about u and g in the first place? Is there code in an IPv6 r= outer or host that interprets them? On Dec 18, 2012, at 3:50 PM, Joel M. Halpern wrote: > In reading the discussion,a nd trying to think through what I understand = to be correct, it seems that there is an unforeseen ambiguity in the way th= e current documents about IPv6 IIDs are written. >=20 > I think that there are two possible meanings, ad we should decide explici= tly which one we want. >=20 > 1) u=3D1 means that the IID is derived from an IEEE OUI (of some form). W= ith that meaning, u=3D1, g=3D1 is clearly some sort of multi-entity identif= ier. And we should say that somewhere. >=20 > 2) u=3D1, g=3D1 was unforeseen, and we don't know what it means. In that= case, we ought to figure out how we want that portion of the IID space use= d, and write it down clearly. It seems to me that allowing this space to b= e used for special-semantic IIDs (with suitable care so that the entire eco= system is not affected by them) is a very reasonable path. >=20 > It seems unlikely that there is actual practice in the wild with u=3D1, g= =3D1 under either interpretation. We do now have a request to start using = it (4rd). So we should decide. >=20 > Yours, > Joel > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- ---------------------------------------------------- The ignorance of how to use new knowledge stockpiles exponentially.=20 - Marshall McLuhan From jmh@joelhalpern.com Tue Dec 18 17:06:46 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93B3621F8A4E for ; Tue, 18 Dec 2012 17:06:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.843 X-Spam-Level: X-Spam-Status: No, score=-101.843 tagged_above=-999 required=5 tests=[AWL=-0.178, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_101=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IOGi+2Z3K+xC for ; Tue, 18 Dec 2012 17:06:46 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 57C4021F8A45 for ; Tue, 18 Dec 2012 17:06:35 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id 5A5A2A64F7 for ; Tue, 18 Dec 2012 17:06:34 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 12BD31C077E; Tue, 18 Dec 2012 17:06:34 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [10.10.10.104] (pool-70-106-135-81.clppva.east.verizon.net [70.106.135.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 5D7CF1C02FE; Tue, 18 Dec 2012 17:06:33 -0800 (PST) Message-ID: <50D11315.3070408@joelhalpern.com> Date: Tue, 18 Dec 2012 20:06:29 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Fred Baker (fred)" Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> In-Reply-To: <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 01:06:46 -0000 As I understand it, the original intent with the U bit was to provide an easy way to create IID that were highly likely to be distinct from all other IIDs (on the link). As IEEE reserves the G bit, we marked that as special as well when the U bit was set. Changing the meaning of U=1, G=0 seems a major chane with no particular benefit. When we defined it, we were unclear about the U=1, G=1 case. Given the way the U bit is defined, U=1, G=1 can not occur in the normal course of events. We can ignore it. we can define it. We can reserve it and thn sit on our hands. But given taht we have text already, and that text is ambiguous, it seems like we should at least clear up the ambiguity. Yours, Joel On 12/18/2012 7:35 PM, Fred Baker (fred) wrote: > Why do we care about u and g in the first place? Is there code in an IPv6 router or host that interprets them? > > On Dec 18, 2012, at 3:50 PM, Joel M. Halpern wrote: > >> In reading the discussion,a nd trying to think through what I understand to be correct, it seems that there is an unforeseen ambiguity in the way the current documents about IPv6 IIDs are written. >> >> I think that there are two possible meanings, ad we should decide explicitly which one we want. >> >> 1) u=1 means that the IID is derived from an IEEE OUI (of some form). With that meaning, u=1, g=1 is clearly some sort of multi-entity identifier. And we should say that somewhere. >> >> 2) u=1, g=1 was unforeseen, and we don't know what it means. In that case, we ought to figure out how we want that portion of the IID space used, and write it down clearly. It seems to me that allowing this space to be used for special-semantic IIDs (with suitable care so that the entire ecosystem is not affected by them) is a very reasonable path. >> >> It seems unlikely that there is actual practice in the wild with u=1, g=1 under either interpretation. We do now have a request to start using it (4rd). So we should decide. >> >> Yours, >> Joel >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- > > ---------------------------------------------------- > The ignorance of how to use new knowledge stockpiles exponentially. > - Marshall McLuhan > > From fred@cisco.com Tue Dec 18 17:14:01 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 453F31F0CDF for ; Tue, 18 Dec 2012 17:14:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.256 X-Spam-Level: X-Spam-Status: No, score=-110.256 tagged_above=-999 required=5 tests=[AWL=-0.257, BAYES_00=-2.599, J_CHICKENPOX_101=0.6, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F39ugxpkYSx0 for ; Tue, 18 Dec 2012 17:14:00 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) by ietfa.amsl.com (Postfix) with ESMTP id 51D441F041A for ; Tue, 18 Dec 2012 17:14:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3343; q=dns/txt; s=iport; t=1355879640; x=1357089240; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=t1TQNn4uFq/XujMUZOtjpPtIPgPE5T6NtKnIjvnHcWA=; b=jG940lY7NkmMGw69zkCa0Y3mip77LimT37ogjwvfXqeDSnyLMJkcqi63 mUAEX07pVJIvRBpDO9YJ+4P1MZdPTDXcSSSJ+WjKGUnwlZ207CRbuhJm7 AJwFiuJAA1iVaM1wDFUNiJcwFc1jVIAmW1Ioc0X0GZlIGyY5yqetqM/zI M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EABUU0VCtJV2d/2dsb2JhbABFvisWc4IeAQEBAwEBAQFrCwULAgEIGAokJwslAgQOBQiIBQYMqiyOCQSMSYNiYQOILJ4mgmcNgiI X-IronPort-AV: E=Sophos;i="4.84,313,1355097600"; d="scan'208";a="154477602" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-4.cisco.com with ESMTP; 19 Dec 2012 01:13:59 +0000 Received: from xhc-rcd-x03.cisco.com (xhc-rcd-x03.cisco.com [173.37.183.77]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id qBJ1DwAI020204 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 19 Dec 2012 01:13:59 GMT Received: from xmb-rcd-x09.cisco.com ([169.254.9.13]) by xhc-rcd-x03.cisco.com ([173.37.183.77]) with mapi id 14.02.0318.004; Tue, 18 Dec 2012 19:13:58 -0600 From: "Fred Baker (fred)" To: "Joel M. Halpern" Subject: Re: IIDs, u and g bits, and 4rd Thread-Topic: IIDs, u and g bits, and 4rd Thread-Index: AQHN3XqQ4f0Vxg86Hk69uGLb6pZQf5gfqyCAgAAIpoCAAAIUgA== Date: Wed, 19 Dec 2012 01:13:58 +0000 Message-ID: <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> In-Reply-To: <50D11315.3070408@joelhalpern.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.19.64.116] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <54F51112A84EB3449C5ECF6EEB806443@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 01:14:01 -0000 As you know, the EUI-64 address is but one of the seeds that an EID can be = generated from. Having been generated, it's a bit string, and another bit s= tring either equals it or doesn't. You didn't answer my question. What, on an IPv6 host or router, cares about the g bit apart from the code = that uses an EUI-48 or EUI-64 to create an EID? What starts from an EID and= extracts from it an EUI-64/48 address, or in any other way interprets the = g flag in an EID?=20 u and g are a recurring theme. Apart from the people who wrote RFC 4291, wh= o are under the delusion that the only link layer in the world is an Ethern= et, who actually cares? On Dec 18, 2012, at 5:06 PM, Joel M. Halpern wrote: > As I understand it, the original intent with the U bit was to provide an = easy way to create IID that were highly likely to be distinct from all othe= r IIDs (on the link). As IEEE reserves the G bit, we marked that as specia= l as well when the U bit was set. >=20 > Changing the meaning of U=3D1, G=3D0 seems a major chane with no particul= ar benefit. >=20 > When we defined it, we were unclear about the U=3D1, G=3D1 case. Given t= he way the U bit is defined, U=3D1, G=3D1 can not occur in the normal cours= e of events. We can ignore it. we can define it. We can reserve it and t= hn sit on our hands. But given taht we have text already, and that text is= ambiguous, it seems like we should at least clear up the ambiguity. >=20 > Yours, > Joel >=20 > On 12/18/2012 7:35 PM, Fred Baker (fred) wrote: >> Why do we care about u and g in the first place? Is there code in an IPv= 6 router or host that interprets them? >>=20 >> On Dec 18, 2012, at 3:50 PM, Joel M. Halpern wrote: >>=20 >>> In reading the discussion,a nd trying to think through what I understan= d to be correct, it seems that there is an unforeseen ambiguity in the way = the current documents about IPv6 IIDs are written. >>>=20 >>> I think that there are two possible meanings, ad we should decide expli= citly which one we want. >>>=20 >>> 1) u=3D1 means that the IID is derived from an IEEE OUI (of some form).= With that meaning, u=3D1, g=3D1 is clearly some sort of multi-entity ident= ifier. And we should say that somewhere. >>>=20 >>> 2) u=3D1, g=3D1 was unforeseen, and we don't know what it means. In th= at case, we ought to figure out how we want that portion of the IID space u= sed, and write it down clearly. It seems to me that allowing this space to= be used for special-semantic IIDs (with suitable care so that the entire e= cosystem is not affected by them) is a very reasonable path. >>>=20 >>> It seems unlikely that there is actual practice in the wild with u=3D1,= g=3D1 under either interpretation. We do now have a request to start usin= g it (4rd). So we should decide. >>>=20 >>> Yours, >>> Joel >>> -------------------------------------------------------------------- >>> IETF IPv6 working group mailing list >>> ipv6@ietf.org >>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>> -------------------------------------------------------------------- >>=20 >> ---------------------------------------------------- >> The ignorance of how to use new knowledge stockpiles exponentially. >> - Marshall McLuhan >>=20 >>=20 From jmh@joelhalpern.com Tue Dec 18 17:16:25 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F24921E8030 for ; Tue, 18 Dec 2012 17:16:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.827 X-Spam-Level: X-Spam-Status: No, score=-101.827 tagged_above=-999 required=5 tests=[AWL=-0.162, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_101=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WC-NePr2CClM for ; Tue, 18 Dec 2012 17:16:25 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 1CDA11F041A for ; Tue, 18 Dec 2012 17:16:25 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id B5CBFA68FB for ; Tue, 18 Dec 2012 17:16:23 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 9460B1C004F; Tue, 18 Dec 2012 17:16:23 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [10.10.10.104] (pool-70-106-135-81.clppva.east.verizon.net [70.106.135.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id A88231C02FE; Tue, 18 Dec 2012 17:16:22 -0800 (PST) Message-ID: <50D11562.4010203@joelhalpern.com> Date: Tue, 18 Dec 2012 20:16:18 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Fred Baker (fred)" Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> In-Reply-To: <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 01:16:25 -0000 Phrased that way, I do not think any stack anywhere looks at the U or G its in a received IPv6 address. I have no problem if we declare hem to be irrelevant. Your, Joel On 12/18/2012 8:13 PM, Fred Baker (fred) wrote: > As you know, the EUI-64 address is but one of the seeds that an EID can be generated from. Having been generated, it's a bit string, and another bit string either equals it or doesn't. > > You didn't answer my question. > > What, on an IPv6 host or router, cares about the g bit apart from the code that uses an EUI-48 or EUI-64 to create an EID? What starts from an EID and extracts from it an EUI-64/48 address, or in any other way interprets the g flag in an EID? > > u and g are a recurring theme. Apart from the people who wrote RFC 4291, who are under the delusion that the only link layer in the world is an Ethernet, who actually cares? > > On Dec 18, 2012, at 5:06 PM, Joel M. Halpern wrote: > >> As I understand it, the original intent with the U bit was to provide an easy way to create IID that were highly likely to be distinct from all other IIDs (on the link). As IEEE reserves the G bit, we marked that as special as well when the U bit was set. >> >> Changing the meaning of U=1, G=0 seems a major chane with no particular benefit. >> >> When we defined it, we were unclear about the U=1, G=1 case. Given the way the U bit is defined, U=1, G=1 can not occur in the normal course of events. We can ignore it. we can define it. We can reserve it and thn sit on our hands. But given taht we have text already, and that text is ambiguous, it seems like we should at least clear up the ambiguity. >> >> Yours, >> Joel >> >> On 12/18/2012 7:35 PM, Fred Baker (fred) wrote: >>> Why do we care about u and g in the first place? Is there code in an IPv6 router or host that interprets them? >>> >>> On Dec 18, 2012, at 3:50 PM, Joel M. Halpern wrote: >>> >>>> In reading the discussion,a nd trying to think through what I understand to be correct, it seems that there is an unforeseen ambiguity in the way the current documents about IPv6 IIDs are written. >>>> >>>> I think that there are two possible meanings, ad we should decide explicitly which one we want. >>>> >>>> 1) u=1 means that the IID is derived from an IEEE OUI (of some form). With that meaning, u=1, g=1 is clearly some sort of multi-entity identifier. And we should say that somewhere. >>>> >>>> 2) u=1, g=1 was unforeseen, and we don't know what it means. In that case, we ought to figure out how we want that portion of the IID space used, and write it down clearly. It seems to me that allowing this space to be used for special-semantic IIDs (with suitable care so that the entire ecosystem is not affected by them) is a very reasonable path. >>>> >>>> It seems unlikely that there is actual practice in the wild with u=1, g=1 under either interpretation. We do now have a request to start using it (4rd). So we should decide. >>>> >>>> Yours, >>>> Joel >>>> -------------------------------------------------------------------- >>>> IETF IPv6 working group mailing list >>>> ipv6@ietf.org >>>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>>> -------------------------------------------------------------------- >>> >>> ---------------------------------------------------- >>> The ignorance of how to use new knowledge stockpiles exponentially. >>> - Marshall McLuhan >>> >>> > > From brian.e.carpenter@gmail.com Wed Dec 19 00:23:54 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B048521F85A2 for ; Wed, 19 Dec 2012 00:23:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.303 X-Spam-Level: X-Spam-Status: No, score=-101.303 tagged_above=-999 required=5 tests=[AWL=-0.212, BAYES_00=-2.599, J_CHICKENPOX_101=0.6, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wc38QyXe82wr for ; Wed, 19 Dec 2012 00:23:54 -0800 (PST) Received: from mail-wi0-f179.google.com (mail-wi0-f179.google.com [209.85.212.179]) by ietfa.amsl.com (Postfix) with ESMTP id B32DA21F84DE for ; Wed, 19 Dec 2012 00:23:53 -0800 (PST) Received: by mail-wi0-f179.google.com with SMTP id o1so989626wic.0 for ; Wed, 19 Dec 2012 00:23:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=gxv4eTZGsYPwrHcvBVlPjW2vnthz8ZuQFMiso6yfuuk=; b=iQRHmmswHKFxfEI5QBm6S0zepCcvg0nTPUt9dQOPbcmSWNZr6EzoBYQTTQbWliAjVn ZhEV5QUhmAlPFEayOUP8ZpDuXngjvh6DKqVVJbk+GvCWKy/EE8mat8abXnbnE24b1OXU MkAc4thEdgdW4O049dwfjigjRNQLfVwG/QerBp9ywTgJQW8FPqK/7jSsD8ZqsqETErng VATJzyGIAe5U4b7hgJGS37CV+tbyk1KL6sji68f5JlMNhdok2BPTiCGzqHJCViYqz4A8 zwr/pi75GVHZDpjy+yjYP5ClEnFUL+SlnUeS741Ok6hdMO4oXa1KqBzwAG4AMGTmRkDt ycGw== X-Received: by 10.180.20.177 with SMTP id o17mr2360081wie.24.1355905428717; Wed, 19 Dec 2012 00:23:48 -0800 (PST) Received: from [192.168.1.65] (host-2-102-217-235.as13285.net. [2.102.217.235]) by mx.google.com with ESMTPS id t17sm6772770wiv.6.2012.12.19.00.23.47 (version=SSLv3 cipher=OTHER); Wed, 19 Dec 2012 00:23:47 -0800 (PST) Message-ID: <50D1799A.40307@gmail.com> Date: Wed, 19 Dec 2012 08:23:54 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: "Joel M. Halpern" Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> <50D11562.4010203@joelhalpern.com> In-Reply-To: <50D11562.4010203@joelhalpern.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 08:23:54 -0000 On 19/12/2012 01:16, Joel M. Halpern wrote: > Phrased that way, I do not think any stack anywhere looks at the U or G > its in a received IPv6 address. That's why I asked if ILNP depends on the u bit. You presumably saw Ran's reply, including "The U bit does have value for ILNP." > I have no problem if we declare hem to be irrelevant. If we could, IMHO it would be a step forward. But that needs a debate. Brian > > Your, > Joel > > On 12/18/2012 8:13 PM, Fred Baker (fred) wrote: >> As you know, the EUI-64 address is but one of the seeds that an EID >> can be generated from. Having been generated, it's a bit string, and >> another bit string either equals it or doesn't. >> >> You didn't answer my question. >> >> What, on an IPv6 host or router, cares about the g bit apart from the >> code that uses an EUI-48 or EUI-64 to create an EID? What starts from >> an EID and extracts from it an EUI-64/48 address, or in any other way >> interprets the g flag in an EID? >> >> u and g are a recurring theme. Apart from the people who wrote RFC >> 4291, who are under the delusion that the only link layer in the world >> is an Ethernet, who actually cares? >> >> On Dec 18, 2012, at 5:06 PM, Joel M. Halpern wrote: >> >>> As I understand it, the original intent with the U bit was to provide >>> an easy way to create IID that were highly likely to be distinct from >>> all other IIDs (on the link). As IEEE reserves the G bit, we marked >>> that as special as well when the U bit was set. >>> >>> Changing the meaning of U=1, G=0 seems a major chane with no >>> particular benefit. >>> >>> When we defined it, we were unclear about the U=1, G=1 case. Given >>> the way the U bit is defined, U=1, G=1 can not occur in the normal >>> course of events. We can ignore it. we can define it. We can >>> reserve it and thn sit on our hands. But given taht we have text >>> already, and that text is ambiguous, it seems like we should at least >>> clear up the ambiguity. >>> >>> Yours, >>> Joel >>> >>> On 12/18/2012 7:35 PM, Fred Baker (fred) wrote: >>>> Why do we care about u and g in the first place? Is there code in an >>>> IPv6 router or host that interprets them? >>>> >>>> On Dec 18, 2012, at 3:50 PM, Joel M. Halpern wrote: >>>> >>>>> In reading the discussion,a nd trying to think through what I >>>>> understand to be correct, it seems that there is an unforeseen >>>>> ambiguity in the way the current documents about IPv6 IIDs are >>>>> written. >>>>> >>>>> I think that there are two possible meanings, ad we should decide >>>>> explicitly which one we want. >>>>> >>>>> 1) u=1 means that the IID is derived from an IEEE OUI (of some >>>>> form). With that meaning, u=1, g=1 is clearly some sort of >>>>> multi-entity identifier. And we should say that somewhere. >>>>> >>>>> 2) u=1, g=1 was unforeseen, and we don't know what it means. In >>>>> that case, we ought to figure out how we want that portion of the >>>>> IID space used, and write it down clearly. It seems to me that >>>>> allowing this space to be used for special-semantic IIDs (with >>>>> suitable care so that the entire ecosystem is not affected by them) >>>>> is a very reasonable path. >>>>> >>>>> It seems unlikely that there is actual practice in the wild with >>>>> u=1, g=1 under either interpretation. We do now have a request to >>>>> start using it (4rd). So we should decide. >>>>> >>>>> Yours, >>>>> Joel >>>>> -------------------------------------------------------------------- >>>>> IETF IPv6 working group mailing list >>>>> ipv6@ietf.org >>>>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>>>> -------------------------------------------------------------------- >>>> >>>> ---------------------------------------------------- >>>> The ignorance of how to use new knowledge stockpiles exponentially. >>>> - Marshall McLuhan >>>> >>>> >> >> > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > From v6ops@globis.net Wed Dec 19 01:03:56 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 311FD21F8519 for ; Wed, 19 Dec 2012 01:03:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_101=0.6, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wJiw+PCPtd-1 for ; Wed, 19 Dec 2012 01:03:55 -0800 (PST) Received: from globis01.globis.net (mail.globis.net [87.195.182.18]) by ietfa.amsl.com (Postfix) with ESMTP id EF69A21F84E6 for ; Wed, 19 Dec 2012 01:03:54 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by globis01.globis.net (Postfix) with ESMTP id 8EF108700EE; Wed, 19 Dec 2012 09:58:37 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at globis01.globis.net Received: from globis01.globis.net ([127.0.0.1]) by localhost (mail.globis.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Iigr5GvjRoDG; Wed, 19 Dec 2012 09:58:04 +0100 (CET) Received: from Rays-iMac-2.local (unknown [192.168.0.3]) (Authenticated sender: Ray.Hunter@globis.net) by globis01.globis.net (Postfix) with ESMTPA id 487A0870085; Wed, 19 Dec 2012 09:58:04 +0100 (CET) Message-ID: <50D18196.2070501@globis.net> Date: Wed, 19 Dec 2012 09:57:58 +0100 From: Ray Hunter User-Agent: Postbox 3.0.6 (Macintosh/20121022) MIME-Version: 1.0 To: "Joel M. Halpern" Subject: Re: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> In-Reply-To: <50D11315.3070408@joelhalpern.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 09:03:56 -0000 OK I'll bite. All IMVHO. In answer to Fred's question, to me the current problem is on the end hosts and not on existing intermediate devices. There are many different ways to assign IPv6 addresses, including manual assignment, that can all run simultaneously on the same interface/link and the same /64 prefix. New IDs are still being generated on address assignment even today e.g. https://datatracker.ietf.org/doc/draft-gont-6man-stable-privacy-addresses & 4rd https://datatracker.ietf.org/doc/draft-ietf-softwire-4rd/. I'm sure there'll be many more in the future. Some of those ID's do put additional semantics into the IID. Others don't. Some of those that use semantics in the IID sometimes do not rely on DAD to detect assignment clashes. It seems to me with the benefit of hindsight that a fundamentally better approach would have been to reserve many more bits in the IID, or in RA PIO, to create mutually exclusive subspaces per assignment mechanism or per class of assignment mechanism, but that train has probably left the station long ago, and that now assigning a huge block of space for u=1 g=1 exclusively for a tunnel protocol like 4rd is fundamentally unfair and restrictive for future assignment mechanisms. Also having addresses assigned without performing DAD would seem a bad move to me on any prefix with more than one address assignment scheme running. Besides, who will guarantee that the IEEE won't come up with some future use for u=1 g=1? I'm not even sure the IETF should define these semantics. So in response to Joel, I'd humbly suggest defining u=1 g=1 as reserved for future use (to be defined in conjunction with the IEEE). To me, an alternative for consideration for 4rd would be either to use a dedicated IEEE-defined special-purpose OUI (together with an additional rd4 specific header for any remaining bits that cannot be encoded directly in the IID/IPv6 address), or to use locally assigned IIDs starting with binary 000 and ensure no other locally assigned IIDs are running on this particular scope. That should avoid changing any other standards or existing implementations. regards, RayH Joel M. Halpern wrote: > As I understand it, the original intent with the U bit was to provide > an easy way to create IID that were highly likely to be distinct from > all other IIDs (on the link). As IEEE reserves the G bit, we marked > that as special as well when the U bit was set. > > Changing the meaning of U=1, G=0 seems a major chane with no > particular benefit. > > When we defined it, we were unclear about the U=1, G=1 case. Given > the way the U bit is defined, U=1, G=1 can not occur in the normal > course of events. We can ignore it. we can define it. We can > reserve it and thn sit on our hands. But given taht we have text > already, and that text is ambiguous, it seems like we should at least > clear up the ambiguity. > > Yours, > Joel > > On 12/18/2012 7:35 PM, Fred Baker (fred) wrote: >> Why do we care about u and g in the first place? Is there code in an >> IPv6 router or host that interprets them? >> >> On Dec 18, 2012, at 3:50 PM, Joel M. Halpern wrote: >> >>> In reading the discussion,a nd trying to think through what I >>> understand to be correct, it seems that there is an unforeseen >>> ambiguity in the way the current documents about IPv6 IIDs are written. >>> >>> I think that there are two possible meanings, ad we should decide >>> explicitly which one we want. >>> >>> 1) u=1 means that the IID is derived from an IEEE OUI (of some >>> form). With that meaning, u=1, g=1 is clearly some sort of >>> multi-entity identifier. And we should say that somewhere. >>> >>> 2) u=1, g=1 was unforeseen, and we don't know what it means. In >>> that case, we ought to figure out how we want that portion of the >>> IID space used, and write it down clearly. It seems to me that >>> allowing this space to be used for special-semantic IIDs (with >>> suitable care so that the entire ecosystem is not affected by them) >>> is a very reasonable path. >>> >>> It seems unlikely that there is actual practice in the wild with >>> u=1, g=1 under either interpretation. We do now have a request to >>> start using it (4rd). So we should decide. >>> >>> Yours, >>> Joel >>> -------------------------------------------------------------------- >>> IETF IPv6 working group mailing list >>> ipv6@ietf.org >>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >>> -------------------------------------------------------------------- >> >> ---------------------------------------------------- >> The ignorance of how to use new knowledge stockpiles exponentially. >> - Marshall McLuhan >> >> > From despres.remi@laposte.net Wed Dec 19 01:24:49 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDBB421F8884 for ; Wed, 19 Dec 2012 01:24:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.572 X-Spam-Level: X-Spam-Status: No, score=-1.572 tagged_above=-999 required=5 tests=[AWL=-0.223, BAYES_00=-2.599, HELO_EQ_FR=0.35, J_CHICKENPOX_101=0.6, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KzSayWQt-M48 for ; Wed, 19 Dec 2012 01:24:49 -0800 (PST) Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr [93.17.128.22]) by ietfa.amsl.com (Postfix) with ESMTP id 65A6921F85CC for ; Wed, 19 Dec 2012 01:24:42 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2317.sfr.fr (SMTP Server) with ESMTP id 9D91370001A0; Wed, 19 Dec 2012 10:24:41 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2317.sfr.fr (SMTP Server) with ESMTP id EFBC670001AF; Wed, 19 Dec 2012 10:24:34 +0100 (CET) X-SFR-UUID: 20121219092434982.EFBC670001AF@msfrf2317.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> Date: Wed, 19 Dec 2012 10:24:34 +0100 Message-Id: <7DB235F1-7490-4D93-8674-B34A3CE40216@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> To: Fred Baker X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 09:24:50 -0000 Hello, Fred, 2012-12-19 01:35, Fred Baker (fred) : > Why do we care about u and g in the first place? Is there code in an = IPv6 router or host that interprets them? The current situation is AFAIK the following: (a) No RFC implies behaviors that differ depending on whether g=3D0 or = g=3D1 in received IIDs. (b) On the contrary, in the SLAAC privacy extension of RFC 4941, which = has u=3D0, addresses can be unicast although they have g=3D1. The IEEE = semantic of group addresses must explicitly be ignored in this case. (c) In the Identifier-Locator Network Protocol of RFC 6741 (ILNP), the = IEEE semantic of g=3D0 applies to unicast addresses (section 3). = Besides, "ILNP uses IPv6 multicast for ILNPv6", which implies that = addresses are not concerned with IID formats (RFC 4291 sec 2.7). Other = formats are envisaged but explicitly depend on further work. The u=3Dg=3D1= remains unused. Regards, RD >=20 > On Dec 18, 2012, at 3:50 PM, Joel M. Halpern wrote: >=20 >> In reading the discussion,a nd trying to think through what I = understand to be correct, it seems that there is an unforeseen ambiguity = in the way the current documents about IPv6 IIDs are written. >>=20 >> I think that there are two possible meanings, ad we should decide = explicitly which one we want. >>=20 >> 1) u=3D1 means that the IID is derived from an IEEE OUI (of some = form). With that meaning, u=3D1, g=3D1 is clearly some sort of = multi-entity identifier. And we should say that somewhere. >>=20 >> 2) u=3D1, g=3D1 was unforeseen, and we don't know what it means. In = that case, we ought to figure out how we want that portion of the IID = space used, and write it down clearly. It seems to me that allowing = this space to be used for special-semantic IIDs (with suitable care so = that the entire ecosystem is not affected by them) is a very reasonable = path. >>=20 >> It seems unlikely that there is actual practice in the wild with u=3D1,= g=3D1 under either interpretation. We do now have a request to start = using it (4rd). So we should decide. >>=20 >> Yours, >> Joel >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >=20 > ---------------------------------------------------- > The ignorance of how to use new knowledge stockpiles exponentially.=20 > - Marshall McLuhan >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From despres.remi@laposte.net Wed Dec 19 01:46:01 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69E7221F893E for ; Wed, 19 Dec 2012 01:46:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.925 X-Spam-Level: X-Spam-Status: No, score=-0.925 tagged_above=-999 required=5 tests=[AWL=-0.835, BAYES_20=-0.74, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yAsNlf21zZ+w for ; Wed, 19 Dec 2012 01:46:01 -0800 (PST) Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr [93.17.128.22]) by ietfa.amsl.com (Postfix) with ESMTP id E3B7621F894F for ; Wed, 19 Dec 2012 01:46:00 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2317.sfr.fr (SMTP Server) with ESMTP id ADF287000136; Wed, 19 Dec 2012 10:45:59 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2317.sfr.fr (SMTP Server) with ESMTP id F1EDD70000BF; Wed, 19 Dec 2012 10:45:49 +0100 (CET) X-SFR-UUID: 20121219094549991.F1EDD70000BF@msfrf2317.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D18196.2070501@globis.net> Date: Wed, 19 Dec 2012 10:45:49 +0100 Message-Id: <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> To: Ray Hunter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Cc: "ipv6@ietf.org" , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 09:46:01 -0000 Hello, Ray, 2012-12-19 09:57, Ray Hunter : ... > It seems to me with the benefit of hindsight that a fundamentally = better > approach would have been to reserve many more bits in the IID, or in = RA > PIO, to create mutually exclusive subspaces per assignment mechanism = or > per class of assignment mechanism, but that train has probably left = the > station long ago, and that now assigning a huge block of space for u=3D1= > g=3D1 exclusively for a tunnel protocol like 4rd is fundamentally = unfair > and restrictive for future assignment mechanisms. The proposal is precisely to use the only remaining unused pattern = (u=3Dg=3D1) as an escape mechanism FOR ALL future IID formats.=20 (Among IIDs having u=3Dg=3D1, 4rd is proposed to reserve only IIDs = starting with 00000011, i.e. 1/64th of the left space.)=20 In my understanding, this exactly what you are looking for in view of = constraints of compatibility with past decisions. =20 Note that, with the 4rd specification as is, the 4rd reserved pattern = could even be 0000001100000000, i.e. 1/16384 of the left space. Hoping it clarifies, Regards, RD From v6ops@globis.net Wed Dec 19 02:26:37 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A39A021F8942 for ; Wed, 19 Dec 2012 02:26:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.349 X-Spam-Level: X-Spam-Status: No, score=-3.349 tagged_above=-999 required=5 tests=[AWL=-0.050, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f3+U9erR1BeH for ; Wed, 19 Dec 2012 02:26:37 -0800 (PST) Received: from globis01.globis.net (mail.globis.net [87.195.182.18]) by ietfa.amsl.com (Postfix) with ESMTP id 9311F21F878F for ; Wed, 19 Dec 2012 02:26:36 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by globis01.globis.net (Postfix) with ESMTP id B03F787010A; Wed, 19 Dec 2012 11:21:19 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at globis01.globis.net Received: from globis01.globis.net ([127.0.0.1]) by localhost (mail.globis.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tDuMD+5efRqw; Wed, 19 Dec 2012 11:21:02 +0100 (CET) Received: from Rays-iMac-2.local (unknown [192.168.0.3]) (Authenticated sender: Ray.Hunter@globis.net) by globis01.globis.net (Postfix) with ESMTPA id B27868700F6; Wed, 19 Dec 2012 11:21:02 +0100 (CET) Message-ID: <50D19508.4030808@globis.net> Date: Wed, 19 Dec 2012 11:20:56 +0100 From: Ray Hunter User-Agent: Postbox 3.0.6 (Macintosh/20121022) MIME-Version: 1.0 To: =?ISO-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> In-Reply-To: <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Cc: "ipv6@ietf.org" , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 10:26:37 -0000 > Rémi Després > 19 December 2012 10:45 > Hello, Ray, > > 2012-12-19 09:57, Ray Hunter : > ... > > The proposal is precisely to use the only remaining unused pattern > (u=g=1) as an escape mechanism FOR ALL future IID formats. > (Among IIDs having u=g=1, 4rd is proposed to reserve only IIDs > starting with 00000011, i.e. 1/64th of the left space.) > > In my understanding, this exactly what you are looking for in view of > constraints of compatibility with past decisions. > > Note that, with the 4rd specification as is, the 4rd reserved pattern > could even be 0000001100000000, i.e. 1/16384 of the left space. > > Hoping it clarifies, > Regards, > RD > I already understood this [I do read all posts on this list, even if I don't post replies]. My points are: 1) I am not comfortable with the IETF overloading IEEE semantics: the semantics of g & u bits aren't exclusively ours to assign. The combination g=1 u=1 is not unused as you state: that's IEEE OUI assigned multicast. It is only in combination with IETF IPv6 unicast address space that they are deemed "ambiguous". 2) They may be used for something else in the future (and potentially by the IEEE without reference to the IETF) You want to use the using the existing (ambiguous) combination u=1 g=1 EUI-64 and IPv6 unicast to statelessly map IPv4 over IPv6 unicast (or as an escape for other IID formats). Given that large scale deployment of multicast in general (and multicast IPv6 routing in particular) is still very much in its infancy, someone might well want to map the whole IEEE EUI-64 multicast addresses statelessly also using u=1 g=1 into unicast IPv6. And any use by 4rd would likely prevent that mapping unless 4rd is assigned it's own OUI. I understand that the base requirements for 4rd are that 1) every node has to have the potential to be able to easily assign an identifier for terminating a 4rd tunnel from existing IPv6 space if possible 2) stateless 4rd gateways have to be able to easily recognise 4rd traffic (without explicitly configuring a tunnel or IPv6 address space in advance) 3) IPv4 space (potentially overloaded with RFC1918) has to be mapped transparently, symmetrically, and easily, over the 4rd tunnel at the 4rd endpoints and the 4rd gateways. I see no requirement that *all* of the above requirements need to be encoded directly into the IPv6 IID. Existing nodes that do not process 4rd at all do not need 3) Hence my suggestion to investigate using an alternative of an IEEE assigned OUI for 1&2 together with standard IPv6 SLAAC (without changing any existing standards at all) and add an additional 4rd header for 3) to add any additional information that is 4rd specific. I don't think that would fundamentally change your existing ID at all, just how the specific bits are packaged into an IPv6 unicast packet. This also having the advantage that if ever there was an 4rdv2 you'd have a lot more to play with in your 4rd specific header. regards, RayH > Ray Hunter > 19 December 2012 09:57 > OK I'll bite. All IMVHO. > > In answer to Fred's question, to me the current problem is on the end > hosts and not on existing intermediate devices. > > There are many different ways to assign IPv6 addresses, including manual > assignment, that can all run simultaneously on the same interface/link > and the same /64 prefix. New IDs are still being generated on address > assignment even today e.g. > https://datatracker.ietf.org/doc/draft-gont-6man-stable-privacy-addresses > & > 4rd https://datatracker.ietf.org/doc/draft-ietf-softwire-4rd/. I'm sure > there'll be many more in the future. > > Some of those ID's do put additional semantics into the IID. Others don't. > > Some of those that use semantics in the IID sometimes do not rely on DAD > to detect assignment clashes. > > It seems to me with the benefit of hindsight that a fundamentally better > approach would have been to reserve many more bits in the IID, or in RA > PIO, to create mutually exclusive subspaces per assignment mechanism or > per class of assignment mechanism, but that train has probably left the > station long ago, and that now assigning a huge block of space for u=1 > g=1 exclusively for a tunnel protocol like 4rd is fundamentally unfair > and restrictive for future assignment mechanisms. Also having addresses > assigned without performing DAD would seem a bad move to me on any > prefix with more than one address assignment scheme running. > > Besides, who will guarantee that the IEEE won't come up with some future > use for u=1 g=1? I'm not even sure the IETF should define these semantics. > So in response to Joel, I'd humbly suggest defining u=1 g=1 as reserved > for future use (to be defined in conjunction with the IEEE). > > To me, an alternative for consideration for 4rd would be either to use a > dedicated IEEE-defined special-purpose OUI (together with an additional > rd4 specific header for any remaining bits that cannot be encoded > directly in the IID/IPv6 address), or to use locally assigned IIDs > starting with binary 000 and ensure no other locally assigned IIDs are > running on this particular scope. That should avoid changing any other > standards or existing implementations. > > regards, > RayH > ------------------------------------------------------------------------ From roland.bless@kit.edu Wed Dec 19 04:15:07 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FC3521F8A94 for ; Wed, 19 Dec 2012 04:15:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.249 X-Spam-Level: X-Spam-Status: No, score=-6.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JtsH86hFab0j for ; Wed, 19 Dec 2012 04:15:07 -0800 (PST) Received: from iramx2.ira.uni-karlsruhe.de (iramx2.ira.uni-karlsruhe.de [141.3.10.81]) by ietfa.amsl.com (Postfix) with ESMTP id C96F921F8A0A for ; Wed, 19 Dec 2012 04:15:05 -0800 (PST) Received: from irams1.ira.uni-karlsruhe.de ([141.3.10.5]) by iramx2.ira.uni-karlsruhe.de with esmtps port 25 id 1TlIY6-000615-VA for ; Wed, 19 Dec 2012 13:15:03 +0100 Received: from i72vorta.tm.uni-karlsruhe.de ([141.3.71.26] helo=vorta.tm.kit.edu) by irams1.ira.uni-karlsruhe.de with esmtp port 25 for id 1TlIY6-0000qZ-Nl; Wed, 19 Dec 2012 13:14:58 +0100 Received: from [IPv6:::1] (ip6-localhost [IPv6:::1]) by vorta.tm.kit.edu (Postfix) with ESMTPS id 250D6A80758 for ; Wed, 19 Dec 2012 13:14:58 +0100 (CET) Message-ID: <50D1AFC2.5010704@kit.edu> Date: Wed, 19 Dec 2012 13:14:58 +0100 From: "Bless, Roland (TM)" Organization: Institute of Telematics, Karlsruhe Institute of Technology User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: ipv6@ietf.org Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> In-Reply-To: <50D19508.4030808@globis.net> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-ATIS-AV: ClamAV (irams1.ira.uni-karlsruhe.de) X-ATIS-AV: Kaspersky (iramx2.ira.uni-karlsruhe.de) X-ATIS-AV: ClamAV (iramx2.ira.uni-karlsruhe.de) X-ATIS-Timestamp: iramx2.ira.uni-karlsruhe.de 1355919303.974821000 X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 12:15:07 -0000 Hi, it's not really clear to me what (particular) problem we are trying to solve here. I don't think that it's a good idea to introduce a structure into the IID. The IID space is usually flat and the u- and g-bit semantics are only relevant in the IEEE EUI format. It's clear that we map them somehow into the IID if creating a modified EUI-64 as IID, but I don't think that we should derive something _from_ the IID (yes, I know that also RFC4941 cares about setting the u-bit, but it's not really clear that we gain anything from it?). I briefly read into the 4rd draft, but it's not entirely clear to me whether other solutions don't exist. Maybe there are other means to get the context knowledge that this particular IPv6 address has a special structure encoded somehow. Regards, Roland From margaretw42@gmail.com Tue Dec 18 17:59:25 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 089F021F869E for ; Tue, 18 Dec 2012 17:59:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.549 X-Spam-Level: X-Spam-Status: No, score=-3.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZATgMhU0Y1Iz for ; Tue, 18 Dec 2012 17:59:24 -0800 (PST) Received: from mail-vb0-f46.google.com (mail-vb0-f46.google.com [209.85.212.46]) by ietfa.amsl.com (Postfix) with ESMTP id 7052821F8549 for ; Tue, 18 Dec 2012 17:59:24 -0800 (PST) Received: by mail-vb0-f46.google.com with SMTP id b13so1739339vby.33 for ; Tue, 18 Dec 2012 17:59:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=Ahw+epMMEpI3ZDfaU/isNKT3LdM7yHHNI4fSyid5bxY=; b=YWdphidhWVBQo1FW16+Jf2G+HNnJLPmC1xxpyra3tmhoP7oTVyG+pD7ddX/k9lekaS h/oEEUDcqFK05qTLANCT8YVO/lkicIZPUhZI6fK0hBBaTPzuWerAxzuzXiWcGlWMpt1E gkU90rmIZNRRaceIjXX9oxUaTFZOkk8j+rIqxrzo9V1tdhvlHZGLh2mO2/0rsrXuIEGE dEAAbYPjmWTYhj3LJYdrPwHmesX1tFUS05eop1uZTVmHKWj3RjEHT1WRvG1XexBUDpo9 03s5Q6RsFSgNt0kXjCpiXlmb4m2036qOozV+pRQYDA4egp37vSJg1sDGnvy1iEk9EAUc fxaQ== X-Received: by 10.52.66.71 with SMTP id d7mr5549184vdt.121.1355882363579; Tue, 18 Dec 2012 17:59:23 -0800 (PST) Received: from new-host-4.home (pool-71-184-79-25.bstnma.fios.verizon.net. [71.184.79.25]) by mx.google.com with ESMTPS id yf5sm2808848veb.13.2012.12.18.17.59.18 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 18 Dec 2012 17:59:20 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Review requested: draft-ietf-mif-dhcpv6-route-option From: Margaret Wasserman In-Reply-To: Date: Tue, 18 Dec 2012 20:59:20 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <28BF23E1-DB4D-4016-A5F7-E4C44301824E@gmail.com> References: To: Wes Beebee X-Mailer: Apple Mail (2.1499) X-Mailman-Approved-At: Wed, 19 Dec 2012 04:25:30 -0800 Cc: Bob Hinden , Brian Haberman , 6man-ads@tools.ietf.org, IPv6 WG Mailing List , mif-chairs@tools.ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 01:59:25 -0000 Hi Wes, On Oct 28, 2011, at 1:52 PM, Wes Beebee wrote: > What happens when both RA and DHCPv6 are configured? Both sets of routes are configured. This is exactly analogous to a situation where RAs are used and an = administrator has configured some routes using a configuration tool like = "route" on unix systems. Margaret From otroan@employees.org Wed Dec 19 04:37:51 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE2DA21F8B0E for ; Wed, 19 Dec 2012 04:37:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.468 X-Spam-Level: X-Spam-Status: No, score=-10.468 tagged_above=-999 required=5 tests=[AWL=0.131, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RvRU0cnY2T+O for ; Wed, 19 Dec 2012 04:37:51 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by ietfa.amsl.com (Postfix) with ESMTP id DAA7D21F8B02 for ; Wed, 19 Dec 2012 04:37:50 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgYHABG00VCQ/khR/2dsb2JhbABFDoM6ujoWc4IeAQEEATo/BQsLRlcGLodyBgy4QJAtYQOXJo8sgjY/ X-IronPort-AV: E=Sophos;i="4.84,316,1355097600"; d="scan'208";a="148560984" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-1.cisco.com with ESMTP; 19 Dec 2012 12:37:50 +0000 Received: from dhcp-lys01-vla250-10-147-112-193.cisco.com (dhcp-lys01-vla250-10-147-112-193.cisco.com [10.147.112.193]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBJCbnJp016049 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 19 Dec 2012 12:37:49 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: Ole Troan In-Reply-To: <50D1AFC2.5010704@kit.edu> Date: Wed, 19 Dec 2012 13:37:49 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <17B72775-7244-490A-B434-B82325B77BF4@employees.org> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> To: "Bless, Roland (TM)" X-Mailer: Apple Mail (2.1499) Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 12:37:52 -0000 [...] > I briefly read into the 4rd draft, but it's not entirely clear to me > whether other solutions don't exist. Maybe there are other means to > get the context knowledge that this particular IPv6 address has a > special structure encoded somehow. as a clarification of what has happened in softwire. (Suresh, please = correct me if I'm wrong.) the softwire working group has chosen to standardize "MAP-E = (http://tools.ietf.org/html/draft-ietf-softwire-map-02)" as the solution = for stateless A+P. the two competing proposals MAP-T (dIVI) and 4rd are = being published on experimental track. all of these 3 solutions use interface-ids. MAP-E a single address of a = certain format. while MAP-T and 4rd uses the interface-id field to carry = destination IPv4 address, and in 4rd's case a checksum neutraliser = field. the interface-ids that 4rd uses must be unique on the link, and it = doesn't handle conflicts with other (native) nodes well. alternative approaches to reserving interface-id space for this = mechanism could be: - reserve a /64 of the customers delegated prefix for the sole use of = 4rd - the 4rd node protects all possible 4rd interface-ids using DAD Best regards, Ole= From despres.remi@laposte.net Wed Dec 19 04:49:05 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A88421F894D for ; Wed, 19 Dec 2012 04:49:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.795 X-Spam-Level: X-Spam-Status: No, score=-1.795 tagged_above=-999 required=5 tests=[AWL=0.154, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IuAE-JS46Guo for ; Wed, 19 Dec 2012 04:49:04 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42E2E21F8795 for ; Wed, 19 Dec 2012 04:49:03 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2121.sfr.fr (SMTP Server) with ESMTP id EF75B70000D7; Wed, 19 Dec 2012 13:49:02 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2121.sfr.fr (SMTP Server) with ESMTP id 8E0DD700005D; Wed, 19 Dec 2012 13:49:02 +0100 (CET) X-SFR-UUID: 20121219124902581.8E0DD700005D@msfrf2121.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D19508.4030808@globis.net> Date: Wed, 19 Dec 2012 13:49:02 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> To: Ray Hunter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "ipv6@ietf.org" , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 12:49:05 -0000 Le 2012-12-19 =E0 11:20, Ray Hunter a =E9crit : >> R=E9mi Despr=E9s >> 19 December 2012 10:45 >> Hello, Ray, >>=20 >> 2012-12-19 09:57, Ray Hunter : >> ... >>=20 >> The proposal is precisely to use the only remaining unused pattern >> (u=3Dg=3D1) as an escape mechanism FOR ALL future IID formats. >> (Among IIDs having u=3Dg=3D1, 4rd is proposed to reserve only IIDs >> starting with 00000011, i.e. 1/64th of the left space.) >>=20 >> In my understanding, this exactly what you are looking for in view of >> constraints of compatibility with past decisions. >>=20 >> Note that, with the 4rd specification as is, the 4rd reserved pattern >> could even be 0000001100000000, i.e. 1/16384 of the left space. >>=20 >> Hoping it clarifies, >> Regards, >> RD >>=20 > I already understood this [I do read all posts on this list, even if I > don't post replies]. Well, this was to answer your statement that (upper cases added) = "assigning a huge block of space for u=3D1 g=3D1 EXCLUSIVELY for a = tunnel protocol like 4rd is fundamentally unfair and restrictive for future assignment mechanisms". >=20 > My points are: >=20 > 1) I am not comfortable with the IETF overloading IEEE semantics: the > semantics of g & u bits aren't exclusively ours to assign. > The combination g=3D1 u=3D1 is not unused as you state: that's IEEE = OUI > assigned multicast. > It is only in combination with IETF IPv6 unicast address space that = they > are deemed "ambiguous". IEEE isn't concerned with what uses IETF makes, at the IP layer, of = IEEE-specified link-layer formats. In this context, IETF problems, if any, can and must be solved in IETF = alone. =20 > 2) They may be used for something else in the future (and potentially = by > the IEEE without reference to the IETF) >=20 > You want to use the using the existing (ambiguous) combination u=3D1 = g=3D1 > EUI-64 and IPv6 unicast to statelessly map IPv4 over IPv6 unicast (or = as > an escape for other IID formats). Given that large scale deployment of > multicast in general (and multicast IPv6 routing in particular) is = still > very much in its infancy, someone might well want to map the whole = IEEE > EUI-64 multicast addresses statelessly also using u=3D1 g=3D1 into = unicast > IPv6. And any use by 4rd would likely prevent that mapping unless 4rd = is > assigned it's own OUI. If you have a specific idea about a format you would like to see for = multicast, it can be looked at but, in any case, it won't change the = fact that no RFC-compliant unicast address has u=3Dg=3D1. In IETF, rather than being "ambiguous", u=3Dg=3D1 is simply UNUSED (no = meaning at all so far). (*) An assigned OUI wouldn't be sufficient because the IID wouldn't have = enough free bits for an IPv4 address plus a checksum-neutrality = preserver. It was already explained in an answer to Bob) Besides, even if a reserved OUI would work, it would need to involve = IEEE, which isn't necessary. > I understand that the base requirements for 4rd are that > 1) every node has to have the potential to be able to easily assign an > identifier for terminating a 4rd tunnel from existing IPv6 space if = possible > 2) stateless 4rd gateways have to be able to easily recognise 4rd > traffic (without explicitly configuring a tunnel or IPv6 address space > in advance) > 3) IPv4 space (potentially overloaded with RFC1918) has to be mapped > transparently, symmetrically, and easily, over the 4rd tunnel at the = 4rd > endpoints and the 4rd gateways. > I see no requirement that *all* of the above requirements need to be > encoded directly into the IPv6 IID. > Existing nodes that do not process 4rd at all do not need 3) The fact that SOME nodes need it is sufficient for the need to exist. > Hence my suggestion to investigate using an alternative of an IEEE > assigned OUI for 1&2 together with standard IPv6 SLAAC (without = changing > any existing standards at all) and add an additional 4rd header for 3) > to add any additional information that is 4rd specific. I don't think > that would fundamentally change your existing ID at all, just how the > specific bits are packaged into an IPv6 unicast packet. >=20 > This also having the advantage that if ever there was an 4rdv2 you'd > have a lot more to play with in your 4rd specific header. See (*) above. Regards, RD >=20 > regards, > RayH >> Ray Hunter >> 19 December 2012 09:57 >> OK I'll bite. All IMVHO. >>=20 >> In answer to Fred's question, to me the current problem is on the end >> hosts and not on existing intermediate devices. >>=20 >> There are many different ways to assign IPv6 addresses, including = manual >> assignment, that can all run simultaneously on the same = interface/link >> and the same /64 prefix. New IDs are still being generated on address >> assignment even today e.g. >> = https://datatracker.ietf.org/doc/draft-gont-6man-stable-privacy-addresses >> & >> 4rd https://datatracker.ietf.org/doc/draft-ietf-softwire-4rd/. I'm = sure >> there'll be many more in the future. >>=20 >> Some of those ID's do put additional semantics into the IID. Others = don't. >>=20 >> Some of those that use semantics in the IID sometimes do not rely on = DAD >> to detect assignment clashes. >>=20 >> It seems to me with the benefit of hindsight that a fundamentally = better >> approach would have been to reserve many more bits in the IID, or in = RA >> PIO, to create mutually exclusive subspaces per assignment mechanism = or >> per class of assignment mechanism, but that train has probably left = the >> station long ago, and that now assigning a huge block of space for = u=3D1 >> g=3D1 exclusively for a tunnel protocol like 4rd is fundamentally = unfair >> and restrictive for future assignment mechanisms. Also having = addresses >> assigned without performing DAD would seem a bad move to me on any >> prefix with more than one address assignment scheme running. >>=20 >> Besides, who will guarantee that the IEEE won't come up with some = future >> use for u=3D1 g=3D1? I'm not even sure the IETF should define these = semantics. >> So in response to Joel, I'd humbly suggest defining u=3D1 g=3D1 as = reserved >> for future use (to be defined in conjunction with the IEEE). >>=20 >> To me, an alternative for consideration for 4rd would be either to = use a >> dedicated IEEE-defined special-purpose OUI (together with an = additional >> rd4 specific header for any remaining bits that cannot be encoded >> directly in the IID/IPv6 address), or to use locally assigned IIDs >> starting with binary 000 and ensure no other locally assigned IIDs = are >> running on this particular scope. That should avoid changing any = other >> standards or existing implementations. >>=20 >> regards, >> RayH >> = ------------------------------------------------------------------------ >=20 From roland.bless@kit.edu Wed Dec 19 05:01:22 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01ECE21F87BD for ; Wed, 19 Dec 2012 05:01:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.249 X-Spam-Level: X-Spam-Status: No, score=-6.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W8ME7oCL2432 for ; Wed, 19 Dec 2012 05:01:21 -0800 (PST) Received: from iramx2.ira.uni-karlsruhe.de (iramx2.ira.uni-karlsruhe.de [141.3.10.81]) by ietfa.amsl.com (Postfix) with ESMTP id A0B3F21F8618 for ; Wed, 19 Dec 2012 05:01:16 -0800 (PST) Received: from irams1.ira.uni-karlsruhe.de ([141.3.10.5]) by iramx2.ira.uni-karlsruhe.de with esmtps port 25 id 1TlJGo-0001Jk-Kp; Wed, 19 Dec 2012 14:01:15 +0100 Received: from i72vorta.tm.uni-karlsruhe.de ([141.3.71.26] helo=vorta.tm.kit.edu) by irams1.ira.uni-karlsruhe.de with esmtp port 25 id 1TlJGm-0002wv-Nh; Wed, 19 Dec 2012 14:01:08 +0100 Received: from [IPv6:::1] (ip6-localhost [IPv6:::1]) by vorta.tm.kit.edu (Postfix) with ESMTPS id 9BE00A804D7; Wed, 19 Dec 2012 14:01:08 +0100 (CET) Message-ID: <50D1BA94.4080403@kit.edu> Date: Wed, 19 Dec 2012 14:01:08 +0100 From: "Bless, Roland (TM)" Organization: Institute of Telematics, Karlsruhe Institute of Technology User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ole Troan Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> In-Reply-To: <17B72775-7244-490A-B434-B82325B77BF4@employees.org> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-ATIS-AV: ClamAV (irams1.ira.uni-karlsruhe.de) X-ATIS-AV: Kaspersky (iramx2.ira.uni-karlsruhe.de) X-ATIS-AV: ClamAV (iramx2.ira.uni-karlsruhe.de) X-ATIS-Timestamp: iramx2.ira.uni-karlsruhe.de 1355922075.807708000 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 13:01:22 -0000 Hi Ole, Thanks for clarification. See below for comments. On 19.12.2012 13:37, Ole Troan wrote: > the interface-ids that 4rd uses must be unique on the link, and it doesn't handle conflicts with other (native) nodes well. > alternative approaches to reserving interface-id space for this mechanism could be: Yes, that was another question: how can conflicts be handled/detected if addresses have a meaningful V-field by chance... > - reserve a /64 of the customers delegated prefix for the sole use of 4rd > - the 4rd node protects all possible 4rd interface-ids using DAD IMHO the first option (if viable) sounds more reasonable to me than fiddling with supposed format fields in the IID. Just my 2 cents. Roland From despres.remi@laposte.net Wed Dec 19 05:21:23 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D04E21F8B33 for ; Wed, 19 Dec 2012 05:21:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.805 X-Spam-Level: X-Spam-Status: No, score=-1.805 tagged_above=-999 required=5 tests=[AWL=0.144, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TxZSC8zrt+Ep for ; Wed, 19 Dec 2012 05:21:22 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9103221F8B32 for ; Wed, 19 Dec 2012 05:21:21 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2121.sfr.fr (SMTP Server) with ESMTP id 3D50E70000CF; Wed, 19 Dec 2012 14:21:21 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2121.sfr.fr (SMTP Server) with ESMTP id D32B870000C9; Wed, 19 Dec 2012 14:21:20 +0100 (CET) X-SFR-UUID: 20121219132120865.D32B870000C9@msfrf2121.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <17B72775-7244-490A-B434-B82325B77BF4@employees.org> Date: Wed, 19 Dec 2012 14:21:20 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> To: Ole Troan X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 13:21:23 -0000 Ole, Roland, Could we limit the 6man discussion to the question asked by Softwire, = i.e. whether new IID types can be defined, using u=3Dg=3D1, with a first = one for 4rd, is compatible with the current IPv6 specification? If the answer is positive (as it seems it can be), restarting a = discussion on the 4rd design is unnecessary. That is only if the answer = is negative that Softwire will have to restart working on the subject. Regards, RD 2012-12-19 13:37, Ole Troan : > [...] >=20 >> I briefly read into the 4rd draft, but it's not entirely clear to me >> whether other solutions don't exist. Maybe there are other means to >> get the context knowledge that this particular IPv6 address has a >> special structure encoded somehow. >=20 > as a clarification of what has happened in softwire. (Suresh, please = correct me if I'm wrong.) >=20 > the softwire working group has chosen to standardize "MAP-E = (http://tools.ietf.org/html/draft-ietf-softwire-map-02)" as the solution = for > stateless A+P. the two competing proposals MAP-T (dIVI) and 4rd are = being published on experimental track. >=20 > all of these 3 solutions use interface-ids. MAP-E a single address of = a certain format. while MAP-T and 4rd uses the interface-id field to = carry destination IPv4 address, and in 4rd's case a checksum neutraliser = field. >=20 > the interface-ids that 4rd uses must be unique on the link, and it = doesn't handle conflicts with other (native) nodes well. > alternative approaches to reserving interface-id space for this = mechanism could be: >=20 > - reserve a /64 of the customers delegated prefix for the sole use of = 4rd > - the 4rd node protects all possible 4rd interface-ids using DAD >=20 > Best regards, > Ole > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From randy@psg.com Wed Dec 19 05:30:33 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91E5221F87B1 for ; Wed, 19 Dec 2012 05:30:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X0TMfUpkqDND for ; Wed, 19 Dec 2012 05:30:33 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by ietfa.amsl.com (Postfix) with ESMTP id 12A8B21F86C0 for ; Wed, 19 Dec 2012 05:30:33 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1TlJjD-000EWf-K4; Wed, 19 Dec 2012 13:30:31 +0000 Date: Wed, 19 Dec 2012 08:30:31 -0500 Message-ID: From: Randy Bush To: Fred Baker Subject: Re: IIDs, u and g bits, and 4rd In-Reply-To: <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Cc: IPv6 Deployment Prevention X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 13:30:33 -0000 > What, on an IPv6 host or router, cares about the g bit apart from the > code that uses an EUI-48 or EUI-64 to create an EID? What starts from > an EID and extracts from it an EUI-64/48 address, or in any other way > interprets the g flag in an EID? > > u and g are a recurring theme. Apart from the people who wrote RFC > 4291, who are under the delusion that the only link layer in the world > is an Ethernet, who actually cares? they are a repeating pita and should be removed. my only hesitation is if ilnp has no viable alternative. though i am sufficiently unclear about ilnp's deployability to be uncomfortable retaining painful kink for it. Rey Hunter: > There are many different ways to assign IPv6 addresses, including > manual assignment, that can all run simultaneously on the same > interface/link and the same /64 prefix. New IDs are still being > generated on address assignment i am unsure this is a feature randy From otroan@employees.org Wed Dec 19 05:50:52 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77DFF21F886B for ; Wed, 19 Dec 2012 05:50:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.475 X-Spam-Level: X-Spam-Status: No, score=-10.475 tagged_above=-999 required=5 tests=[AWL=0.124, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bDO+nQ3A3wdV for ; Wed, 19 Dec 2012 05:50:51 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by ietfa.amsl.com (Postfix) with ESMTP id 626A121F8711 for ; Wed, 19 Dec 2012 05:50:51 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.84,317,1355097600"; d="scan'208";a="148563394" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-1.cisco.com with ESMTP; 19 Dec 2012 13:50:50 +0000 Received: from dhcp-lys01-vla250-10-147-112-193.cisco.com (dhcp-lys01-vla250-10-147-112-193.cisco.com [10.147.112.193]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBJDondU031416 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 19 Dec 2012 13:50:50 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: Ole Troan In-Reply-To: Date: Wed, 19 Dec 2012 14:50:49 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <87080275-9BF5-4267-89C3-5B840FA53504@employees.org> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> To: Randy Bush X-Mailer: Apple Mail (2.1499) Cc: IPv6 Deployment Prevention , Fred Baker X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 13:50:52 -0000 >> What, on an IPv6 host or router, cares about the g bit apart from the >> code that uses an EUI-48 or EUI-64 to create an EID? What starts from >> an EID and extracts from it an EUI-64/48 address, or in any other way >> interprets the g flag in an EID? >>=20 >> u and g are a recurring theme. Apart from the people who wrote RFC >> 4291, who are under the delusion that the only link layer in the = world >> is an Ethernet, who actually cares? >=20 > they are a repeating pita and should be removed. >=20 > my only hesitation is if ilnp has no viable alternative. though i am > sufficiently unclear about ilnp's deployability to be uncomfortable > retaining painful kink for it. my reading of RFC6741 section 2.1 is that ILNP does not depend on the = u/g flags. i.e. ILNP appear to work fine with both global scope and local scope = identifiers, and does not appear to require code to actually look at the u-bit. cheers, Ole From bob.hinden@gmail.com Wed Dec 19 06:16:56 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E68321F87BD for ; Wed, 19 Dec 2012 06:16:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n0lqJ9Svs8Zh for ; Wed, 19 Dec 2012 06:16:55 -0800 (PST) Received: from mail-we0-f177.google.com (mail-we0-f177.google.com [74.125.82.177]) by ietfa.amsl.com (Postfix) with ESMTP id 8AA4921F876E for ; Wed, 19 Dec 2012 06:16:55 -0800 (PST) Received: by mail-we0-f177.google.com with SMTP id x48so964203wey.36 for ; Wed, 19 Dec 2012 06:16:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:subject:mime-version:content-type:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=zD3/G+xviWF9UhwYfa8cMnOu7I4fNx0s22XaBfqb3sg=; b=hIZBo4jEfHskFVfkrHoCy6p/hu81sDLGq45LXDT3F0lFBePdfaLvSZOOBISBZVmlT6 ryIMJuX+o4xwkMcY5oWDidKATsNuhNEXtSiSDZ0Cjt+nyPiskxxMXPsKN9s5uezhzGd/ 7tM26SRG7Us6HB0oUlsLd1lH0XJXmrrE6DXofOHopzJdkBcCXxK939oYl3VM3CucBXsC Eu7IjzVJH4+o783k8DtMBYCx4OzDUdo9LI1c95c16/eZ0vcznOLQtUhGOST9I9Dp6HlK s/lhBRzBfuFNPLUlMcAf/uBlnEdY9AlnXJj3ET27O4Z7wCFsdCpYsh1IN0NbH12MJAdc Xz6w== X-Received: by 10.180.84.193 with SMTP id b1mr4297317wiz.26.1355926614740; Wed, 19 Dec 2012 06:16:54 -0800 (PST) Received: from [172.24.250.200] (dyn32-131.checkpoint.com. [194.29.32.131]) by mx.google.com with ESMTPS id y3sm20757433wix.6.2012.12.19.06.16.52 (version=SSLv3 cipher=OTHER); Wed, 19 Dec 2012 06:16:54 -0800 (PST) Subject: Re: IIDs, u and g bits, and 4rd Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=us-ascii From: Bob Hinden In-Reply-To: <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> Date: Wed, 19 Dec 2012 16:16:51 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <17F9EC07-8322-4999-9B0F-62FD54D68BE1@gmail.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7187C3@xmb-rcd-x09.cisco.com> To: Fred Baker (fred) X-Mailer: Apple Mail (2.1283) Cc: "ipv6@ietf.org" , Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 14:16:56 -0000 Fred, > u and g are a recurring theme. Apart from the people who wrote RFC = 4291, who are under the delusion that the only link layer in the world = is an Ethernet, who actually cares? I am one of the authors of RFC4291. I am not under any delusion that = Ethernet is the only link layer. I have no clue what would make you say = that. Bob From roland.bless@kit.edu Wed Dec 19 06:44:56 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3ED9421F8609 for ; Wed, 19 Dec 2012 06:44:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.099 X-Spam-Level: X-Spam-Status: No, score=-6.099 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AyN+-dDe-Sbh for ; Wed, 19 Dec 2012 06:44:55 -0800 (PST) Received: from iramx2.ira.uni-karlsruhe.de (iramx2.ira.uni-karlsruhe.de [141.3.10.81]) by ietfa.amsl.com (Postfix) with ESMTP id 6D02721F8608 for ; Wed, 19 Dec 2012 06:44:55 -0800 (PST) Received: from irams1.ira.uni-karlsruhe.de ([141.3.10.5]) by iramx2.ira.uni-karlsruhe.de with esmtps port 25 id 1TlKt4-0002EI-2R; Wed, 19 Dec 2012 15:44:53 +0100 Received: from i72vorta.tm.uni-karlsruhe.de ([141.3.71.26] helo=vorta.tm.kit.edu) by irams1.ira.uni-karlsruhe.de with esmtp port 25 id 1TlKt3-0001zI-S5; Wed, 19 Dec 2012 15:44:45 +0100 Received: from [IPv6:::1] (ip6-localhost [IPv6:::1]) by vorta.tm.kit.edu (Postfix) with ESMTPS id 92842A804D7; Wed, 19 Dec 2012 15:44:45 +0100 (CET) Message-ID: <50D1D2DD.7090101@kit.edu> Date: Wed, 19 Dec 2012 15:44:45 +0100 From: "Bless, Roland (TM)" Organization: Institute of Telematics, Karlsruhe Institute of Technology User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: =?ISO-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-ATIS-AV: ClamAV (irams1.ira.uni-karlsruhe.de) X-ATIS-AV: Kaspersky (iramx2.ira.uni-karlsruhe.de) X-ATIS-AV: ClamAV (iramx2.ira.uni-karlsruhe.de) X-ATIS-Timestamp: iramx2.ira.uni-karlsruhe.de 1355928293.578930000 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 14:44:56 -0000 Hi, On 19.12.2012 14:21, Rémi Després wrote: > Could we limit the 6man discussion to the question asked by Softwire, > i.e. whether new IID types can be defined, using u=g=1, with a first ^^^^^^^^^^^^ Sorry, I'm not yet aware of a concept called IID _types_? Do we really have such a thing "IID types"? > If the answer is positive (as it seems it can be), restarting a > discussion on the 4rd design is unnecessary. That is only if the > answer is negative that Softwire will have to restart working on the > subject. Obviously, this question has further implications, so I think it's legitimate to ask whether the proposed solution is really a reasonable way of solving the problem. Regards, Roland From fred@cisco.com Wed Dec 19 07:35:01 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35A1F21F87C6 for ; Wed, 19 Dec 2012 07:35:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.374 X-Spam-Level: X-Spam-Status: No, score=-110.374 tagged_above=-999 required=5 tests=[AWL=-0.075, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fyxtdlGS2OaU for ; Wed, 19 Dec 2012 07:35:00 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) by ietfa.amsl.com (Postfix) with ESMTP id 8E54821F87BD for ; Wed, 19 Dec 2012 07:35:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=773; q=dns/txt; s=iport; t=1355931300; x=1357140900; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=zYodyjomiGfjcHSx4bv7qJDSUJzYaEENR0HmzzVgM+M=; b=dwvS3KhJhoTnhZ1T1ga/U8cfTZ6RZ+lr38wpvatthGSinihhR4eIPJek TWX0i8+PJ25VA+STsb7kBD2SUgYsrlV6zuEFFzgZ/CG19h/0ofDKK4v3k 7j+kTl/JztpvhbQYRFan/n2YZM1jgdzoxHdpTHi5wZ/sTuC8LzWkPTBiU w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av4EAALe0VCtJXG//2dsb2JhbABEvgcWc4IfAQEEeRACAQgiJDIlAgQODYgLuBKMTYNiYQOILJ4mgnSCIg X-IronPort-AV: E=Sophos;i="4.84,318,1355097600"; d="scan'208";a="154700258" Received: from rcdn-core2-4.cisco.com ([173.37.113.191]) by rcdn-iport-4.cisco.com with ESMTP; 19 Dec 2012 15:35:00 +0000 Received: from xhc-rcd-x08.cisco.com (xhc-rcd-x08.cisco.com [173.37.183.82]) by rcdn-core2-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBJFZ00o001806 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 19 Dec 2012 15:35:00 GMT Received: from xmb-rcd-x09.cisco.com ([169.254.9.13]) by xhc-rcd-x08.cisco.com ([173.37.183.82]) with mapi id 14.02.0318.004; Wed, 19 Dec 2012 09:34:59 -0600 From: "Fred Baker (fred)" To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: IIDs, u and g bits, and 4rd Thread-Topic: IIDs, u and g bits, and 4rd Thread-Index: AQHN3XqQ4f0Vxg86Hk69uGLb6pZQf5gfqyCAgACT0ACAAGd8gA== Date: Wed, 19 Dec 2012 15:34:58 +0000 Message-ID: <8C48B86A895913448548E6D15DA7553B719035@xmb-rcd-x09.cisco.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <7DB235F1-7490-4D93-8674-B34A3CE40216@laposte.net> In-Reply-To: <7DB235F1-7490-4D93-8674-B34A3CE40216@laposte.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.19.64.117] Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 15:35:01 -0000 On Dec 19, 2012, at 1:24 AM, R=E9mi Despr=E9s wrote: > (c) In the Identifier-Locator Network Protocol of RFC 6741 (ILNP), the IE= EE semantic of g=3D0 applies to unicast addresses (section 3). Besides, "IL= NP uses IPv6 multicast for ILNPv6", which implies that addresses are not co= ncerned with IID formats (RFC 4291 sec 2.7). Other formats are envisaged b= ut explicitly depend on further work. The u=3Dg=3D1 remains unused. It is true that ILNP uses multicast addresses; so do a number of applicatio= ns, such as multicast DNS, routing protocols, etc. Last I checked, an IPv6 = multicast address is not identified by having bit 71 of the address set to = 1 (RFC 4291 section 2.5.1), but by being within the prefix FF00::/8 (RFC 42= 91 section 2.7). = From brian.e.carpenter@gmail.com Wed Dec 19 07:58:24 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11D6821F859B for ; Wed, 19 Dec 2012 07:58:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.599 X-Spam-Level: X-Spam-Status: No, score=-101.599 tagged_above=-999 required=5 tests=[AWL=0.092, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id trXvBbPvN1uf for ; Wed, 19 Dec 2012 07:58:23 -0800 (PST) Received: from mail-la0-f45.google.com (mail-la0-f45.google.com [209.85.215.45]) by ietfa.amsl.com (Postfix) with ESMTP id 4EF6421F859A for ; Wed, 19 Dec 2012 07:58:23 -0800 (PST) Received: by mail-la0-f45.google.com with SMTP id p9so1605136laa.32 for ; Wed, 19 Dec 2012 07:58:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=N1mtj0u9vqlsZm7Rg4NceylKK+g41PYYUyLnR5aVFEA=; b=mATcdJ5JLaUjTLALLana27z/cI/5Cwwklix8EM5NCl7rVzZmjZd0MvtuGiQg/9ERfM MvbEps4ZUqZzFpSz58jwyL+GcAoBc3CWKUCN1BTXOofe4JVPFPjvfVgJMujYNr5mE3+G h5OqpGevi9hKpRaQ85NZeHkHit2RGmBSjU+UH/iLAOSvvLLRTY9uNPIB4EJrFrvSQf8g Oat8xWNN/TmwHzCO3ZPtE43/DPjh2oW7DBqqpubT6sy+GOOrSJNBsz3xxHtMjroJV4Sm cBNNKWImizCfDeQbeiBwmmukB3YkHyf2jELaFTSEirjheKJ21IyC3NXZihjBXxR4f1IM zQUA== X-Received: by 10.152.147.103 with SMTP id tj7mr5811931lab.54.1355932702195; Wed, 19 Dec 2012 07:58:22 -0800 (PST) Received: from [192.168.1.65] (host-2-102-217-235.as13285.net. [2.102.217.235]) by mx.google.com with ESMTPS id ml1sm2239949lab.15.2012.12.19.07.58.19 (version=SSLv3 cipher=OTHER); Wed, 19 Dec 2012 07:58:20 -0800 (PST) Message-ID: <50D1E424.8030209@gmail.com> Date: Wed, 19 Dec 2012 15:58:28 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: "Bless, Roland (TM)" Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> In-Reply-To: <50D1D2DD.7090101@kit.edu> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 15:58:24 -0000 On 19/12/2012 14:44, Bless, Roland (TM) wrote: > Hi, >=20 > On 19.12.2012 14:21, R=C3=A9mi Despr=C3=A9s wrote: >> Could we limit the 6man discussion to the question asked by Softwire, >> i.e. whether new IID types can be defined, using u=3Dg=3D1, with a fir= st > ^^^^^^^^^^^^ > Sorry, I'm not yet aware of a concept called IID _types_? > Do we really have such a thing "IID types"? I think that's an important point. If we could make a statement like "The IID consists of N bits that have no meaning; the only constraint is that they must be unique within the scope of a given link and routing prefix." then perhaps we could move forward. Today, the u and g bits are the only ones that make the previous statement untrue for N=3D64, I believe. This would require formally updating RFC 4291, which says: For all unicast addresses, except those that start with the binary value 000, Interface IDs are required to be 64 bits long and to be constructed in Modified EUI-64 format. s/required/recommended/ might be enough. Why is it "required" anyway? Brian >=20 >> If the answer is positive (as it seems it can be), restarting a >> discussion on the 4rd design is unnecessary. That is only if the >> answer is negative that Softwire will have to restart working on the >> subject. >=20 > Obviously, this question has further implications, so I > think it's legitimate to ask whether the proposed solution > is really a reasonable way of solving the problem. >=20 > Regards, > Roland >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- >=20 From Fred.L.Templin@boeing.com Wed Dec 19 09:41:36 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E23DB21F868F for ; Wed, 19 Dec 2012 09:41:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SS2AA5yyOTBb for ; Wed, 19 Dec 2012 09:41:36 -0800 (PST) Received: from stl-mbsout-02.boeing.com (stl-mbsout-02.boeing.com [130.76.96.170]) by ietfa.amsl.com (Postfix) with ESMTP id 2BEEB21F8610 for ; Wed, 19 Dec 2012 09:41:36 -0800 (PST) Received: from stl-mbsout-02.boeing.com (localhost.localdomain [127.0.0.1]) by stl-mbsout-02.boeing.com (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with ESMTP id qBJHfZsu005136 for ; Wed, 19 Dec 2012 11:41:35 -0600 Received: from XCH-NWHT-04.nw.nos.boeing.com (xch-nwht-04.nw.nos.boeing.com [130.247.64.250]) by stl-mbsout-02.boeing.com (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id qBJHfUHm005054 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=OK); Wed, 19 Dec 2012 11:41:34 -0600 Received: from XCH-NW-01V.nw.nos.boeing.com ([130.247.64.97]) by XCH-NWHT-04.nw.nos.boeing.com ([130.247.64.250]) with mapi; Wed, 19 Dec 2012 09:41:33 -0800 From: "Templin, Fred L" To: Fernando Gont Date: Wed, 19 Dec 2012 09:41:32 -0800 Subject: RE: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Topic: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Index: Ac3dXs1nUp3BReMWSUORV/bj6E+OKgAqsgOg Message-ID: References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> <50D0CB40.5070103@si6networks.com> In-Reply-To: <50D0CB40.5070103@si6networks.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-TM-AS-MML: No Cc: "draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org" , 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 17:41:37 -0000 Hi Fernando, > -----Original Message----- > From: Fernando Gont [mailto:fgont@si6networks.com] > Sent: Tuesday, December 18, 2012 12:00 PM > To: Templin, Fred L > Cc: draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org; 6man WG > Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments >=20 > Hi, Fred, >=20 > On 12/18/2012 04:13 PM, Templin, Fred L wrote: > > I have a question about this document. Is a middlebox permitted > > to fragment an "atomic" fragment before forwarding the packet > > on to the next hop? If not, why not - after all, that's why the > > host inserted the fragment header in the first place. >=20 > My take is that an *IPv6* middle-box is not permitted to fragment the > packet. The IPv6/IPv4 translator is, from an IPv6 point of view, a > host/end-point/end-system (that's where the v6 world ends for that > packet). >=20 > As to the "why not", I'd guess the reason is "only IPv6 hosts fragment > packets" I am thinking of the case of links (e.g., tunnels) in the middle of the network that must perform link adaptation in order to meet the 1280 byte minimum IPv6 MTU. For example, if a tunnel is configured over a link that has an MTU less than (1280+HLEN), the tunnel ingress will see an MTU smaller than 1280. In that case, RFC2473 says that the tunnel ingress should perform fragmentation on the encapsulated packet and the tunnel egress gets to do the reassembly. But, that can amount to a lot of extra work for the tunnel egress. To save the egress from this burden then, it would be great if there were a way to get the source host to perform fragmentation so that the destination gets to do the reassembly. In lieu of that, it would be preferable for the tunnel ingress to perform fragmentation on the inner packet before encapsulation provided the inner packet includes an IPv6 fragment header. I talk about this in my draft on "IPv6 Path MTU Updates": http://www.ietf.org/id/draft-generic-6man-tunfrag-06.txt This document talks about taking care of packets that are in the "red zone" size between 1280 and 1500 bytes when there is a link in the path (e.g., a tunnel) that must perform link adaptation to meet the minimum size. And, it seeks to update RFC2460 by allowing the middlebox to signal the host, and to perform fragmentation on the inner packet when the packet includes an IPv6 fragment header. It would be good to get your feedback on this document. > > If so, > > then shouldn't the draft say something about the permissible > > behavior of middleboxes when forwarding an "atomic" fragment > > (e.g., "a middlebox is permitted to perform fragmentation on > > an "atomic" fragment before forwarding to the next hop")? >=20 > Why should there be a difference between fragmenting an atomic fragment > and e.g. re-fragmenting a non-atomic fragment? Based on the above draft, a host that is clued into the link adaptation requirements will produce non-atomic fragments that are sufficiently small so that they will not trigger the link adaptation. A host that is not clued into the requirements will send atomic fragments, which the middlebox should be permitted to split into multiple fragments. Thanks - Fred fred.l.templin@boeing.com > Thanks! >=20 > Best regards, > -- > Fernando Gont > SI6 Networks > e-mail: fgont@si6networks.com > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 >=20 >=20 >=20 From despres.remi@laposte.net Wed Dec 19 09:59:31 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AFEC21F8790 for ; Wed, 19 Dec 2012 09:59:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.814 X-Spam-Level: X-Spam-Status: No, score=-1.814 tagged_above=-999 required=5 tests=[AWL=0.135, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ixo9rJCiCHR for ; Wed, 19 Dec 2012 09:59:30 -0800 (PST) Received: from smtp24.services.sfr.fr (smtp24.services.sfr.fr [93.17.128.82]) by ietfa.amsl.com (Postfix) with ESMTP id 354C221F8618 for ; Wed, 19 Dec 2012 09:59:30 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2407.sfr.fr (SMTP Server) with ESMTP id 0218670000B4; Wed, 19 Dec 2012 18:59:27 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2407.sfr.fr (SMTP Server) with ESMTP id B0F3A70000AF; Wed, 19 Dec 2012 18:59:26 +0100 (CET) X-SFR-UUID: 20121219175926724.B0F3A70000AF@msfrf2407.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D1E424.8030209@gmail.com> Date: Wed, 19 Dec 2012 18:59:26 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 17:59:31 -0000 2012-12-19 16:58, Brian E Carpenter : > On 19/12/2012 14:44, Bless, Roland (TM) wrote: >> Hi, >>=20 >> On 19.12.2012 14:21, R=E9mi Despr=E9s wrote: >>> Could we limit the 6man discussion to the question asked by = Softwire, >>> i.e. whether new IID types can be defined, using u=3Dg=3D1, with a = first >> ^^^^^^^^^^^^ >> Sorry, I'm not yet aware of a concept called IID _types_? >> Do we really have such a thing "IID types"? >=20 > I think that's an important point. If we could make a statement like >=20 > "The IID consists of N bits that have no meaning; the only constraint > is that they must be unique within the scope of a given link and > routing prefix." As is, the sentence misses that IIDs that have u=3D1 are expected to be = universally unique. (This uniqueness is key to ensure that, as long as a = site has a stable IPv6 prefix, its statelessly auto-configured hosts can = have stable addresses if so desired.)=20 The sentence becomes completely accurate if limited to to local-scope = IIDs and to the 63 bits other than the u bit.=20 Ensuring IID universal uniqueness for new types of universal-scope = addresses is the subject at hand. It can fortunately be dealt with = because we know that, today, all u=3D1 IIDs must also have g=3D0. > then perhaps we could move forward. Today, the u and g bits are the > only ones that make the previous statement untrue for N=3D64, I = believe. >=20 > This would require formally updating RFC 4291, which says: > For all unicast addresses, except those that start with the binary > value 000, Interface IDs are required to be 64 bits long and to be > constructed in Modified EUI-64 format. Creating an additional RFC referenced in RFC 4291 as updating it seems = to me a good approach.=20 It would state that universal-scope IIDs other than that defined in RFC = 4291 itself (i.e. in its Appendix A) are possible. Their formats are = defined in specific RFCs, which are listed in an IANA registry. This = registry indicates, for each of these RFCs, which bit pattern in IIDs = determines its applicability. RD > s/required/recommended/ might be enough. Why is it "required" anyway? >=20 > Brian >=20 >>=20 >>> If the answer is positive (as it seems it can be), restarting a >>> discussion on the 4rd design is unnecessary. That is only if the >>> answer is negative that Softwire will have to restart working on the >>> subject. >>=20 >> Obviously, this question has further implications, so I >> think it's legitimate to ask whether the proposed solution >> is really a reasonable way of solving the problem. >>=20 >> Regards, >> Roland >>=20 >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >>=20 >=20 From alexandru.petrescu@gmail.com Wed Dec 19 10:20:14 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23BC621F8790 for ; Wed, 19 Dec 2012 10:20:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.334 X-Spam-Level: * X-Spam-Status: No, score=1.334 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, J_CHICKENPOX_101=0.6, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pD6G58wvtlac for ; Wed, 19 Dec 2012 10:20:13 -0800 (PST) Received: from smtp1-g21.free.fr (smtp1-g21.free.fr [IPv6:2a01:e0c:1:1599::10]) by ietfa.amsl.com (Postfix) with ESMTP id 4524F21F8558 for ; Wed, 19 Dec 2012 10:20:11 -0800 (PST) Received: from [127.0.0.1] (unknown [82.239.213.32]) by smtp1-g21.free.fr (Postfix) with ESMTP id E9B9394015A for ; Wed, 19 Dec 2012 19:20:02 +0100 (CET) Message-ID: <50D2054B.9000307@gmail.com> Date: Wed, 19 Dec 2012 19:19:55 +0100 From: Alexandru Petrescu User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: ipv6@ietf.org Subject: Re: IIDs, u and g bits, and 4rd) References: <50D10150.40801@joelhalpern.com> In-Reply-To: <50D10150.40801@joelhalpern.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Antivirus: avast! (VPS 121219-0, 19/12/2012), Outbound message X-Antivirus-Status: Clean X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 18:20:14 -0000 Le 19/12/2012 00:50, Joel M. Halpern a écrit : > In reading the discussion,a nd trying to think through what I > understand to be correct, it seems that there is an unforeseen > ambiguity in the way the current documents about IPv6 IIDs are > written. > > I think that there are two possible meanings, ad we should decide > explicitly which one we want. > > 1) u=1 means that the IID is derived from an IEEE OUI (of some > form). There is a difference between u=1 and u==1. I think _setting_ u=1 may be done ok by a conscious programmer knowing that interface is IEEE. But _reading_ a u bit set, from an address in a received packet, would not guarantee that that is an IEEE interface. I think nothing prevents a DHCP Server to assign an address having that u==1 to a Host and whose interface is non-IEEE (e.g. USB, cellular, or other). (I haven't seen a restriction in the DHCP specs saying that u=0 in case the Client's interface is not DHCP). Other than DHCP there are other address assignment mechanisms, documented and not, which make something in that 64bits without caring the u-bit position may have a particular meaning. Alex From roland.bless@kit.edu Wed Dec 19 11:34:16 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E414B21F8648 for ; Wed, 19 Dec 2012 11:34:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.199 X-Spam-Level: X-Spam-Status: No, score=-6.199 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ltPWu5DgyNjG for ; Wed, 19 Dec 2012 11:34:16 -0800 (PST) Received: from iramx2.ira.uni-karlsruhe.de (iramx2.ira.uni-karlsruhe.de [141.3.10.81]) by ietfa.amsl.com (Postfix) with ESMTP id 2097621F85FC for ; Wed, 19 Dec 2012 11:34:14 -0800 (PST) Received: from irams1.ira.uni-karlsruhe.de ([141.3.10.5]) by iramx2.ira.uni-karlsruhe.de with esmtps port 25 id 1TlPP5-0007VK-RP; Wed, 19 Dec 2012 20:34:13 +0100 Received: from i72vorta.tm.uni-karlsruhe.de ([141.3.71.26] helo=vorta.tm.kit.edu) by irams1.ira.uni-karlsruhe.de with esmtp port 25 id 1TlPP5-0000Jg-IN; Wed, 19 Dec 2012 20:34:07 +0100 Received: from [IPv6:::1] (ip6-localhost [IPv6:::1]) by vorta.tm.kit.edu (Postfix) with ESMTPS id 6E0BAA8093B; Wed, 19 Dec 2012 20:34:07 +0100 (CET) Message-ID: <50D216AF.8080307@kit.edu> Date: Wed, 19 Dec 2012 20:34:07 +0100 From: "Bless, Roland (TM)" Organization: Institute of Telematics, Karlsruhe Institute of Technology User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian E Carpenter Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> In-Reply-To: <50D1E424.8030209@gmail.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-ATIS-AV: ClamAV (irams1.ira.uni-karlsruhe.de) X-ATIS-AV: Kaspersky (iramx2.ira.uni-karlsruhe.de) X-ATIS-AV: ClamAV (iramx2.ira.uni-karlsruhe.de) X-ATIS-Timestamp: iramx2.ira.uni-karlsruhe.de 1355945654.057620000 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 19:34:17 -0000 On 19.12.2012 16:58, Brian E Carpenter wrote: >> Do we really have such a thing "IID types"? > > I think that's an important point. If we could make a statement like > > "The IID consists of N bits that have no meaning; the only constraint > is that they must be unique within the scope of a given link and > routing prefix." > > then perhaps we could move forward. Today, the u and g bits are the Yep. > This would require formally updating RFC 4291, which says: > For all unicast addresses, except those that start with the binary > value 000, Interface IDs are required to be 64 bits long and to be > constructed in Modified EUI-64 format. > > s/required/recommended/ might be enough. Why is it "required" anyway? Yes, but I guess that we have enough examples where it's not useful to construct IIDs according to Modified EUI-64 format (privacy extensions, CGAs and the like). Indeed, the IID has to unique within a link-local scope, which is normally ensured by DAD. However, if one uses a globally unique scheme such as a Modified EUI-64 to derive an IID, the IID will be unique with very high probability within the subnet scope. But that's IMHO the whole point and RFC 4291 is maybe a little bit too restrictive. Regards, Roland From roland.bless@kit.edu Wed Dec 19 12:27:20 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AA5121F882E for ; Wed, 19 Dec 2012 12:27:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.062 X-Spam-Level: X-Spam-Status: No, score=-6.062 tagged_above=-999 required=5 tests=[AWL=-0.113, BAYES_00=-2.599, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rUSN80uKcE2Q for ; Wed, 19 Dec 2012 12:27:20 -0800 (PST) Received: from iramx2.ira.uni-karlsruhe.de (iramx2.ira.uni-karlsruhe.de [141.3.10.81]) by ietfa.amsl.com (Postfix) with ESMTP id 9E3D321F87A6 for ; Wed, 19 Dec 2012 12:27:19 -0800 (PST) Received: from irams1.ira.uni-karlsruhe.de ([141.3.10.5]) by iramx2.ira.uni-karlsruhe.de with esmtps port 25 id 1TlQEO-00031L-Ko; Wed, 19 Dec 2012 21:27:16 +0100 Received: from i72vorta.tm.uni-karlsruhe.de ([141.3.71.26] helo=vorta.tm.kit.edu) by irams1.ira.uni-karlsruhe.de with esmtp port 25 id 1TlQEO-0000bI-Dg; Wed, 19 Dec 2012 21:27:08 +0100 Received: from [IPv6:::1] (ip6-localhost [IPv6:::1]) by vorta.tm.kit.edu (Postfix) with ESMTPS id 42A88A8093B; Wed, 19 Dec 2012 21:27:08 +0100 (CET) Message-ID: <50D2231C.2000809@kit.edu> Date: Wed, 19 Dec 2012 21:27:08 +0100 From: "Bless, Roland (TM)" Organization: Institute of Telematics, Karlsruhe Institute of Technology User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: =?ISO-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-ATIS-AV: ClamAV (irams1.ira.uni-karlsruhe.de) X-ATIS-AV: Kaspersky (iramx2.ira.uni-karlsruhe.de) X-ATIS-AV: ClamAV (iramx2.ira.uni-karlsruhe.de) X-ATIS-Timestamp: iramx2.ira.uni-karlsruhe.de 1355948836.955211000 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 20:27:20 -0000 Hi Rémi, On 19.12.2012 18:59, Rémi Després wrote: > As is, the sentence misses that IIDs that have u=1 are expected to be > universally unique. (This uniqueness is key to ensure that, as long I don't agree. From an IPv6 functional point of view, IIDs only need to be unique within the link-local/subnet scope, so _universal_ uniqueness is not strictly _required_. Deriving the IID from a universally unique address may help to minimize the conflict probability within a subnet though. > as a site has a stable IPv6 prefix, its statelessly auto-configured > hosts can have stable addresses if so desired.) You can also achieve the mentioned uniqueness of an IPv6 address by having manually assigned locally unique IIDs (which is typically used for servers since you don't want to change the IPv6 address each time your network interface must be replaced due to hardware problems...) combined with that stable (globally unique) IPv6 prefix. > Ensuring IID universal uniqueness for new types of universal-scope > addresses is the subject at hand. It can fortunately be dealt with > because we know that, today, all u=1 IIDs must also have g=0. what new types of universal-scope addresses? Regards, Roland From markzzzsmith@yahoo.com.au Wed Dec 19 12:40:32 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71E8E21F8648 for ; Wed, 19 Dec 2012 12:40:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.547 X-Spam-Level: X-Spam-Status: No, score=-1.547 tagged_above=-999 required=5 tests=[AWL=0.252, BAYES_00=-2.599, FROM_LOCAL_NOVOWEL=0.5, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oNGcIpdP0R-8 for ; Wed, 19 Dec 2012 12:40:31 -0800 (PST) Received: from nm22-vm0.bullet.mail.bf1.yahoo.com (nm22-vm0.bullet.mail.bf1.yahoo.com [98.139.212.126]) by ietfa.amsl.com (Postfix) with ESMTP id 5646D21F85BA for ; Wed, 19 Dec 2012 12:40:31 -0800 (PST) Received: from [98.139.212.144] by nm22.bullet.mail.bf1.yahoo.com with NNFMP; 19 Dec 2012 20:40:30 -0000 Received: from [98.139.212.193] by tm1.bullet.mail.bf1.yahoo.com with NNFMP; 19 Dec 2012 20:40:30 -0000 Received: from [127.0.0.1] by omp1002.mail.bf1.yahoo.com with NNFMP; 19 Dec 2012 20:40:30 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 709831.79780.bm@omp1002.mail.bf1.yahoo.com Received: (qmail 39227 invoked by uid 60001); 19 Dec 2012 20:40:30 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.au; s=s1024; t=1355949630; bh=KW7XtOOeRSNusE43leODKAw7RGvZr05+GBVJcWk2NBk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=mFSy1EUIjI7CKlZEtPd9ByfiezmgWM06cbHD1v1g1jYAp+0OV2zyxG+Ga+iDdjtHw3002hOZs0fPkbWmTabWwnyFmmP/AozqZzoPBxoZU6J7SiQhlBO/KlY/7lgkDDArHoxx+NEkZ3cDlqhPqUlNB4kU+MpMPpuKnhDuArLvqXI= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.au; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=4tUcx6gciLs3VqG/BRldSqd6n47oMcepT+ZPgsr3H/b6hzuHDN1xbkARr60WFLa3nBv14iiAKsi8ZgAkEfzuv50Mq27/dtIgyW6pl5TjTeRtnfcxQpU57U8sfOMRxIY5prMsMtWpCblyYF2RrvtLJu+8oYkgnpyTZMpAE9OIxCU=; X-YMail-OSG: 6wbeYAAVM1nfvvRXJYMd4UJafGGLUK_wYVOaeLDq2KiUiBm SZNXORJKzEne0hPVv_iofud8PLkC2dSZQpVqS5rt_F5g82ezb0UVe.bWH5He oola5fmvHpXPk48ym__1G4ez8ftzFnYCsU3gLjB2iEwdPx.O63ZI8lsuO_Z7 KBP50wyAMOUC4K0LkcPf9GtRTsplTlTTKCsZpJAKxxkmnz4QLyT3FF3DG_us Pdke4U1jwvI7xg296hrwcc0NG0JXr.FUGkoGQB_4BrbXHSupb8eN4_UULqCw rUM7L_9OpmhHLEplKs0qNsSJyuI44XsAvh9XrvkmJmmcwuy6chwcxyP5HBSV LeSHZt7OYbR_CtJkbvzH1xRmfBEDdxbNGkfFISeJfUdH7PZxzY7tfEO6Y7Y9 10N8I3edmeWrDh0LU7zxk.xyFEJLx062Ll32uLaGkLc2.uxrAw0XNKcgI_XP Y6bOXyMg5DG7Xi539ThMd03EgAiVizCYZD249kC5YxyRrE2YDRHFPKMkfQIJ OOzMByNGG.5d8rIcRp3UFPRhnY8Va Received: from [150.101.221.237] by web142506.mail.bf1.yahoo.com via HTTP; Wed, 19 Dec 2012 12:40:30 PST X-Rocket-MIMEInfo: 001.001, CgoKCgo.X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KPiBGcm9tOiAiQmxlc3MsIFJvbGFuZCAoVE0pIiA8cm9sYW5kLmJsZXNzQGtpdC5lZHU.Cj5UbzogUsOpbWkgRGVzcHLDqXMgPGRlc3ByZXMucmVtaUBsYXBvc3RlLm5ldD4gCj5DYzogaXB2NkBpZXRmLm9yZyAKPlNlbnQ6IFRodXJzZGF5LCAyMCBEZWNlbWJlciAyMDEyIDc6MjcgQU0KPlN1YmplY3Q6IFJlOiBJSURzLCB1IGFuZCBnIGJpdHMsIGFuZCA0cmQKPiAKPkhpIFLDqW1pLAo.Cj5PbiAxOS4xMi4yMDEyIDE4OjU5LCBSw6ltaSBEZXMBMAEBAQE- X-Mailer: YahooMailWebService/0.8.129.483 References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> Message-ID: <1355949630.39033.YahooMailNeo@web142506.mail.bf1.yahoo.com> Date: Wed, 19 Dec 2012 12:40:30 -0800 (PST) From: Mark Smith Subject: Re: IIDs, u and g bits, and 4rd To: "Bless, Roland \(TM\)" , =?iso-8859-1?Q?R=E9mi_Despr=E9s?= In-Reply-To: <50D2231C.2000809@kit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: Mark Smith List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 20:40:32 -0000 =0A=0A=0A=0A=0A>________________________________=0A> From: "Bless, Roland (= TM)" =0A>To: R=E9mi Despr=E9s =0A>Cc: ipv6@ietf.org =0A>Sent: Thursday, 20 December 2012 7:27 AM=0A>S= ubject: Re: IIDs, u and g bits, and 4rd=0A> =0A>Hi R=E9mi,=0A>=0A>On 19.12.= 2012 18:59, R=E9mi Despr=E9s wrote:=0A>=0A>> As is, the sentence misses tha= t IIDs that have u=3D1 are expected to be=0A>> universally unique. (This un= iqueness is key to ensure that, as long=0A>=0A>I don't agree. From an IPv6 = functional point of view, IIDs only need to=0A>be unique within the link-lo= cal/subnet scope, so _universal_ uniqueness=0A>is not strictly _required_. = Deriving the IID from a universally unique=0A>address may help to minimize = the conflict probability within a subnet=0A>though.=0A=0AI agree. It seems = to me that all that RFC4291 is doing is specifying a method or algorithm de= riving an IPv6 IID from an IEEE address when one is available. IPv6 IIDs ar= en't required to be derived from the IEEE address, otherwise static and pri= vacy IPv6 addresses would be illegal on interfaces with IEEE link layer add= resses.=0A=0AI'm wondering what the real goal is. Is it to avoid having per= forming DAD by assuming that the link layer address is guaranteed to be glo= bally unique? That guarantee hasn't ended up be true for IEEE addresses, so= unless something better than what the IEEE have done is invented I don't t= hink it can ever be an absolute guarantee, because you can't guarantee agai= nst future human error or stupidity.=0A=0A>=0A>> as a site has a stable IPv= 6 prefix, its statelessly auto-configured=0A>> hosts can have stable addres= ses if so desired.)=0A>=0A>You can also achieve the mentioned uniqueness of= an IPv6 address by=0A>having manually assigned locally unique IIDs (which = is typically used=0A>for servers since you don't want to change the IPv6 ad= dress each time=0A>your network interface must be replaced due to hardware = problems...)=0A>combined with that stable (globally unique) IPv6 prefix.=0A= >=0A>> Ensuring IID universal uniqueness for new types of universal-scope= =0A>> addresses is the subject at hand.=A0 It can fortunately be dealt with= =0A>> because we know that, today, all u=3D1 IIDs must also have g=3D0.=0A>= =0A>what new types of universal-scope addresses?=0A>=0A>Regards,=0A>Roland= =0A>--------------------------------------------------------------------=0A= >IETF IPv6 working group mailing list=0A>ipv6@ietf.org=0A>Administrative Re= quests: https://www.ietf.org/mailman/listinfo/ipv6=0A>---------------------= -----------------------------------------------=0A>=0A>=0A> From rogerj@gmail.com Wed Dec 19 13:12:55 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE7C121F867B for ; Wed, 19 Dec 2012 13:12:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D5EmVmZ5FOSX for ; Wed, 19 Dec 2012 13:12:54 -0800 (PST) Received: from mail-wg0-f48.google.com (mail-wg0-f48.google.com [74.125.82.48]) by ietfa.amsl.com (Postfix) with ESMTP id 3EC7D21F868F for ; Wed, 19 Dec 2012 13:12:54 -0800 (PST) Received: by mail-wg0-f48.google.com with SMTP id dt10so1177965wgb.27 for ; Wed, 19 Dec 2012 13:12:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=WjFnWkPvcVvlo+/OO4NDtEgstaICo1LOXWyt6EDtUP8=; b=gaIssSTDsmruJOB4X138l6iKEk7b0X65zym4W0m86/+J1jQKwXKsyZdudxrdKH223y dKqF8vvYmKgg+Q7W5ChU1QvtVQD/Xo4o8goTwV4W4SWYs+EinHdaltY9hpNXP7OrsQqb 9lLNtAh44SM4lpyHxqsbY6sFb4NIYOJbb4BqY7CQJBGlsuZrtZKqFvofSC0gKARSHPVh 6sHo3U4oSHpcVY2ggfxygnNlRVD5Aqk5RYTRZepsPHpb+zIOYWAA+91TsOQm5WU7elD2 LSvDRIZynan8qMYAoz1YtRRYTlTkMEF6KXCn+N+iB0SZRsGQ5X3FCEP0QQrZNDNgXEOn 0sXg== MIME-Version: 1.0 Received: by 10.194.110.231 with SMTP id id7mr14043592wjb.6.1355951560352; Wed, 19 Dec 2012 13:12:40 -0800 (PST) Received: by 10.217.44.74 with HTTP; Wed, 19 Dec 2012 13:12:40 -0800 (PST) In-Reply-To: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> Date: Wed, 19 Dec 2012 22:12:40 +0100 Message-ID: Subject: Re: IIDs, u and g bits, and 4rd From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: =?ISO-8859-1?B?UultaSBEZXNwculz?= Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 21:12:55 -0000 On Wed, Dec 19, 2012 at 2:21 PM, R=E9mi Despr=E9s wrote: > Ole, Roland, > > Could we limit the 6man discussion to the question asked by Softwire, i.e= . whether new IID types can be defined, using u=3Dg=3D1, with a first one f= or 4rd, is compatible with the current IPv6 specification? sorry, but you start to really annoy me, who are you that can tell us what we can and not discuss in this wg? --=20 Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From rogerj@gmail.com Wed Dec 19 14:01:24 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCAC121F889D for ; Wed, 19 Dec 2012 14:01:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id chj7qET93f11 for ; Wed, 19 Dec 2012 14:01:24 -0800 (PST) Received: from mail-wi0-f178.google.com (mail-wi0-f178.google.com [209.85.212.178]) by ietfa.amsl.com (Postfix) with ESMTP id C15FE21F886B for ; Wed, 19 Dec 2012 14:01:23 -0800 (PST) Received: by mail-wi0-f178.google.com with SMTP id hn3so1572442wib.17 for ; Wed, 19 Dec 2012 14:01:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=aJIeT/MBBoG6aFJd8rpcDEZugPwevIb4/94L6Q/qtmw=; b=MmGmvJLm77jk9CNZ0awvDVjoOAQA4geQJjXJwW4vb94kLoQPW+zjzjCTIh8c5sjiVT 6uA6mHvTRqga1h9NUIxQhfFdiI9HN6WADcLZaZsgH5yM3YgNGXQ2bXqfFPZPW+dKOW5W oN6fu4Q8XZFygcBrdEnceIfmjQjEwVUjpNzchvSAct4GsSbYwhJPBCFwG5E7Aia4RKQK o+LGIWII9cXyXRq3tGIptKl0QZCnoBTMddNoVz69L79NU/FCJRw3PEi+aphUhMVt0VV5 3kdl5hIj9XcJJWiEqaxl2ZBaxttiOZfQEQvlI8bUiz27pVstDuRkHbZjMeyHzh0MgdVr Jxdw== MIME-Version: 1.0 Received: by 10.194.85.234 with SMTP id k10mr13985502wjz.53.1355954482905; Wed, 19 Dec 2012 14:01:22 -0800 (PST) Received: by 10.217.44.74 with HTTP; Wed, 19 Dec 2012 14:01:22 -0800 (PST) In-Reply-To: <50D18196.2070501@globis.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> Date: Wed, 19 Dec 2012 23:01:22 +0100 Message-ID: Subject: Re: Re: IIDs, u and g bits, and 4rd From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: Ray Hunter Content-Type: text/plain; charset=ISO-8859-1 Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 22:01:25 -0000 see inline: On Wed, Dec 19, 2012 at 9:57 AM, Ray Hunter wrote: > OK I'll bite. All IMVHO. > > In answer to Fred's question, to me the current problem is on the end > hosts and not on existing intermediate devices. > > There are many different ways to assign IPv6 addresses, including manual > assignment, that can all run simultaneously on the same interface/link > and the same /64 prefix. New IDs are still being generated on address > assignment even today e.g. > https://datatracker.ietf.org/doc/draft-gont-6man-stable-privacy-addresses & > 4rd https://datatracker.ietf.org/doc/draft-ietf-softwire-4rd/. I'm sure > there'll be many more in the future. > > Some of those ID's do put additional semantics into the IID. Others don't. > > Some of those that use semantics in the IID sometimes do not rely on DAD > to detect assignment clashes. > > It seems to me with the benefit of hindsight that a fundamentally better > approach would have been to reserve many more bits in the IID, or in RA > PIO, to create mutually exclusive subspaces per assignment mechanism or > per class of assignment mechanism, but that train has probably left the > station long ago, and that now assigning a huge block of space for u=1 > g=1 exclusively for a tunnel protocol like 4rd is fundamentally unfair > and restrictive for future assignment mechanisms. Also having addresses > assigned without performing DAD would seem a bad move to me on any > prefix with more than one address assignment scheme running. For most people, there are only two way of seting and IPv6 addresses, either through RA/DHCPv6, or manual. In either case not many really care about u/g bit, or know about it. if you read RFC4291 and section 2.5.1. you'll see the following two paragraphs IPv6 nodes are not required to validate that interface identifiers created with modified EUI-64 tokens with the "u" bit set to universal are unique. The use of the universal/local bit in the Modified EUI-64 format identifier is to allow development of future technology that can take advantage of interface identifiers with universal scope. First it say no hosts are required to validate it, only routers as I read it. Any that really do that? Second say it's open for the future to redefine the usage of the "u" bit. The "g" bit ain't IETF's to play with as I read it - but all of this is in EUI-64 context. All in all, nothing prevent 4rd to use u and g set to 1, however: > Besides, who will guarantee that the IEEE won't come up with some future > use for u=1 g=1? I'm not even sure the IETF should define these semantics. > So in response to Joel, I'd humbly suggest defining u=1 g=1 as reserved > for future use (to be defined in conjunction with the IEEE). > > To me, an alternative for consideration for 4rd would be either to use a > dedicated IEEE-defined special-purpose OUI (together with an additional > rd4 specific header for any remaining bits that cannot be encoded > directly in the IID/IPv6 address), or to use locally assigned IIDs > starting with binary 000 and ensure no other locally assigned IIDs are > running on this particular scope. That should avoid changing any other > standards or existing implementations. this sum it up, it's not "fair" for 4rd to start using these two bits as they ask for, it block for future usage of them. However, we should define for future how we want "u" and "g" set to 1 being used. But as other have stated, why should we keep them? -- Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From brian.e.carpenter@gmail.com Thu Dec 20 00:11:25 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8641D21F8A91 for ; Thu, 20 Dec 2012 00:11:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.602 X-Spam-Level: X-Spam-Status: No, score=-101.602 tagged_above=-999 required=5 tests=[AWL=0.089, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XP0tk2EAtW+v for ; Thu, 20 Dec 2012 00:11:24 -0800 (PST) Received: from mail-ee0-f53.google.com (mail-ee0-f53.google.com [74.125.83.53]) by ietfa.amsl.com (Postfix) with ESMTP id 997A521F8A90 for ; Thu, 20 Dec 2012 00:11:24 -0800 (PST) Received: by mail-ee0-f53.google.com with SMTP id c50so1488102eek.26 for ; Thu, 20 Dec 2012 00:11:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=9afp+xasEXQyhTNCcUN4HR4yXeVK4Ori0iVOV3YU8AI=; b=z79j/j4AMkVQZ+8fmsfg3cr/E2M9t3ppFowFBq/qYwWyhCpK5SqjJJx3ZiixUaCGSn QTChj3nxec6sOSt5PD1/UdvUaUWxR2928M2r/Gq7EAc6os6oyvgCfpvSn2UoDyocOr/8 9AaP0jjYPbe3eb3oI9x4ABGcCAk2w7aOiehPc3Ff1w/wiFPw5sE3Juzx9VjOaTGwh9re j6lGcl5kVydDaCQcHTb5xUTnXtSpNSM8x89A+RmitVUrK+X0PFR1mShbrW545xgcOJGB sN4H190feIrjeXCA5nXBiPk31EuttvyLH9cZO55JhCYE+URarTqKNCexNUr5gMI+/ubM Y+Tg== X-Received: by 10.14.213.134 with SMTP id a6mr21316711eep.45.1355991083673; Thu, 20 Dec 2012 00:11:23 -0800 (PST) Received: from [192.168.1.65] (host-2-102-219-199.as13285.net. [2.102.219.199]) by mx.google.com with ESMTPS id 44sm13958479eek.0.2012.12.20.00.11.21 (version=SSLv3 cipher=OTHER); Thu, 20 Dec 2012 00:11:22 -0800 (PST) Message-ID: <50D2C833.7090300@gmail.com> Date: Thu, 20 Dec 2012 08:11:31 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Jouni Korhonen Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 08:11:25 -0000 Jouni, On 19/12/2012 21:19, Jouni Korhonen wrote: > On Dec 19, 2012, at 5:58 PM, Brian E Carpenter wrote: >=20 >> On 19/12/2012 14:44, Bless, Roland (TM) wrote: >>> Hi, >>> >>> On 19.12.2012 14:21, R=C3=A9mi Despr=C3=A9s wrote: >>>> Could we limit the 6man discussion to the question asked by Softwire= , >>>> i.e. whether new IID types can be defined, using u=3Dg=3D1, with a f= irst >>> ^^^^^^^^^^^^ >>> Sorry, I'm not yet aware of a concept called IID _types_? >>> Do we really have such a thing "IID types"? >> I think that's an important point. If we could make a statement like >> >> "The IID consists of N bits that have no meaning; the only constraint >=20 > Hmm.. how would this work with RFC5453 reserved IID space we already > have for anycast addresses? Good question, but I don't think it's a problem except one of wording. "The IID consists of N bits that have no encoded meaning; the only constraint is that they must be unique within the scope of a given link and routing prefix. Some IID values are reserved for special use [RFC5453= ]." Brian From sthaug@nethelp.no Thu Dec 20 00:17:42 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A438721F8A76 for ; Thu, 20 Dec 2012 00:17:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RhhxtZq1jT1o for ; Thu, 20 Dec 2012 00:17:42 -0800 (PST) Received: from bizet.nethelp.no (bizet.nethelp.no [195.1.209.33]) by ietfa.amsl.com (Postfix) with SMTP id A227621F8A6E for ; Thu, 20 Dec 2012 00:17:41 -0800 (PST) Received: (qmail 18036 invoked from network); 20 Dec 2012 08:17:38 -0000 Received: from bizet.nethelp.no (HELO localhost) (195.1.209.33) by bizet.nethelp.no with SMTP; 20 Dec 2012 08:17:38 -0000 Date: Thu, 20 Dec 2012 09:17:38 +0100 (CET) Message-Id: <20121220.091738.74737837.sthaug@nethelp.no> To: rogerj@gmail.com Subject: Re: IIDs, u and g bits, and 4rd From: sthaug@nethelp.no In-Reply-To: References: <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: v6ops@globis.net, ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 08:17:42 -0000 > > It seems to me with the benefit of hindsight that a fundamentally better > > approach would have been to reserve many more bits in the IID, or in RA > > PIO, to create mutually exclusive subspaces per assignment mechanism or > > per class of assignment mechanism, but that train has probably left the > > station long ago, and that now assigning a huge block of space for u=1 > > g=1 exclusively for a tunnel protocol like 4rd is fundamentally unfair > > and restrictive for future assignment mechanisms. Also having addresses > > assigned without performing DAD would seem a bad move to me on any > > prefix with more than one address assignment scheme running. > > For most people, there are only two way of seting and IPv6 addresses, > either through RA/DHCPv6, or manual. In either case not many really > care about u/g bit, or know about it. Agreed. As long as the "wrong" setting of the u/g bits has zero operational consequence, and no compelling argument has been made for why they are important - the u/g bits will continue to be ignored. Steinar Haug, AS 2116 From despres.remi@laposte.net Thu Dec 20 00:22:07 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB0BC21F8A8B for ; Thu, 20 Dec 2012 00:22:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.822 X-Spam-Level: X-Spam-Status: No, score=-1.822 tagged_above=-999 required=5 tests=[AWL=0.127, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qh7sI6DKhXED for ; Thu, 20 Dec 2012 00:22:07 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC4D421F8A76 for ; Thu, 20 Dec 2012 00:22:06 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id E3FAD70000AF; Thu, 20 Dec 2012 09:22:04 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id 8D31F70000E5; Thu, 20 Dec 2012 09:22:04 +0100 (CET) X-SFR-UUID: 20121220082204578.8D31F70000E5@msfrf2119.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Thu, 20 Dec 2012 09:22:04 +0100 Message-Id: <8E868FE2-16A4-4EE7-9CB1-B96226A9B32A@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> To: Roger =?iso-8859-1?q?J=F8rgensen?= X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: Ray Hunter , 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 08:22:08 -0000 2012-12-19 23:01, Roger J=F8rgensen : ... > if you read RFC4291 and section 2.5.1. you'll see the following two = paragraphs >=20 > IPv6 nodes are not required to validate that interface identifiers > created with modified EUI-64 tokens with the "u" bit set to = universal > are unique. That's precisely why uniqueness of such addresses must continue to be = ensured. >=20 > The use of the universal/local bit in the Modified EUI-64 format > identifier is to allow development of future technology that can = take > advantage of interface identifiers with universal scope. 4rd IPv6 addresses are universally unique because: - Each one contains a public IPv4 address - If this IPv4 address is shared between several sites, = checksum-neutrality preserver fields of their IIDs are different. (They = depend on subnet prefixes of these sites, which differ by the few bits = of their port-set IDs.)=20 This is fully in scope of the sentence you have quoted (even if such an = application wasn't anticipated when RFC 4291 was adopted).=20 =20 > First it say no hosts are required to validate it, only routers as I > read it. Any that really do that? > Second say it's open for the future to redefine the usage of the "u" = bit. > The "g" bit ain't IETF's to play with as I read it - but all of this > is in EUI-64 context. >=20 >=20 > All in all, nothing prevent 4rd to use u and g set to 1, Agreed. > however: > =20 >> Besides, who will guarantee that the IEEE won't come up with some = future >> use for u=3D1 g=3D1? I'm not even sure the IETF should define these = semantics. >> So in response to Joel, I'd humbly suggest defining u=3D1 g=3D1 as = reserved >> for future use (to be defined in conjunction with the IEEE). >>=20 >> To me, an alternative for consideration for 4rd would be either to = use a >> dedicated IEEE-defined special-purpose OUI (together with an = additional >> rd4 specific header for any remaining bits that cannot be encoded >> directly in the IID/IPv6 address), or to use locally assigned IIDs >> starting with binary 000 and ensure no other locally assigned IIDs = are >> running on this particular scope. That should avoid changing any = other >> standards or existing implementations. >=20 > this sum it up, it's not "fair" for 4rd to start using these two bits > as they ask for, it block for future usage of them. As already explained, reserving for 4rd a particular IID pattern having = u=3Dg=3D1 (as needed to avoid confusion with EUI-64-based addresses = having u=3D1), doesn't block "future usage" of these two bits. On the contrary, it opens the path for new patterns using them, while no = conflict with current usages has been identified (including ILNP). =20 > However, we should define for future how we want "u" and "g" set to 1 > being used. > But as other have stated, why should we keep them? Not understood what is meant by "why should we keep them?". RD >=20 >=20 > --=20 >=20 > Roger Jorgensen | ROJO9-RIPE > rogerj@gmail.com | - IPv6 is The Key! > http://www.jorgensen.no | roger@jorgensen.no > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From jounikor@gmail.com Wed Dec 19 13:19:55 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C590D21F842E for ; Wed, 19 Dec 2012 13:19:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.374 X-Spam-Level: X-Spam-Status: No, score=-3.374 tagged_above=-999 required=5 tests=[AWL=0.225, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id onIXJTjnhUMN for ; Wed, 19 Dec 2012 13:19:55 -0800 (PST) Received: from mail-wi0-f182.google.com (mail-wi0-f182.google.com [209.85.212.182]) by ietfa.amsl.com (Postfix) with ESMTP id C773921F8414 for ; Wed, 19 Dec 2012 13:19:54 -0800 (PST) Received: by mail-wi0-f182.google.com with SMTP id hn14so1550497wib.9 for ; Wed, 19 Dec 2012 13:19:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=Nh9OF4h/QbNlNj+8LNh7IURNP19iK+pKKRQAcwcl4PI=; b=Vje7tsUEApSXwDsyc5tZI6ZJ4v/vbG44N7saX8P0rj3hEyDu9vFsNdPOol5qG9y/Y/ C9fOFOnhM201Pqw89Kdd8h8U4HmaLWldfJQ1mjMU5GZeq+/jUx5X90CCrL3PvSMjLXkp 6bpGVi3mc70/SF9+SkNgxkUgKZpU27JOJHum+FS6DQ0hlzIOM9qT0Htm3geEEIlOblyY /TkMJau38L9vEdftkOBCgIzvDhDA9HUCHWNK9G5b3K9kXrC+ZvrCVv3kXEZg8ARHvYem e++jJM/Y1MUERCR9TJVVKriCLDuvTqRSNLsnhF79WhSNfQ2d2iFwgZmxrqqfzs03ENrR MW0A== X-Received: by 10.180.109.195 with SMTP id hu3mr6278170wib.31.1355951993686; Wed, 19 Dec 2012 13:19:53 -0800 (PST) Received: from [188.117.15.109] ([188.117.15.109]) by mx.google.com with ESMTPS id w5sm22325709wif.11.2012.12.19.13.19.49 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 19 Dec 2012 13:19:50 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: Jouni Korhonen In-Reply-To: <50D1E424.8030209@gmail.com> Date: Wed, 19 Dec 2012 23:19:47 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) X-Mailman-Approved-At: Thu, 20 Dec 2012 00:47:00 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 21:19:55 -0000 On Dec 19, 2012, at 5:58 PM, Brian E Carpenter = wrote: > On 19/12/2012 14:44, Bless, Roland (TM) wrote: >> Hi, >>=20 >> On 19.12.2012 14:21, R=E9mi Despr=E9s wrote: >>> Could we limit the 6man discussion to the question asked by = Softwire, >>> i.e. whether new IID types can be defined, using u=3Dg=3D1, with a = first >> ^^^^^^^^^^^^ >> Sorry, I'm not yet aware of a concept called IID _types_? >> Do we really have such a thing "IID types"? >=20 > I think that's an important point. If we could make a statement like >=20 > "The IID consists of N bits that have no meaning; the only constraint Hmm.. how would this work with RFC5453 reserved IID space we already have for anycast addresses? - Jouni > is that they must be unique within the scope of a given link and > routing prefix." >=20 > then perhaps we could move forward. Today, the u and g bits are the > only ones that make the previous statement untrue for N=3D64, I = believe. >=20 > This would require formally updating RFC 4291, which says: > For all unicast addresses, except those that start with the binary > value 000, Interface IDs are required to be 64 bits long and to be > constructed in Modified EUI-64 format. >=20 > s/required/recommended/ might be enough. Why is it "required" anyway? >=20 > Brian >=20 >>=20 >>> If the answer is positive (as it seems it can be), restarting a >>> discussion on the 4rd design is unnecessary. That is only if the >>> answer is negative that Softwire will have to restart working on the >>> subject. >>=20 >> Obviously, this question has further implications, so I >> think it's legitimate to ask whether the proposed solution >> is really a reasonable way of solving the problem. >>=20 >> Regards, >> Roland >>=20 >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >>=20 >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From despres.remi@laposte.net Thu Dec 20 00:54:43 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E96121F86A5 for ; Thu, 20 Dec 2012 00:54:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.829 X-Spam-Level: X-Spam-Status: No, score=-1.829 tagged_above=-999 required=5 tests=[AWL=0.120, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iw-+oAiU2mUb for ; Thu, 20 Dec 2012 00:54:42 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8979D21F8681 for ; Thu, 20 Dec 2012 00:54:42 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id 68FCE7000070; Thu, 20 Dec 2012 09:54:41 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id 0E4B27000063; Thu, 20 Dec 2012 09:54:40 +0100 (CET) X-SFR-UUID: 20121220085441586.0E4B27000063@msfrf2119.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D2231C.2000809@kit.edu> Date: Thu, 20 Dec 2012 09:54:40 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> To: "Bless, Roland (TM)" X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 08:54:43 -0000 2012-12-19 21:27, "Bless, Roland (TM)" : > Hi R=E9mi, >=20 > On 19.12.2012 18:59, R=E9mi Despr=E9s wrote: >=20 >> As is, the sentence misses that IIDs that have u=3D1 are expected to = be >> universally unique. (This uniqueness is key to ensure that, as long >=20 > I don't agree. =46rom an IPv6 functional point of view, IIDs only need = to > be unique within the link-local/subnet scope, so _universal_ = uniqueness > is not strictly _required_. Deriving the IID from a universally unique > address may help to minimize the conflict probability within a subnet > though. Interface addresses at the link layer are specified by IEEE to be = universally unique. This has been effective fort link-layer = communication to need neither manual configuration nor a DAD-like = protocol at this layer. At the IP layer, it has also been effective to support a good level of = address stability without needing manual configurations.=20 =20 >> as a site has a stable IPv6 prefix, its statelessly auto-configured >> hosts can have stable addresses if so desired.) >=20 > You can also achieve the mentioned uniqueness of an IPv6 address by > having manually assigned locally unique IIDs (which is typically used > for servers since you don't want to change the IPv6 address each time > your network interface must be replaced due to hardware problems...) > combined with that stable (globally unique) IPv6 prefix. Address stability is useful for servers, yes, but also for referrals, = and in general when addresses are advertised in various ways. Relaxing uniqueness of IIDs that are based on universal-scope EUI-64 = would be a step backward.=20 There is no need AFAIK for such a regression. =20 >> Ensuring IID universal uniqueness for new types of universal-scope >> addresses is the subject at hand. It can fortunately be dealt with >> because we know that, today, all u=3D1 IIDs must also have g=3D0. >=20 > what new types of universal-scope addresses? One appears now with 4rd.=20 As stated in the note of the draft submitted to 6man, "Its function is = to ensure that 4rd IPv6 addresses are recognizable by CEs without any = interference with the choice of subnet prefixes in CE sites". These = prefixes, as well as IIDs used in sites that support 4rd may have been = chosen before 4rd is activated. Regards, RD =20 >=20 > Regards, > Roland From despres.remi@laposte.net Thu Dec 20 02:07:22 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9A0621F8778 for ; Thu, 20 Dec 2012 02:07:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.835 X-Spam-Level: X-Spam-Status: No, score=-1.835 tagged_above=-999 required=5 tests=[AWL=0.114, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qtjonz0uSzIa for ; Thu, 20 Dec 2012 02:07:13 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D82721F8445 for ; Thu, 20 Dec 2012 02:07:07 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id 1CA1670000A8; Thu, 20 Dec 2012 11:07:06 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id E82747000088; Thu, 20 Dec 2012 11:07:05 +0100 (CET) X-SFR-UUID: 20121220100705951.E82747000088@msfrf2119.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Thu, 20 Dec 2012 11:07:05 +0100 Message-Id: <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> To: Ole Troan , Bob Hinden X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 10:07:22 -0000 Hello, chairs, - First a great thank you Jouni for for the reference to RFC 5453, which = is perfectly relevant but had been ignored in this discussion.=20 The good news is that, since an IANA registry for IID ranges has already = been created, no new registry is needed for any new IID type, and in = particular for 4rd.=20 - Small problem: at http://www.iana.org/protocols, a registry for = "Reserved Internet Protocol version 6 (IPv6) Interface Identifiers" is = listed but, when clicking to open it, the page that comes is that of = "Instant Message Disposition Notification (IMDN) Headers". This should = be easy to fix I suppose. - For 4rd, it is then sufficient that the table of = http://tools.ietf.org/html/rfc5453#section-3 (to be reflected in the = IANA registry), becomes: +-----------------------------------------+-------------------------+ | Interface Identifier Range | Description | +-----------------------------------------+-------------------------+ | 0000:0000:0000:0000 | Subnet-Router Anycast | | | [RFC4291] | | | | | 0300:0000:0000:0000-03FF:FFFF:FFFF:FFFF | Reserved 4rd Unicast | | | Addresses [RFCxxxx] | | | | | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | | | Addresses[RFC2526] | +-----------------------------------------+-------------------------+ A possible answer from 6man to Softwire is then a request to modify the = IANA section of the 4rd draft to reflect the above. =20 Regards, RD 2012-12-19 =E0 22:19, Jouni Korhonen : ... > Hmm.. how would this work with RFC5453 reserved IID space we already > have for anycast addresses? From brian.e.carpenter@gmail.com Thu Dec 20 02:44:29 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42FE921F87E7 for ; Thu, 20 Dec 2012 02:44:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.454 X-Spam-Level: X-Spam-Status: No, score=-101.454 tagged_above=-999 required=5 tests=[AWL=-0.063, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rAOZuAqegPhI for ; Thu, 20 Dec 2012 02:44:28 -0800 (PST) Received: from mail-bk0-f43.google.com (mail-bk0-f43.google.com [209.85.214.43]) by ietfa.amsl.com (Postfix) with ESMTP id 58BF221F844E for ; Thu, 20 Dec 2012 02:44:28 -0800 (PST) Received: by mail-bk0-f43.google.com with SMTP id jf20so1529607bkc.16 for ; Thu, 20 Dec 2012 02:44:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=P1/PTD22hmTwTwbS7wrF95V3LCabNK0WY+M9sWVzG5g=; b=ezgcHZqKgfWz+84KCs09oJIsLiTQAl32JdoBnuyopwRmnjMc+V4qrr/mQb6Mo7kbev WJi5UXqFS59P2YNOVKvAD9q2AI0HwXVo0XG60NrBwyAohXWN2UA8khyEk3odjPbHjOmC R0bn2H/CoSYv+Y6q0rXTjtGjzxtJS2NenZsBSR4EVbtkLGnxZUqc5OtxxDo85H+fwEXf B1N8XKdnxk9wXzoEYbsG9sUEllUCLZ84dyoPz/oUPA5kTLoJ8Nab9EllFDaoe3DpdnBQ JjxvyBzWKrGhwKoInYOoXJKAS76llGl50a4ALin0dFHlzn5I5jIoIag5i3Ct1zfXMHmQ 2FOQ== X-Received: by 10.204.149.11 with SMTP id r11mr4269941bkv.93.1356000267120; Thu, 20 Dec 2012 02:44:27 -0800 (PST) Received: from [192.168.1.65] (host-2-102-219-199.as13285.net. [2.102.219.199]) by mx.google.com with ESMTPS id m20sm6588694bkw.4.2012.12.20.02.44.25 (version=SSLv3 cipher=OTHER); Thu, 20 Dec 2012 02:44:26 -0800 (PST) Message-ID: <50D2EC14.9000206@gmail.com> Date: Thu, 20 Dec 2012 10:44:36 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: =?UTF-8?B?UsOpbWkgRGVzcHLDqXM=?= Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> In-Reply-To: <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 10:44:29 -0000 R=C3=A9mi, I think this might work, and is nicely orthogonal to my question whether the u/g bits have any intrinsic value. One question though. You suggest 0300:0000:0000:0000-03FF:FFFF:FFFF:FFFF but I understand that 4rd needs 6 bytes, not 7. Is there any reason you did not propose 0300:0000:0000:0000-0300:FFFF:FFFF:FFFF ? Also, is there any reason not to choose (for example) FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF which is near the existing anycast range ? Regards Brian On 20/12/2012 10:07, R=C3=A9mi Despr=C3=A9s wrote: > Hello, chairs, >=20 > - First a great thank you Jouni for for the reference to RFC 5453, whic= h is perfectly relevant but had been ignored in this discussion.=20 > The good news is that, since an IANA registry for IID ranges has alread= y been created, no new registry is needed for any new IID type, and in pa= rticular for 4rd.=20 >=20 > - Small problem: at http://www.iana.org/protocols, a registry for "Rese= rved Internet Protocol version 6 (IPv6) Interface Identifiers" is listed = but, when clicking to open it, the page that comes is that of "Instant Me= ssage Disposition Notification (IMDN) Headers". This should be easy to fi= x I suppose. >=20 > - For 4rd, it is then sufficient that the table of http://tools.ietf.or= g/html/rfc5453#section-3 (to be reflected in the IANA registry), becomes= : >=20 > +-----------------------------------------+-------------------------+ > | Interface Identifier Range | Description | > +-----------------------------------------+-------------------------+ > | 0000:0000:0000:0000 | Subnet-Router Anycast | > | | [RFC4291] | > | | | > | 0300:0000:0000:0000-03FF:FFFF:FFFF:FFFF | Reserved 4rd Unicast | > | | Addresses [RFCxxxx] | > | | | > | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | > | | Addresses[RFC2526] | > +-----------------------------------------+-------------------------+ >=20 > A possible answer from 6man to Softwire is then a request to modify the= IANA section of the 4rd draft to reflect the above. >=20 > =20 > Regards, > RD >=20 >=20 >=20 >=20 > 2012-12-19 =C3=A0 22:19, Jouni Korhonen : > ... >> Hmm.. how would this work with RFC5453 reserved IID space we already >> have for anycast addresses? >=20 From despres.remi@laposte.net Thu Dec 20 03:06:24 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8113D21F86CD for ; Thu, 20 Dec 2012 03:06:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.841 X-Spam-Level: X-Spam-Status: No, score=-1.841 tagged_above=-999 required=5 tests=[AWL=0.108, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uptroa1fup8E for ; Thu, 20 Dec 2012 03:06:23 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D2BA21F8634 for ; Thu, 20 Dec 2012 03:06:23 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id C636870000EE; Thu, 20 Dec 2012 12:06:22 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2119.sfr.fr (SMTP Server) with ESMTP id A35307000061; Thu, 20 Dec 2012 12:06:22 +0100 (CET) X-SFR-UUID: 20121220110622669.A35307000061@msfrf2119.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D2EC14.9000206@gmail.com> Date: Thu, 20 Dec 2012 12:06:22 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D2EC14.9000206@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 11:06:24 -0000 Le 2012-12-20 =E0 11:44, Brian E Carpenter = a =E9crit : > R=E9mi, >=20 > I think this might work, and is nicely orthogonal to my question > whether the u/g bits have any intrinsic value. >=20 > One question though. You suggest > 0300:0000:0000:0000-03FF:FFFF:FFFF:FFFF > but I understand that 4rd needs 6 bytes, not 7. >=20 > Is there any reason you did not propose > 0300:0000:0000:0000-0300:FFFF:FFFF:FFFF ? The reason was compatibility with the current 4rd draft, but I agree = that 6 free bytes is enough, and is therefore better. This can be part of the 6man answer to Softwire. >=20 > Also, is there any reason not to choose (for example) > FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF > which is near the existing anycast range ? No objection that I can see. Support for including this in the 6man answer. Thanks, RD >=20 > Regards > Brian >=20 > On 20/12/2012 10:07, R=E9mi Despr=E9s wrote: >> Hello, chairs, >>=20 >> - First a great thank you Jouni for for the reference to RFC 5453, = which is perfectly relevant but had been ignored in this discussion.=20 >> The good news is that, since an IANA registry for IID ranges has = already been created, no new registry is needed for any new IID type, = and in particular for 4rd.=20 >>=20 >> - Small problem: at http://www.iana.org/protocols, a registry for = "Reserved Internet Protocol version 6 (IPv6) Interface Identifiers" is = listed but, when clicking to open it, the page that comes is that of = "Instant Message Disposition Notification (IMDN) Headers". This should = be easy to fix I suppose. >>=20 >> - For 4rd, it is then sufficient that the table of = http://tools.ietf.org/html/rfc5453#section-3 (to be reflected in the = IANA registry), becomes: >>=20 >> +-----------------------------------------+-------------------------+ >> | Interface Identifier Range | Description | >> +-----------------------------------------+-------------------------+ >> | 0000:0000:0000:0000 | Subnet-Router Anycast | >> | | [RFC4291] | >> | | | >> | 0300:0000:0000:0000-03FF:FFFF:FFFF:FFFF | Reserved 4rd Unicast | >> | | Addresses [RFCxxxx] | >> | | | >> | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | >> | | Addresses[RFC2526] | >> +-----------------------------------------+-------------------------+ >>=20 >> A possible answer from 6man to Softwire is then a request to modify = the IANA section of the 4rd draft to reflect the above. >>=20 >>=20 >> Regards, >> RD >>=20 >>=20 >>=20 >>=20 >> 2012-12-19 =E0 22:19, Jouni Korhonen : >> ... >>> Hmm.. how would this work with RFC5453 reserved IID space we already >>> have for anycast addresses? >>=20 >=20 From otroan@employees.org Thu Dec 20 04:46:31 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2ED121F8581 for ; Thu, 20 Dec 2012 04:46:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.332 X-Spam-Level: X-Spam-Status: No, score=-10.332 tagged_above=-999 required=5 tests=[AWL=-0.033, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bUDOxL1DwKo9 for ; Thu, 20 Dec 2012 04:46:30 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id 6A47F21F8556 for ; Thu, 20 Dec 2012 04:46:30 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkcHAD8H01CQ/khN/2dsb2JhbABEg0i2XYNHFnOCHgEBBAF5EAtGVwaIIAa5MJA0YQOmU4J1 X-IronPort-AV: E=Sophos;i="4.84,322,1355097600"; d="scan'208";a="79258884" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-2.cisco.com with ESMTP; 20 Dec 2012 12:46:28 +0000 Received: from dhcp-10-61-101-250.cisco.com (dhcp-10-61-101-250.cisco.com [10.61.101.250]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBKCkRut027013 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 20 Dec 2012 12:46:27 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: Ole Troan In-Reply-To: Date: Thu, 20 Dec 2012 13:46:27 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <323C3E7D-98FB-4099-BF83-8CAA0DE50303@employees.org> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D2EC14.9000206@gmail.com> To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= X-Mailer: Apple Mail (2.1499) Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 12:46:31 -0000 >> Also, is there any reason not to choose (for example) >> FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF >> which is near the existing anycast range ? >=20 > No objection that I can see. > Support for including this in the 6man answer. I think this is better than making any assumption abut the u/g flags. even so I do feel uneasy about this proposal. - principally I think we should design protocols that do not depend on = well known addresses or ports. - I believe the IPv6 interface identifier should be of length 128-n, and = not carry any structure. at a stretch I can accept reserved identifiers for anycast addresses. - even for reserved interface identifiers, an implementation must handle = conflicts. anycast does that implicitly. I'm not sure how 4rd does that. wouldn't putting two 4rd CEs on the same link, break? - the size of the reservation. do we want to reserve 2^48 addresses out = of every interface-id, and update every implementation? for an experimental mechanism? I think that a mechanism that requires a large swath of interface-id = space, and does not handle collisions, should use a separate prefix on a virtual interface. cheers, Ole= From randy@psg.com Thu Dec 20 05:02:39 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F32021F873E for ; Thu, 20 Dec 2012 05:02:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9sM2l1Wzs+wx for ; Thu, 20 Dec 2012 05:02:38 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by ietfa.amsl.com (Postfix) with ESMTP id 9F12421F8715 for ; Thu, 20 Dec 2012 05:02:38 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1Tlfli-000IMu-0A; Thu, 20 Dec 2012 13:02:34 +0000 Date: Thu, 20 Dec 2012 08:02:33 -0500 Message-ID: From: Randy Bush To: Jouni Korhonen Subject: Re: IIDs, u and g bits, and 4rd In-Reply-To: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 13:02:39 -0000 >> "The IID consists of N bits that have no meaning; the only constraint > > Hmm.. how would this work with RFC5453 reserved IID space we already > have for anycast addresses? is anyone aware of any deployment of the ipv6 invented anycast? like most ipv6 magic, i think it is ignored and regular old ipv4-style anycast is used. randy From despres.remi@laposte.net Thu Dec 20 06:10:52 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCBEA21F8910 for ; Thu, 20 Dec 2012 06:10:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.846 X-Spam-Level: X-Spam-Status: No, score=-1.846 tagged_above=-999 required=5 tests=[AWL=0.103, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bj2KGVkEDAaq for ; Thu, 20 Dec 2012 06:10:52 -0800 (PST) Received: from smtp25.services.sfr.fr (smtp25.services.sfr.fr [93.17.128.121]) by ietfa.amsl.com (Postfix) with ESMTP id 0C66421F8584 for ; Thu, 20 Dec 2012 06:10:51 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2516.sfr.fr (SMTP Server) with ESMTP id E5D72700010D; Thu, 20 Dec 2012 15:10:50 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2516.sfr.fr (SMTP Server) with ESMTP id 997E17000108; Thu, 20 Dec 2012 15:10:48 +0100 (CET) X-SFR-UUID: 20121220141048628.997E17000108@msfrf2516.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <323C3E7D-98FB-4099-BF83-8CAA0DE50303@employees.org> Date: Thu, 20 Dec 2012 15:10:48 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D2EC14.9000206@gmail.com> <323C3E7D-98FB-4099-BF83-8CAA0DE50303@employees.org> To: Ole Troan X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 14:10:53 -0000 2012-12-20 13:46, Ole Troan : >>> Also, is there any reason not to choose (for example) >>> FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF >>> which is near the existing anycast range ? >>=20 >> No objection that I can see. >> Support for including this in the 6man answer. >=20 > I think this is better than making any assumption abut the u/g flags. >=20 > even so I do feel uneasy about this proposal. Wow, what a list ! Let me try to make you comfortable. =20 > - principally I think we should design protocols that do not depend on = well known addresses or ports. This is a debatable viewpoint but, more important, it isn't a problem = for 4rd: neither any WKA nor any WKP is needed. > - I believe the IPv6 interface identifier should be of length 128-n, = and not carry any structure. > at a stretch I can accept reserved identifiers for anycast addresses. No change to RFC 4291 is proposed in this respect.=20 However, 4rd addresses, which are concerned with the requirement that = "All Global Unicast addresses other than those that start with binary = 000 have a 64-bit interface ID field", must have 64-bit IIDs.=20 > - even for reserved interface identifiers, an implementation must = handle conflicts. > anycast does that implicitly. I'm not sure how 4rd does that. > wouldn't putting two 4rd CEs on the same link, break? (*) 4rd implementors are free to add code to reject any intra-site IID that = (by mistake) would be universal-scope, and in the 4rd-assigned IID = range.=20 Whether including this extra complexity would be valuable enough is = debatable, not forgetting that: - 4rd is experimental - RFC 4862 says "IPv6 nodes are not required to validate that interface = identifiers created with modified EUI-64 tokens with the "u" bit set to = universal are unique". (There is no guarantee that DAD will prevent all = misuses of universal-scope IIDs.) =20 > - the size of the reservation. do we want to reserve 2^48 addresses = out of every interface-id, > and update every implementation? for an experimental mechanism? There must be a misunderstanding somewhere: no existing implementation = needs to be modified (unless 4rd support is added to it).=20 > I think that a mechanism that requires a large swath of interface-id = space, and does not handle collisions, should > use a separate prefix on a virtual interface. Regarding collisions, see (*) above. What you view as a large swath is in fact only 1/2^16 of the total IID = space, nothing to feel uncomfortable about. Hoping to have addressed all your fears, Cheers, RD >=20 > cheers, > Ole From otroan@employees.org Thu Dec 20 06:40:48 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D7BB21F8853 for ; Thu, 20 Dec 2012 06:40:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.48 X-Spam-Level: X-Spam-Status: No, score=-10.48 tagged_above=-999 required=5 tests=[AWL=0.118, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gR49kXjCogkX for ; Thu, 20 Dec 2012 06:40:46 -0800 (PST) Received: from ams-iport-3.cisco.com (ams-iport-3.cisco.com [144.254.224.146]) by ietfa.amsl.com (Postfix) with ESMTP id 094EC21F860A for ; Thu, 20 Dec 2012 06:40:43 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkUHADAi01CQ/khR/2dsb2JhbABEg0i6JhZzhFyIJpdRoWiMXRaDQWEDi1OREolugnWBYwEIFwQ X-IronPort-AV: E=Sophos;i="4.84,324,1355097600"; d="scan'208,217";a="10598721" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-3.cisco.com with ESMTP; 20 Dec 2012 14:40:38 +0000 Received: from dhcp-10-61-101-250.cisco.com (dhcp-10-61-101-250.cisco.com [10.61.101.250]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBKEebSU011661 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Thu, 20 Dec 2012 14:40:38 GMT From: Ole Troan Content-Type: multipart/alternative; boundary="Apple-Mail=_6A84723E-D01A-4F35-89FC-BD521F7D366D" Subject: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Message-Id: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> Date: Thu, 20 Dec 2012 15:40:37 +0100 To: 6man 6man-wg Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 14:40:48 -0000 --Apple-Mail=_6A84723E-D01A-4F35-89FC-BD521F7D366D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 all, the ADs have asked us to ensure that there are good review of documents = in the working group, prior to them being advanced to the IESG. as a part of document last calls in the 6man working group, Bob and I = want to try using volunteers and/or w.g. chair reviewers, that take specific = responsibility to review documents in WG last call. Bob and I have reviewed this document. General comments: -------------------------- We do see the usefulness of a interface-id generation algorithm, that = results in stable identifiers per IPv6 prefix, while not being derived from = link-layer MAC addresses. The mechanism proposed could be viewed as an modification of temporary = addresses (RFC4941) with lifetime handling as for SLAAC, or as an extension to CGA (RFC3972) = address generation where the public key is removed from the hash.=20 The method for generating "Stable privacy addresses" needs to be as well = specified as temporary addresses (RFC4941). We do wonder if the method of generating these addresses could be a = modification of the algorithm in RFC4941, or if at least, larger parts of the text in = RFC4941 could be=20 references avoiding having to duplicate lots of text into this document. We do not believe the current revision of the document is ready to = advance to the IESG. Major points: ----------------- - Stable Privacy Enhanced Addresses (SPE Addresses) should not be a = replacement for the algorithm specified in RFC2464. It is an alternative. Section 3 needs = modification. - The algorithm in the document is underspecified. o It should specify the hash function. E.g. MD5 as RFC4941. o It should handle reserved interface-ids (see 4941). o We suggest renaming the =93secret key=94 to =93modifier=94. And add = text describing how to =91maintain=92 the modifier (section 3 of RFC3972). o It would be useful to include an example algorithm as has been done = in some other documents. o Not all implementations use interface indexes - Clarify what lifetimes these addresses have. - Specify the default for DAD retries (IDGEN_RETRIES) - Clarify the requirements for stable storage (compared to RFC2464) Minor points: ----------------- Don't use the term "static addresses" as that implies static aka manual = configuration. These addresses are not static in that sense. Section 3, Last Paragraph: The reference to Node Information Queries only applies if the attacker = is onlink. Current text overstates the problem. Move to security considerations. = Addresses will leak regardless, in other communication, email header etc. 6. Security Considerations. s/in replacement of/as an alternative to/ Third bullet: The bullet on host-scanning needs some justification. Fourth bullet: This is not a security issue. Paragraph after bullets: s/algorithm is meant to replace/meant to supplement/ Best regards and Merry Christmas, Bob and Ole= --Apple-Mail=_6A84723E-D01A-4F35-89FC-BD521F7D366D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 all,

the ADs have asked us to ensure that there are good review of = documents in the
working = group, prior to them being advanced to the IESG.
as a part of document last calls in the 6man = working group, Bob and I want to try
using volunteers and/or w.g. chair reviewers, that = take specific responsibility = to
review = documents in WG = last call.



General = comments:
--------------------------
We do see the usefulness of a = interface-id generation algorithm, that results
in stable identifiers = per IPv6 prefix, while not being derived from link-layer
MAC = addresses.

The mechanism proposed could be viewed as an = modification of temporary addresses (RFC4941)
with lifetime handling = as for SLAAC, or as an extension to CGA (RFC3972) address
generation = where the public key is removed from the hash. 

The method for generating "Stable privacy addresses" needs to be as = well specified
as temporary = addresses (RFC4941).
We do = wonder if the method of generating these addresses could be a = modification of the
algorithm in RFC4941, or if at least, larger parts of the text in = RFC4941 could be 
references avoiding having to duplicate lots of text into this = document.

We = do not believe the current revision of the document is ready to advance = to the IESG.

Major points:
-----------------
- Stable = Privacy Enhanced Addresses (SPE Addresses) should not be a replacement = for the
  algorithm specified in RFC2464. It is an alternative. = Section 3 needs modification.

- The algorithm in the document =  is underspecified.
  o It should specify the hash = function. E.g. MD5 as RFC4941.
  o It should handle reserved = interface-ids (see 4941).
  o We suggest renaming the =93secret = key=94 to =93modifier=94. And add text describing
    how = to =91maintain=92 the modifier (section 3 of RFC3972).
  o It = would be useful to include an example algorithm as has been done in some = other documents.
  o Not all implementations use interface = indexes

- Clarify what lifetimes these addresses have.

- = Specify the default for DAD retries (IDGEN_RETRIES)

- Clarify the = requirements for stable storage (compared to RFC2464)

Minor = points:
-----------------
Don't use the term "static addresses" as = that implies static aka manual configuration.
These addresses are not = static in that sense.

Section 3, Last Paragraph:
The reference = to Node Information Queries only applies if the attacker is = onlink.
Current text overstates the problem. Move to security = considerations. Addresses will
leak regardless, in other = communication, email header etc.

6. Security = Considerations.
s/in replacement of/as an alternative = to/

Third bullet:
The bullet on host-scanning needs some = justification.

Fourth bullet:  This is not a security = issue.
Paragraph after bullets:
s/algorithm is meant to = replace/meant to supplement/

Best regards and = Merry Christmas,
Bob and = Ole
= --Apple-Mail=_6A84723E-D01A-4F35-89FC-BD521F7D366D-- From bob.hinden@gmail.com Thu Dec 20 06:47:42 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE54221F8751 for ; Thu, 20 Dec 2012 06:47:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eDXuAgsSqjh9 for ; Thu, 20 Dec 2012 06:47:42 -0800 (PST) Received: from mail-ee0-f50.google.com (mail-ee0-f50.google.com [74.125.83.50]) by ietfa.amsl.com (Postfix) with ESMTP id 2CB2021F86C1 for ; Thu, 20 Dec 2012 06:47:42 -0800 (PST) Received: by mail-ee0-f50.google.com with SMTP id b45so1831691eek.37 for ; Thu, 20 Dec 2012 06:47:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:subject:mime-version:content-type:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=TOBO8Dj191T1zVJrHxKZwKxVq72tQmGwj4M7bicvVhg=; b=qXA1eQhz0E0j4hw3RjCK1kIKk7Y/OBnUBP2HklwS9Ve4P++EphL4rpkMMMWDJkD+cR P+qmM6InUNRXbDOIG3KiDRuIQPiidF7ZVpuH5wleMIQ8bzpEI3FknYn554wiu/sC616W 0XUG4VRCRyqC5+6F8ib7Fa8G9OQw+O9RUe90xE5Q74OPZw+7nyy4w2Ja3JeOpHWeBLp1 1EEfAHca9/v27e/PpVJ19qPRGuAawzLrhkqH7AAzg+xuvhXzgXQWEBIi/INE2DxYh5SN XW9W8J4ObXlRtJa3HOGGBqe4PfW1I/7xwBF7P+a5GU3OA6/DVDFGz+5ETBYSa2ufmfRY BnpA== X-Received: by 10.14.177.1 with SMTP id c1mr23781281eem.8.1356014857319; Thu, 20 Dec 2012 06:47:37 -0800 (PST) Received: from [172.24.250.200] (dyn32-131.checkpoint.com. [194.29.32.131]) by mx.google.com with ESMTPS id f6sm15748874eeo.7.2012.12.20.06.47.34 (version=SSLv3 cipher=OTHER); Thu, 20 Dec 2012 06:47:36 -0800 (PST) Subject: Re: IIDs, u and g bits, and 4rd Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=us-ascii From: Bob Hinden In-Reply-To: Date: Thu, 20 Dec 2012 16:47:33 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <2965F46B-55F5-40A6-8DB3-1F53624F245E@gmail.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> To: Randy Bush X-Mailer: Apple Mail (2.1283) Cc: "ipv6@ietf.org List" , Bob Hinden X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 14:47:43 -0000 Randy, On Dec 20, 2012, at 3:02 PM, Randy Bush wrote: >>> "The IID consists of N bits that have no meaning; the only = constraint >>=20 >> Hmm.. how would this work with RFC5453 reserved IID space we already >> have for anycast addresses? >=20 > is anyone aware of any deployment of the ipv6 invented anycast? >=20 > like most ipv6 magic, i think it is ignored and regular old ipv4-style > anycast is used. I assume you mean the subnet-anycast addresses (i.e., Subnet-Router = anycast address). IPv6 has always had what you call regular old = ipv4-style anycast. See section 2.6 of RFC4291. Bob From alexandru.petrescu@gmail.com Thu Dec 20 06:52:00 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6174F21F8830 for ; Thu, 20 Dec 2012 06:52:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.073 X-Spam-Level: X-Spam-Status: No, score=-10.073 tagged_above=-999 required=5 tests=[AWL=0.176, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2fcGb8+8HeAB for ; Thu, 20 Dec 2012 06:51:59 -0800 (PST) Received: from cirse-out.extra.cea.fr (cirse-out.extra.cea.fr [132.167.192.142]) by ietfa.amsl.com (Postfix) with ESMTP id 8E15F21F8874 for ; Thu, 20 Dec 2012 06:51:59 -0800 (PST) Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse.extra.cea.fr (8.14.2/8.14.2/CEAnet-Internet-out-2.3) with ESMTP id qBKEpvwr025299 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 20 Dec 2012 15:51:57 +0100 Received: from muguet1.intra.cea.fr (muguet1.intra.cea.fr [132.166.192.6]) by pisaure.intra.cea.fr (8.14.4/8.14.4) with ESMTP id qBKEpvp2019110 for ; Thu, 20 Dec 2012 15:51:57 +0100 (envelope-from alexandru.petrescu@gmail.com) Received: from [127.0.0.1] (is010446-4.intra.cea.fr [10.8.33.116]) by muguet1.intra.cea.fr (8.13.8/8.13.8/CEAnet-Intranet-out-1.2) with ESMTP id qBKEpoZd008140 for ; Thu, 20 Dec 2012 15:51:56 +0100 Message-ID: <50D32606.1060502@gmail.com> Date: Thu, 20 Dec 2012 15:51:50 +0100 From: Alexandru Petrescu User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: ipv6@ietf.org Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 14:52:00 -0000 Le 20/12/2012 14:02, Randy Bush a écrit : >>> "The IID consists of N bits that have no meaning; the only >>> constraint >> >> Hmm.. how would this work with RFC5453 reserved IID space we >> already have for anycast addresses? > > is anyone aware of any deployment of the ipv6 invented anycast? In Mobile IPv6 the HA discovery (DHAAD) uses a dedicated anycast address valid within the subnet of the HA. This is implemented and demonstrated although not sure about the scale of deployment. > like most ipv6 magic, i think it is ignored and regular old > ipv4-style anycast is used. The anycast related to MIP6 works without any IPv4. Some magic of IPv6 anycast _is_ ignored, in that the IPv6 anycast address is treated like any other IPv6 unicast address - it is assigned on an interface, ND is performed on it, etc. It's just that it has a particular 'reserved' anycast meaning in the head of the implementer, not that routing code is modified. AS the MN does not know the address of its HA, it must discover it within its home network, so it sends a request to a 'reserved' address which has the prefix of the home network, and a 'reserved' IID - RFC2526 'Mobile IPv6 Home-Agents anycast'. It could as well have been 'multicast', as multicast is used in DHCP discovery phase, or other protocols' discovery phases. (maybe that's what's needed in any new protocol's discovery phases). Alex > > randy > -------------------------------------------------------------------- > IETF IPv6 working group mailing list ipv6@ietf.org Administrative > Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > > From roland.bless@kit.edu Thu Dec 20 07:51:05 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 194CA21F8AB7 for ; Thu, 20 Dec 2012 07:51:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.039 X-Spam-Level: X-Spam-Status: No, score=-6.039 tagged_above=-999 required=5 tests=[AWL=-0.090, BAYES_00=-2.599, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rEJPlYCbUmce for ; Thu, 20 Dec 2012 07:51:02 -0800 (PST) Received: from iramx2.ira.uni-karlsruhe.de (iramx2.ira.uni-karlsruhe.de [141.3.10.81]) by ietfa.amsl.com (Postfix) with ESMTP id 542AA21F8A0C for ; Thu, 20 Dec 2012 07:51:00 -0800 (PST) Received: from irams1.ira.uni-karlsruhe.de ([141.3.10.5]) by iramx2.ira.uni-karlsruhe.de with esmtps port 25 id 1TliOa-0007Y9-PR; Thu, 20 Dec 2012 16:50:58 +0100 Received: from i72vorta.tm.uni-karlsruhe.de ([141.3.71.26] helo=vorta.tm.kit.edu) by irams1.ira.uni-karlsruhe.de with esmtp port 25 id 1TliOa-00015j-Gw; Thu, 20 Dec 2012 16:50:52 +0100 Received: from [IPv6:::1] (ip6-localhost [IPv6:::1]) by vorta.tm.kit.edu (Postfix) with ESMTPS id 06481A80700; Thu, 20 Dec 2012 16:50:52 +0100 (CET) Message-ID: <50D333DB.6080500@kit.edu> Date: Thu, 20 Dec 2012 16:50:51 +0100 From: "Bless, Roland (TM)" Organization: Institute of Telematics, Karlsruhe Institute of Technology User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: =?ISO-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-ATIS-AV: ClamAV (irams1.ira.uni-karlsruhe.de) X-ATIS-AV: Kaspersky (iramx2.ira.uni-karlsruhe.de) X-ATIS-AV: ClamAV (iramx2.ira.uni-karlsruhe.de) X-ATIS-Timestamp: iramx2.ira.uni-karlsruhe.de 1356018658.313452000 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 15:51:05 -0000 Hi Rémi, On 20.12.2012 09:54, Rémi Després wrote: > Interface addresses at the link layer are specified by IEEE to be > universally unique. This has been effective fort link-layer > communication to need neither manual configuration nor a DAD-like > protocol at this layer. IEEE link layer addresses should be universally unique, but there were cases in which this assumption is not true, esp. if you consider that some manufacturers simply hijacked others OUIs or that most NICs and drivers allow to set nearly arbitrary MAC addresses. Moreover, there are now vast amounts of virtual machines in use that may use non legitimate IEEE addresses. So IMHO one should not rely on supposed universal uniqueness, but always perform DAD to detect conflicts... > At the IP layer, it has also been effective to support a good level > of address stability without needing manual configurations. Yep, however, this is also true for algorithmically derived IIDs as with privacy extensions or CGAs. > Address stability is useful for servers, yes, but also for referrals, > and in general when addresses are advertised in various ways. My point was that statically assigned IIDs may lead to even more stable IPv6 addresses than those generated out of EUI-64s. > Relaxing uniqueness of IIDs that are based on universal-scope EUI-64 > would be a step backward. There is no need AFAIK for such a > regression. I never promoted to "relax the uniqueness of IIDs" (whatever that means), my point was to avoid introducing a certain structure into IIDs. >> what new types of universal-scope addresses? > > One appears now with 4rd. As stated in the note of the draft > submitted to 6man, "Its function is to ensure that 4rd IPv6 addresses > are recognizable by CEs without any interference with the choice of > subnet prefixes in CE sites". These prefixes, as well as IIDs used in > sites that support 4rd may have been chosen before 4rd is activated. Yes, I read that, but it's unclear to me why it would be such a big deal to "reconfigure" the subnet prefixes for 4rd use since you have to activate and configure your box anyway, i.e., maybe you can flag an existing prefix for 4rd use when turning 4rd on. Moreover, would it really be such a big deal to change a subnet prefix when turning 4rd on, since we have auto configuration? BR, Roland From fred@cisco.com Thu Dec 20 08:32:03 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5A5B21F8997 for ; Thu, 20 Dec 2012 08:32:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.366 X-Spam-Level: X-Spam-Status: No, score=-110.366 tagged_above=-999 required=5 tests=[AWL=-0.067, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id najYVQ450ntA for ; Thu, 20 Dec 2012 08:32:02 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) by ietfa.amsl.com (Postfix) with ESMTP id 00B6B21F8996 for ; Thu, 20 Dec 2012 08:32:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1444; q=dns/txt; s=iport; t=1356021122; x=1357230722; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=p+3nLSq6IfW1ytrOZsqXUR0e/av+tG7FuNcPD4Rf45I=; b=GvcslRSuhnWjJIBjT9kVojSTj9of9qstjmBDIy0lq1B78Fqt6n27fq76 qxTgFSNWH5x9RYbhNLfUSRSGNDhnWD7w4LZgmYlCcAFA+Op5EaEtEC45U GrMM0zjXXvA+574CKzMxGrypht55VUousOZ9z3hQalr8rtigM7dIMOay9 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAOI801CtJXG//2dsb2JhbABFvXEWc4IeAQEBAwF5BQsCAQgiJDIlAgQODYgFBrlcjFKDYmEDiC2eJoJ0giI X-IronPort-AV: E=Sophos;i="4.84,324,1355097600"; d="scan'208";a="155172605" Received: from rcdn-core2-4.cisco.com ([173.37.113.191]) by rcdn-iport-4.cisco.com with ESMTP; 20 Dec 2012 16:32:01 +0000 Received: from xhc-rcd-x13.cisco.com (xhc-rcd-x13.cisco.com [173.37.183.87]) by rcdn-core2-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBKGW1To012414 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 20 Dec 2012 16:32:01 GMT Received: from xmb-rcd-x09.cisco.com ([169.254.9.13]) by xhc-rcd-x13.cisco.com ([173.37.183.87]) with mapi id 14.02.0318.004; Thu, 20 Dec 2012 10:32:01 -0600 From: "Fred Baker (fred)" To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: IIDs, u and g bits, and 4rd Thread-Topic: IIDs, u and g bits, and 4rd Thread-Index: AQHN3dKyWy27QiIqik+0mVFjyu7Z7ZggbdwAgAAGYoCAAAwpAIAAF06AgAAUmQCAACHMAIAAKUQAgADQ3ACAAH/EgA== Date: Thu, 20 Dec 2012 16:32:00 +0000 Message-ID: <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.19.64.117] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <2FBE238E1B763243A9DC430C6E564C2F@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 16:32:03 -0000 On Dec 20, 2012, at 12:54 AM, R=E9mi Despr=E9s wrote: > Interface addresses at the link layer are specified by IEEE to be univers= ally unique.=20 Yes, and EIU-64 is one of several seeds from which an IID can be derived. I= t's not the only one. The fact that an underlying technology provides an in= tended-to-be-globally-unique value (not that it actually *is* globally uniq= ue, but it is intended to be) is a happy accident, but not a requirement fo= r the value we derive from it. To make assertions about IP addresses based on the EUI-64 is to impose requ= irements that don't actually exist in IP. It's a little like saying that co= ncrete MUST ("are required to") be grey because the rocks we use in it happ= en to be grey; no I can have concrete of other colors if I want. The comment Brian is making refers to IP's requirements, which are that the= IID used in a subnet by an interface must be unique within that subnet. If= one has a physical machine with an interface that supports a dozen virtual= machines, the requirement is not that all of the physical and virtual mach= ines use IP addresses derived from the physical interface MAC address; the = requirement is that they each have IIDs that are unique within the subnet. = The obvious choice will be to use privacy addresses for the VMs, which will= appear outside the physical machine as the one interface having that many = IP addresses.= From despres.remi@laposte.net Thu Dec 20 09:35:07 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E77D821F8945 for ; Thu, 20 Dec 2012 09:35:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.851 X-Spam-Level: X-Spam-Status: No, score=-1.851 tagged_above=-999 required=5 tests=[AWL=0.098, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ExCgYLqFMaFa for ; Thu, 20 Dec 2012 09:35:06 -0800 (PST) Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr [93.17.128.20]) by ietfa.amsl.com (Postfix) with ESMTP id 252C221F8939 for ; Thu, 20 Dec 2012 09:35:05 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2309.sfr.fr (SMTP Server) with ESMTP id C847D70001A8; Thu, 20 Dec 2012 18:35:03 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2309.sfr.fr (SMTP Server) with ESMTP id 8188970000E0; Thu, 20 Dec 2012 18:35:03 +0100 (CET) X-SFR-UUID: 20121220173503530.8188970000E0@msfrf2309.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> Date: Thu, 20 Dec 2012 18:35:02 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> To: "Fred Baker (fred)" X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 17:35:07 -0000 Fred, Please see inline. 2012-12-20 =E0 17:32, "Fred Baker (fred)" : >=20 > On Dec 20, 2012, at 12:54 AM, R=E9mi Despr=E9s wrote: >=20 >> Interface addresses at the link layer are specified by IEEE to be = universally unique.=20 >=20 > Yes, and EIU-64 is one of several seeds from which an IID can be = derived. It's not the only one. The fact that an underlying technology = provides an intended-to-be-globally-unique value (not that it actually = *is* globally unique, but it is intended to be) is a happy accident, but = not a requirement for the value we derive from it. >=20 > To make assertions about IP addresses based on the EUI-64 is to impose = requirements that don't actually exist in IP. It's a little like saying = that concrete MUST ("are required to") be grey because the rocks we use = in it happen to be grey; no I can have concrete of other colors if I = want. I do agree that, despite a rule exists in some RFC one can see = configurations that don't comply with it.=20 Consequently, "intended to be globally unique" doesn't mean "guaranteed = to be globally unique in real life", right. This isn't a reason, however, to abandon rules that proved to be useful.=20= AFAIK, the rule that IIDs having u=3D1 must (so far) only be based on = global IEEE EUI-64 addresses is one of these useful rule not to be = abandoned.=20 =20 > The comment Brian is making refers to IP's requirements, which are = that the IID used in a subnet by an interface must be unique within that = subnet. This is a clear requirement, on which I think we all agree. It is worth noting here that satisfaction of this requirement DOES = DEPEND in part on IIDs having u=3D1 being actually unique. (Reason is that RFC 4862 says (uppercase added) "IPv6 nodes are NOT = required to validate that interface identifiers created with modified = EUI-64 tokens with the "u" bit set to universal are unique".) > If one has a physical machine with an interface that supports a dozen = virtual machines, the requirement is not that all of the physical and = virtual machines use IP addresses derived from the physical interface = MAC address; Well understood. > the requirement is that they each have IIDs that are unique within the = subnet. The obvious choice will be to use privacy addresses for the VMs, = which will appear outside the physical machine as the one interface = having that many IP addresses. Agreed. Since these IIDs will have u=3D0, this is neutral in the discussion on = u=3D1 IIDs. AFAIK, no technical and/or operational consideration remains that would = prevent the IANA registry on IIDs to be updated as follows (the 4rd = range is that proposed by Brian).=20 The answer returned to Softwire can then be a request to change the 4rd = draft accordingly. +-----------------------------------------+-------------------------+ | Interface Identifier Range | Description | +-----------------------------------------+-------------------------+ | 0000:0000:0000:0000 | Subnet-Router Anycast | | | [RFC4291] | | | | | FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF | Reserved 4rd Unicast | | | Addresses [RFCxxxx] | | | | | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | | | Addresses[RFC2526] | +-----------------------------------------+-------------------------+ Regards, RD From Fred.L.Templin@boeing.com Thu Dec 20 10:04:03 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1B8321F8732 for ; Thu, 20 Dec 2012 10:04:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A63iqy+R9CpE for ; Thu, 20 Dec 2012 10:04:03 -0800 (PST) Received: from slb-mbsout-01.boeing.com (slb-mbsout-01.boeing.com [130.76.64.128]) by ietfa.amsl.com (Postfix) with ESMTP id 2563021F8717 for ; Thu, 20 Dec 2012 10:04:03 -0800 (PST) Received: from slb-mbsout-01.boeing.com (localhost.localdomain [127.0.0.1]) by slb-mbsout-01.boeing.com (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with ESMTP id qBKI42hk023937 for ; Thu, 20 Dec 2012 10:04:02 -0800 Received: from XCH-NWHT-05.nw.nos.boeing.com (xch-nwht-05.nw.nos.boeing.com [130.247.25.109]) by slb-mbsout-01.boeing.com (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id qBKI41Tx023912 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=OK); Thu, 20 Dec 2012 10:04:01 -0800 Received: from XCH-NW-01V.nw.nos.boeing.com ([130.247.64.97]) by XCH-NWHT-05.nw.nos.boeing.com ([130.247.25.109]) with mapi; Thu, 20 Dec 2012 10:04:01 -0800 From: "Templin, Fred L" To: Fernando Gont Date: Thu, 20 Dec 2012 10:04:00 -0800 Subject: RE: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Topic: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Index: Ac3dXs1nUp3BReMWSUORV/bj6E+OKgBfJ3yw Message-ID: References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> <50D0CB40.5070103@si6networks.com> In-Reply-To: <50D0CB40.5070103@si6networks.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-TM-AS-MML: No Cc: "draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org" , 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 18:04:03 -0000 Hello again, Fernando, > -----Original Message----- > From: Fernando Gont [mailto:fgont@si6networks.com] > Sent: Tuesday, December 18, 2012 12:00 PM > To: Templin, Fred L > Cc: draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org; 6man WG > Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments >=20 > Hi, Fred, >=20 > On 12/18/2012 04:13 PM, Templin, Fred L wrote: > > I have a question about this document. Is a middlebox permitted > > to fragment an "atomic" fragment before forwarding the packet > > on to the next hop? If not, why not - after all, that's why the > > host inserted the fragment header in the first place. >=20 > My take is that an *IPv6* middle-box is not permitted to fragment the > packet. The IPv6/IPv4 translator is, from an IPv6 point of view, a > host/end-point/end-system (that's where the v6 world ends for that > packet). On further thought, I don't fully accept the notion that the translator is a host/end-point/end-system. The IPv6 host provides the translator with an Identification value, and that value carries forward into the IPv4 world. So, while the IPv6 packet itself does not carry forward, IPv6 information does. > As to the "why not", I'd guess the reason is "only IPv6 hosts fragment > packets" I think there would need to be an asterisk next to that statement saying that IPv6/IPv4 translators are exempt from this requirement. And, if the translator can be exempt then so also should an IPv6 middlebox that connects to a link that would otherwise be obliged to perform burdensome link adaptation. Thanks - Fred fred.l.templin@boeing.com > > If so, > > then shouldn't the draft say something about the permissible > > behavior of middleboxes when forwarding an "atomic" fragment > > (e.g., "a middlebox is permitted to perform fragmentation on > > an "atomic" fragment before forwarding to the next hop")? >=20 > Why should there be a difference between fragmenting an atomic fragment > and e.g. re-fragmenting a non-atomic fragment? >=20 > Thanks! >=20 > Best regards, > -- > Fernando Gont > SI6 Networks > e-mail: fgont@si6networks.com > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 >=20 >=20 >=20 From fred@cisco.com Thu Dec 20 10:34:54 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C400521F8A6C for ; Thu, 20 Dec 2012 10:34:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.359 X-Spam-Level: X-Spam-Status: No, score=-110.359 tagged_above=-999 required=5 tests=[AWL=-0.060, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l5KGqYhnctfj for ; Thu, 20 Dec 2012 10:34:34 -0800 (PST) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) by ietfa.amsl.com (Postfix) with ESMTP id 2AD6721F8A5A for ; Thu, 20 Dec 2012 10:34:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=863; q=dns/txt; s=iport; t=1356028472; x=1357238072; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=dMkSnlqtYm9I9JGcFNnkTEBzgedpeIEwG/bFdR7yf9Q=; b=N115rjdfozTxclz1lgXVNwPHSH0tVAa7766TDWZ/CSCqOYO0UDm4xN+f PkvVYPQ/IO+RsHzeFQ0y6AXLYrN9lg9hkJ/mHkUB3qNabawQgqaYedJTz 7m4ZZvJW/tTydEhooVzpm8iERfgeIWZ6k8fMwbKNNrCAAstJTjthpdyNg I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAAFZ01CtJV2Y/2dsb2JhbABFvXIWc4IeAQEBBHkQAgEIGAokMiUCBA4NiAu5bYxSg2JhA4gtniaCdIFmJBg X-IronPort-AV: E=Sophos;i="4.84,326,1355097600"; d="scan'208";a="155191272" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-5.cisco.com with ESMTP; 20 Dec 2012 18:34:31 +0000 Received: from xhc-rcd-x09.cisco.com (xhc-rcd-x09.cisco.com [173.37.183.83]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBKIYVPj003224 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 20 Dec 2012 18:34:31 GMT Received: from xmb-rcd-x09.cisco.com ([169.254.9.13]) by xhc-rcd-x09.cisco.com ([173.37.183.83]) with mapi id 14.02.0318.004; Thu, 20 Dec 2012 12:34:31 -0600 From: "Fred Baker (fred)" To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: IIDs, u and g bits, and 4rd Thread-Topic: IIDs, u and g bits, and 4rd Thread-Index: AQHN3dKyWy27QiIqik+0mVFjyu7Z7ZggbdwAgAAGYoCAAAwpAIAAF06AgAAUmQCAACHMAIAAKUQAgADQ3ACAAH/EgIAAEaAAgAAQmwA= Date: Thu, 20 Dec 2012 18:34:30 +0000 Message-ID: <8C48B86A895913448548E6D15DA7553B71AA49@xmb-rcd-x09.cisco.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.19.64.117] Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 18:34:54 -0000 On Dec 20, 2012, at 9:35 AM, R=E9mi Despr=E9s wrote: >> The comment Brian is making refers to IP's requirements, which are that = the IID used in a subnet by an interface must be unique within that subnet. >=20 > This is a clear requirement, on which I think we all agree. >=20 > It is worth noting here that satisfaction of this requirement DOES DEPEND= in part on IIDs having u=3D1 being actually unique. > (Reason is that RFC 4862 says (uppercase added) "IPv6 nodes are NOT requi= red to validate that interface identifiers created with modified EUI-64 tok= ens with the "u" bit set to universal are unique".) Which, operationally, has been proven to be faulty. Some networks, notably = virtual machines but also physical NICs that have resulted from manufacturi= ng errors, theoretically have unique addresses but in practical fact don't.= From otroan@employees.org Thu Dec 20 11:29:54 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C053621F8923 for ; Thu, 20 Dec 2012 11:29:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.336 X-Spam-Level: X-Spam-Status: No, score=-10.336 tagged_above=-999 required=5 tests=[AWL=-0.037, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cNc2HrDmwZyr for ; Thu, 20 Dec 2012 11:29:53 -0800 (PST) Received: from ams-iport-4.cisco.com (ams-iport-4.cisco.com [144.254.224.147]) by ietfa.amsl.com (Postfix) with ESMTP id 796CC21F895C for ; Thu, 20 Dec 2012 11:29:53 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.84,326,1355097600"; d="scan'208";a="10616448" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-4.cisco.com with ESMTP; 20 Dec 2012 19:29:52 +0000 Received: from dhcp-10-61-107-26.cisco.com (dhcp-10-61-107-26.cisco.com [10.61.107.26]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBKJTp6w015510 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 20 Dec 2012 19:29:52 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: Ole Troan In-Reply-To: Date: Thu, 20 Dec 2012 20:29:51 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= X-Mailer: Apple Mail (2.1499) Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 19:29:54 -0000 Remi, [...] >> To make assertions about IP addresses based on the EUI-64 is to = impose requirements that don't actually exist in IP. It's a little like = saying that concrete MUST ("are required to") be grey because the rocks = we use in it happen to be grey; no I can have concrete of other colors = if I want. >=20 > I do agree that, despite a rule exists in some RFC one can see = configurations that don't comply with it.=20 > Consequently, "intended to be globally unique" doesn't mean = "guaranteed to be globally unique in real life", right. >=20 > This isn't a reason, however, to abandon rules that proved to be = useful.=20 > AFAIK, the rule that IIDs having u=3D1 must (so far) only be based on = global IEEE EUI-64 addresses is one of these useful rule not to be = abandoned.=20 how has it proved to be useful? I'm not aware of any protocol or implementation using it. >> The comment Brian is making refers to IP's requirements, which are = that the IID used in a subnet by an interface must be unique within that = subnet. >=20 > This is a clear requirement, on which I think we all agree. >=20 > It is worth noting here that satisfaction of this requirement DOES = DEPEND in part on IIDs having u=3D1 being actually unique. > (Reason is that RFC 4862 says (uppercase added) "IPv6 nodes are NOT = required to validate that interface identifiers created with modified = EUI-64 tokens with the "u" bit set to universal are unique".) to be pedantic it is RFC4291 that says that. the only thing it says is that an implementation does not have to = validate that a interface-id is _globally_ unique (how could it?), it = still has to validate that an address created with that interface-id is = unique. >> If one has a physical machine with an interface that supports a dozen = virtual machines, the requirement is not that all of the physical and = virtual machines use IP addresses derived from the physical interface = MAC address; >=20 > Well understood. >=20 >> the requirement is that they each have IIDs that are unique within = the subnet. The obvious choice will be to use privacy addresses for the = VMs, which will appear outside the physical machine as the one interface = having that many IP addresses. >=20 > Agreed. > Since these IIDs will have u=3D0, this is neutral in the discussion on = u=3D1 IIDs. >=20 >=20 > AFAIK, no technical and/or operational consideration remains that = would prevent the IANA registry on IIDs to be updated as follows (the = 4rd range is that proposed by Brian).=20 that's a different question than what was asked by the softwire. is the question to the 6man WG now, "is it acceptable to reserve 2^48 = interface-id's" using the RFC5453 registry? cheers, Ole >=20 > The answer returned to Softwire can then be a request to change the = 4rd draft accordingly. >=20 > +-----------------------------------------+-------------------------+ > | Interface Identifier Range | Description | > +-----------------------------------------+-------------------------+ > | 0000:0000:0000:0000 | Subnet-Router Anycast | > | | [RFC4291] | > | | | > | FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF | Reserved 4rd Unicast | > | | Addresses [RFCxxxx] | > | | | > | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | > | | Addresses[RFC2526] | > +-----------------------------------------+-------------------------+ cheers, Ole= From markzzzsmith@yahoo.com.au Thu Dec 20 12:08:54 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C601421F89E4 for ; Thu, 20 Dec 2012 12:08:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.76 X-Spam-Level: X-Spam-Status: No, score=-1.76 tagged_above=-999 required=5 tests=[AWL=0.339, BAYES_00=-2.599, FROM_LOCAL_NOVOWEL=0.5] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id faYsANP-XPk0 for ; Thu, 20 Dec 2012 12:08:52 -0800 (PST) Received: from nm15-vm0.bullet.mail.bf1.yahoo.com (nm15-vm0.bullet.mail.bf1.yahoo.com [98.139.212.254]) by ietfa.amsl.com (Postfix) with ESMTP id 8E87D21F8960 for ; Thu, 20 Dec 2012 12:08:52 -0800 (PST) Received: from [98.139.215.141] by nm15.bullet.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 20:08:50 -0000 Received: from [98.139.212.203] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 20:08:50 -0000 Received: from [127.0.0.1] by omp1012.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 20:08:50 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 201616.48621.bm@omp1012.mail.bf1.yahoo.com Received: (qmail 2096 invoked by uid 60001); 20 Dec 2012 20:08:50 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.au; s=s1024; t=1356034130; bh=+rNLUI1ef8f2ldCeiEjmi48oowJEpUTv7qPMldpsYGI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=TF4yP4F/TMf+I0IlxBZHCuQJXslTkDadnQDwglLSe5iKG5ysF3QlAkezH60XGQkcBaDe6nEHFxeY6Z16gBhGqta6cQj6ftO0ZW6f9GAetA6ZXd9t1sR/vxu7neU1/jZ0MIDyWRcERnvPIeM/dIjSfCUMHmhbYXVREWggmyp07II= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.au; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=xa6L9fYsU8kcp3DXmZTLTnXIeyhNrm0YMo6zXs9eFRzPsLEDsNJb/MmQkvhFmdX5FNVbG3IgQYPaVbher3ISDPP4M9gW/6t7eDxXBnC4eeyHKawSw8XJtoMjnekFrgD/rLGoiMmdBHOevsLVBjj83n+VXq5Lr8HI0i4K+0+yA0k=; X-YMail-OSG: WOaxQPoVM1l25k59kJf4mqRoAA.IbbemU8hJVZbx5YQGOAh iC8CK6kE8tLSxw_8JQk1fvnX0vi1tyTUl6WZTD41NFfCXAzDBJvdDLh2Tpj7 71kROBKQ5dQeazRdg6EbYwCtGSbIC5QWLazF4zVfaW1RkBGVxJTHla1Ny9SB hmrUjH4pHVcJaMqqEQXAX3M7aKLuKUE1ghhN2hlwjP0r87MnDEJ_Aj3X_V8a kVzu4FGMo9Nhou33tEjb0a3jpABd1bCU8GHzVrEZWlC3uBVH4gBTKd6.9YJe KGnwq27bUfaAMQaPVshI7EV_xRac75ODQI4z0FBCuIuPcrEwwRbbWiF.JVo8 J2SHxc_YGQMr3iClXmVvFn6euLyimUOCyehJGdUPcYycindtKCSwsmkyPbj3 tFe4YOO9hlSBz0R2Mn2sOfP581k_xYkO_KnlYUZrGifgAAR4Wv.Xw.UX7jMq ixEwC0fCVYF19Meam9I2p68S07StYR3vytZp4g_zmm0aHaiwTEROaTa8qTYg o3CtbhA4RB5x.sL0y0ZW2IeWRow-- Received: from [150.101.221.237] by web142501.mail.bf1.yahoo.com via HTTP; Thu, 20 Dec 2012 12:08:49 PST X-Rocket-MIMEInfo: 001.001, CgoKCi0tLS0tIE9yaWdpbmFsIE1lc3NhZ2UgLS0tLS0KPiBGcm9tOiBCb2IgSGluZGVuIDxib2IuaGluZGVuQGdtYWlsLmNvbT4KPiBUbzogUmFuZHkgQnVzaCA8cmFuZHlAcHNnLmNvbT4KPiBDYzogImlwdjZAaWV0Zi5vcmcgTGlzdCIgPGlwdjZAaWV0Zi5vcmc.OyBCb2IgSGluZGVuIDxib2IuaGluZGVuQGdtYWlsLmNvbT4KPiBTZW50OiBGcmlkYXksIDIxIERlY2VtYmVyIDIwMTIgMTo0NyBBTQo.IFN1YmplY3Q6IFJlOiBJSURzLCB1IGFuZCBnIGJpdHMsIGFuZCA0cmQKPiAKPiBSYW5keSwKPiAKPiBPbiABMAEBAQE- X-Mailer: YahooMailWebService/0.8.129.483 References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <2965F46B-55F5-40A6-8DB3-1F53624F245E@gmail.com> Message-ID: <1356034129.51881.YahooMailNeo@web142501.mail.bf1.yahoo.com> Date: Thu, 20 Dec 2012 12:08:49 -0800 (PST) From: Mark Smith Subject: Re: IIDs, u and g bits, and 4rd To: Bob Hinden , Randy Bush In-Reply-To: <2965F46B-55F5-40A6-8DB3-1F53624F245E@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "ipv6@ietf.org List" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: Mark Smith List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 20:08:55 -0000 =0A=0A=0A=0A----- Original Message -----=0A> From: Bob Hinden =0A> To: Randy Bush =0A> Cc: "ipv6@ietf.org List" <= ipv6@ietf.org>; Bob Hinden =0A> Sent: Friday, 21 Dece= mber 2012 1:47 AM=0A> Subject: Re: IIDs, u and g bits, and 4rd=0A> =0A> Ran= dy,=0A> =0A> On Dec 20, 2012, at 3:02 PM, Randy Bush wrote:=0A> =0A>>>> "T= he IID consists of N bits that have no meaning; the only =0A> constraint=0A= >>> =0A>>> Hmm.. how would this work with RFC5453 reserved IID space we al= ready=0A>>> have for anycast addresses?=0A>> =0A>> is anyone aware of any= deployment of the ipv6 invented anycast?=0A>> =0A>> like most ipv6 magic,= i think it is ignored and regular old ipv4-style=0A>> anycast is used.=0A= > =0A> I assume you mean the subnet-anycast addresses (i.e., Subnet-Router = anycast =0A> address).=A0 IPv6 has always had what you call regular old ipv= 4-style anycast.=A0 =0A> See section 2.6 of RFC4291.=0A>=A0=0A=0AThe other = difference is that IPv6 supports "within subnet" anycast, where the source = and the anycast address fall within the same prefix. Traditional anycast re= lies on packets entering the routing/forwarding domain, so it isn't possibl= e to use anycast between hosts on the same subnet. IPv4 ARP use of the most= recent reply as well as duplicate address detection prevents this from wor= king, where as IPv6 has been changed to support it by using the first rathe= r than last NA received when the address is an anycast, and allowing duplic= ate addresses to exist within a subnet when they've been flagged as anycast= addresses.=0A=0AThe use cases for IPv6 anycast are the same as IPv4's, wit= h the IPv4 restriction that anycast destinations must always be outside of = the subnet of the source address removed.=0A=0ARegarding things like subnet= -router anycast, Appletalk implemented this concept (Pg 4-7, Inside Appleta= lk, 2nd Ed.), and it was used by the Name Binding Protocol. Whether it was = invented independently for IPv6 or inspired by Appletalk is something peopl= e like Bob would know.=0A=0A=0A> Bob=0A> =0A> =0A> =0A> -------------------= -------------------------------------------------=0A> IETF IPv6 working gro= up mailing list=0A> ipv6@ietf.org=0A> Administrative Requests: https://www.= ietf.org/mailman/listinfo/ipv6=0A> ----------------------------------------= ----------------------------=0A> From rafiee@hpi.uni-potsdam.de Thu Dec 20 13:06:38 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF76A21F8A78 for ; Thu, 20 Dec 2012 13:06:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.275 X-Spam-Level: X-Spam-Status: No, score=-1.275 tagged_above=-999 required=5 tests=[AWL=0.973, BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id itE1lh1QHAuq for ; Thu, 20 Dec 2012 13:06:34 -0800 (PST) Received: from mail2.hpi.uni-potsdam.de (mail2.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17a]) by ietfa.amsl.com (Postfix) with ESMTP id 890C821F89A9 for ; Thu, 20 Dec 2012 13:06:26 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail2.hpi.uni-potsdam.de (Postfix) with ESMTP id 92F30D2C99; Thu, 20 Dec 2012 22:06:25 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Thu, 20 Dec 2012 22:06:25 +0100 From: "Rafiee, Hosnieh" To: "Fernando Gont (fgont@si6networks.com)" Date: Thu, 20 Dec 2012 22:06:23 +0100 Subject: RE: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Thread-Topic: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Thread-Index: Ac3ewAvbva96kAoCQGKNiRVW2ypkSgALjMNQ Message-ID: References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> In-Reply-To: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: multipart/alternative; boundary="_000_EA738325B0580041A50A364F5F76B68924EB86C7728MXMA1Rhpiuni_" MIME-Version: 1.0 Cc: "Bob Hinden \(bob.hinden@gmail.com\)" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 21:06:39 -0000 --_000_EA738325B0580041A50A364F5F76B68924EB86C7728MXMA1Rhpiuni_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Ole and Bob: I don't think that the extension to the Privacy Extension RFC = is applicable here. Fernando: I think some of these comments were also made by Ole and Bob but, as I was = so busy, I could not finish them and send them. Now the question is whether or not you are using the "lifetime" for this II= D or IP. If you are, then it is the same procedure as that for the RFC priv= acy extension. >Nobody has even suggested this. For instance, if these addresses had a lif= etime (in the RFC4941 sense), they wouldn't be called "stable" in the first= place. I understand that you did not use a lifetime for the address where the priv= acy, within the network, is questionable! I said that, if you are really co= ncerned about privacy, then you would need to set the lifetime for your add= ress, even within the same subnet. When you use the same, so called stable addresses, in the same subnet, it = means that you generate the same address and use the same address forever w= ithin that subnet. Now the question is, if your address ,according to your = draft, does not change, what privacy protection is afforded within the netw= ork here? Especially for those fixed nodes, within that network, that never= move to another network. The second question: usually when, for privacy reasons, ISPs change their a= ddresses they also change the prefixes. So as you say you generate new addr= ess for the new prefix, what is the stability of the address? For the Second concern, let's go back to the privacy extension RFC. As I me= ntioned in a prior email, the second approach is to use CGA or DHCPv6. But= they did not explain how to do this. They mentioned CGA as a way for gener= ating a random IID but did not mention it as a security option. So one mig= ht consider extending that section to include an explanation as to how to = use the second approach in that RFC. For example, suggest using the CGA gen= eration algorithm (as you are using it with another name!) and since the ad= dress does not need to be verified, then there is no need to set a sec valu= e or add CGA options to the options in SEND. Another suggestion might that= there is no need for the other node to process verification because securi= ty is not an issue. > * In 3972, there's no secret. Hence, the attacker might be able to comput= e the IID himself (assuming the algorithm and the input parameters are know= n). Not true as I pointed out before. > * If the CGA Modifier changes (as they are supposed to), then the address= es are not constant within the same network (each time you generate a CGA, = the IID would be different). See my first paragraph as a response to this. As I pointed out before, one can make improvements to the privacy extension= RFC and explain the second approach, in more detail for the use of the sam= e algorithm in CGA as was used (the same as sec value 0, i.e., you just run= the hash algorithm once on the concatenation of a random number, subnet pr= efix and etc) and skip the verification mechanism since no verification is = needed. > As noted above, many deployments turn off privacy addresses. I do not think this is a good reason in this case because they can also do = the same thing using your draft proposal and never implement it, or disable= it! >A.1.3. Revealing the identity of devices performing server-like Functions Some devices need to have a fix IP address and these are usually set by an = administrator manually or a fixed range of IP address for the devices being= used. This is what happens in large networks. In small networks, like home= networks, usually the name of the devices are used. For some servers or se= rver functioning devices, privacy is not important because they should be a= vailable and well known in that network. So for those well-known devices, p= rivacy does not make sense. Finally, in your draft you do not completely address the privacy issue. Whe= n the same network is used to connect different places, then your node beco= mes vulnerable to tracking. What I think is, as long as you think about sta= bility, that you need to also forget about privacy. And if you decide to b= e concerned with privacy, then you need to use a lifetime for your address.= This is again like the privacy extension RFC, and so, your draft can be wr= itten to improve the second approach described in that RFC as I do not thin= k stability can solve the privacy issues. At the beginning privacy related = attacks might decreased, but when you plan to use that IP from the same sub= net forever, then you are vulnerable to those types of attack. The attacker= only needs to spend more time gathering information about that node. Then,= after a while, it will be easy for him to track that node again. This mean= s, with your way, the attacks are still possible; you have just postponed t= he attacks between networks but done nothing for those inside the same netw= ork. Thank you, Hosnieh From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of Ole= Troan Sent: Thursday, December 20, 2012 3:41 PM To: 6man 6man-wg Subject: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 all, the ADs have asked us to ensure that there are good review of documents in = the working group, prior to them being advanced to the IESG. as a part of document last calls in the 6man working group, Bob and I want = to try using volunteers and/or w.g. chair reviewers, that take specific responsibi= lity to review documents in WG last call. Bob and I have reviewed this document. General comments: -------------------------- We do see the usefulness of a interface-id generation algorithm, that resul= ts in stable identifiers per IPv6 prefix, while not being derived from link-la= yer MAC addresses. The mechanism proposed could be viewed as an modification of temporary addr= esses (RFC4941) with lifetime handling as for SLAAC, or as an extension to CGA (RFC3972) ad= dress generation where the public key is removed from the hash. The method for generating "Stable privacy addresses" needs to be as well sp= ecified as temporary addresses (RFC4941). We do wonder if the method of generating these addresses could be a modific= ation of the algorithm in RFC4941, or if at least, larger parts of the text in RFC4941 c= ould be references avoiding having to duplicate lots of text into this document. We do not believe the current revision of the document is ready to advance = to the IESG. Major points: ----------------- - Stable Privacy Enhanced Addresses (SPE Addresses) should not be a replace= ment for the algorithm specified in RFC2464. It is an alternative. Section 3 needs mod= ification. - The algorithm in the document is underspecified. o It should specify the hash function. E.g. MD5 as RFC4941. o It should handle reserved interface-ids (see 4941). o We suggest renaming the "secret key" to "modifier". And add text descri= bing how to 'maintain' the modifier (section 3 of RFC3972). o It would be useful to include an example algorithm as has been done in = some other documents. o Not all implementations use interface indexes - Clarify what lifetimes these addresses have. - Specify the default for DAD retries (IDGEN_RETRIES) - Clarify the requirements for stable storage (compared to RFC2464) Minor points: ----------------- Don't use the term "static addresses" as that implies static aka manual con= figuration. These addresses are not static in that sense. Section 3, Last Paragraph: The reference to Node Information Queries only applies if the attacker is o= nlink. Current text overstates the problem. Move to security considerations. Addre= sses will leak regardless, in other communication, email header etc. 6. Security Considerations. s/in replacement of/as an alternative to/ Third bullet: The bullet on host-scanning needs some justification. Fourth bullet: This is not a security issue. Paragraph after bullets: s/algorithm is meant to replace/meant to supplement/ Best regards and Merry Christmas, Bob and Ole --_000_EA738325B0580041A50A364F5F76B68924EB86C7728MXMA1Rhpiuni_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Ole and Bob: I don't thin= k that the extension to the Privacy Extension RFC is applicable here.<= /o:p>

 

Fernand= o:

I think some of these comments = were also made by Ole and Bob but, as I was so busy, I could not finish the= m and send them.


Now the questio= n is whether or not you are using the "lifetime" for this IID or = IP. If you are, then it is the same procedure as that for the RFC privacy e= xtension.

>Nobody has even suggested this. For instance, if these= addresses had a lifetime (in the RFC4941 sense), they wouldn't be called &= quot;stable" in the first place.
I understand that you did not use = a lifetime for the address where the privacy, within the network, is questi= onable! I said that, if you are really concerned about privacy, then you wo= uld need to set the lifetime for your address, even within the same subnet.=

When you use the same, so called stable addresses, in the same subn= et,  it means that you generate the same address and use the same addr= ess forever within that subnet. Now the question is, if your address ,accor= ding to your draft, does not change, what privacy protection is afforded wi= thin the network here? Especially for those fixed nodes, within that networ= k, that never move to another network.

The second question: usually = when, for privacy reasons, ISPs change their addresses they also change the= prefixes. So as you say you generate new address for the new prefix, what = is the stability of the address?

For the Second concern, let's go ba= ck to the privacy extension RFC. As I mentioned in a prior email, the secon= d approach is to use  CGA or DHCPv6. But they did not explain how to d= o this. They mentioned CGA as a way for generating a  random IID but d= id not mention it as a security option. So one might consider extending tha= t section to include an explanation  as to how to use the second appro= ach in that RFC. For example, suggest using the CGA generation algorithm (a= s you are using it with another name!) and since the address does not need = to be verified, then there is no need to set a sec value or add CGA options= to the options in SEND. Another suggestion might  that there is no ne= ed for the other node to process verification because security is not an is= sue.
> * In 3972, there's no secret. Hence, the attacker might be abl= e to compute the IID himself (assuming the algorithm and the input paramete= rs are known).
Not true as I pointed out before.
> * If the CGA Mo= difier changes (as they are supposed to), then the addresses are not consta= nt within the same network (each time you generate a CGA, the IID would be = different).
See my first paragraph as a response to this.

As I po= inted out before, one can make improvements to the privacy extension RFC an= d explain the second approach, in more detail for the use of the same algor= ithm in CGA as was used (the same as sec value 0, i.e., you just run the ha= sh algorithm once on the concatenation of a random number, subnet prefix an= d etc) and skip the verification mechanism since no verification is needed.=
> As noted above, many deployments turn off privacy addresses.
I = do not think this is a good reason in this case because they can also do th= e same thing using your draft proposal and never implement it, or disable i= t!

>A.1.3.  Revealing the identity of devices perform= ing server-like

   &nb= sp;    Functions

Some devices need= to have a fix IP address and these are usually set by an administrator man= ually or a fixed range of IP address for the devices being used. This is wh= at happens in large networks. In small networks, like home networks, usuall= y the name of the devices are used. For some servers or server functioning = devices, privacy is not important because they should be available and well= known in that network. So for those well-known devices, privacy does not m= ake sense.


Finally, in your draft you = do not completely address the privacy issue. When the same network is used = to connect different places, then your node becomes vulnerable to tracking.= What I think is, as long as you think about stability, that you need to al= so forget about  privacy. And if you decide to be concerned with priva= cy, then you need to use a lifetime for your address. This is again like th= e privacy extension RFC, and so, your draft can be written to improve the s= econd approach described in that RFC as I do not think stability can solve = the privacy issues. At the beginning privacy related attacks might decrease= d, but when you plan to use that IP from the same subnet forever, then you = are vulnerable to those types of attack. The attacker only needs to spend m= ore time gathering information about that node. Then, after a while, it wil= l be easy for him to track that node again. This means, with your way, the = attacks are still possible; you have just postponed the attacks between net= works but done nothing for those inside the same network.

Thank you,=
Hosnieh

 

 

From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] = On Behalf Of Ole Troan
Sent: Thursday, December 20, 2012 3:41= PM
To: 6man 6man-wg
Subject: Chairs review: draft-ietf= -6man-stable-privacy-addresses-01

 

all,

 

the ADs have asked us to ensure that there a= re good review of documents in the

working group, prior= to them being advanced to the IESG.

as a part of docum= ent last calls in the 6man working group, Bob and I want to try=

using volunteers and/or w.g. chair reviewers, that take speci= fic responsibility to

= review documents in WG last = call.

Bob and I have reviewed this document.

 

 

 =

General comments:
--------------------------
We do see the= usefulness of a interface-id generation algorithm, that results
in stab= le identifiers per IPv6 prefix, while not being derived from link-layer
= MAC addresses.

The mechanism proposed could be viewed as an modifica= tion of temporary addresses (RFC4941)
with lifetime handling as for SLAA= C, or as an extension to CGA (RFC3972) address
generation where the publ= ic key is removed from the hash. 

 

The method for generating "Stable pri= vacy addresses" needs to be as well specified

as t= emporary addresses (RFC4941).

We do wonder if the metho= d of generating these addresses could be a modification of the<= /o:p>

algorithm in RFC4941, or if at least, larger parts of the text in R= FC4941 could be 

= references avoiding having to dup= licate lots of text into this document.

 

We do not believe the current revisio= n of the document is ready to advance to the IESG.

Major points:
= -----------------
- Stable Privacy Enhanced Addresses (SPE Addresses) sh= ould not be a replacement for the
  algorithm specified in RFC2464.= It is an alternative. Section 3 needs modification.

- The algorithm= in the document  is underspecified.
  o It should specify the= hash function. E.g. MD5 as RFC4941.
  o It should handle reserved = interface-ids (see 4941).
  o We suggest renaming the “secret= key” to “modifier”. And add text describing
  &n= bsp; how to ‘maintain’ the modifier (section 3 of RFC3972).
=   o It would be useful to include an example algorithm as has been don= e in some other documents.
  o Not all implementations use interfac= e indexes

- Clarify what lifetimes these addresses have.

- Sp= ecify the default for DAD retries (IDGEN_RETRIES)

- Clarify the requ= irements for stable storage (compared to RFC2464)

Minor points:
-= ----------------
Don't use the term "static addresses" as that= implies static aka manual configuration.
These addresses are not static= in that sense.

Section 3, Last Paragraph:
The reference to Node = Information Queries only applies if the attacker is onlink.
Current text= overstates the problem. Move to security considerations. Addresses willleak regardless, in other communication, email header etc.

6. Secur= ity Considerations.
s/in replacement of/as an alternative to/

Thi= rd bullet:
The bullet on host-scanning needs some justification.

= Fourth bullet:  This is not a security issue.
Paragraph after bulle= ts:
s/algorithm is meant to replace/meant to supplement/

 

Best regards and = Merry Christmas,

Bob and Ole

= --_000_EA738325B0580041A50A364F5F76B68924EB86C7728MXMA1Rhpiuni_-- From rafiee@hpi.uni-potsdam.de Thu Dec 20 13:09:26 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60F9521F89E4 for ; Thu, 20 Dec 2012 13:09:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.35 X-Spam-Level: X-Spam-Status: No, score=-1.35 tagged_above=-999 required=5 tests=[AWL=0.898, BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VT6+9-aDYYVT for ; Thu, 20 Dec 2012 13:09:25 -0800 (PST) Received: from mail2.hpi.uni-potsdam.de (mail2.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17a]) by ietfa.amsl.com (Postfix) with ESMTP id B9DAD21F89A9 for ; Thu, 20 Dec 2012 13:09:25 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail2.hpi.uni-potsdam.de (Postfix) with ESMTP id 28382D2C99; Thu, 20 Dec 2012 22:09:25 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Thu, 20 Dec 2012 22:09:24 +0100 From: "Rafiee, Hosnieh" To: "Bob Hinden (bob.hinden@gmail.com)" , "Ole Troan (otroan@employees.org)" Date: Thu, 20 Dec 2012 22:09:22 +0100 Subject: RE: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Thread-Topic: RE: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Thread-Index: Ac3e9kK5TGJOplcjQ0iGfrQloHDbOg== Message-ID: Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: multipart/alternative; boundary="_000_EA738325B0580041A50A364F5F76B68924EB86C7738MXMA1Rhpiuni_" MIME-Version: 1.0 Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 21:09:26 -0000 --_000_EA738325B0580041A50A364F5F76B68924EB86C7738MXMA1Rhpiuni_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Correction to prior comment Ole and Bob: I do think that the extension to the Privacy Extension RFC is = applicable here. ... --_000_EA738325B0580041A50A364F5F76B68924EB86C7738MXMA1Rhpiuni_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Correction to prior comme= nt

Ole and Bob: I do think that the= extension to the Privacy Extension RFC is applicable here.

…

= --_000_EA738325B0580041A50A364F5F76B68924EB86C7738MXMA1Rhpiuni_-- From fgont@si6networks.com Thu Dec 20 13:09:53 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8284421F8AA5 for ; Thu, 20 Dec 2012 13:09:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.504 X-Spam-Level: X-Spam-Status: No, score=-2.504 tagged_above=-999 required=5 tests=[AWL=0.095, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XfXlubfBmhX7 for ; Thu, 20 Dec 2012 13:09:52 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 92A0D21F89E4 for ; Thu, 20 Dec 2012 13:09:52 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.1.113]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TlnMQ-00071H-6V; Thu, 20 Dec 2012 22:09:24 +0100 Message-ID: <50D36595.3000704@si6networks.com> Date: Thu, 20 Dec 2012 16:23:01 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ole Troan Subject: Re: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> In-Reply-To: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 21:09:53 -0000 Bob, and Ole, Thanks so much for your detailed review! Please find my comments in-line.... On 12/20/2012 11:40 AM, Ole Troan wrote: > General comments: > -------------------------- > We do see the usefulness of a interface-id generation algorithm, that > results > in stable identifiers per IPv6 prefix, while not being derived from > link-layer > MAC addresses. > > The mechanism proposed could be viewed as an modification of temporary > addresses (RFC4941) I disagree. Could you please mention what's in RFC4941 that results in addresses that are stable within the same subnet, but different across subnets? > with lifetime handling as for SLAAC, or as an extension to CGA (RFC3972) > address generation where the public key is removed from the hash. Isn't the whole point of CGAs to have the hash be computed over the public key? > The method for generating "Stable privacy addresses" needs to be as well > specified as temporary addresses (RFC4941). > We do wonder if the method of generating these addresses could be a > modification of the algorithm in RFC4941, or if at least, larger parts of > the text in RFC4941 could be > references avoiding having to duplicate lots of text into this document. Hasn't this be discussed to death during the year? (particularly in the Paris IETF -> Vancouver IETF) time frame. For instance, as noted above, RFC 4941 addresses do not have the location-related properties of these addresses. > We do not believe the current revision of the document is ready to > advance to the IESG. > > Major points: > ----------------- > - Stable Privacy Enhanced Addresses (SPE Addresses) should not be a > replacement for the > algorithm specified in RFC2464. It is an alternative. Section 3 needs > modification. Good point. This wording is simply an error (text that remained from the time I meant these addresses to replace the RFC 2464 ones). > - The algorithm in the document is underspecified. > o It should specify the hash function. E.g. MD5 as RFC4941. Why should it? Put another way, is this needed for the algorithm to work? -- it's not. IMO, we might RECOMMEND some algorithm, or note that nodes MAY use this or that algorithm... But requiring a specific one seems like over-specifying the algorithm. > o It should handle reserved interface-ids (see 4941). Good point, will do. > o We suggest renaming the “secret key” to “modifier”. And add text > describing how to ‘maintain’ the modifier (section 3 of RFC3972). It is not a modifier... it is a *secret key*. And this is key (no pun intended :-) ) for the algorithm to behave as expected: if the key is known by the attacker, he could compute the IID himself. > o It would be useful to include an example algorithm as has been done > in some other documents. You mean as in RFC4941? Or a algorithm in pseudo-code? > o Not all implementations use interface indexes How do you identify interfaces without "indexes"/names of some form? > - Clarify what lifetimes these addresses have. You mean lifetimes in the sense of "same thing as tradtional slaac addresses" or lifetime in the sense of "the address will be stable as long as you don't change the secret key". > - Specify the default for DAD retries (IDGEN_RETRIES) Will do. > - Clarify the requirements for stable storage (compared to RFC2464) This is, to a large extent, optional. I guess we could get away with "hosts MAY..."? > Minor points: > ----------------- > Don't use the term "static addresses" as that implies static aka manual > configuration. > These addresses are not static in that sense. Good point. Will do. > Section 3, Last Paragraph: > The reference to Node Information Queries only applies if the attacker > is onlink. > Current text overstates the problem. Move to security considerations. > Addresses will > leak regardless, in other communication, email header etc. Ok. > 6. Security Considerations. > s/in replacement of/as an alternative to/ Good grief. Will do > Third bullet: > The bullet on host-scanning needs some justification. Can we get away with it by referencing draft-ietf-opsec-ipv6-host-scanning? > Fourth bullet: This is not a security issue. Which one? > Paragraph after bullets: > s/algorithm is meant to replace/meant to supplement/ Yup. Will fix this one, too. Thanks! ... and Merry Christmas! ;-) Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From fernando@gont.com.ar Thu Dec 20 17:45:00 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B821E21E8037 for ; Thu, 20 Dec 2012 17:45:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.555 X-Spam-Level: X-Spam-Status: No, score=-2.555 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DATE_IN_PAST_03_06=0.044] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QuwDTrQi77VV for ; Thu, 20 Dec 2012 17:45:00 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id B8F1821E8034 for ; Thu, 20 Dec 2012 17:44:59 -0800 (PST) Received: from [186.134.21.91] (helo=[192.168.123.121]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TlrfQ-0006Jf-Tj; Fri, 21 Dec 2012 02:44:53 +0100 Message-ID: <50D3831C.4050301@gont.com.ar> Date: Thu, 20 Dec 2012 18:29:00 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Rafiee, Hosnieh" Subject: Re: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Cc: "Fernando Gont \(fgont@si6networks.com\)" , "Bob Hinden \(bob.hinden@gmail.com\)" , "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 01:45:00 -0000 Hosnieh, On 12/20/2012 06:06 PM, Rafiee, Hosnieh wrote: > Now the question is whether or not you are using the "lifetime" for this > IID or IP. If you are, then it is the same procedure as that for the RFC > privacy extension. The lifetime advertised in RA messages? - Of course. >>Nobody has even suggested this. For instance, if these addresses had a lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the first place. > I understand that you did not use a lifetime for the address where the > privacy, within the network, is questionable! I said that, if you are > really concerned about privacy, then you would need to set the lifetime > for your address, even within the same subnet. This addresses are *stable*. As noted in RFC4941, you usually need some stable address, even if you do RFC4941. > When you use the same, so called stable addresses, in the same subnet, > it means that you generate the same address and use the same address > forever within that subnet. Now the question is, if your address > ,according to your draft, does not change, what privacy protection is > afforded within the network here? You cannot be tracked across networks. > The second question: usually when, for privacy reasons, ISPs change > their addresses they also change the prefixes. So as you say you > generate new address for the new prefix, what is the stability of the > address? If the prefix changes, then from an IP-layer point of view, you're connected to a different network. > For the Second concern, let's go back to the privacy extension RFC. As I > mentioned in a prior email, the second approach is to use CGA or > DHCPv6. But they did not explain how to do this. They mentioned CGA as a > way for generating a random IID but did not mention it as a security > option. So one might consider extending that section to include an > explanation as to how to use the second approach in that RFC. For > example, suggest using the CGA generation algorithm (as you are using it > with another name!) and since the address does not need to be verified, > then there is no need to set a sec value or add CGA options to the > options in SEND. Well, yeah... at which point, that's not CGAs anymore. ;-) > Another suggestion might that there is no need for the > other node to process verification because security is not an issue. >> * In 3972, there's no secret. Hence, the attacker might be able to compute the IID himself (assuming the algorithm and the input parameters are known). > Not true as I pointed out before. Where? > As I pointed out before, one can make improvements to the privacy > extension RFC and explain the second approach, in more detail for the RFC4941 produces random addresses. Period. It's a different scheme, with different objetives. > use of the same algorithm in CGA as was used (the same as sec value 0, > i.e., you just run the hash algorithm once on the concatenation of a > random number, subnet prefix and etc) and skip the verification > mechanism since no verification is needed. At which point you should strip most of the CGA document, since most of its contents is related with something else. i.e., we can play the game of "how could I tweak/strech this or that RFC so that we get to the same behavior".. but I'm not sure whatd be the benefit of that. >> As noted above, many deployments turn off privacy addresses. > I do not think this is a good reason in this case because they can also > do the same thing using your draft proposal and never implement it, or > disable it! The reasons for which they disable RFC4941 do not apply to draft-ietf-6man-stable-privacy-addresses. >>A.1.3. Revealing the identity of devices performing server-like > > Functions > > Some devices need to have a fix IP address and these are usually set by > an administrator manually or a fixed range of IP address for the devices > being used. This is what happens in large networks. In small networks, > like home networks, usually the name of the devices are used. For some > servers or server functioning devices, privacy is not important because > they should be available and well known in that network. So for those > well-known devices, privacy does not make sense. That doesn't mean they should be easily discoverable from the public Internet or the like. > Finally, in your draft you do not completely address the privacy issue. > When the same network is used to connect different places, then your > node becomes vulnerable to tracking. What I think is, as long as you > think about stability, that you need to also forget about privacy. Huh? If you connect to two different subnets, the prefix is different, and hence the resulting IID is different. > And > if you decide to be concerned with privacy, then you need to use a > lifetime for your address. This is again like the privacy extension RFC, RFC4941 addresses are generated **in addition** to the traditional slaac addresses. RFC4941 does nothing to mitigate the implications of traditional slaac addresses. And that's what this i-d is meant to do. Thanks, -- Fernando Gont e-mail: fernando@gont.com.ar || fgont@si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 From fgont@si6networks.com Thu Dec 20 21:04:01 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F226D21F8626 for ; Thu, 20 Dec 2012 21:04:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MR2L5oydVjST for ; Thu, 20 Dec 2012 21:04:00 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 59CF321F8615 for ; Thu, 20 Dec 2012 21:03:59 -0800 (PST) Received: from [186.134.21.91] (helo=[192.168.123.121]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tlulo-0003Yy-CB; Fri, 21 Dec 2012 06:03:40 +0100 Message-ID: <50D3EDA6.3010205@si6networks.com> Date: Fri, 21 Dec 2012 02:03:34 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Templin, Fred L" Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> <50D0CB40.5070103@si6networks.com> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org" , 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 05:04:01 -0000 Hi, Fred, On 12/19/2012 02:41 PM, Templin, Fred L wrote: > I am thinking of the case of links (e.g., tunnels) in the middle > of the network that must perform link adaptation in order to meet > the 1280 byte minimum IPv6 MTU. For example, if a tunnel is > configured over a link that has an MTU less than (1280+HLEN), the > tunnel ingress will see an MTU smaller than 1280. In that case, > RFC2473 says that the tunnel ingress should perform fragmentation > on the encapsulated packet and the tunnel egress gets to do the > reassembly. But, that can amount to a lot of extra work for the > tunnel egress. > > To save the egress from this burden then, it would be great if > there were a way to get the source host to perform fragmentation > so that the destination gets to do the reassembly. In lieu of > that, it would be preferable for the tunnel ingress to perform > fragmentation on the inner packet before encapsulation provided > the inner packet includes an IPv6 fragment header. That sounds sensible -- although I guess this would require > I talk about this in my draft on "IPv6 Path MTU Updates": > > http://www.ietf.org/id/draft-generic-6man-tunfrag-06.txt > > This document talks about taking care of packets that are in > the "red zone" size between 1280 and 1500 bytes when there > is a link in the path (e.g., a tunnel) that must perform > link adaptation to meet the minimum size. And, it seeks to > update RFC2460 by allowing the middlebox to signal the host, > and to perform fragmentation on the inner packet when the > packet includes an IPv6 fragment header. It would be good > to get your feedback on this document. I'd be glad to review it. Will do it during these seasons. Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From fgont@si6networks.com Thu Dec 20 21:09:44 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6843121E8039 for ; Thu, 20 Dec 2012 21:09:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GgZokzlmHr3y for ; Thu, 20 Dec 2012 21:09:44 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id CE0C721E802E for ; Thu, 20 Dec 2012 21:09:43 -0800 (PST) Received: from [186.134.21.91] (helo=[192.168.123.121]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TlurS-0003gv-GI; Fri, 21 Dec 2012 06:09:30 +0100 Message-ID: <50D3EF04.4060004@si6networks.com> Date: Fri, 21 Dec 2012 02:09:24 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Templin, Fred L" Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> <50D0CB40.5070103@si6networks.com> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org" , 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 05:09:44 -0000 On 12/20/2012 03:04 PM, Templin, Fred L wrote: >> On 12/18/2012 04:13 PM, Templin, Fred L wrote: >>> I have a question about this document. Is a middlebox permitted >>> to fragment an "atomic" fragment before forwarding the packet >>> on to the next hop? If not, why not - after all, that's why the >>> host inserted the fragment header in the first place. >> >> My take is that an *IPv6* middle-box is not permitted to fragment the >> packet. The IPv6/IPv4 translator is, from an IPv6 point of view, a >> host/end-point/end-system (that's where the v6 world ends for that >> packet). > > On further thought, I don't fully accept the notion that the > translator is a host/end-point/end-system. >From the pov of the IPv6 network that's where the packet "ends". > The IPv6 host provides > the translator with an Identification value, and that value carries > forward into the IPv4 world. So, while the IPv6 packet itself does > not carry forward, IPv6 information does. Yes and no -- e.g., you cannot use the full 32-bit Frag ID. >> As to the "why not", I'd guess the reason is "only IPv6 hosts fragment >> packets" > > I think there would need to be an asterisk next to that statement > saying that IPv6/IPv4 translators are exempt from this requirement. > And, if the translator can be exempt then so also should an IPv6 > middlebox that connects to a link that would otherwise be obliged > to perform burdensome link adaptation. This does not only apply to tunnels. One could think of some radio devices, embedded systems, etc., for which an adaptation layer would possible be overkill. -- So you're idea sounds, at least in principle, sensible to me. I will review your I-D and will come back with some feedback. Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From despres.remi@laposte.net Fri Dec 21 00:23:39 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 316EA21F8505 for ; Fri, 21 Dec 2012 00:23:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.855 X-Spam-Level: X-Spam-Status: No, score=-1.855 tagged_above=-999 required=5 tests=[AWL=0.094, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TXubgPcez4A9 for ; Fri, 21 Dec 2012 00:23:38 -0800 (PST) Received: from smtp25.services.sfr.fr (smtp25.services.sfr.fr [93.17.128.119]) by ietfa.amsl.com (Postfix) with ESMTP id 7B59621F8206 for ; Fri, 21 Dec 2012 00:23:38 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2508.sfr.fr (SMTP Server) with ESMTP id DB92D70000E8; Fri, 21 Dec 2012 09:23:36 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2508.sfr.fr (SMTP Server) with ESMTP id AAF8F700005D; Fri, 21 Dec 2012 09:23:36 +0100 (CET) X-SFR-UUID: 20121221082336700.AAF8F700005D@msfrf2508.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <8C48B86A895913448548E6D15DA7553B71AA49@xmb-rcd-x09.cisco.com> Date: Fri, 21 Dec 2012 09:23:37 +0100 Message-Id: <3395D00B-3D57-4A34-8F2C-F3B0E2990C54@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <8C48B86A895913448548E6D15DA7553B71AA49@xmb-rcd-x09.cisco.com> To: "Fred Baker (fred)" X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 08:23:39 -0000 2012-12-20 19:34, "Fred Baker (fred)" : >=20 > On Dec 20, 2012, at 9:35 AM, R=E9mi Despr=E9s wrote: >>> The comment Brian is making refers to IP's requirements, which are = that the IID used in a subnet by an interface must be unique within that = subnet. >>=20 >> This is a clear requirement, on which I think we all agree. >>=20 >> It is worth noting here that satisfaction of this requirement DOES = DEPEND in part on IIDs having u=3D1 being actually unique. >> (Reason is that RFC 4862 says (uppercase added) "IPv6 nodes are NOT = required to validate that interface identifiers created with modified = EUI-64 tokens with the "u" bit set to universal are unique".) >=20 > Which, operationally, has been proven to be faulty. Some networks, = notably virtual machines but also physical NICs that have resulted from = manufacturing errors, theoretically have unique addresses but in = practical fact don't. Where two NICs on the same link have the same universal-scope EUI-64 = address (which can as you say result from manufacturing errors), = problems will exist, right. (Actually, these problems start at the link layer, independently from = whether DAD is active for them at the IP layer.) I don't see a difference of understanding on this. Regards, RD= From jounikor@gmail.com Thu Dec 20 14:17:27 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B2D921F8AA6 for ; Thu, 20 Dec 2012 14:17:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.419 X-Spam-Level: X-Spam-Status: No, score=-3.419 tagged_above=-999 required=5 tests=[AWL=0.180, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RRKW-ZMudcYR for ; Thu, 20 Dec 2012 14:17:25 -0800 (PST) Received: from mail-ea0-f178.google.com (mail-ea0-f178.google.com [209.85.215.178]) by ietfa.amsl.com (Postfix) with ESMTP id 6740721F8A76 for ; Thu, 20 Dec 2012 14:17:25 -0800 (PST) Received: by mail-ea0-f178.google.com with SMTP id k11so1630674eaa.37 for ; Thu, 20 Dec 2012 14:17:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=VjzwC/mvIR5ys/tUn597D58I+pmOZu3ifgwP+JzoNu0=; b=zb+3mQCJ9oWYA1opvUt/sgL6/68cxE/a2QzjmCkJk11fvndmtoWMJ4q3PvrxkRT4U7 L/Dqh+WReR2iow88ybUZxad1vwGnTAHHe6NTvXzeKADFW9n++JQ70G6aQxHJ48DhV1Q7 wXjAMMY/PXrZlWCg+suxVOGxShnZ9aLaT6XpdgwVupUjFtnKX5nBCTz/sSzWCVFPIZYM wDh21UvgWUgx/z9GF4n3MmkUj+ebeBRDhfHt2klKJPWa8xbO4tt1crND7COZeZnp7Min uEVLmBqJX7DP/YTUedKffjkicH12Gv8vbQWBp+Vywd2T+a3P6mg49oDxhh31rxz3+Q5f jIrA== X-Received: by 10.14.174.132 with SMTP id x4mr25972936eel.39.1356041844599; Thu, 20 Dec 2012 14:17:24 -0800 (PST) Received: from [188.117.15.109] ([188.117.15.109]) by mx.google.com with ESMTPS id b2sm17941563eep.9.2012.12.20.14.17.21 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 20 Dec 2012 14:17:23 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: Jouni Korhonen In-Reply-To: Date: Fri, 21 Dec 2012 00:17:21 +0200 Content-Transfer-Encoding: 7bit Message-Id: <8E14C47D-A259-4436-AEBF-94665996806F@gmail.com> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> To: Randy Bush X-Mailer: Apple Mail (2.1499) X-Mailman-Approved-At: Fri, 21 Dec 2012 00:35:18 -0800 Cc: ipv6@ietf.org, Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2012 22:17:27 -0000 On Dec 20, 2012, at 3:02 PM, Randy Bush wrote: >>> "The IID consists of N bits that have no meaning; the only constraint >> >> Hmm.. how would this work with RFC5453 reserved IID space we already >> have for anycast addresses? > > is anyone aware of any deployment of the ipv6 invented any cast? I've seen some (very.. some) subnet anycast out there.. I do not know (myself, which can be rather limited snapshot) a production network using other RFC5453 reserved anycast IIDs. > like most ipv6 magic, i think it is ignored and regular old ipv4-style > anycast is used. Sure and that is fine. What I am/was concerned about is that we do not walk over existing (standards track) RFCs. If these IIDs meanings and 'u' & 'g' bits get redefined/obsoleted/whatever.. fine but that must then be reflected in other RFCs that today are based on RFC4291 etc. The whole blob needs then be updated/obsoleted accordingly and with care. On this aspect I care about specification correctness - not whether something is actually deployed (yet). - Jouni > > randy > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From despres.remi@laposte.net Fri Dec 21 01:22:18 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1C9321F8422 for ; Fri, 21 Dec 2012 01:22:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.859 X-Spam-Level: X-Spam-Status: No, score=-1.859 tagged_above=-999 required=5 tests=[AWL=0.090, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vRZNywp1XSG7 for ; Fri, 21 Dec 2012 01:22:18 -0800 (PST) Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr [93.17.128.20]) by ietfa.amsl.com (Postfix) with ESMTP id 9D4BE21F8548 for ; Fri, 21 Dec 2012 01:22:16 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2307.sfr.fr (SMTP Server) with ESMTP id 527C3700010A; Fri, 21 Dec 2012 10:22:15 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2307.sfr.fr (SMTP Server) with ESMTP id DEBA57000115; Fri, 21 Dec 2012 10:22:13 +0100 (CET) X-SFR-UUID: 20121221092213912.DEBA57000115@msfrf2307.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Fri, 21 Dec 2012 10:22:14 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> To: Ole Troan X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 09:22:19 -0000 2012-12-20 20:29, Ole Troan : > Remi, >=20 > [...] >=20 >>> To make assertions about IP addresses based on the EUI-64 is to = impose requirements that don't actually exist in IP. It's a little like = saying that concrete MUST ("are required to") be grey because the rocks = we use in it happen to be grey; no I can have concrete of other colors = if I want. >>=20 >> I do agree that, despite a rule exists in some RFC one can see = configurations that don't comply with it.=20 >> Consequently, "intended to be globally unique" doesn't mean = "guaranteed to be globally unique in real life", right. >>=20 >> This isn't a reason, however, to abandon rules that proved to be = useful.=20 >> AFAIK, the rule that IIDs having u=3D1 must (so far) only be based on = global IEEE EUI-64 addresses is one of these useful rule not to be = abandoned.=20 >=20 > how has it proved to be useful? > I'm not aware of any protocol or implementation using it. As already said, it facilitates address stability. This is so with OSes that, by default, base their IIDs on EUI-64 = addresses of their link adapters. >>> The comment Brian is making refers to IP's requirements, which are = that the IID used in a subnet by an interface must be unique within that = subnet. >>=20 >> This is a clear requirement, on which I think we all agree. >>=20 >> It is worth noting here that satisfaction of this requirement DOES = DEPEND in part on IIDs having u=3D1 being actually unique. >> (Reason is that RFC 4862 says (uppercase added) "IPv6 nodes are NOT = required to validate that interface identifiers created with modified = EUI-64 tokens with the "u" bit set to universal are unique".) >=20 > to be pedantic it is RFC4291 that says that. Right, the RFC number wasn't the right one. Thanks. =20 > the only thing it says is that an implementation does not have to = validate that a interface-id is _globally_ unique (how could it?), it = still > has to validate that an address created with that interface-id is = unique. I find it very hard to interpret the above sentence the way you do. Since, as you rightly imply, there is no way locally to check _global_ = uniqueness, this sentence is useful only if it means that it is = uniqueness _on the link_ that is "not required to be validated" if u=3D1. Anyway, even with your interpretation, this isn't against adding a new = reserved IID range to those of RFC5453. >=20 >>> If one has a physical machine with an interface that supports a = dozen virtual machines, the requirement is not that all of the physical = and virtual machines use IP addresses derived from the physical = interface MAC address; >>=20 >> Well understood. >>=20 >>> the requirement is that they each have IIDs that are unique within = the subnet. The obvious choice will be to use privacy addresses for the = VMs, which will appear outside the physical machine as the one interface = having that many IP addresses. >>=20 >> Agreed. >> Since these IIDs will have u=3D0, this is neutral in the discussion = on u=3D1 IIDs. >>=20 >>=20 >> AFAIK, no technical and/or operational consideration remains that = would prevent the IANA registry on IIDs to be updated as follows (the = 4rd range is that proposed by Brian).=20 >=20 > that's a different question than what was asked by the softwire. > is the question to the 6man WG now, "is it acceptable to reserve 2^48 = interface-id's" using the RFC5453 registry? The basic question is whether reserving for 4rd a specific 8-bit IID is = "compatible with the IPv6 addressing architecture" as currently = specified. Besides some expressed FUD, which isn't illegitimate in face of anything = new, no such conflict has been identified by those who checked = carefully. This would normally lead to a flat "yes it is compatible" but, during = the discussion, it appeared that the proposed 8-bit prefix can = advantageously be replaced by a longer prefix closer to an already = reserved prefix, and this without any problem for 4rd.=20 A suggestion by 6man to change the proposed prefix value can therefore = be constructive complement to the flat answer. I hope the WG will make this step forward. Regards, RD >=20 > cheers, > Ole >=20 >=20 >>=20 >> The answer returned to Softwire can then be a request to change the = 4rd draft accordingly. >>=20 >> +-----------------------------------------+-------------------------+ >> | Interface Identifier Range | Description | >> +-----------------------------------------+-------------------------+ >> | 0000:0000:0000:0000 | Subnet-Router Anycast | >> | | [RFC4291] | >> | | | >> | FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF | Reserved 4rd Unicast | >> | | Addresses [RFCxxxx] | >> | | | >> | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | >> | | Addresses[RFC2526] | >> +-----------------------------------------+-------------------------+ >=20 > cheers, > Ole From despres.remi@laposte.net Fri Dec 21 01:31:08 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD99121F8A40 for ; Fri, 21 Dec 2012 01:31:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.863 X-Spam-Level: X-Spam-Status: No, score=-1.863 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5PDr8rN7q8kV for ; Fri, 21 Dec 2012 01:31:07 -0800 (PST) Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr [93.17.128.20]) by ietfa.amsl.com (Postfix) with ESMTP id 9741021F89E8 for ; Fri, 21 Dec 2012 01:31:06 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2307.sfr.fr (SMTP Server) with ESMTP id 000167000076; Fri, 21 Dec 2012 10:31:05 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2307.sfr.fr (SMTP Server) with ESMTP id 8A83070000AD; Fri, 21 Dec 2012 10:31:04 +0100 (CET) X-SFR-UUID: 20121221093104567.8A83070000AD@msfrf2307.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <8E14C47D-A259-4436-AEBF-94665996806F@gmail.com> Date: Fri, 21 Dec 2012 10:31:05 +0100 Message-Id: <918C1DBE-3943-485B-8F94-0359D42D3DD1@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <8E14C47D-A259-4436-AEBF-94665996806F@gmail.com> To: Jouni Korhonen X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 09:31:08 -0000 Jouni, At this point, it appears that just adding one IID range reservation to = those of RFC5453 (to be registered by IANA), can do the job. No need to = change any existing RFC. Besides, as suggested by Brian, a different IID range than that of the = current 4rd draft can be recommended by 6man. In absence of new fact, this can be IMHO a way to close this subject in = 6man. Regards, RD=20 Le 2012-12-20 =E0 23:17, Jouni Korhonen a =E9crit : >=20 > On Dec 20, 2012, at 3:02 PM, Randy Bush wrote: >=20 >>>> "The IID consists of N bits that have no meaning; the only = constraint >>>=20 >>> Hmm.. how would this work with RFC5453 reserved IID space we already >>> have for anycast addresses? >>=20 >> is anyone aware of any deployment of the ipv6 invented any cast? >=20 > I've seen some (very.. some) subnet anycast out there.. I do not know > (myself, which can be rather limited snapshot) a production network = using > other RFC5453 reserved anycast IIDs.=20 >=20 >> like most ipv6 magic, i think it is ignored and regular old = ipv4-style >> anycast is used. >=20 > Sure and that is fine. >=20 > What I am/was concerned about is that we do not walk over existing > (standards track) RFCs. If these IIDs meanings and 'u' & 'g' bits get > redefined/obsoleted/whatever.. fine but that must then be reflected > in other RFCs that today are based on RFC4291 etc. The whole blob = needs > then be updated/obsoleted accordingly and with care. On this aspect I > care about specification correctness - not whether something is = actually > deployed (yet). >=20 > - Jouni >=20 >=20 >=20 >>=20 >> randy >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From otroan@employees.org Fri Dec 21 01:37:41 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4715D21F8A7B for ; Fri, 21 Dec 2012 01:37:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.335 X-Spam-Level: X-Spam-Status: No, score=-10.335 tagged_above=-999 required=5 tests=[AWL=-0.036, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zKMtoqbo1Wjr for ; Fri, 21 Dec 2012 01:37:40 -0800 (PST) Received: from ams-iport-3.cisco.com (ams-iport-3.cisco.com [144.254.224.146]) by ietfa.amsl.com (Postfix) with ESMTP id DCADE21F8964 for ; Fri, 21 Dec 2012 01:37:39 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.84,329,1355097600"; d="scan'208";a="10617879" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-3.cisco.com with ESMTP; 21 Dec 2012 09:37:39 +0000 Received: from dhcp-10-61-106-99.cisco.com (dhcp-10-61-106-99.cisco.com [10.61.106.99]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBL9bclk021528 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Fri, 21 Dec 2012 09:37:38 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: Ole Troan In-Reply-To: Date: Fri, 21 Dec 2012 10:37:40 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <4F45045D-0D2E-4D66-9D26-C5A0FBF2098D@employees.org> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= X-Mailer: Apple Mail (2.1499) Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 09:37:41 -0000 Remi, >>>> To make assertions about IP addresses based on the EUI-64 is to = impose requirements that don't actually exist in IP. It's a little like = saying that concrete MUST ("are required to") be grey because the rocks = we use in it happen to be grey; no I can have concrete of other colors = if I want. >>>=20 >>> I do agree that, despite a rule exists in some RFC one can see = configurations that don't comply with it.=20 >>> Consequently, "intended to be globally unique" doesn't mean = "guaranteed to be globally unique in real life", right. >>>=20 >>> This isn't a reason, however, to abandon rules that proved to be = useful.=20 >>> AFAIK, the rule that IIDs having u=3D1 must (so far) only be based = on global IEEE EUI-64 addresses is one of these useful rule not to be = abandoned.=20 >>=20 >> how has it proved to be useful? >> I'm not aware of any protocol or implementation using it. >=20 > As already said, it facilitates address stability. > This is so with OSes that, by default, base their IIDs on EUI-64 = addresses of their link adapters. this might be off topic. but I disagree with you. it is the property of = using stable globally unique identifiers to generate the interface-id = that adds stability. see the draft on stable-privacy-addresses for = another example (one which sets u=3D0). given that no implementation uses the u-flag, it is hard to see what = value it adds. >>>> The comment Brian is making refers to IP's requirements, which are = that the IID used in a subnet by an interface must be unique within that = subnet. >>>=20 >>> This is a clear requirement, on which I think we all agree. >>>=20 >>> It is worth noting here that satisfaction of this requirement DOES = DEPEND in part on IIDs having u=3D1 being actually unique. >>> (Reason is that RFC 4862 says (uppercase added) "IPv6 nodes are NOT = required to validate that interface identifiers created with modified = EUI-64 tokens with the "u" bit set to universal are unique".) >>=20 >> to be pedantic it is RFC4291 that says that. >=20 > Right, the RFC number wasn't the right one. > Thanks. >=20 >> the only thing it says is that an implementation does not have to = validate that a interface-id is _globally_ unique (how could it?), it = still >> has to validate that an address created with that interface-id is = unique. >=20 > I find it very hard to interpret the above sentence the way you do. > Since, as you rightly imply, there is no way locally to check _global_ = uniqueness, this sentence is useful only if it means that it is = uniqueness _on the link_ that is "not required to be validated" if u=3D1. all implementations do validate uniqueness also for EUI-64 addresses. if = you read the rest of RFC4862 that should be quite clear. > Anyway, even with your interpretation, this isn't against adding a new = reserved IID range to those of RFC5453. correct. >>>> If one has a physical machine with an interface that supports a = dozen virtual machines, the requirement is not that all of the physical = and virtual machines use IP addresses derived from the physical = interface MAC address; >>>=20 >>> Well understood. >>>=20 >>>> the requirement is that they each have IIDs that are unique within = the subnet. The obvious choice will be to use privacy addresses for the = VMs, which will appear outside the physical machine as the one interface = having that many IP addresses. >>>=20 >>> Agreed. >>> Since these IIDs will have u=3D0, this is neutral in the discussion = on u=3D1 IIDs. >>>=20 >>>=20 >>> AFAIK, no technical and/or operational consideration remains that = would prevent the IANA registry on IIDs to be updated as follows (the = 4rd range is that proposed by Brian).=20 >>=20 >> that's a different question than what was asked by the softwire. >> is the question to the 6man WG now, "is it acceptable to reserve 2^48 = interface-id's" using the RFC5453 registry? >=20 > The basic question is whether reserving for 4rd a specific 8-bit IID = is "compatible with the IPv6 addressing architecture" as currently = specified. > Besides some expressed FUD, which isn't illegitimate in face of = anything new, no such conflict has been identified by those who checked = carefully. > This would normally lead to a flat "yes it is compatible" but, during = the discussion, it appeared that the proposed 8-bit prefix can = advantageously be replaced by a longer prefix closer to an already = reserved prefix, and this without any problem for 4rd.=20 > A suggestion by 6man to change the proposed prefix value can therefore = be constructive complement to the flat answer. > I hope the WG will make this step forward. there appears to be quite a lot of pushback in 6man against the use of = u/g bits as specified in the 4rd draft. do I understand you correctly, that you now want to withdraw that = proposal, and instead propose to make 2^48 interface-ids reserved for = 4rd? if so, I'm happy to have the discussion on the merit of that proposal = here. I think the working group would benefit though, to hear from you what problem you are actually trying to solve. Best regards, Ole From otroan@employees.org Fri Dec 21 01:49:56 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E40521F8A86 for ; Fri, 21 Dec 2012 01:49:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.333 X-Spam-Level: X-Spam-Status: No, score=-10.333 tagged_above=-999 required=5 tests=[AWL=-0.034, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ryRgULzj1V5t for ; Fri, 21 Dec 2012 01:49:55 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id 96AAB21F8A7E for ; Fri, 21 Dec 2012 01:49:55 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgoHAM8v1FCQ/khN/2dsb2JhbABFg0i2ZYNJFnOCHgEBBAF5BQsLRlcGiCAGtkOQOWEDplOCdYFlJA X-IronPort-AV: E=Sophos;i="4.84,329,1355097600"; d="scan'208";a="79280869" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-2.cisco.com with ESMTP; 21 Dec 2012 09:49:51 +0000 Received: from dhcp-10-61-106-99.cisco.com (dhcp-10-61-106-99.cisco.com [10.61.106.99]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qBL9noNq023186 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Fri, 21 Dec 2012 09:49:51 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: Ole Troan In-Reply-To: Date: Fri, 21 Dec 2012 10:49:50 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <245821E3-EEE4-44DB-BF58-C1B642B9DA3E@employees.org> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D2EC14.9000206@gmail.com> <323C3E7D-98FB-4099-BF83-8CAA0DE50303@employees.org> To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= X-Mailer: Apple Mail (2.1499) Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 09:49:56 -0000 Remi, >>>> Also, is there any reason not to choose (for example) >>>> FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF >>>> which is near the existing anycast range ? >>>=20 >>> No objection that I can see. >>> Support for including this in the 6man answer. >>=20 >> I think this is better than making any assumption abut the u/g flags. >>=20 >> even so I do feel uneasy about this proposal. >=20 > Wow, what a list ! > Let me try to make you comfortable. =20 >=20 >> - principally I think we should design protocols that do not depend = on well known addresses or ports. >=20 > This is a debatable viewpoint but, more important, it isn't a problem = for 4rd: neither any WKA nor any WKP is needed. >=20 >> - I believe the IPv6 interface identifier should be of length 128-n, = and not carry any structure. >> at a stretch I can accept reserved identifiers for anycast addresses. >=20 > No change to RFC 4291 is proposed in this respect.=20 >=20 > However, 4rd addresses, which are concerned with the requirement that = "All Global Unicast addresses other than those that start with binary = 000 have a 64-bit interface ID field", must have 64-bit IIDs.=20 >=20 >=20 >> - even for reserved interface identifiers, an implementation must = handle conflicts. >> anycast does that implicitly. I'm not sure how 4rd does that. >> wouldn't putting two 4rd CEs on the same link, break? >=20 > (*) > 4rd implementors are free to add code to reject any intra-site IID = that (by mistake) would be universal-scope, and in the 4rd-assigned IID = range.=20 but the current specification does not handle conflicts? I don't know what an intra-site IID is. > Whether including this extra complexity would be valuable enough is = debatable, not forgetting that: > - 4rd is experimental > - RFC 4862 says "IPv6 nodes are not required to validate that = interface identifiers created with modified EUI-64 tokens with the "u" = bit set to universal are unique". (There is no guarantee that DAD will = prevent all misuses of universal-scope IIDs.) =20 that's not quite what 4862 says. if the purpose of the reserved block is to avoid conflict with existing = nodes on the link, then that idea trivially breaks when you put two 4rd CEs on the same link. >> - the size of the reservation. do we want to reserve 2^48 addresses = out of every interface-id, >> and update every implementation? for an experimental mechanism? >=20 > There must be a misunderstanding somewhere: no existing implementation = needs to be modified (unless 4rd support is added to it).=20 if you reserve a block out of the interface-id space, then all = implementations that create interface identifers must be aware of it, to = avoid creating conflicts. I don't understand why this additional = reservations wouldn't require all nodes that implement RFC4941 to have = to be updated. >> I think that a mechanism that requires a large swath of interface-id = space, and does not handle collisions, should >> use a separate prefix on a virtual interface. >=20 > Regarding collisions, see (*) above. > What you view as a large swath is in fact only 1/2^16 of the total IID = space, nothing to feel uncomfortable about. quite. cheers, Ole From despres.remi@laposte.net Fri Dec 21 02:35:42 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C17F821F8A40 for ; Fri, 21 Dec 2012 02:35:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.866 X-Spam-Level: X-Spam-Status: No, score=-1.866 tagged_above=-999 required=5 tests=[AWL=0.083, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7S2HMr+Pv-VB for ; Fri, 21 Dec 2012 02:35:42 -0800 (PST) Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr [93.17.128.20]) by ietfa.amsl.com (Postfix) with ESMTP id E37E721F89C0 for ; Fri, 21 Dec 2012 02:35:41 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2307.sfr.fr (SMTP Server) with ESMTP id BE8C87000115; Fri, 21 Dec 2012 11:35:40 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2307.sfr.fr (SMTP Server) with ESMTP id A29AF7000041; Fri, 21 Dec 2012 11:35:34 +0100 (CET) X-SFR-UUID: 20121221103534666.A29AF7000041@msfrf2307.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <4F45045D-0D2E-4D66-9D26-C5A0FBF2098D@employees.org> Date: Fri, 21 Dec 2012 11:35:34 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <4F45045D-0D2E-4D66-9D26-C5A0FBF2098D@employees.org> To: Ole Troan X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 10:35:42 -0000 Le 2012-12-21 =E0 10:37, Ole Troan a =E9crit : ... >>>> This isn't a reason, however, to abandon rules that proved to be = useful.=20 >>>> AFAIK, the rule that IIDs having u=3D1 must (so far) only be based = on global IEEE EUI-64 addresses is one of these useful rule not to be = abandoned.=20 >>>=20 >>> how has it proved to be useful? >>> I'm not aware of any protocol or implementation using it. >>=20 >> As already said, it facilitates address stability. >> This is so with OSes that, by default, base their IIDs on EUI-64 = addresses of their link adapters. >=20 > this might be off topic. but I disagree with you. > it is the property of using stable globally unique identifiers to = generate the interface-id that adds stability. see the draft on = stable-privacy-addresses for another example (one which sets u=3D0). > given that no implementation uses the u-flag, it is hard to see what = value it adds. I agree with "it is the property of using stable globally unique = identifiers to generate the interface-id that adds stability", and = therefore don't on what we would disagree here. ... > all implementations do validate uniqueness also for EUI-64 addresses. = if you read the rest of RFC4862 that should be quite clear. All implementations you know, OK, but there can be others that don't. For example, a small device that has a reserved OUI and an exclusive NIC = number for this OUI, and that uses this link address to build its IID, = MAY skip the check that no other interface on the link has the same = address. This is what RFC 4291 says.=20 Deleting this MAY would be a significant change for which AFAIK no = justification has expressed.=20 >> Anyway, even with your interpretation, this isn't against adding a = new reserved IID range to those of RFC5453. >=20 > correct. So, if you agree, end of this subject for this particular discussion. ... >> The basic question is whether reserving for 4rd a specific 8-bit IID = is "compatible with the IPv6 addressing architecture" as currently = specified. >> Besides some expressed FUD, which isn't illegitimate in face of = anything new, no such conflict has been identified by those who checked = carefully. >> This would normally lead to a flat "yes it is compatible" but, during = the discussion, it appeared that the proposed 8-bit prefix can = advantageously be replaced by a longer prefix closer to an already = reserved prefix, and this without any problem for 4rd.=20 >> A suggestion by 6man to change the proposed prefix value can = therefore be constructive complement to the flat answer. >> I hope the WG will make this step forward. >=20 > there appears to be quite a lot of pushback in 6man against the use of = u/g bits as specified in the 4rd draft. FUD, yes, but technically founded pushback that haven't been answered, = no one left AFAIK.=20 For instance, in you own long list of doubts, you included: - The need to "update every implementation". It definitely doesn't = exist. - The view that "we should design protocols that do not depend on well = known addresses or ports". This doesn't concern 4rd which uses neither = WHA nor WKP.=20 With these two in particular, one can get the impression that your are = trying to oppose 4rd by all possible means. Without clarification of = when your chair hat is on or off, this is unfortunate IMHO.=20 =20 > do I understand you correctly, that you now want to withdraw that = proposal, and instead propose to make 2^48 interface-ids reserved for = 4rd? > if so, I'm happy to have the discussion on the merit of that proposal = here. I think the working group would benefit though, to hear > from you what problem you are actually trying to solve. Well, I am still personally satisfied with the 4rd proposal as is. Yet, I acknowledge that the suggestion made by Brian to choose a better = prefix is valuable.=20 I therefore support that the 6man answer to Softwire includes the = following update of the reserved-IIDs table: +-----------------------------------------+-------------------------+ | Interface Identifier Range | Description | +-----------------------------------------+-------------------------+ | 0000:0000:0000:0000 | Subnet-Router Anycast | | | [RFC4291] | | | | | FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF | Reserved 4rd Unicast | | | Addresses [RFCxxxx] | | | | | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | | | Addresses[RFC2526] | +-----------------------------------------+-------------------------+ Regards, RD From simon.perreault@viagenie.ca Fri Dec 21 02:56:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B70621F89C6 for ; Fri, 21 Dec 2012 02:56:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.2 X-Spam-Level: X-Spam-Status: No, score=-2.2 tagged_above=-999 required=5 tests=[AWL=0.400, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uPXUd0jzm5M8 for ; Fri, 21 Dec 2012 02:56:27 -0800 (PST) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id 5714C21F8991 for ; Fri, 21 Dec 2012 02:56:27 -0800 (PST) Received: from porto.nomis80.org (unknown [195.98.238.107]) by jazz.viagenie.ca (Postfix) with ESMTPSA id 9634A4044F for ; Fri, 21 Dec 2012 05:56:26 -0500 (EST) Message-ID: <50D44059.1030300@viagenie.ca> Date: Fri, 21 Dec 2012 11:56:25 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: ipv6@ietf.org Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> In-Reply-To: <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 10:56:28 -0000 Le 2012-12-20 11:07, Rémi Després a écrit : > - Small problem: at http://www.iana.org/protocols, a registry for > "Reserved Internet Protocol version 6 (IPv6) Interface Identifiers" > is listed but, when clicking to open it, the page that comes is that > of "Instant Message Disposition Notification (IMDN) Headers". This > should be easy to fix I suppose. I mentioned the problem to IANA. The right link should be: You'll see that the registry has grown since the RFC was published: > Interface Identifier Range Description Reference Date Assigned > 0000:0000:0000:0000 Subnet-Router Anycast [RFC4291] 2008-12-24 > 0200:5EFF:FE00:0000-0200:5EFF:FE00:5212 Reserved IPv6 Interface Identifiers corresponding to the IANA Ethernet Block [RFC4291] > 0200:5EFF:FE00:5213 Proxy Mobile IPv6 [RFC6543] > 0200:5EFF:FE00:5214-0200:5EFF:FEFF:FFFF Reserved IPv6 Interface Identifiers corresponding to the IANA Ethernet Block [RFC4291] > FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF Reserved Subnet Anycast Addresses [RFC2526] 2008-12-24 Note that the new registrations are part of the IANA Ethernet block... Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From otroan@employees.org Fri Dec 21 03:01:04 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA20021F85C7 for ; Fri, 21 Dec 2012 03:01:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.332 X-Spam-Level: X-Spam-Status: No, score=-10.332 tagged_above=-999 required=5 tests=[AWL=-0.033, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VUMvbxz9i0TP for ; Fri, 21 Dec 2012 03:01:03 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id 30FBE21F8548 for ; Fri, 21 Dec 2012 03:01:00 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.84,329,1355097600"; d="scan'208";a="79282774" Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-2.cisco.com with ESMTP; 21 Dec 2012 11:00:58 +0000 Received: from dhcp-10-61-106-99.cisco.com (dhcp-10-61-106-99.cisco.com [10.61.106.99]) by ams-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qBLB0vd7010075 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Fri, 21 Dec 2012 11:00:58 GMT Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: Ole Troan In-Reply-To: Date: Fri, 21 Dec 2012 12:00:57 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <4F45045D-0D2E-4D66-9D26-C5A0FBF2098D@employees.org> To: =?iso-8859-1?Q?R=E9mi_Despr=E9s?= X-Mailer: Apple Mail (2.1499) Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 11:01:04 -0000 Remi, >> there appears to be quite a lot of pushback in 6man against the use = of u/g bits as specified in the 4rd draft. >=20 > FUD, yes, but technically founded pushback that haven't been answered, = no one left AFAIK.=20 I can't parse the above. > For instance, in you own long list of doubts, you included: > - The need to "update every implementation". It definitely doesn't = exist. can you please explain that? given that a RFC4941 implementation may = create interface-id's that conflict with the 4rd reserved range. > - The view that "we should design protocols that do not depend on well = known addresses or ports". This doesn't concern 4rd which uses neither = WHA nor WKP.=20 well-known or reserved range. I'm not in favour of either. > With these two in particular, one can get the impression that your are = trying to oppose 4rd by all possible means. Without clarification of = when your chair hat is on or off, this is unfortunate IMHO.=20 chair off, I thought I made that clear. I have asked Bob to make the = call on this. I don't believe you are in a position to declare what = consensus of the 6man working group is either. ;-) I'm not trying to oppose 4rd by "all possible means". I'm trying to = limit collateral damage to IPv6 specifications and implementations. I think that 4rd would function perfectly well without any reserved = interface-identifier space. do you disagree with that? cheers, Ole= From otroan@employees.org Fri Dec 21 03:20:35 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3D5E21F8837 for ; Fri, 21 Dec 2012 03:20:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.48 X-Spam-Level: X-Spam-Status: No, score=-10.48 tagged_above=-999 required=5 tests=[AWL=0.119, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EgFpSB1Ku0b5 for ; Fri, 21 Dec 2012 03:20:35 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by ietfa.amsl.com (Postfix) with ESMTP id 7AD7A21F87E7 for ; Fri, 21 Dec 2012 03:20:34 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgkHAD5F1FCQ/khR/2dsb2JhbAA7CoNIui4Wc4IeAQEEASdSEAsOOFcGiCAGtiqMYgYQg0FhA4tTkRKJboJ1gWMBCBcE X-IronPort-AV: E=Sophos;i="4.84,329,1355097600"; d="scan'208";a="148642244" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-1.cisco.com with ESMTP; 21 Dec 2012 11:20:34 +0000 Received: from dhcp-10-61-106-99.cisco.com (dhcp-10-61-106-99.cisco.com [10.61.106.99]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qBLBKWLd002095 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Fri, 21 Dec 2012 11:20:33 GMT Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 From: Ole Troan In-Reply-To: <50D36595.3000704@si6networks.com> Date: Fri, 21 Dec 2012 12:20:32 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <02E79B66-2A04-481C-B4F2-539A2A746440@employees.org> References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> <50D36595.3000704@si6networks.com> To: Fernando Gont X-Mailer: Apple Mail (2.1499) Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 11:20:35 -0000 Fernando, >> General comments: >> -------------------------- >> We do see the usefulness of a interface-id generation algorithm, that >> results >> in stable identifiers per IPv6 prefix, while not being derived from >> link-layer >> MAC addresses. >>=20 >> The mechanism proposed could be viewed as an modification of = temporary >> addresses (RFC4941) >=20 > I disagree. Could you please mention what's in RFC4941 that results in > addresses that are stable within the same subnet, but different across > subnets? an _extension_ to RFC4941. two options come to mind, include the prefix in the hash used in 4941 = for these addresses, or just use the 4941 algorithm with RA lifetimes, and require that the = node stores the resulting addresses. that nodes should remember the address they used on previous links is = already covered in RFC 4862 I believe. the latter mechanism doesn't work well for nodes without persistent = storage though. >> with lifetime handling as for SLAAC, or as an extension to CGA = (RFC3972) >> address generation where the public key is removed from the hash.=20 >=20 > Isn't the whole point of CGAs to have the hash be computed over the > public key? the suggestion was you can achieve stable privacy addresses also as an = extension of the text in RFC3972. >> The method for generating "Stable privacy addresses" needs to be as = well >> specified as temporary addresses (RFC4941). >> We do wonder if the method of generating these addresses could be a >> modification of the algorithm in RFC4941, or if at least, larger = parts of=20 >> the text in RFC4941 could be >> references avoiding having to duplicate lots of text into this = document. >=20 > Hasn't this be discussed to death during the year? (particularly in = the > Paris IETF -> Vancouver IETF) time frame. For instance, as noted = above, > RFC 4941 addresses do not have the location-related properties of = these > addresses. see above. we think the method must be as well specified as the 4941 = method is, that may result in some redundant text, which is why we suggested if you = had looked at making it an extension instead of a entirely separate document. (note that this was a question, I don't know the right answer). >> We do not believe the current revision of the document is ready to >> advance to the IESG. >>=20 >> Major points: >> ----------------- >> - Stable Privacy Enhanced Addresses (SPE Addresses) should not be a >> replacement for the >> algorithm specified in RFC2464. It is an alternative. Section 3 = needs >> modification. >=20 > Good point. This wording is simply an error (text that remained from = the > time I meant these addresses to replace the RFC 2464 ones). >=20 >=20 >=20 >> - The algorithm in the document is underspecified. >> o It should specify the hash function. E.g. MD5 as RFC4941. >=20 > Why should it? Put another way, is this needed for the algorithm to > work? -- it's not. >=20 > IMO, we might RECOMMEND some algorithm, or note that nodes MAY use = this > or that algorithm... But requiring a specific one seems like > over-specifying the algorithm. could you use similar text as 4941? there might actually be some benefit in two nodes given the same secret = key/modifier creates the same address(?) >=20 >> o It should handle reserved interface-ids (see 4941). >=20 > Good point, will do. >=20 >=20 >> o We suggest renaming the =93secret key=94 to =93modifier=94. And = add text >> describing how to =91maintain=92 the modifier (section 3 of RFC3972). >=20 > It is not a modifier... it is a *secret key*. And this is key (no pun > intended :-) ) for the algorithm to behave as expected: if the key is > known by the attacker, he could compute the IID himself. could it not be some unique number the implementation has? serial number, MAC address, etc? if it has to be a secret key, and it has to be provisioned, then = mightn't you as well use 3972 addresses? >> o It would be useful to include an example algorithm as has been = done >> in some other documents. >=20 > You mean as in RFC4941? Or a algorithm in pseudo-code? as in 4941. >> o Not all implementations use interface indexes >=20 > How do you identify interfaces without "indexes"/names of some form? in IOS we do pass pointers around. ;-) well, we do have indexes and names too. >> - Clarify what lifetimes these addresses have. >=20 > You mean lifetimes in the sense of "same thing as tradtional slaac > addresses" or lifetime in the sense of "the address will be stable as > long as you don't change the secret key". an address cannot have a longer lifetime than the lifetimes advertised = in RAs of course. could you say something along the lines of: Stable Privacy Addresses = have the same lifetime properties as SLAAC addresses [4862] and expire as described in section 5.5.3 of = 4862. >> - Specify the default for DAD retries (IDGEN_RETRIES) >=20 > Will do. >=20 >> - Clarify the requirements for stable storage (compared to RFC2464) >=20 > This is, to a large extent, optional. I guess we could get away with > "hosts MAY..."? wouldn't you behave differently, e.g. if the node has no persistent = storage for a secret key? >> Minor points: >> ----------------- >> Don't use the term "static addresses" as that implies static aka = manual >> configuration. >> These addresses are not static in that sense. >=20 > Good point. Will do. >=20 >> Section 3, Last Paragraph: >> The reference to Node Information Queries only applies if the = attacker >> is onlink. >> Current text overstates the problem. Move to security considerations. >> Addresses will >> leak regardless, in other communication, email header etc. >=20 > Ok. >=20 >=20 >=20 >> 6. Security Considerations. >> s/in replacement of/as an alternative to/ >=20 > Good grief. Will do ;-) >> Third bullet: >> The bullet on host-scanning needs some justification. >=20 > Can we get away with it by referencing = draft-ietf-opsec-ipv6-host-scanning? yes, that would probably work. >> Fourth bullet: This is not a security issue. >=20 > Which one? must have meant third bullet. >> Paragraph after bullets: >> s/algorithm is meant to replace/meant to supplement/ >=20 > Yup. Will fix this one, too. >=20 > Thanks! ... and Merry Christmas! ;-) thanks, and to you too! off on holiday now! best regards, Ole= From despres.remi@laposte.net Fri Dec 21 04:56:52 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA6CB21F8909 for ; Fri, 21 Dec 2012 04:56:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.369 X-Spam-Level: X-Spam-Status: No, score=-2.369 tagged_above=-999 required=5 tests=[AWL=0.580, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6jyQaPLDpxIa for ; Fri, 21 Dec 2012 04:56:49 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.3]) by ietfa.amsl.com (Postfix) with ESMTP id 6A2CD21F8816 for ; Fri, 21 Dec 2012 04:56:49 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id 128E270003D5; Fri, 21 Dec 2012 13:56:48 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id B5D3E70001D2; Fri, 21 Dec 2012 13:56:47 +0100 (CET) X-SFR-UUID: 20121221125647744.B5D3E70001D2@msfrf2111.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D44059.1030300@viagenie.ca> Date: Fri, 21 Dec 2012 13:56:49 +0100 Message-Id: <5E7164FD-84BE-479A-AD50-74B46728DED5@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D44059.1030300@viagenie.ca> To: Simon Perreault X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 12:56:52 -0000 Hi, Simon, Thanks a lot for this pointer. I will check, hopefully with Brian, which 4rd range can best fit in this = up-to-date table. RD Le 2012-12-21 =E0 11:56, Simon Perreault a = =E9crit : > Le 2012-12-20 11:07, R=E9mi Despr=E9s a =E9crit : >> - Small problem: at http://www.iana.org/protocols, a registry for >> "Reserved Internet Protocol version 6 (IPv6) Interface Identifiers" >> is listed but, when clicking to open it, the page that comes is that >> of "Instant Message Disposition Notification (IMDN) Headers". This >> should be easy to fix I suppose. >=20 > I mentioned the problem to IANA. >=20 > The right link should be: > = >=20 > You'll see that the registry has grown since the RFC was published: >=20 >> Interface Identifier Range = Description Reference Date Assigned >> 0000:0000:0000:0000 Subnet-Router Anycast = [RFC4291] 2008-12-24 >> 0200:5EFF:FE00:0000-0200:5EFF:FE00:5212 Reserved IPv6 Interface = Identifiers corresponding to the IANA Ethernet Block [RFC4291] >> 0200:5EFF:FE00:5213 Proxy Mobile IPv6 = [RFC6543] >> 0200:5EFF:FE00:5214-0200:5EFF:FEFF:FFFF Reserved IPv6 Interface = Identifiers corresponding to the IANA Ethernet Block [RFC4291] >> FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF Reserved Subnet Anycast = Addresses [RFC2526] = 2008-12-24 >=20 > Note that the new registrations are part of the IANA Ethernet block... >=20 > Simon > --=20 > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > STUN/TURN server --> http://numb.viagenie.ca > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From v6ops@globis.net Fri Dec 21 05:14:29 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB39421F85BC for ; Fri, 21 Dec 2012 05:14:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.737 X-Spam-Level: X-Spam-Status: No, score=-2.737 tagged_above=-999 required=5 tests=[AWL=-0.637, BAYES_00=-2.599, J_CHICKENPOX_14=0.6, J_CHICKENPOX_15=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eXl8LnVFKbxn for ; Fri, 21 Dec 2012 05:14:29 -0800 (PST) Received: from globis01.globis.net (mail.globis.net [87.195.182.18]) by ietfa.amsl.com (Postfix) with ESMTP id A34BA21F8456 for ; Fri, 21 Dec 2012 05:14:28 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by globis01.globis.net (Postfix) with ESMTP id 044FD87008A; Fri, 21 Dec 2012 14:04:11 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at globis01.globis.net Received: from globis01.globis.net ([127.0.0.1]) by localhost (mail.globis.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KQIeR2xubG0j; Fri, 21 Dec 2012 14:03:54 +0100 (CET) Received: from Rays-iMac-2.local (unknown [192.168.0.3]) (Authenticated sender: Ray.Hunter@globis.net) by globis01.globis.net (Postfix) with ESMTPA id EC92E870064; Fri, 21 Dec 2012 14:03:53 +0100 (CET) Message-ID: <50D45E33.3080203@globis.net> Date: Fri, 21 Dec 2012 14:03:47 +0100 From: Ray Hunter User-Agent: Postbox 3.0.6 (Macintosh/20121022) MIME-Version: 1.0 To: =?ISO-8859-1?Q?R=E9mi_Despr=E9s?= Subject: Re: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 13:14:30 -0000 Inline Rémi Després wrote: > 2012-12-20 20:29, Ole Troan : > >> Remi, >> >> [...] >> >>>> To make assertions about IP addresses based on the EUI-64 is to impose requirements that don't actually exist in IP. It's a little like saying that concrete MUST ("are required to") be grey because the rocks we use in it happen to be grey; no I can have concrete of other colors if I want. >>> I do agree that, despite a rule exists in some RFC one can see configurations that don't comply with it. >>> Consequently, "intended to be globally unique" doesn't mean "guaranteed to be globally unique in real life", right. >>> >>> This isn't a reason, however, to abandon rules that proved to be useful. >>> AFAIK, the rule that IIDs having u=must (so far) only be based on global IEEE EUI-64 addresses is one of these useful rule not to be abandoned. >> how has it proved to be useful? >> I'm not aware of any protocol or implementation using it. > > As already said, it facilitates address stability. > This is so with OSes that, by default, base their IIDs on EUI-64 addresses of their link adapters. > > >>>> The comment Brian is making refers to IP's requirements, which are that the IID used in a subnet by an interface must be unique within that subnet. >>> This is a clear requirement, on which I think we all agree. >>> >>> It is worth noting here that satisfaction of this requirement DOES DEPEND in part on IIDs having u=being actually unique. >>> (Reason is that RFC 4862 says (uppercase added) "IPv6 nodes are NOT required to validate that interface identifiers created with modified EUI-64 tokens with the "u" bit set to universal are unique".) >> to be pedantic it is RFC4291 that says that. > > Right, the RFC number wasn't the right one. > Thanks. > >> the only thing it says is that an implementation does not have to validate that a interface-id is _globally_ unique (how could it?), it still >> has to validate that an address created with that interface-id is unique. > > I find it very hard to interpret the above sentence the way you do. > Since, as you rightly imply, there is no way locally to check _global_ uniqueness, this sentence is useful only if it means that it is uniqueness _on the link_ that is "not required to be validated" if u= > > Anyway, even with your interpretation, this isn't against adding a new reserved IID range to those of RFC5453. > >>>> If one has a physical machine with an interface that supports a dozen virtual machines, the requirement is not that all of the physical and virtual machines use IP addresses derived from the physical interface MAC address; >>> Well understood. >>> >>>> the requirement is that they each have IIDs that are unique within the subnet. The obvious choice will be to use privacy addresses for the VMs, which will appear outside the physical machine as the one interface having that many IP addresses. >>> Agreed. >>> Since these IIDs will have u= this is neutral in the discussion on u=1 IIDs. >>> >>> >>> AFAIK, no technical and/or operational consideration remains that would prevent the IANA registry on IIDs to be updated as follows (the 4rd range is that proposed by Brian). >> that's a different question than what was asked by the softwire. >> is the question to the 6man WG now, "is it acceptable to reserve 2^48 interface-id's" using the RFC5453 registry? > > The basic question is whether reserving for 4rd a specific 8-bit IID is "compatible with the IPv6 addressing architecture" as currently specified. > Besides some expressed FUD, which isn't illegitimate in face of anything new, no such conflict has been identified by those who checked carefully. You may call it FUD, but could you please point the WG members to the text in either the IPv6 addressing architecture (RFC4291) or SLAAC (RFC4862) that says that the g bit MUST be overridden to 0 before creating an IID (and thus link-local and global IPv6 unicast addresses when they are appended to a /64 prefix)? It may be sensible, but where is it *defined* in an IETF standards track RFC that automatic address generation based on an EUI-64 seed MUST NOT use g=1? I think we both agree that being able to guarantee unique addresses on a link is pretty fundamental to correct operation of IPv6, especially considering the 4rd proposal as documented in your published ID would not appear to use DAD, and failing DAD in existing nodes currently causes an interface to cease processing IPv6 packets. The only text I can find is in the Ethernet specific encapsulation (RFC2604) which states "The Interface Identifier [AARCH] for an Ethernet interface is based on the EUI-64 identifier [EUI64] derived from the interface's built-in 48-bit IEEE 802 address." And even then it's not specific that if a manufacturer decided to burn in an EUI-48 into their NIC with g=1 (e.g. for a technology that multicasts by default for multi-channel television distribution) and this address is from within their IEEE -assigned OUI space, whether that would be illegal for use with IETF IPv6 standards. Also not everything is Ethernet. regards, RayH > This would normally lead to a flat "yes it is compatible" but, during the discussion, it appeared that the proposed 8-bit prefix can advantageously be replaced by a longer prefix closer to an already reserved prefix, and this without any problem for 4rd. > A suggestion by 6man to change the proposed prefix value can therefore be constructive complement to the flat answer. > I hope the WG will make this step forward. > > Regards, > RD > > >> cheers, >> Ole >> >> >>> The answer returned to Softwire can then be a request to change the 4rd draft accordingly. >>> >>> +-----------------------------------------+-------------------------+ >>> | Interface Identifier Range | Description | >>> +-----------------------------------------+-------------------------+ >>> | 0000:0000:0000:0000 | Subnet-Router Anycast | >>> | | [RFC4291] | >>> | | | >>> | FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF | Reserved 4rd Unicast | >>> | | Addresses [RFCxxxx] | >>> | | | >>> | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | >>> | | Addresses[RFC2526] | >>> +-----------------------------------------+-------------------------+ >> cheers, >> Ole > From despres.remi@laposte.net Fri Dec 21 05:46:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B9F821F8803 for ; Fri, 21 Dec 2012 05:46:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.39 X-Spam-Level: X-Spam-Status: No, score=-2.39 tagged_above=-999 required=5 tests=[AWL=0.559, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fxj0OxY-kmg1 for ; Fri, 21 Dec 2012 05:46:28 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.3]) by ietfa.amsl.com (Postfix) with ESMTP id A6A0921F869C for ; Fri, 21 Dec 2012 05:46:27 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id D88F670003D8; Fri, 21 Dec 2012 14:46:26 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id 90F387000230; Fri, 21 Dec 2012 14:46:26 +0100 (CET) X-SFR-UUID: 20121221134626593.90F387000230@msfrf2111.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D45E33.3080203@globis.net> Date: Fri, 21 Dec 2012 14:46:26 +0100 Message-Id: <68A51AC1-68E4-4D3A-A9F4-A89BA54B7EF9@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <50D45E33.3080203@globis.net> To: Ray Hunter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 13:46:28 -0000 Ray, Please see inline. 2012-12-21 =E0 14:03, Ray Hunter : ... >> The basic question is whether reserving for 4rd a specific 8-bit IID = is "compatible with the IPv6 addressing architecture" as currently = specified. >> Besides some expressed FUD, which isn't illegitimate in face of = anything new, no such conflict has been identified by those who checked = carefully. > You may call it FUD, but could you please point the WG members to the > text in either the IPv6 addressing architecture (RFC4291) or SLAAC > (RFC4862) that says that the g bit MUST be overridden to 0 before > creating an IID (and thus link-local and global IPv6 unicast addresses > when they are appended to a /64 prefix)? I hope I never suggested that any RFC says that g must always be set to = 0.=20 On the contrary, g can clearly be either 0 or 1 for local-scoppe IIDs = (i.e. having u=3D0). Now, if u=3D1, RFC 4291 specifies in its Annex A one way to build IIDs, = and which happens to imply g=3D0 (a consequence of the IEEE rule for = individual addresses). AFAIK, this is so far THE ONLY IID specified by IETF with u=3D1, so that = u=3Dg=3D1 REMAINS AVAILABLE for new IID formats.=20 OK? (If I missed another RFC specifying an IID format with u=3D1, thank you = for giving a reference.) > It may be sensible, but where is it *defined* in an IETF standards = track > RFC that automatic address generation based on an EUI-64 seed MUST NOT > use g=3D1? Nowhere (see above). > I think we both agree that being able to guarantee unique addresses on = a > link is pretty fundamental to correct operation of IPv6, especially > considering the 4rd proposal as documented in your published ID would > not appear to use DAD, and failing DAD in existing nodes currently > causes an interface to cease processing IPv6 packets. >=20 > The only text I can find is in the Ethernet specific encapsulation > (RFC2604) which states "The Interface Identifier [AARCH] for an = Ethernet > interface is based on the EUI-64 identifier [EUI64] derived from the > interface's built-in 48-bit IEEE 802 address." And even then it's not > specific that if a manufacturer decided to burn in an EUI-48 into = their > NIC with g=3D1 (e.g. for a technology that multicasts by default for > multi-channel television distribution) and this address is from within > their IEEE -assigned OUI space, whether that would be illegal for use > with IETF IPv6 standards. Not using a group address at the link layer for an IP unicast address is = obvious enough for not needing an RFC to say it. It is AFAIK reflected = by what manufacturers do. =20 If you would have evidence of the contrary, I agree that it should be = looked at. > Also not everything is Ethernet. Agreed. (But AFAIK it doesn't change the above.) Regards, RD From despres.remi@laposte.net Fri Dec 21 05:57:53 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49FA321F84D8 for ; Fri, 21 Dec 2012 05:57:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.409 X-Spam-Level: X-Spam-Status: No, score=-2.409 tagged_above=-999 required=5 tests=[AWL=0.540, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AAoR9mN2da-q for ; Fri, 21 Dec 2012 05:57:52 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.3]) by ietfa.amsl.com (Postfix) with ESMTP id 7B7AD21F8472 for ; Fri, 21 Dec 2012 05:57:51 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id 47CF77000165; Fri, 21 Dec 2012 14:57:51 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id 020E97000523; Fri, 21 Dec 2012 14:57:50 +0100 (CET) X-SFR-UUID: 20121221135751855.020E97000523@msfrf2111.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <245821E3-EEE4-44DB-BF58-C1B642B9DA3E@employees.org> Date: Fri, 21 Dec 2012 14:57:50 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D2EC14.9000206@gmail.com> <323C3E7D-98FB-4099-BF83-8CAA0DE50303@employees.org> <245821E3-EEE4-44DB-BF58-C1B642B9DA3E@employees.org> To: Ole Troan X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 13:57:53 -0000 2012-12-2110:49, Ole Troan : ... >> (*) >> 4rd implementors are free to add code to reject any intra-site IID = that (by mistake) would be universal-scope, and in the 4rd-assigned IID = range.=20 >=20 > but the current specification does not handle conflicts? There is no relation between this subject and whether assigning to 4rd = an IID range having u=3Dg=3D1 is "actually compatible with the IPv6 = addressing architecture", which is the question asked to 6man by Suresh.=20= > I don't know what an intra-site IID is. An IID that is used in within a site. >=20 >> Whether including this extra complexity would be valuable enough is = debatable, not forgetting that: >> - 4rd is experimental >> - RFC 4862 says "IPv6 nodes are not required to validate that = interface identifiers created with modified EUI-64 tokens with the "u" = bit set to universal are unique". (There is no guarantee that DAD will = prevent all misuses of universal-scope IIDs.) =20 >=20 > that's not quite what 4862 says. Indeed, as you noted in another mail, that's RFC 4291 that says it ;-). > if the purpose of the reserved block is to avoid conflict with = existing nodes on the link, then > that idea trivially breaks when you put two 4rd CEs on the same link. This can be continued offline if you insist, but there has already been = discussions in Softwire on this subject, with no issue left. >>> - the size of the reservation. do we want to reserve 2^48 addresses = out of every interface-id, >>> and update every implementation? for an experimental mechanism? >>=20 >> There must be a misunderstanding somewhere: no existing = implementation needs to be modified (unless 4rd support is added to it).=20= >=20 > if you reserve a block out of the interface-id space, then all = implementations that create interface identifers must be aware of it, to = avoid creating conflicts. I don't understand why this additional = reservations wouldn't require all nodes that implement RFC4941 to have = to be updated. When supporting RFC 4941 a node forces u =3D 0. Its implementation obviously doesn't need to be changed because an = additional use of u=3D1 is specified. Ole, your expressing such unchecked objection is a pain.=20 >>> I think that a mechanism that requires a large swath of interface-id = space, and does not handle collisions, should >>> use a separate prefix on a virtual interface. >>=20 >> Regarding collisions, see (*) above. >> What you view as a large swath is in fact only 1/2^16 of the total = IID space, nothing to feel uncomfortable about. >=20 > quite. Different view. RD From rafiee@hpi.uni-potsdam.de Fri Dec 21 06:23:36 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFA4521F8421 for ; Fri, 21 Dec 2012 06:23:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.414 X-Spam-Level: X-Spam-Status: No, score=-1.414 tagged_above=-999 required=5 tests=[AWL=0.835, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s81QW350SUrM for ; Fri, 21 Dec 2012 06:23:36 -0800 (PST) Received: from mail3.hpi.uni-potsdam.de (mail3.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17b]) by ietfa.amsl.com (Postfix) with ESMTP id EC33D21F841D for ; Fri, 21 Dec 2012 06:23:35 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail3.hpi.uni-potsdam.de (Postfix) with ESMTP id 5FDE5169EAE; Fri, 21 Dec 2012 15:23:30 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Fri, 21 Dec 2012 15:23:29 +0100 From: "Rafiee, Hosnieh" To: Fernando Gont Date: Fri, 21 Dec 2012 15:23:30 +0100 Subject: RE: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Thread-Topic: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Thread-Index: Ac3fHNZtx7uf5vE9QBqV/szEAx71kgAaDsDw Message-ID: References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> <50D3831C.4050301@gont.com.ar> In-Reply-To: <50D3831C.4050301@gont.com.ar> Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "ipv6@ietf.org" , "bob.hinden@gmail.com" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 14:23:37 -0000 Fernando, As we have seemed to reach a stalemate in this discussion, I see no need fo= r continuing it. I tried to explain everything in my last emails and I see = no point in reiterating it here. I offered you a different approach which I= feel would allow you to continue with an RFC. you might want to investigat= e this. Thank you, Hosnieh -----Original Message----- From: Fernando Gont [mailto:fernando@gont.com.ar]=20 Sent: Donnerstag, 20. Dezember 2012 22:29 To: Rafiee, Hosnieh Cc: Fernando Gont (fgont@si6networks.com); Bob Hinden (bob.hinden@gmail.com= ); ipv6@ietf.org Subject: Re: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 Hosnieh, On 12/20/2012 06:06 PM, Rafiee, Hosnieh wrote: > Now the question is whether or not you are using the "lifetime" for=20 > this IID or IP. If you are, then it is the same procedure as that for=20 > the RFC privacy extension. The lifetime advertised in RA messages? - Of course. >>Nobody has even suggested this. For instance, if these addresses had a li= fetime (in the RFC4941 sense), they wouldn't be called "stable" in the firs= t place. > I understand that you did not use a lifetime for the address where the=20 > privacy, within the network, is questionable! I said that, if you are=20 > really concerned about privacy, then you would need to set the=20 > lifetime for your address, even within the same subnet. This addresses are *stable*. As noted in RFC4941, you usually need some sta= ble address, even if you do RFC4941. > When you use the same, so called stable addresses, in the same subnet,=20 > it means that you generate the same address and use the same address=20 > forever within that subnet. Now the question is, if your address=20 > ,according to your draft, does not change, what privacy protection is=20 > afforded within the network here? You cannot be tracked across networks. > The second question: usually when, for privacy reasons, ISPs change=20 > their addresses they also change the prefixes. So as you say you=20 > generate new address for the new prefix, what is the stability of the=20 > address? If the prefix changes, then from an IP-layer point of view, you're connecte= d to a different network. > For the Second concern, let's go back to the privacy extension RFC. As=20 > I mentioned in a prior email, the second approach is to use CGA or=20 > DHCPv6. But they did not explain how to do this. They mentioned CGA as=20 > a way for generating a random IID but did not mention it as a=20 > security option. So one might consider extending that section to=20 > include an explanation as to how to use the second approach in that=20 > RFC. For example, suggest using the CGA generation algorithm (as you=20 > are using it with another name!) and since the address does not need=20 > to be verified, then there is no need to set a sec value or add CGA=20 > options to the options in SEND. Well, yeah... at which point, that's not CGAs anymore. ;-) > Another suggestion might that there is no need for the other node to=20 > process verification because security is not an issue. >> * In 3972, there's no secret. Hence, the attacker might be able to compu= te the IID himself (assuming the algorithm and the input parameters are kno= wn). > Not true as I pointed out before. >>Where? The Last two emails > As I pointed out before, one can make improvements to the privacy=20 > extension RFC and explain the second approach, in more detail for the RFC4941 produces random addresses. Period. It's a different scheme, with di= fferent objetives. > use of the same algorithm in CGA as was used (the same as sec value 0,=20 > i.e., you just run the hash algorithm once on the concatenation of a=20 > random number, subnet prefix and etc) and skip the verification=20 > mechanism since no verification is needed. At which point you should strip most of the CGA document, since most of its= contents is related with something else. i.e., we can play the game of "how could I tweak/strech this or that RFC so= that we get to the same behavior".. but I'm not sure whatd be the benefit = of that. >> As noted above, many deployments turn off privacy addresses. > I do not think this is a good reason in this case because they can=20 > also do the same thing using your draft proposal and never implement=20 > it, or disable it! The reasons for which they disable RFC4941 do not apply to draft-ietf-6man-= stable-privacy-addresses. >>A.1.3. Revealing the identity of devices performing server-like >=20 > Functions >=20 > Some devices need to have a fix IP address and these are usually set=20 > by an administrator manually or a fixed range of IP address for the=20 > devices being used. This is what happens in large networks. In small=20 > networks, like home networks, usually the name of the devices are=20 > used. For some servers or server functioning devices, privacy is not=20 > important because they should be available and well known in that=20 > network. So for those well-known devices, privacy does not make sense. That doesn't mean they should be easily discoverable from the public Intern= et or the like. > Finally, in your draft you do not completely address the privacy issue. > When the same network is used to connect different places, then your=20 > node becomes vulnerable to tracking. What I think is, as long as you=20 > think about stability, that you need to also forget about privacy. Huh? If you connect to two different subnets, the prefix is different, and = hence the resulting IID is different. > And > if you decide to be concerned with privacy, then you need to use a=20 > lifetime for your address. This is again like the privacy extension=20 > RFC, RFC4941 addresses are generated **in addition** to the traditional slaac ad= dresses. RFC4941 does nothing to mitigate the implications of traditional s= laac addresses. And that's what this i-d is meant to do. Thanks, -- Fernando Gont e-mail: fernando@gont.com.ar || fgont@si6networks.com PGP Fingerprint: 7809= 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 From despres.remi@laposte.net Fri Dec 21 07:27:46 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E5EF21F869E for ; Fri, 21 Dec 2012 07:27:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.427 X-Spam-Level: X-Spam-Status: No, score=-2.427 tagged_above=-999 required=5 tests=[AWL=0.522, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V29mXjRxX9LB for ; Fri, 21 Dec 2012 07:27:46 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.3]) by ietfa.amsl.com (Postfix) with ESMTP id AFC2921F869B for ; Fri, 21 Dec 2012 07:27:45 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id 1A42970003D1; Fri, 21 Dec 2012 16:27:45 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id C1A0E700012B; Fri, 21 Dec 2012 16:27:44 +0100 (CET) X-SFR-UUID: 20121221152744793.C1A0E700012B@msfrf2111.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Fri, 21 Dec 2012 16:27:44 +0100 Message-Id: <18A61253-FE32-4885-B0FF-021322C57F7D@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <4F45045D-0D2E-4D66-9D26-C5A0FBF2098D@employees.org> To: Ole Troan X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 15:27:46 -0000 2012-12-21 12:00, Ole Troan : > Remi, >=20 >>> there appears to be quite a lot of pushback in 6man against the use = of u/g bits as specified in the 4rd draft. >>=20 >> FUD, yes, but technically founded pushback that haven't been = answered, no one left AFAIK.=20 >=20 > I can't parse the above. Fair enough. I mean that, AFAIK, all technical objections to u=3Dg=3D1 being used = for new IID formats have been answered. I do understand that some may feel differently, and that in this case = the debate must go on to reach common enough understanding.=20 That's why I continue to provide explanations on technical points that, = in others' opinions, appear to be unresolved. =20 >> For instance, in you own long list of doubts, you included: >> - The need to "update every implementation". It definitely doesn't = exist. >=20 > can you please explain that? given that a RFC4941 implementation may = create interface-id's that conflict with the 4rd > reserved range. Privacy option IIDs (RFC 4941) all have u=3D0. They cannot conflict with = 4rd IIDs which all have u=3D1 . >> - The view that "we should design protocols that do not depend on = well known addresses or ports". This doesn't concern 4rd which uses = neither WHA nor WKP.=20 >=20 > well-known or reserved range. I'm not in favour of either. >=20 >> With these two in particular, one can get the impression that your = are trying to oppose 4rd by all possible means. Without clarification = of when your chair hat is on or off, this is unfortunate IMHO.=20 >=20 > chair off, I thought I made that clear. I have asked Bob to make the = call on this. I don't believe you are in a position to declare what = consensus of the 6man working group is either. ;-) The fact that the chairs are in charge of identifying consensus is = crystal clear to me. I just express my opinion when I believe it is useful to the community. > I'm not trying to oppose 4rd by "all possible means". I'm trying to = limit collateral damage to IPv6 specifications and implementations. > I think that 4rd would function perfectly well without any reserved = interface-identifier space. do you disagree with that? Yes, we do disagree on this: - With the reserved IID range, 4rd can be activated in any IPv6 site = without interfering with its subnet assignments, and without any host = having to be renumbered because of a conflict with a 4rd IPv6 address.=20= - This wouldn't work if 4rd IIDs would have u=3D0, because some hosts = having RFC4291-compliant IIDs may be in conflict. - MAP-E hasn't the same need because implementations can use the = protocol field to discriminate MAP-E packets from native IPv6 packets.=20= Regards, RD From despres.remi@laposte.net Fri Dec 21 07:47:49 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40A9021F872C for ; Fri, 21 Dec 2012 07:47:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.444 X-Spam-Level: X-Spam-Status: No, score=-2.444 tagged_above=-999 required=5 tests=[AWL=0.505, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mwVqcMsNKa44 for ; Fri, 21 Dec 2012 07:47:48 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.3]) by ietfa.amsl.com (Postfix) with ESMTP id EC97B21F86A6 for ; Fri, 21 Dec 2012 07:47:47 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id 5BCDB7000520; Fri, 21 Dec 2012 16:47:47 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2111.sfr.fr (SMTP Server) with ESMTP id 2A96B70003B4; Fri, 21 Dec 2012 16:47:47 +0100 (CET) X-SFR-UUID: 20121221154747174.2A96B70003B4@msfrf2111.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Which IID range for 4rd - was "Use the IANA registry of RFC5453 for 4rd" From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D44059.1030300@viagenie.ca> Date: Fri, 21 Dec 2012 16:47:46 +0100 Message-Id: <4DAB02E9-70D0-4D8F-9498-443E772AC236@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D44059.1030300@viagenie.ca> To: 6man 6man-wg X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 15:47:49 -0000 Hi, all, Examining more carefully to IID range proposed by Brian for 4rd, I = noticed that it didn't have the key u=3Dg=3D1 combination! Sorry for having overlooked that when I supported this particular = choice. Hence the new proposal: - Keep Brian's proposal that the length of the 4rd IID prefix be = increased to 16 (instead of 8). - Abandon, by necessity, the idea of sharing the first 8 bits with an = already reserved range. - Consequently, take for instance = 0300:0000:0000:0000-0300:FFFF:FFFF:FFFF (instead of = FDFE:0000:0000:0000-FDFE:FFFF:FFFF:FFFF)=20 If consensus is reached on the principle, IANA can be required to add = this range to its table of = www.iana.org/assignments/ipv6-interface-ids/ipv6-interface-ids.xml = (Thanks to Simon for having found where it is). Regards, RD =20 =20 2012-12-21 11:56, Simon Perreault : > Le 2012-12-20 11:07, R=E9mi Despr=E9s a =E9crit : >> - Small problem: at http://www.iana.org/protocols, a registry for >> "Reserved Internet Protocol version 6 (IPv6) Interface Identifiers" >> is listed but, when clicking to open it, the page that comes is that >> of "Instant Message Disposition Notification (IMDN) Headers". This >> should be easy to fix I suppose. >=20 > I mentioned the problem to IANA. >=20 > The right link should be: > = >=20 > You'll see that the registry has grown since the RFC was published: >=20 >> Interface Identifier Range = Description Reference Date Assigned >> 0000:0000:0000:0000 Subnet-Router Anycast = [RFC4291] 2008-12-24 >> 0200:5EFF:FE00:0000-0200:5EFF:FE00:5212 Reserved IPv6 Interface = Identifiers corresponding to the IANA Ethernet Block [RFC4291] >> 0200:5EFF:FE00:5213 Proxy Mobile IPv6 = [RFC6543] >> 0200:5EFF:FE00:5214-0200:5EFF:FEFF:FFFF Reserved IPv6 Interface = Identifiers corresponding to the IANA Ethernet Block [RFC4291] >> FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF Reserved Subnet Anycast = Addresses [RFC2526] = 2008-12-24 >=20 > Note that the new registrations are part of the IANA Ethernet block... >=20 > Simon > --=20 > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > STUN/TURN server --> http://numb.viagenie.ca > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- From Fred.L.Templin@boeing.com Fri Dec 21 08:49:38 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC27F21F87F4 for ; Fri, 21 Dec 2012 08:49:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4eOKWDNmLIx6 for ; Fri, 21 Dec 2012 08:49:38 -0800 (PST) Received: from blv-mbsout-01.boeing.com (blv-mbsout-01.boeing.com [130.76.32.231]) by ietfa.amsl.com (Postfix) with ESMTP id E2D6C21F87C7 for ; Fri, 21 Dec 2012 08:49:36 -0800 (PST) Received: from blv-mbsout-01.boeing.com (localhost.localdomain [127.0.0.1]) by blv-mbsout-01.boeing.com (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with ESMTP id qBLGnss7020910 for ; Fri, 21 Dec 2012 08:49:54 -0800 Received: from XCH-NWHT-06.nw.nos.boeing.com (xch-nwht-06.nw.nos.boeing.com [130.247.25.110]) by blv-mbsout-01.boeing.com (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id qBLGnqgi020876 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=OK); Fri, 21 Dec 2012 08:49:52 -0800 Received: from XCH-NW-01V.nw.nos.boeing.com ([130.247.64.97]) by XCH-NWHT-06.nw.nos.boeing.com ([130.247.25.110]) with mapi; Fri, 21 Dec 2012 08:49:33 -0800 From: "Templin, Fred L" To: Fernando Gont Date: Fri, 21 Dec 2012 08:49:30 -0800 Subject: RE: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Topic: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments Thread-Index: Ac3fOWQChZ8jLjXdTji8iJs5oGVzqAAYPOYw Message-ID: References: <50CA2508.1030003@innovationslab.net> <50CF402E.80706@si6networks.com> <50D09AAE.6000601@innovationslab.net> <50D0CB40.5070103@si6networks.com> <50D3EF04.4060004@si6networks.com> In-Reply-To: <50D3EF04.4060004@si6networks.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-TM-AS-MML: No Cc: "draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org" , 6man WG X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 16:49:38 -0000 Hi Fernando, > -----Original Message----- > From: Fernando Gont [mailto:fgont@si6networks.com] > Sent: Thursday, December 20, 2012 9:09 PM > To: Templin, Fred L > Cc: draft-ietf-6man-ipv6-atomic-fragments@tools.ietf.org; 6man WG > Subject: Re: AD Evaluation: draft-ietf-6man-ipv6-atomic-fragments >=20 > On 12/20/2012 03:04 PM, Templin, Fred L wrote: > >> On 12/18/2012 04:13 PM, Templin, Fred L wrote: > >>> I have a question about this document. Is a middlebox permitted > >>> to fragment an "atomic" fragment before forwarding the packet > >>> on to the next hop? If not, why not - after all, that's why the > >>> host inserted the fragment header in the first place. > >> > >> My take is that an *IPv6* middle-box is not permitted to fragment the > >> packet. The IPv6/IPv4 translator is, from an IPv6 point of view, a > >> host/end-point/end-system (that's where the v6 world ends for that > >> packet). > > > > On further thought, I don't fully accept the notion that the > > translator is a host/end-point/end-system. >=20 > From the pov of the IPv6 network that's where the packet "ends". Right, with an asterisk next to "ends" (*). IPv6 information does carry forward beyond the translator the same as IPv4 information carries forward for IPv4 packets from a private network transiting an IPv4 translator to the public IPv4 network. > > The IPv6 host provides > > the translator with an Identification value, and that value carries > > forward into the IPv4 world. So, while the IPv6 packet itself does > > not carry forward, IPv6 information does. >=20 > Yes and no -- e.g., you cannot use the full 32-bit Frag ID. Right, but the lower 16 bits does come from IPv6-land. > >> As to the "why not", I'd guess the reason is "only IPv6 hosts fragment > >> packets" > > > > I think there would need to be an asterisk next to that statement > > saying that IPv6/IPv4 translators are exempt from this requirement. > > And, if the translator can be exempt then so also should an IPv6 > > middlebox that connects to a link that would otherwise be obliged > > to perform burdensome link adaptation. >=20 > This does not only apply to tunnels. One could think of some radio > devices, embedded systems, etc., for which an adaptation layer would > possible be overkill. -- So you're idea sounds, at least in principle, > sensible to me. I agree, and constrained radio links are a key area of interest. > I will review your I-D and will come back with some feedback. Thanks for the further analysis, and I look forward to your thoughts on the draft. Fred fred.l.templin@boeing.com =20 > Thanks! >=20 > Best regards, > -- > Fernando Gont > SI6 Networks > e-mail: fgont@si6networks.com > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 >=20 >=20 >=20 From despres.remi@laposte.net Fri Dec 21 09:28:56 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 999F321F8782 for ; Fri, 21 Dec 2012 09:28:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.96 X-Spam-Level: X-Spam-Status: No, score=-1.96 tagged_above=-999 required=5 tests=[AWL=-0.011, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 23hn+by5gCb1 for ; Fri, 21 Dec 2012 09:28:56 -0800 (PST) Received: from smtp25.services.sfr.fr (smtp25.services.sfr.fr [93.17.128.121]) by ietfa.amsl.com (Postfix) with ESMTP id C318421F874E for ; Fri, 21 Dec 2012 09:28:55 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2514.sfr.fr (SMTP Server) with ESMTP id CCDDE7000060; Fri, 21 Dec 2012 18:28:54 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2514.sfr.fr (SMTP Server) with ESMTP id 8B49970000AE; Fri, 21 Dec 2012 18:28:54 +0100 (CET) X-SFR-UUID: 20121221172854570.8B49970000AE@msfrf2514.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D333DB.6080500@kit.edu> Date: Fri, 21 Dec 2012 18:28:54 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <50D333DB.6080500@kit.edu> To: "Bless, Roland (TM)" X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 17:28:56 -0000 2012-12-20 =E0 16:50, "Bless, Roland (TM)" : > Hi R=E9mi, >=20 > On 20.12.2012 09:54, R=E9mi Despr=E9s wrote: >> Interface addresses at the link layer are specified by IEEE to be >> universally unique. This has been effective fort link-layer >> communication to need neither manual configuration nor a DAD-like >> protocol at this layer. >=20 > IEEE link layer addresses should be universally unique, but there > were cases in which this assumption is not true, esp. if you consider > that some manufacturers simply hijacked others OUIs or that most NICs > and drivers allow to set nearly arbitrary MAC addresses. > Moreover, there are now vast amounts of virtual machines in use that > may use non legitimate IEEE addresses. So IMHO one should not rely on > supposed universal uniqueness, but always perform DAD to detect > conflicts... No disagreement. Systematic DAD can be recommended, but without ignoring = that RFC 4291 permits to skip it for IIDs that have universal scope = (u=3D1). =20 >> At the IP layer, it has also been effective to support a good level >> of address stability without needing manual configurations. >=20 > Yep, however, this is also true for algorithmically derived IIDs > as with privacy extensions or CGAs. - CGAs contribute maintain address stability, true, but also true that = EUI-64 IIDs having u=3D1 contribute too, and have been largely deployed, = and this is no reason to abandon the current meaning of the u bit. - "Privacy" and "address stability" are to a good extent contradictory. = To get privacy, EUI-64 IIDs are out of scope. >> Address stability is useful for servers, yes, but also for referrals, >> and in general when addresses are advertised in various ways. >=20 > My point was that statically assigned IIDs may lead to even more > stable IPv6 addresses than those generated out of EUI-64s. Same view on this too, but not forgetting that, in well-behaved hosts, = statically assigned IIDs MUST comply with RFC 4291 (and therefore not = have u=3Dg=3D1).=20 >=20 >> Relaxing uniqueness of IIDs that are based on universal-scope EUI-64 >> would be a step backward. There is no need AFAIK for such a >> regression. >=20 > I never promoted to "relax the uniqueness of IIDs" (whatever that > means), No disagreement on this, then.=20 > my point was to avoid introducing a certain structure into > IIDs. There is no structure today in IIDs that have u=3D0", but there is one = in RFC 4291 for those that have u=3D1. Abandoning it would be a step backward. >>> what new types of universal-scope addresses? >>=20 >> One appears now with 4rd. As stated in the note of the draft >> submitted to 6man, "Its function is to ensure that 4rd IPv6 addresses >> are recognizable by CEs without any interference with the choice of >> subnet prefixes in CE sites". These prefixes, as well as IIDs used in >> sites that support 4rd may have been chosen before 4rd is activated. >=20 > Yes, I read that, but it's unclear to me why it would be such a big > deal to "reconfigure" the subnet prefixes for 4rd use since you have > to activate and configure your box anyway, i.e., maybe you can > flag an existing prefix for 4rd use when turning 4rd on. Moreover, > would it really be such a big deal to change a subnet prefix when > turning 4rd on, since we have auto configuration? Whether it is a big deal or not to reconfigure can be debated but, = AFAIK, that operation is simplified if the need for such = reconfigurations is avoided by design.=20 Hoping this helps to reach common understanding, Regards, RD From fgont@si6networks.com Fri Dec 21 09:36:27 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9E2B21F8A49 for ; Fri, 21 Dec 2012 09:36:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19Lc6pIp5xRF for ; Fri, 21 Dec 2012 09:36:26 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 818B021F895C for ; Fri, 21 Dec 2012 09:36:26 -0800 (PST) Received: from [186.134.21.91] (helo=[192.168.123.121]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tm6Vl-0004nK-ND; Fri, 21 Dec 2012 18:35:55 +0100 Message-ID: <50D4848A.3050904@si6networks.com> Date: Fri, 21 Dec 2012 12:47:22 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ole Troan Subject: Re: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> <50D36595.3000704@si6networks.com> <02E79B66-2A04-481C-B4F2-539A2A746440@employees.org> In-Reply-To: <02E79B66-2A04-481C-B4F2-539A2A746440@employees.org> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 17:36:27 -0000 On 12/21/2012 08:20 AM, Ole Troan wrote: >>> We do see the usefulness of a interface-id generation algorithm, that >>> results >>> in stable identifiers per IPv6 prefix, while not being derived from >>> link-layer >>> MAC addresses. >>> >>> The mechanism proposed could be viewed as an modification of temporary >>> addresses (RFC4941) >> >> I disagree. Could you please mention what's in RFC4941 that results in >> addresses that are stable within the same subnet, but different across >> subnets? > > an _extension_ to RFC4941. IMO, that's stretching things too much. IMO, *stable-privacy-addresses have nothing to do with RFC 4941. That said, this was already discussed at the Paris IETF timeframe, and the wg had agreed on the current approach. IMHO, I'd expect that we focus on the current I-D, than rehash 8+months-settled discussions. Particularly at this point in time. > two options come to mind, include the prefix in the hash used in 4941 for these addresses, The only thing that stable-privacy-addresses have in commong with RFC4941 is that they employ a hash function. But lots of things use hashes these days. Also, then we should have argued that rfc4941 should have been published as an extension to CGAs (or the other way around... whatever came first). -- which would have certainly not been sensible to do. > or just use the 4941 algorithm with RA lifetimes, and require that the node stores the resulting addresses. That's, of course, a non-starter. >>> with lifetime handling as for SLAAC, or as an extension to CGA (RFC3972) >>> address generation where the public key is removed from the hash. >> >> Isn't the whole point of CGAs to have the hash be computed over the >> public key? > > the suggestion was you can achieve stable privacy addresses also as an extension of the text in RFC3972. Same as above applies. Also, you don't want an implementer to go through 30 pages, understand that stuff, and then say "now forget about these 28 pages, forget about the whole public key thing [etc].. and focus on this expression" >>> The method for generating "Stable privacy addresses" needs to be as well >>> specified as temporary addresses (RFC4941). >>> We do wonder if the method of generating these addresses could be a >>> modification of the algorithm in RFC4941, or if at least, larger parts of >>> the text in RFC4941 could be >>> references avoiding having to duplicate lots of text into this document. >> >> Hasn't this be discussed to death during the year? (particularly in the >> Paris IETF -> Vancouver IETF) time frame. For instance, as noted above, >> RFC 4941 addresses do not have the location-related properties of these >> addresses. > > see above. we think the method must be as well specified as the 4941 method is, Can you clearly state why? -- IMO, RFC4941 is overspecified. Some device might choose to do MD5. Some other might choose to do SHA-1... some embedded device other might want to use a crappy function just to avoid using IEEE OUIs. We should specify additional requirements when that affects interoperability. Adding additional requirements n terms of crypto algorithms seems unnecessary to me. > that may result in some redundant text, which is why we suggested if you had looked > at making it an extension instead of a entirely separate document. > (note that this was a question, I don't know the right answer). I disagree with that approach. For instance, the "algorithm" vils down to: 1) If you hae recorded an address for this network, use it. 2) Compute the IID for this entwork 3) Chec for special addresses, and go back to 4 if wrong 4) Do DAD, and go back to 2 if it fails. >>> - The algorithm in the document is underspecified. >>> o It should specify the hash function. E.g. MD5 as RFC4941. >> >> Why should it? Put another way, is this needed for the algorithm to >> work? -- it's not. >> >> IMO, we might RECOMMEND some algorithm, or note that nodes MAY use this >> or that algorithm... But requiring a specific one seems like >> over-specifying the algorithm. > > could you use similar text as 4941? > there might actually be some benefit in two nodes given the same secret key/modifier > creates the same address(?) IMO, the drawbacks outweigh the benefits. If we require an algorithm, we're stuck with that algorithm forever (because if we ever change it, the "the same secret key/modifier creates the same address" argument is void). OTOH, if we don't require any specific algorithm, implemenrarions are free to use whatever fits them, and make their own decisions when it comes to tradeoffs in security, processing power, simplicity to implement, etc. That aside, ass a vendor you're free to employ the same algorithm in all your products, such that if one box gets replaced by another one, you get the same address. >>> o We suggest renaming the “secret key” to “modifier”. And add text >>> describing how to ‘maintain’ the modifier (section 3 of RFC3972). >> >> It is not a modifier... it is a *secret key*. And this is key (no pun >> intended :-) ) for the algorithm to behave as expected: if the key is >> known by the attacker, he could compute the IID himself. > > could it not be some unique number the implementation has? > serial number, MAC address, etc? > if it has to be a secret key, and it has to be provisioned, then mightn't you as well use 3972 addresses? A secret key is a value that is... secret. Whether its randmly generated, provided by the admin, or whatever, is irrelevant. The reason why this parameter is called secret key is because that's its most important property... and if the secret key is not secret, then the benefits of the algorithm are gone. So the only sensible change here would kind of be s/secret/SECRET/ to stress this fact. > >>> o It would be useful to include an example algorithm as has been done >>> in some other documents. >> >> You mean as in RFC4941? Or a algorithm in pseudo-code? > > as in 4941. I've sketched it above. Please let me know if that one addresses your concerns. > >>> o Not all implementations use interface indexes >> >> How do you identify interfaces without "indexes"/names of some form? > > in IOS we do pass pointers around. ;-) Then you do have interface indexes. The relevant spec doesn't require any specific form of indexes.. they could be names, numbers, pinters, or whatever you want, since that doesn't affect interoperability with other implementations. (which is yet another example of the "rationale" I've applied here when not overspecifying stable-privacy-addresses). > well, we do have indexes and names too. All implementations have (of some form or another). >>> - Clarify what lifetimes these addresses have. >> >> You mean lifetimes in the sense of "same thing as tradtional slaac >> addresses" or lifetime in the sense of "the address will be stable as >> long as you don't change the secret key". > > an address cannot have a longer lifetime than the lifetimes advertised in RAs of course. > could you say something along the lines of: Stable Privacy Addresses have the same lifetime properties > as SLAAC addresses [4862] and expire as described in section 5.5.3 of 4862. Will do. (this was implicit, anyway, since we're just generating IIDs for slaac in a different way, but *not* changing slaac itself). >>> - Specify the default for DAD retries (IDGEN_RETRIES) >> >> Will do. Actually... why should we specify this. IMO, we should just say "Do DAD". And whatever that means should apply. >>> - Clarify the requirements for stable storage (compared to RFC2464) >> >> This is, to a large extent, optional. I guess we could get away with >> "hosts MAY..."? > > wouldn't you behave differently, e.g. if the node has no persistent storage for a secret key? The only difference is the obvious one: if you do have stable storage, before generating an address you should look whether you have an address for this network in stable storage. And when you configure an address, you should store it in stable storage. Period. Me, I don't expect any implementations use stable storage for this. Thanks! Best regards. -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From rogerj@gmail.com Fri Dec 21 13:12:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBE5921F8891 for ; Fri, 21 Dec 2012 13:12:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hkd5PUOT0BDN for ; Fri, 21 Dec 2012 13:12:20 -0800 (PST) Received: from mail-we0-f181.google.com (mail-we0-f181.google.com [74.125.82.181]) by ietfa.amsl.com (Postfix) with ESMTP id A155321F88CF for ; Fri, 21 Dec 2012 13:12:20 -0800 (PST) Received: by mail-we0-f181.google.com with SMTP id t11so2373817wey.40 for ; Fri, 21 Dec 2012 13:12:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=Xaz70dfmZnjCO4d2bn/SLVdjrxNSrUKH9+Kt05Fx14s=; b=gb/UchWWaIpFLGdE8UHi1wUMMXMnxY3WhF29KNFoh7uRtfQ5WvS853UFyLL7S/cSCn jywI2wRRNLUW/QTYGKIs9JchpS4owvl6dEJ8K2he7h6h4Xu0SkMEnwpzDcV/FF+sqTJZ 16GKWh3kwgtvO1cfF0bpGa0bRSnmLTMnqTXqXsbuD5bSLTiHIW6K2xVthsa14fvnfzSO HMayFvidEJYfx8CXTzfAwHeh7jfap4QJchx7g789LwOw90Iut1uHA9qMBnQURq1d6J3x w4rVJu1HWQ6XfvgxkL3ji+TrWHr6iT4RWtcg/3W9F9lgWZHwTOe43789uOH+VCHPSPKX GPCA== MIME-Version: 1.0 Received: by 10.194.110.231 with SMTP id id7mr25966664wjb.6.1356124339866; Fri, 21 Dec 2012 13:12:19 -0800 (PST) Received: by 10.217.44.74 with HTTP; Fri, 21 Dec 2012 13:12:19 -0800 (PST) In-Reply-To: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D2EC14.9000206@gmail.com> <323C3E7D-98FB-4099-BF83-8CAA0DE50303@employees.org> <245821E3-EEE4-44DB-BF58-C1B642B9DA3E@employees.org> Date: Fri, 21 Dec 2012 22:12:19 +0100 Message-ID: Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: =?ISO-8859-1?B?UultaSBEZXNwculz?= Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 21:12:28 -0000 On Fri, Dec 21, 2012 at 2:57 PM, R=E9mi Despr=E9s wrote: > 2012-12-2110:49, Ole Troan : > ... >>> (*) >>> 4rd implementors are free to add code to reject any intra-site IID that= (by mistake) would be universal-scope, and in the 4rd-assigned IID range. >> >> but the current specification does not handle conflicts? > > There is no relation between this subject and whether assigning to 4rd an= IID range having u=3Dg=3D1 is "actually compatible with the IPv6 addressin= g architecture", which is the question asked to 6man by Suresh. > >> I don't know what an intra-site IID is. > > An IID that is used in within a site. and what is a site? thought we gave up that definition ages ago? >>> Whether including this extra complexity would be valuable enough is deb= atable, not forgetting that: >>> - 4rd is experimental >>> - RFC 4862 says "IPv6 nodes are not required to validate that interface= identifiers created with modified EUI-64 tokens with the "u" bit set to un= iversal are unique". (There is no guarantee that DAD will prevent all misus= es of universal-scope IIDs.) >> >> that's not quite what 4862 says. > > Indeed, as you noted in another mail, that's RFC 4291 that says it ;-). > >> if the purpose of the reserved block is to avoid conflict with existing = nodes on the link, then >> that idea trivially breaks when you put two 4rd CEs on the same link. > > This can be continued offline if you insist, but there has already been d= iscussions in Softwire on this subject, with no issue left. again, can you please give us a brief summary instead of just "claiming" it has already been solved? --=20 Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From suresh.krishnan@ericsson.com Fri Dec 21 13:48:39 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF03F21F8461 for ; Fri, 21 Dec 2012 13:48:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EqALbNALf+gB for ; Fri, 21 Dec 2012 13:48:38 -0800 (PST) Received: from imr4.ericy.com (imr4.ericy.com [198.24.6.9]) by ietfa.amsl.com (Postfix) with ESMTP id 5668321F8455 for ; Fri, 21 Dec 2012 13:48:38 -0800 (PST) Received: from EUSAAHC002.ericsson.se ([147.117.188.78]) by imr4.ericy.com (8.14.3/8.14.3/Debian-9.1ubuntu1) with ESMTP id qBLM0RAr029185; Fri, 21 Dec 2012 16:00:28 -0600 Received: from eusaamw0711.eamcs.ericsson.se (147.117.20.178) by EUSAAHC002.ericsson.se (147.117.188.78) with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 21 Dec 2012 16:48:31 -0500 Received: from [142.133.112.133] (147.117.20.214) by smtps-am.internal.ericsson.com (147.117.20.178) with Microsoft SMTP Server (TLS) id 8.3.279.1; Fri, 21 Dec 2012 16:48:31 -0500 Message-ID: <50D4D89C.4040705@ericsson.com> Date: Fri, 21 Dec 2012 16:46:04 -0500 From: Suresh Krishnan User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ole Troan Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> In-Reply-To: <17B72775-7244-490A-B434-B82325B77BF4@employees.org> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 21:48:39 -0000 On 12/19/2012 07:37 AM, Ole Troan wrote: > [...] > >> I briefly read into the 4rd draft, but it's not entirely clear to me >> whether other solutions don't exist. Maybe there are other means to >> get the context knowledge that this particular IPv6 address has a >> special structure encoded somehow. > > as a clarification of what has happened in softwire. (Suresh, please correct me if I'm wrong.) > > the softwire working group has chosen to standardize "MAP-E (http://tools.ietf.org/html/draft-ietf-softwire-map-02)" as the solution for > stateless A+P. the two competing proposals MAP-T (dIVI) and 4rd are being published on experimental track. I can confirm this is the case. The proposal in question (4rd) is an alternative (experimental) solution to the MAP-E standards track solution. Thanks Suresh From suresh.krishnan@ericsson.com Fri Dec 21 14:12:00 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2858F21F8556 for ; Fri, 21 Dec 2012 14:12:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.449 X-Spam-Level: X-Spam-Status: No, score=-106.449 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fD6KgWoGq5S1 for ; Fri, 21 Dec 2012 14:11:53 -0800 (PST) Received: from imr4.ericy.com (imr4.ericy.com [198.24.6.9]) by ietfa.amsl.com (Postfix) with ESMTP id 9489121F850E for ; Fri, 21 Dec 2012 14:11:53 -0800 (PST) Received: from EUSAAHC007.ericsson.se ([147.117.188.93]) by imr4.ericy.com (8.14.3/8.14.3/Debian-9.1ubuntu1) with ESMTP id qBLMNePc032363; Fri, 21 Dec 2012 16:23:42 -0600 Received: from eusaamw0711.eamcs.ericsson.se (147.117.20.178) by EUSAAHC007.ericsson.se (147.117.188.93) with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 21 Dec 2012 17:11:46 -0500 Received: from [142.133.112.133] (147.117.20.214) by smtps-am.internal.ericsson.com (147.117.20.178) with Microsoft SMTP Server (TLS) id 8.3.279.1; Fri, 21 Dec 2012 17:11:45 -0500 Message-ID: <50D4DE0F.10905@ericsson.com> Date: Fri, 21 Dec 2012 17:09:19 -0500 From: Suresh Krishnan User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: =?ISO-8859-1?Q?R=E9mi_Despr=E9s?= Subject: IANA policy (was Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd)) References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> In-Reply-To: <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 22:12:00 -0000 Hi Remi/Ole/Bob, Speaking as the author of RFC5453, I am afraid that this will not work. The allocation policy for this registry is *Standards Action* and hence requires a Standards track RFC. This was done to keep the bar high to minimize disruption to existing implementations as they do not check against this registry. If 6man will propose this as the way forward, then we need to change the IANA policy for the registry. Thanks Suresh On 12/20/2012 05:07 AM, Rémi Després wrote: > Hello, chairs, > > - First a great thank you Jouni for for the reference to RFC 5453, which is perfectly relevant but had been ignored in this discussion. > The good news is that, since an IANA registry for IID ranges has already been created, no new registry is needed for any new IID type, and in particular for 4rd. > > - Small problem: at http://www.iana.org/protocols, a registry for "Reserved Internet Protocol version 6 (IPv6) Interface Identifiers" is listed but, when clicking to open it, the page that comes is that of "Instant Message Disposition Notification (IMDN) Headers". This should be easy to fix I suppose. > > - For 4rd, it is then sufficient that the table of http://tools.ietf.org/html/rfc5453#section-3 (to be reflected in the IANA registry), becomes: > > +-----------------------------------------+-------------------------+ > | Interface Identifier Range | Description | > +-----------------------------------------+-------------------------+ > | 0000:0000:0000:0000 | Subnet-Router Anycast | > | | [RFC4291] | > | | | > | 0300:0000:0000:0000-03FF:FFFF:FFFF:FFFF | Reserved 4rd Unicast | > | | Addresses [RFCxxxx] | > | | | > | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | > | | Addresses[RFC2526] | > +-----------------------------------------+-------------------------+ > > A possible answer from 6man to Softwire is then a request to modify the IANA section of the 4rd draft to reflect the above. > > > Regards, > RD > > > > > 2012-12-19 à 22:19, Jouni Korhonen : > ... >> Hmm.. how would this work with RFC5453 reserved IID space we already >> have for anycast addresses? > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > From despres.remi@laposte.net Fri Dec 21 15:27:19 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 912BC21F8996 for ; Fri, 21 Dec 2012 15:27:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.659 X-Spam-Level: X-Spam-Status: No, score=-1.659 tagged_above=-999 required=5 tests=[AWL=-0.310, BAYES_00=-2.599, HELO_EQ_FR=0.35, J_CHICKENPOX_72=0.6, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NQmEwIWE3Shp for ; Fri, 21 Dec 2012 15:27:19 -0800 (PST) Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr [93.17.128.21]) by ietfa.amsl.com (Postfix) with ESMTP id AC54D21F8994 for ; Fri, 21 Dec 2012 15:27:18 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2313.sfr.fr (SMTP Server) with ESMTP id CD0F9700049D; Sat, 22 Dec 2012 00:27:16 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2313.sfr.fr (SMTP Server) with ESMTP id 5E0AA700049B; Sat, 22 Dec 2012 00:27:16 +0100 (CET) X-SFR-UUID: 20121221232716385.5E0AA700049B@msfrf2313.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IANA policy (was Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd)) From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D4DE0F.10905@ericsson.com> Date: Sat, 22 Dec 2012 00:27:16 +0100 Message-Id: <2BF8780C-E699-4E62-A4D4-008FE9A167A8@laposte.net> References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D4DE0F.10905@ericsson.com> To: Suresh Krishnan X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , Bob Hinden , Jouni Korhonen X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2012 23:27:19 -0000 Hi, Suresh, Comments inline. 2012-12-21 =E0 23:09, Suresh Krishnan : > Hi Remi/Ole/Bob, > Speaking as the author of RFC5453, I am afraid that this will not > work. The allocation policy for this registry is *Standards Action* = and > hence requires a Standards track RFC. Bad news, but an indisputable fact! Thank you for signaling it. > This was done to keep the bar high > to minimize disruption to existing implementations as they do not = check > against this registry. If 6man will propose this as the way forward, > then we need to change the IANA policy for the registry. Because the proposed range is disjoint from any IID values that are = currently permitted by RFC 4291, no disruption of any existing = implementation that complies with this RFC can be caused by this new = range being used for 4rd.=20 Some seem to still have doubts about this so. Of course, if it would be = proven to be false, this approach should be abandoned, but I am = confident that sooner or later it will be understood as being a fact. To proceed, yes, an update of RFC 5453 happens to be needed. It could = add permission to include,in this registry, experimental-track protocols = that are understood to not disrupt any implementation that complies with = existing RFCs. Regards, RD > Thanks > Suresh >=20 > On 12/20/2012 05:07 AM, R=E9mi Despr=E9s wrote: >> Hello, chairs, >>=20 >> - First a great thank you Jouni for for the reference to RFC 5453, = which is perfectly relevant but had been ignored in this discussion.=20 >> The good news is that, since an IANA registry for IID ranges has = already been created, no new registry is needed for any new IID type, = and in particular for 4rd.=20 >>=20 >> - Small problem: at http://www.iana.org/protocols, a registry for = "Reserved Internet Protocol version 6 (IPv6) Interface Identifiers" is = listed but, when clicking to open it, the page that comes is that of = "Instant Message Disposition Notification (IMDN) Headers". This should = be easy to fix I suppose. >>=20 >> - For 4rd, it is then sufficient that the table of = http://tools.ietf.org/html/rfc5453#section-3 (to be reflected in the = IANA registry), becomes: >>=20 >> +-----------------------------------------+-------------------------+ >> | Interface Identifier Range | Description | >> +-----------------------------------------+-------------------------+ >> | 0000:0000:0000:0000 | Subnet-Router Anycast | >> | | [RFC4291] | >> | | | >> | 0300:0000:0000:0000-03FF:FFFF:FFFF:FFFF | Reserved 4rd Unicast | >> | | Addresses [RFCxxxx] | >> | | | >> | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast | >> | | Addresses[RFC2526] | >> +-----------------------------------------+-------------------------+ >>=20 >> A possible answer from 6man to Softwire is then a request to modify = the IANA section of the 4rd draft to reflect the above. >>=20 >>=20 >> Regards, >> RD >>=20 >>=20 >>=20 >>=20 >> 2012-12-19 =E0 22:19, Jouni Korhonen : >> ... >>> Hmm.. how would this work with RFC5453 reserved IID space we already >>> have for anycast addresses? >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >>=20 >=20 From despres.remi@laposte.net Sat Dec 22 10:41:05 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE20821F8A5D for ; Sat, 22 Dec 2012 10:41:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.95 X-Spam-Level: X-Spam-Status: No, score=-1.95 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TtJiguIuo4Q2 for ; Sat, 22 Dec 2012 10:41:04 -0800 (PST) Received: from smtp24.services.sfr.fr (smtp24.services.sfr.fr [93.17.128.84]) by ietfa.amsl.com (Postfix) with ESMTP id 655C921F8994 for ; Sat, 22 Dec 2012 10:41:02 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2417.sfr.fr (SMTP Server) with ESMTP id AACDC7000048; Sat, 22 Dec 2012 19:41:01 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2417.sfr.fr (SMTP Server) with ESMTP id 75ECD70000B0; Sat, 22 Dec 2012 19:41:01 +0100 (CET) X-SFR-UUID: 20121222184101483.75ECD70000B0@msfrf2417.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: Use the IANA registry of RFC5453 for 4rd (was IIDs, u and g bits, and 4rd) From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: Date: Sat, 22 Dec 2012 19:41:02 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <5C86C411-1CD6-4C46-B151-9623887C2255@laposte.net> <50D2EC14.9000206@gmail.com> <323C3E7D-98FB-4099-BF83-8CAA0DE50303@employees.org> <245821E3-EEE4-44DB-BF58-C1B642B9DA3E@employees.org> To: Roger =?iso-8859-1?q?J=F8rgensen?= X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Dec 2012 18:41:05 -0000 Roger, Please se inline. 2012-12-2122:12, Roger J=F8rgensen : > On Fri, Dec 21, 2012 at 2:57 PM, R=E9mi Despr=E9s = wrote: >> 2012-12-2110:49, Ole Troan : >> ... >>>> (*) >>>> 4rd implementors are free to add code to reject any intra-site IID = that (by mistake) would be universal-scope, and in the 4rd-assigned IID = range. >>>=20 >>> but the current specification does not handle conflicts? >>=20 >> There is no relation between this subject and whether assigning to = 4rd an IID range having u=3Dg=3D1 is "actually compatible with the IPv6 = addressing architecture", which is the question asked to 6man by Suresh. >>=20 >>> I don't know what an intra-site IID is. >>=20 >> An IID that is used in within a site. >=20 > and what is a site? thought we gave up that definition ages ago? That's only site-local unicast addresses which have been deprecated in = 2004 (RFC 3879). "Site" is till in use, for instance in RFC 6368 of September 2011 and = RFC 6513 of February 2012. >>>> Whether including this extra complexity would be valuable enough is = debatable, not forgetting that: >>>> - 4rd is experimental >>>> - RFC 4862 says "IPv6 nodes are not required to validate that = interface identifiers created with modified EUI-64 tokens with the "u" = bit set to universal are unique". (There is no guarantee that DAD will = prevent all misuses of universal-scope IIDs.) >>>=20 >>> that's not quite what 4862 says. >>=20 >> Indeed, as you noted in another mail, that's RFC 4291 that says it = ;-). >>=20 >>> if the purpose of the reserved block is to avoid conflict with = existing nodes on the link, then >>> that idea trivially breaks when you put two 4rd CEs on the same = link. >>=20 >> This can be continued offline if you insist, but there has already = been discussions in Softwire on this subject, with no issue left. >=20 > again, can you please give us a brief summary instead of just > "claiming" it has already been solved? I only said that no issue concerning "two 4rd CEs on the same link" is = left open in Softwire. You can check this on the issue tracker of Softwire where pending issues = are listed (trac.tools.ietf.org/wg/softwire/trac/report/1). No one = remains for 4rd. The only point to be cleared concerns the necessary endorsement by 6man = of the proposed 4rd IID prefix (as expressed in the draft itself, and = raised by Suresh in his mail to 6man). Regards, RD >=20 >=20 >=20 > --=20 >=20 > Roger Jorgensen | ROJO9-RIPE > rogerj@gmail.com | - IPv6 is The Key! > http://www.jorgensen.no | roger@jorgensen.no From v6ops@globis.net Sat Dec 22 12:54:15 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6923E21F8ACA for ; Sat, 22 Dec 2012 12:54:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E2PVOEr6XC77 for ; Sat, 22 Dec 2012 12:54:14 -0800 (PST) Received: from globis01.globis.net (mail.globis.net [87.195.182.18]) by ietfa.amsl.com (Postfix) with ESMTP id 2004921F88C3 for ; Sat, 22 Dec 2012 12:54:14 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by globis01.globis.net (Postfix) with ESMTP id 6CB5887007E; Sat, 22 Dec 2012 21:48:54 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at globis01.globis.net Received: from globis01.globis.net ([127.0.0.1]) by localhost (mail.globis.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KX6OO6hsSyN3; Sat, 22 Dec 2012 21:48:22 +0100 (CET) Received: by globis01.globis.net (Postfix, from userid 33) id 13572870099; Sat, 22 Dec 2012 21:48:22 +0100 (CET) Received: from cpc2-lanc1-0-0-cust319.3-3.cable.virginmedia.com (cpc2-lanc1-0-0-cust319.3-3.cable.virginmedia.com [81.98.169.64]) by www.globis.net (Horde Framework) with HTTP; Sat, 22 Dec 2012 21:48:21 +0100 Message-ID: <20121222214821.58927ftdzj9mv9n9@www.globis.net> Date: Sat, 22 Dec 2012 21:48:21 +0100 From: v6ops@globis.net To: =?iso-8859-1?b?UultaSA=?= =?iso-8859-1?b?RGVzcHLpcw==?= Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <50D45E33.3080203@globis.net> <68A51AC1-68E4-4D3A-A9F4-A89BA54B7EF9@laposte.net> In-Reply-To: <68A51AC1-68E4-4D3A-A9F4-A89BA54B7EF9@laposte.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable User-Agent: Dynamic Internet Messaging Program (DIMP) H3 (1.1.8) Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Dec 2012 20:54:15 -0000 After some searching, I've finally found a reference in an IETF BCP =20 document that to my mind does demonstrate that u=3D=3D1 && g=3D=3D1 && unic= ast =20 IID =3D "currently unused" http://tools.ietf.org/html/rfc5342 Quote: "Two bits within the initial 3 octets of an EUI-48 have special significance: the Group bit (01-00-00) and the Local bit (02-00-00). OUIs and IABs are allocated with the Local bit zero and the Group bit unspecified. Multicast identifiers may be constructed by turning on the Group bit, and unicast identifiers constructed by leaving the Group bit zero." Hope this helps, RayH Quoting R=E9mi Despr=E9s : > Ray, > Please see inline. > > 2012-12-21 =E0 14:03, Ray Hunter : > ... >>> The basic question is whether reserving for 4rd a specific 8-bit =20 >>> IID is "compatible with the IPv6 addressing architecture" as =20 >>> currently specified. >>> Besides some expressed FUD, which isn't illegitimate in face of =20 >>> anything new, no such conflict has been identified by those who =20 >>> checked carefully. >> You may call it FUD, but could you please point the WG members to the >> text in either the IPv6 addressing architecture (RFC4291) or SLAAC >> (RFC4862) that says that the g bit MUST be overridden to 0 before >> creating an IID (and thus link-local and global IPv6 unicast addresses >> when they are appended to a /64 prefix)? > > I hope I never suggested that any RFC says that g must always be set to 0= . > On the contrary, g can clearly be either 0 or 1 for local-scoppe =20 > IIDs (i.e. having u=3D0). > > Now, if u=3D1, RFC 4291 specifies in its Annex A one way to build =20 > IIDs, and which happens to imply g=3D0 (a consequence of the IEEE rule = =20 > for individual addresses). > AFAIK, this is so far THE ONLY IID specified by IETF with u=3D1, so =20 > that u=3Dg=3D1 REMAINS AVAILABLE for new IID formats. > > OK? > (If I missed another RFC specifying an IID format with u=3D1, thank =20 > you for giving a reference.) > >> It may be sensible, but where is it *defined* in an IETF standards track >> RFC that automatic address generation based on an EUI-64 seed MUST NOT >> use g=3D1? > > Nowhere (see above). > >> I think we both agree that being able to guarantee unique addresses on a >> link is pretty fundamental to correct operation of IPv6, especially >> considering the 4rd proposal as documented in your published ID would >> not appear to use DAD, and failing DAD in existing nodes currently >> causes an interface to cease processing IPv6 packets. >> >> The only text I can find is in the Ethernet specific encapsulation >> (RFC2604) which states "The Interface Identifier [AARCH] for an Ethernet >> interface is based on the EUI-64 identifier [EUI64] derived from the >> interface's built-in 48-bit IEEE 802 address." And even then it's not >> specific that if a manufacturer decided to burn in an EUI-48 into their >> NIC with g=3D1 (e.g. for a technology that multicasts by default for >> multi-channel television distribution) and this address is from within >> their IEEE -assigned OUI space, whether that would be illegal for use >> with IETF IPv6 standards. > > Not using a group address at the link layer for an IP unicast =20 > address is obvious enough for not needing an RFC to say it. It is =20 > AFAIK reflected by what manufacturers do. > If you would have evidence of the contrary, I agree that it should =20 > be looked at. > > >> Also not everything is Ethernet. > > Agreed. > (But AFAIK it doesn't change the above.) > > Regards, > RD > > > > From brian.e.carpenter@gmail.com Sun Dec 23 00:14:05 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63EB421F84D8 for ; Sun, 23 Dec 2012 00:14:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.066 X-Spam-Level: X-Spam-Status: No, score=-101.066 tagged_above=-999 required=5 tests=[AWL=-0.458, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, URIBL_RHS_DOB=1.083, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P9OOsDnhLpVB for ; Sun, 23 Dec 2012 00:14:04 -0800 (PST) Received: from mail-wi0-f182.google.com (mail-wi0-f182.google.com [209.85.212.182]) by ietfa.amsl.com (Postfix) with ESMTP id 6840821F8479 for ; Sun, 23 Dec 2012 00:14:04 -0800 (PST) Received: by mail-wi0-f182.google.com with SMTP id hn14so3550319wib.15 for ; Sun, 23 Dec 2012 00:14:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=7T5+kGa8doo4f2JAcZYE2mih6bM4SoIRi9kgPf5LxgE=; b=Gfl3/jDsww8I/Xu3WPM/RF5D5AHdJbdVM0oC6WKr6CDxxjwslZnAAE4BQZajDNhEKT qY1NGgwYaDmROy9S8bVJDsVmp6RSunsgvl7/ZoaVmPYEFZKaHMBMe3gDBUol3rQAhUDi P8p34yHNrSREsp0TQMWdAlgToE77btW1+21qwnFjuu94z2sAfWw4TX8EbwvN8VO9HBNO 7RNpQrPLb6Bj/2OI7GcjvtrmQl9cDKHglQPNmiudPLF6DvIjVj8rMgPkbOhsEFGkuYO2 wSfZi3TLhkm5Hnm0anAEkPI1E0CPLzyjPpJJdenGufCruBWxiy3WK/KKa4LnbKxZN8qO jrqQ== X-Received: by 10.194.235.100 with SMTP id ul4mr31067025wjc.7.1356250443563; Sun, 23 Dec 2012 00:14:03 -0800 (PST) Received: from [192.168.1.65] (host-2-102-216-93.as13285.net. [2.102.216.93]) by mx.google.com with ESMTPS id fv2sm37475744wib.4.2012.12.23.00.14.01 (version=SSLv3 cipher=OTHER); Sun, 23 Dec 2012 00:14:02 -0800 (PST) Message-ID: <50D6BD49.3010101@gmail.com> Date: Sun, 23 Dec 2012 08:14:01 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: v6ops@globis.net Subject: Re: IIDs, u and g bits, and 4rd References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <50D45E33.3080203@globis.net> <68A51AC1-68E4-4D3A-A9F4-A89BA54B7EF9@laposte.net> <20121222214821.58927ftdzj9mv9n9@www.globis.net> In-Reply-To: <20121222214821.58927ftdzj9mv9n9@www.globis.net> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Dec 2012 08:14:05 -0000 Ray, That is about an IEEE EUI-48 and we are talking about an IETF Modified EU= I-64. I think we can say whatever we like about the bits in an IETF Modified EU= I-64. Brian On 22/12/2012 20:48, v6ops@globis.net wrote: > After some searching, I've finally found a reference in an IETF BCP > document that to my mind does demonstrate that u=3D=3D1 && g=3D=3D1 && = unicast > IID =3D "currently unused" >=20 > http://tools.ietf.org/html/rfc5342 >=20 > Quote: "Two bits within the initial 3 octets of an EUI-48 have special > significance: the Group bit (01-00-00) and the Local bit (02-00-00).= > OUIs and IABs are allocated with the Local bit zero and the Group bi= t > unspecified. Multicast identifiers may be constructed by turning on= > the Group bit, and unicast identifiers constructed by leaving the > Group bit zero." >=20 > Hope this helps, > RayH >=20 > Quoting R=C3=A9mi Despr=C3=A9s : >=20 >> Ray, >> Please see inline. >> >> 2012-12-21 =C3=A0 14:03, Ray Hunter : >> ... >>>> The basic question is whether reserving for 4rd a specific 8-bit IID= >>>> is "compatible with the IPv6 addressing architecture" as currently >>>> specified. >>>> Besides some expressed FUD, which isn't illegitimate in face of >>>> anything new, no such conflict has been identified by those who >>>> checked carefully. >>> You may call it FUD, but could you please point the WG members to the= >>> text in either the IPv6 addressing architecture (RFC4291) or SLAAC >>> (RFC4862) that says that the g bit MUST be overridden to 0 before >>> creating an IID (and thus link-local and global IPv6 unicast addresse= s >>> when they are appended to a /64 prefix)? >> >> I hope I never suggested that any RFC says that g must always be set >> to 0. >> On the contrary, g can clearly be either 0 or 1 for local-scoppe IIDs >> (i.e. having u=3D0). >> >> Now, if u=3D1, RFC 4291 specifies in its Annex A one way to build IIDs= , >> and which happens to imply g=3D0 (a consequence of the IEEE rule for >> individual addresses). >> AFAIK, this is so far THE ONLY IID specified by IETF with u=3D1, so >> that u=3Dg=3D1 REMAINS AVAILABLE for new IID formats. >> >> OK? >> (If I missed another RFC specifying an IID format with u=3D1, thank yo= u >> for giving a reference.) >> >>> It may be sensible, but where is it *defined* in an IETF standards tr= ack >>> RFC that automatic address generation based on an EUI-64 seed MUST NO= T >>> use g=3D1? >> >> Nowhere (see above). >> >>> I think we both agree that being able to guarantee unique addresses o= n a >>> link is pretty fundamental to correct operation of IPv6, especially >>> considering the 4rd proposal as documented in your published ID would= >>> not appear to use DAD, and failing DAD in existing nodes currently >>> causes an interface to cease processing IPv6 packets. >>> >>> The only text I can find is in the Ethernet specific encapsulation >>> (RFC2604) which states "The Interface Identifier [AARCH] for an Ether= net >>> interface is based on the EUI-64 identifier [EUI64] derived from the >>> interface's built-in 48-bit IEEE 802 address." And even then it's not= >>> specific that if a manufacturer decided to burn in an EUI-48 into the= ir >>> NIC with g=3D1 (e.g. for a technology that multicasts by default for >>> multi-channel television distribution) and this address is from withi= n >>> their IEEE -assigned OUI space, whether that would be illegal for use= >>> with IETF IPv6 standards. >> >> Not using a group address at the link layer for an IP unicast address >> is obvious enough for not needing an RFC to say it. It is AFAIK >> reflected by what manufacturers do. >> If you would have evidence of the contrary, I agree that it should be >> looked at. >> >> >>> Also not everything is Ethernet. >> >> Agreed. >> (But AFAIK it doesn't change the above.) >> >> Regards, >> RD >> >> >> >> >=20 >=20 >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- >=20 From despres.remi@laposte.net Sun Dec 23 00:42:57 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E00DB21F866D for ; Sun, 23 Dec 2012 00:42:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.409 X-Spam-Level: X-Spam-Status: No, score=-1.409 tagged_above=-999 required=5 tests=[AWL=-0.543, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, URIBL_RHS_DOB=1.083] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mTQnjgNYv8Fj for ; Sun, 23 Dec 2012 00:42:57 -0800 (PST) Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.4]) by ietfa.amsl.com (Postfix) with ESMTP id B5A0221F865B for ; Sun, 23 Dec 2012 00:42:56 -0800 (PST) Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2117.sfr.fr (SMTP Server) with ESMTP id E06AE7000075; Sun, 23 Dec 2012 09:42:54 +0100 (CET) Received: from [192.168.0.21] (unknown [78.193.136.169]) by msfrf2117.sfr.fr (SMTP Server) with ESMTP id 6C4BB700005A; Sun, 23 Dec 2012 09:42:54 +0100 (CET) X-SFR-UUID: 20121223084254443.6C4BB700005A@msfrf2117.sfr.fr Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Subject: Re: IIDs, u and g bits, and 4rd From: =?iso-8859-1?q?R=E9mi_Despr=E9s?= In-Reply-To: <50D6BD49.3010101@gmail.com> Date: Sun, 23 Dec 2012 09:42:55 +0100 Message-Id: References: <50D10150.40801@joelhalpern.com> <8C48B86A895913448548E6D15DA7553B7186B8@xmb-rcd-x09.cisco.com> <50D11315.3070408@joelhalpern.com> <50D18196.2070501@globis.net> <71BF9600-AE01-476C-9805-0B5278E87BB8@laposte.net> <50D19508.4030808@globis.net> <50D1AFC2.5010704@kit.edu> <17B72775-7244-490A-B434-B82325B77BF4@employees.org> <50D1D2DD.7090101@kit.edu> <50D1E424.8030209@gmail.com> <50D2231C.2000809@kit.edu> <8C48B86A895913448548E6D15DA7553B71A759@xmb-rcd-x09.cisco.com> <50D45E33.3080203@globis.net> <68A51AC1-68E4-4D3A-A9F4-A89BA54B7EF9@laposte.net> <20121222214821.58927ftdzj9mv9n9@www.globis.net> <50D6BD49.3010101@gmail.com> To: Brian E Carpenter X-Mailer: Apple Mail (2.1499) Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: v6ops@globis.net, 6man 6man-wg , "Fred Baker \(fred\)" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Dec 2012 08:42:58 -0000 2012-12-23 09:14, Brian E Carpenter : > Ray, >=20 > That is about an IEEE EUI-48 and we are talking about an IETF Modified = EUI-64. True, but the same RFC 5342 says, in its EUI-64 section, "As with EUI-48 = identifiers, the OUI has the same Group/unicast and Local/Global bits." > I think we can say whatever we like about the bits in an IETF Modified = EUI-64. >=20 > Brian >=20 > On 22/12/2012 20:48, v6ops@globis.net wrote: >> After some searching, I've finally found a reference in an IETF BCP >> document that to my mind does demonstrate that u=3D=3D1 && g=3D=3D1 = && unicast >> IID =3D "currently unused" >>=20 >> http://tools.ietf.org/html/rfc5342 >>=20 >> Quote: "Two bits within the initial 3 octets of an EUI-48 have = special >> significance: the Group bit (01-00-00) and the Local bit = (02-00-00). >> OUIs and IABs are allocated with the Local bit zero and the Group = bit >> unspecified. Multicast identifiers may be constructed by turning = on >> the Group bit, and unicast identifiers constructed by leaving the >> Group bit zero." >> Hope this helps, It does (IMHO). Thanks for this reference. Regards, RD >> RayH >>=20 >> Quoting R=E9mi Despr=E9s : >>=20 >>> Ray, >>> Please see inline. >>>=20 >>> 2012-12-21 =E0 14:03, Ray Hunter : >>> ... >>>>> The basic question is whether reserving for 4rd a specific 8-bit = IID >>>>> is "compatible with the IPv6 addressing architecture" as currently >>>>> specified. >>>>> Besides some expressed FUD, which isn't illegitimate in face of >>>>> anything new, no such conflict has been identified by those who >>>>> checked carefully. >>>> You may call it FUD, but could you please point the WG members to = the >>>> text in either the IPv6 addressing architecture (RFC4291) or SLAAC >>>> (RFC4862) that says that the g bit MUST be overridden to 0 before >>>> creating an IID (and thus link-local and global IPv6 unicast = addresses >>>> when they are appended to a /64 prefix)? >>>=20 >>> I hope I never suggested that any RFC says that g must always be set >>> to 0. >>> On the contrary, g can clearly be either 0 or 1 for local-scoppe = IIDs >>> (i.e. having u=3D0). >>>=20 >>> Now, if u=3D1, RFC 4291 specifies in its Annex A one way to build = IIDs, >>> and which happens to imply g=3D0 (a consequence of the IEEE rule for >>> individual addresses). >>> AFAIK, this is so far THE ONLY IID specified by IETF with u=3D1, so >>> that u=3Dg=3D1 REMAINS AVAILABLE for new IID formats. >>>=20 >>> OK? >>> (If I missed another RFC specifying an IID format with u=3D1, thank = you >>> for giving a reference.) >>>=20 >>>> It may be sensible, but where is it *defined* in an IETF standards = track >>>> RFC that automatic address generation based on an EUI-64 seed MUST = NOT >>>> use g=3D1? >>>=20 >>> Nowhere (see above). >>>=20 >>>> I think we both agree that being able to guarantee unique addresses = on a >>>> link is pretty fundamental to correct operation of IPv6, especially >>>> considering the 4rd proposal as documented in your published ID = would >>>> not appear to use DAD, and failing DAD in existing nodes currently >>>> causes an interface to cease processing IPv6 packets. >>>>=20 >>>> The only text I can find is in the Ethernet specific encapsulation >>>> (RFC2604) which states "The Interface Identifier [AARCH] for an = Ethernet >>>> interface is based on the EUI-64 identifier [EUI64] derived from = the >>>> interface's built-in 48-bit IEEE 802 address." And even then it's = not >>>> specific that if a manufacturer decided to burn in an EUI-48 into = their >>>> NIC with g=3D1 (e.g. for a technology that multicasts by default = for >>>> multi-channel television distribution) and this address is from = within >>>> their IEEE -assigned OUI space, whether that would be illegal for = use >>>> with IETF IPv6 standards. >>>=20 >>> Not using a group address at the link layer for an IP unicast = address >>> is obvious enough for not needing an RFC to say it. It is AFAIK >>> reflected by what manufacturers do. >>> If you would have evidence of the contrary, I agree that it should = be >>> looked at. >>>=20 >>>=20 >>>> Also not everything is Ethernet. >>>=20 >>> Agreed. >>> (But AFAIK it doesn't change the above.) >>>=20 >>> Regards, >>> RD >>>=20 >>>=20 >>>=20 >>>=20 >>=20 >>=20 >>=20 >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> ipv6@ietf.org >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >>=20 >=20 From fgont@si6networks.com Mon Dec 24 01:21:42 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D81E221F85AC for ; Mon, 24 Dec 2012 01:21:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.511 X-Spam-Level: X-Spam-Status: No, score=-2.511 tagged_above=-999 required=5 tests=[AWL=0.088, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WpK2xG7lfjb7 for ; Mon, 24 Dec 2012 01:21:41 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id D473321F84C8 for ; Mon, 24 Dec 2012 01:21:39 -0800 (PST) Received: from 187-135-17-190.fibertel.com.ar ([190.17.135.187] helo=[192.168.1.113]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tn4Dc-0005YO-MZ; Mon, 24 Dec 2012 10:21:09 +0100 Message-ID: <50D81CBA.301@si6networks.com> Date: Mon, 24 Dec 2012 06:13:30 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "Rafiee, Hosnieh" Subject: Re: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> <50D3831C.4050301@gont.com.ar> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "bob.hinden@gmail.com" , "ipv6@ietf.org" , Fernando Gont X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Dec 2012 09:21:42 -0000 On 12/21/2012 11:23 AM, Rafiee, Hosnieh wrote: > Fernando, As we have seemed to reach a stalemate in this discussion, > I see no need for continuing it. I tried to explain everything in my > last emails and I see no point in reiterating it here. 90% of your feedback was about how other RFCs could be tweaked/stretched to acommodate stable-privacy-addresses. And that included taking the CGAs RFC, and throwing 80%-90% of it, and include new stuff to make it do something that CGA addresses were not meant to do. IMO, that's not a sensible thing to do. (Not to mention the fact that IIRC there are IPRs on CGAs... s the further we stay from there, the better). > I offered you > a different approach which I feel would allow you to continue with an > RFC. you might want to investigate this. This I-D is a g item, which this wg adopted ~9 months ago. I'm not sure why you could argue that we should follow your proposed approach, instead of the one we got consensus on. Thanks, and Merry Christimas, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From brian.e.carpenter@gmail.com Tue Dec 25 08:21:06 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4534021F883F for ; Tue, 25 Dec 2012 08:21:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.601 X-Spam-Level: X-Spam-Status: No, score=-101.601 tagged_above=-999 required=5 tests=[AWL=0.090, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ag8RupPKzwgp for ; Tue, 25 Dec 2012 08:21:05 -0800 (PST) Received: from mail-wg0-f50.google.com (mail-wg0-f50.google.com [74.125.82.50]) by ietfa.amsl.com (Postfix) with ESMTP id 48A3421F86E8 for ; Tue, 25 Dec 2012 08:21:05 -0800 (PST) Received: by mail-wg0-f50.google.com with SMTP id es5so3669442wgb.5 for ; Tue, 25 Dec 2012 08:21:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=5DmR3JALOrT861pvyklY5lndUPeXRAhvixqk4J0/GrE=; b=j4eG1J+HVuqZZIm8/b/8c4gT0iFgbFmzjACz3NE5AO45D76EZ5yxu1REeqFz34kdn1 orp142B96V7vYNbOBPIzhhBuKJ8I9IF4Z5Rg7mxfqIO7OHGSYiw0peUrJwedGB/XUNyA 3sDpjn+kMxjpnZjwVx/SKgKTu67/QWrBa9jwRloUb9qiNK6ToZY5/6t4g4yLckpGuX5r +mhpmbILSD6+rQwHQIogxFzA8lXRyYc1HdVKuPA7WDOhN5CAnOrffaxE1NM2UWgz5s2u PVQBzd7EMeaxNsD7sY+N2YR6lE89wIqw/9aVSGWKPRnBbnC1MkpJ13HouqXaZl3oly81 iH0Q== X-Received: by 10.194.78.207 with SMTP id d15mr40170651wjx.52.1356452464261; Tue, 25 Dec 2012 08:21:04 -0800 (PST) Received: from [192.168.1.65] (host-2-102-219-147.as13285.net. [2.102.219.147]) by mx.google.com with ESMTPS id dw4sm39321725wib.1.2012.12.25.08.21.01 (version=SSLv3 cipher=OTHER); Tue, 25 Dec 2012 08:21:02 -0800 (PST) Message-ID: <50D9D273.2040008@gmail.com> Date: Tue, 25 Dec 2012 16:21:07 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Fernando Gont Subject: Re: FW: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> In-Reply-To: <50D023F7.5030507@gmail.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Dec 2012 16:21:06 -0000 On 18/12/2012 08:06, Brian E Carpenter wrote: > On 18/12/2012 02:01, Fernando Gont wrote: > ... >> Nobody even suggested that. For instance, if these addresses had a >> lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the >> first place. > > I suggest that you add a discussion of site renumbering considerations. > The problems described in draft-ietf-6renum-static-problem need > to be avoided. I just realised what was bothering me about Fernando's statement. It's the stable-privacy IID that has no specified lifetime. Any IP address formed via SLAAC has the lifetime determined by SLAAC. I'd still like to see a discussion of renumbering, if the prefix itself is withdrawn while the host is connected. Brian From minhong.wu@gmail.com Tue Dec 25 18:53:26 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FAE221F8C32 for ; Tue, 25 Dec 2012 18:53:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.312 X-Spam-Level: * X-Spam-Status: No, score=1.312 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_IMAGE_ONLY_12=2.46, HTML_MESSAGE=0.001, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EV3jOpfEba5f for ; Tue, 25 Dec 2012 18:53:25 -0800 (PST) Received: from mail-ia0-f171.google.com (mail-ia0-f171.google.com [209.85.210.171]) by ietfa.amsl.com (Postfix) with ESMTP id 49FFC21F8C31 for ; Tue, 25 Dec 2012 18:53:25 -0800 (PST) Received: by mail-ia0-f171.google.com with SMTP id k27so6847678iad.30 for ; Tue, 25 Dec 2012 18:53:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=5D3BFiwHQxzLusEOYw7uorrNpdKb4s/PHSRMR06Ae5M=; b=J0Y06ZBbg8RcQl9gsoI8B1DeZHI35wo9Gr4D0iDAYghIBjGzeQvmW8CqSQxmB1+nI3 jbT0027PGTKyHv/tLBuwljOgDK0AaqVZTZUEyUPE4T8laBcf7jWJUaohlhbXVBIVbT4n C2Xxqaa4abLT5GxS1jBDPrMwqcHEMjebDVENlkW9bQfciwscgn9ABusIxijDFjvbfxCl NisZrc5vdpO3hyTM0hznTNR5GF70bBe/XqBqOtb7YgVciSSuR6RCMfkuw6NtoMq4TQWa XRCx/0xp1sgwVc+A1MYBLUp71AbROEzZpF7U9PgATgRJ2FjcT5/F+583CcQ1O2RxwGJ7 1Piw== MIME-Version: 1.0 Received: by 10.42.94.8 with SMTP id z8mr20226289icm.36.1356490404720; Tue, 25 Dec 2012 18:53:24 -0800 (PST) Received: by 10.50.173.34 with HTTP; Tue, 25 Dec 2012 18:53:24 -0800 (PST) Date: Wed, 26 Dec 2012 10:53:24 +0800 Message-ID: Subject: NA question (ICMPv6 option) From: Ming-Hong Wu To: ipv6@ietf.org Content-Type: multipart/related; boundary=20cf30334961b6f11a04d1b88806 X-Mailman-Approved-At: Wed, 26 Dec 2012 12:59:02 -0800 X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Dec 2012 02:53:26 -0000 --20cf30334961b6f11a04d1b88806 Content-Type: multipart/alternative; boundary=20cf30334961b6f11804d1b88805 --20cf30334961b6f11804d1b88805 Content-Type: text/plain; charset=Big5 Content-Transfer-Encoding: quoted-printable Hi all, As we know, when doing ARP in IPv6, said A pings B, B will reply an NA with ICMPv6 option: Target Link-Layer Address. The packet format is as follows: In RFC, it says, Length is in multiple of 8 octets, so in MAC, this seems very OK. Type; 1 byte Length: set to 1 ( meaning 8 bytes in total ) LLA: 6 bytes (MAC) What will happen if LLA isn't 6 bytes, for example a 8-bytes MAC like Zigbee, this will form a total bytes as 10 In this case, how do we set Type and Length ? [image: =A4=BA=B8m=B9=CF=A4=F9 1] --=20 Sincerely, minhong --20cf30334961b6f11804d1b88805 Content-Type: text/html; charset=Big5 Content-Transfer-Encoding: quoted-printable Hi all,

    As we know, when doing ARP in IPv6= , said A pings B, B will reply an NA with ICMPv6 option: Target Link-Layer = Address.

   The packet format is as foll= ows:

    In RFC, it says, Length is in multiple of 8 o= ctets, so in MAC, this seems very OK.
    Type; 1 byte<= /div>
    Length: set to 1 ( meaning 8 bytes in total )
=
    LLA: 6 bytes (MAC)

    What will happen if LLA isn't 6 bytes= , for example a 8-bytes MAC like Zigbee, this will form a total bytes as 10=
    In this case, how do we set Type and Length ? = ;
3D"=A4=BA=B8m=B9=CF=A4=

--
Sincerely,
minhong
--20cf30334961b6f11804d1b88805-- --20cf30334961b6f11a04d1b88806 Content-Type: image/png; name="image.png" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: ii_13bd51e22db83452 iVBORw0KGgoAAAANSUhEUgAAA1AAAACOCAYAAAA/x+nzAAAgAElEQVR4AexdB2BcxdEe9S7LvYMN xvRmCL2aElpCN72HhE6IIaGF0EIvIQWSAEkopti0UEIHU0yH0Aw2rrgXyerlTjq9//tm3969O12T ZUDOvyu9e213dnd2ZnZ2d3ZejocgLjgMOAw4DDgMOAw4DDgMOAw4DDgMOAw4DGTEQG7GGC6Cw4DD gMOAw4DDgMOAw4DDgMOAw4DDgMOAYsANoBwhOAw4DDgMOAw4DDgMOAw4DDgMOAw4DGSJATeAyhJR LprDgMOAw4DDgMOAw4DDgMOAw4DDgMOAG0A5GnAYcBhwGHAYcBhwGHAYcBhwGHAYcBjIEgNuAJUl olw0hwGHAYcBhwGHAYcBhwGHAYcBhwGHATeAcjTgMOAw4DDgMOAw4DDgMOAw4DDgMOAwkCUG3AAq S0S5aA4DDgMOAw4DDgMOAw4DDgMOAw4DDgNuAOVowGHAYcBhwGHAYcBhwGHAYcBhwGHAYSBLDLgB VJaIctEcBhwGHAYcBhwGHAYcBhwGHAYcBhwG3ADK0YDDgMOAw4DDgMOAw4DDgMOAw4DDgMNAlhhw A6gsEeWiOQw4DDgMOAw4DDgMOAw4DDgMOAw4DLgBlKMBhwGHAYcBhwGHAYcBhwGHAYcBhwGHgSwx 4AZQWSLKRXMYcBhwGHAYcBhwGHAYcBhwGHAYcBhwAyhHAw4DDgMOAw4DDgMOAw4DDgMOAw4DDgNZ YiA/y3hponX67+LHYl6SFDldntm0PPvpPZxtRB+Ih3v7KAbCpo3PN/beXTkMOAz0LgxYPre8yzOZ HNzt5etVjNFt3FgNkssAx/8xDLkrh4HejAHwtPbvlv9tWcHDEAPs5xnsW3J2jOc79B3lROCheeZ+ HQYcBtYCDCTyv+m7g2OFGL+vBdVBEXuofRAh/hEVeyoL9Y6CMHhEGBXPeIRCIX3rhVvwoN0/IniG gAg11U3RuBHcdwbSeoDqSUQ6PQpV5uCCw4DDwA+BAcvPiecg54fDbdLRbvhdn3vg3Qh4Xtol1FEN Xm6X6pV4A/ZvQTS+QQz/4DVTked9IaAVJd/bQx+4H4cBh4FegwHLm+bcUF+LknVKuLVZOsNg8gj6 bu2/2yUcatW+vs3n/TBiNjIKzp4VLCoVqCcoGPzwkrBdcBhwGOh9GDB8b/p59N2dHXp0Ug/wxwwt zY3S0Ah5gMJ3gK+V33Hd1GzkQXsH+3zD8r2vfqZEPRxAJVYrXqAlVj7HH17ylJeXp5jJyc+VD958 S366335SkFso+bk5csnFl0u//uWybIVBLuNz4ioeemLe7t5hwGHg+8QA+ZshHV+Gw2EpLARfF+RJ O67boEAJBEGkPSwLFs6VRyc/KFdcdbkcsP9h8tKLc6So0MzqdABqa6Q1DnY0H82Yd7YEWgz34zDg MNALMbBk8WKprKxQdi0sKZL6+nq56YbrZejAQVKQUyzlJaVyzjkTZdGSFVLb1KZcXVwERQq6VpdA ZcDXI3o8/9sFuHvgMOAwsCYxkAs9v76ujl0+jlz597+flL333BO6foEMHjxQTjvtdHnsiaeltTWk bM2BVHFZiRYhEuGQqneHNTyAiq9sVM7hMTPC2MiXfZ2Sj/ETp5dmzZgjx5xwimyy6dby0Ucfy+Qp T8kn//1UDjnkKBk0uEwT2KV9QueMlOcUJ6LCBYeBXo8BDp48MG1zUxNWkTuluKREWpqb5aabbpIN x2wmZ5/1a3nj9aky8+sZUlpUrIvRbZiKDofapCSvqKdL5L0eP66ADgP/yxjwwPPDhg/XKi5fskRW LF0qBx10kNxzzz1yxx1/lA/ff1+efvppqW9cJj/efzeZOWO+xg1jgaoAkymqMORgssSDUtWJUVUO RlU8XHAYcBjo9RjoxCCoT1WVlvPiiy6SO++8U44//nh5/bWX5KWXXpJhw4bJVVddJbNnz5Z2jJ6o 3wfHDb29gjlQblDkngTOBPPQIZICsgB1jhj2d3l5QAmyycnBG9rpMCpehltb5dprbsJM9BL51wP/ 0LTE3lczZssRE46WW2+/Rfbeew8jQ5mEyIX5Ty7SExSLnpu7BrZxmZzdr8OAw0A3MBDkc7J0MOT4 a0ctLS1SXFysPKvvwbN1mJGqW1WDpfoa2XjTdXDdITtue4rcfutdsu9BG0t+McVDh5rw5Qq1KApV ShOKjlzlfcmh+S5LwJmYxNzxyAWHAYeBHxADhl9ZgOqVK2XAgP5alnv//ne58cYb5bEpk2WLcdvA dgcdfn6OrFi1RC6+7ErpP2hTOee8C2TwAPK8gPs7cAZ/d/o8nosVbA1lRtliJBccBhwGehkGDP93 tLcLdQCzAu1JuK1NCjGJquMArE41NnXI0RhQbbH5ZjJx4kTpW1Wher5gv08+rNNs6K1sHiuhLelq nQGGNnYJQZ9gwEPlJycCy2Zcq92zXndIQ22dTJ78tEw4+lQJ4XUTtkNFgKmxG4+RrcZtKY9MeVTC HHBFA2wiCQ96Uw7WBHOS5BmN6i4cBhwGfnAMlJaWSjuFKFadNIBvq/r2lZEjR8pmm2wqebl5UoRJ kFBziwyo6iuw9JP2Nu6LaMPQCIMlJEoUnsEV6R+8gq4ADgMOAykxQL4fMHCgTpZGYMJ76KGHyl13 3YXB0zhpxwQqZleltrpaioqKZP/995eHHnpIqF/RlKepFQqBCw4DDgNrLQbyCwqkoqJCyPseVqN0 6w5N87AKEsJgqry8WI466ih55513pAqDJwa1VKPN31oQuo56VrfQgfraS55zdamIm8g4EMKolBvI 9DoiqyA4W9oisvW2O0sI+0OLYbHHgVQYUffadx+prlkhYTiZiOgGUsxEAZYdPCUbsK1u0V06hwGH ge8OA1SOOJDibFQYzmMiHR2SB9M+TDFhxqQT9tB5UoDBUqgFChUUp8LCAimBOV8H9kmtOQH13dXP QXYYcBhIjoHSMnTqCIWQAVSe+mEwtfPOO0v1smVSgJFSU90q6TtggFSW98fKdJOM2WCUgPVh8tuh e6MgJAxgVSo4q8374DPz2v06DDgM9E4M0FJMFzzQ37Pf575ohiJYplRX18lTTz0lO+ywg06UovvX QKs1Oo7r7eE700/sICqX9nYIHr1ucfCkgygOpjqkdtUqKS3rg9mmHCmA0OTqEw/IWanoUyGffv5f 2EWGkILx0Qg84kam31nxkZ8LDgMOAz3FQHNg5YmzUapIceCE4GFA1daElSkMogb1648VJzA/LfP8 wP0TDORye+gD/FDQWmFrn7mzw4DDQO/CgJ0w4Yyz3RRejEHVAAyayMHlFdjXhB6ei02vvfKu7Lf/ nphUbZM+FfkCZ1w+o4P7c3CTi71PHuLzcMFhwGGg12Mg2oejz29pbIR1iTHh68QgavqXX8qjjz4q 06ZN031RHVDz2eVzqw6DlRfmrnf+fscjECpAHErB4agqQ0YhMoMozDJBuWprbZc+fSAb1akENo4W 4HkIe5vgZaK4tAhIhPtDHUARgYEBlNWe7JmvXXAYcBjoVRgo82eg4wqFGSmGHDB7cZ8qqVlZjZmo arO8DznQ0UZzX6xIYyqaK84uOAw4DKydGOCECWegPa46+xMnrXAow9XnjjaMmgpyVbG69577ZcbX s2TCUYdLn7JioRMJ3xmXX3FOouKgPIjKhMBsy9qJHldqh4H/aQzkYOKEe6Cw8gHT3BIslIC3Ybp7 ySWXyLbbbivnnnOOnH766bLuuuuqY7k8jEhowtfeHsFYgIOC3h2+4wEUKs+BE4RnPkx4NGAEqktM MOWhWQ+P5cvNK0xIC78FUVqUo9+J4pI/zX+Cfi64omXv4RXRBYcBh4FejIHoCpRfRprvUZgGAz31 VVZWmgEUXnCliqFTV6z10v04DDgMrKUYoAKVw8ET+m4qT/n+QCofylQrZqWvueYaefDBB9WUZ/jg wdIcbpVCROeMtAsOAw4Day8G2N+XYw8UA2UA+Z9OJM444wz1wvf4E0/IpEmT5Pzzz5e6+iapbzB7 pTl4CnFfTy8PvjHxd1VKjHAwiPQ64fBBs8C9Kk8444Mv/fv3lxUrl+JRpyxfliuDh2FCCvE4AR1p 75AB/QZC5sKwJ8eORAOKl7205++qCg6uw4DDwGpjwK5A0ZSHkx92cIRZEIyQoCGRtTHlxHcNDQ3S 0TpM8ivB1Pinx73oZPNql8AldBhwGPihMMB9j5UwMWlrasQe5zI14eVAiub8C+bNl1tvvVlmzZ4n L7z4rJT1KZFFy2tkyOD+0tjcKZVljGdL7usAcf39d6y+2Kzd2WHAYWC1MMBVZ7oy154cur86kQAk rjiNHjtWWrGestFmm8mBB+wvH3/8sew1fndpbglJBazPbNzVyvh7SgQJ9d2EqNyLgkdWXDLKwxCJ A6KcAhkydKiMWX9d+eqLj2T4ELxCIkw+SQn2l7859U3ZZaddpSCf34Kh8KTkNKtPugLlmwFFwbsL hwGHgV6JgQ7MQtGUxw6e+EHdCJebudkRoaIKClZHO5b3EcfsOZcwHEg0NsPUB4GGv/bQB/ihNIjT pewLd3YYcBjoNRigEsRBFAdP3P/AiRPuhZg1Y4accMKJUlPdgO9APSv5he3S0dkhwzB4wpdPpAyD pzD2RhpGx9l9B6rXtKkriMNAthjQvt73uteBft/6ROAHdrk/qqgoX8ZuMFoXU2pqanQVqgyDJ4YQ Jl17e1hzA6jAiMlemnOudKqtnRkAQYsCTnidJxX9+mGQ9CN57NH7MTTiE52MlmVLa2Tqq6/JTjvu Ivm5UKr0WzCcbQIsOyXFj+u54DDgMNDrMUDHL1SidNUJpS2AiZ564cN1qLkRS/t50tDarGdWpgmO JQrwFc3SsnIdOPGZCw4DDgNrHwZovmcnTnTiE4rTp59+ql63Dj/8cHnwkcm6P7q8rAgz0O/LFlvu IQsXNKs+UMgNEdarjCoT9t7f+2QVjbUPLa7EDgP/LzBQAPN84//AmObTjC8EmUB9gPujOvC9gi+n z9QP6Q4aNEiq+pRjG0+HtLaGMImC7xn08rCG1sD9mSIVe7Eac4hDkYdPYuEMMz7uCId7QnrkU7M8 fCjr5z8/UU497edyzlnnCwVqbT2+DfXYFBmz3gZy0H77xoBFr7AKxcGTmgLaHKIv3YXDgMNAL8IA lSZdigffU2jSsw6PmpUrZOmy+VJY3I7rkHhQlmbNmyv9Z+RLQ8tiuDjOkXVHj5KqCnrril9tUscS bvlJ8eJ+HAZ6MwbKysv1swVhuNnjfmZ+SPcXZ5wtF008X3bddVf58N13ZciwwbJo5UJ443pfVqxY IUOGmGXoNqxCF8LJhAsOAw4DaycGGmGWX4H9zdXLlsrNN9+s34Tca6+9ZIMx68uCJUvk65nfyr33 3Sdnnnmm7LbbLtLUjG9DwYlMqHXt2ACZAwWnB/M4GMDYjd5Rjw5m3wKHNjbQLaFdXeKzSEdYcrD/ IdffLP7ic8/Jo49MkSf//TRGXIVy5ISj5Oprfi8Dh1QpCBbQ6ktGnOLDvNG5aT5xQlYR5X4cBr5H DFjBkWwaI8afMMvF0n041BrdTNqGjaQ3XPd7uf6GGwULzMrbrc3DISOgbMlyyStqk+13Gif33nuv jBm9kdbIwsuzH8/O4Sw0S6CS5XustcvKYcBhIDMGYhoAP6ZbWloi9fhsySGHHCKfffaZNDbGPpKb h8mTEMx58ktKZdSYreSZ556XUSMqVS7Amt/09eR76hq5dmM5nEvpu8wlcTEcBhwGvm8MxPifpnrt ba3y9ttvy8svv6zOI77+arqEMEbadrud5Ww4kBi/5x4ydMhALWQ7VqWK8nN0FaqkxJjzWf3/+65F pvy+0wEUBRwPDm84iMrlwRuM2TgLDcsdBMxKN7dAacKHM/n5ceyNyqfnPbzhdyD4VXINPgbNUMkN oHysuJPDwA+GAfIoQ7oBFPncbAbt1C+Pt2LwVAzvW8XY7yQ5+Dq5NElzW66U5Q9SGeFxTRy8vmzV EnwbahBuuHrtK1E4uwEUkOCCw0Cvx0BMgdJZ6PIyaYPpDvdC0aV5Y0O9VMKE30iPPJjt5Es+vgXJ aREeFAPwIyXl0BG06+d3oBi4F4oBDyl/fLVAH7kfhwGHgd6CAcP/dB5FE/6CAmPsRt6nSV8bVqTL qqrUiYQHs96iAsPJoXAE/uXyuiyJ9FY+79kASjUoX1BqDc3qE5uQT/laB05414kLKlPFFpF4y9iR cDP2Q8BTB/y+50KCep25KjjzYN7HwRYc+OnWCVrsmcGTVaasgOZT+waX33uw5WDGP2Q5vveKJ8kw iIts8bE6aZJknfWj7zu/rAv2A0W0+DC0awZFwQmKoJUv49qldeNq3MTvWnS7YsQ3dCLBWSj9roN6 1DR5RiKt4G/skcitxAxVicqKfOhHzRhklZUUSAgmf0UFRmEiPJYwhzPRKmsIg0c8z1GqMGgUvUr4 sQVOGSEh/lpxa/CZiIveWnTbBCzfd9sMXeljzePE4p6Q42lxzeeVDOJ3kX8yvNl8sq2jid+Mbz7R jE89ccGMVzt0+3E3nDvb4Z2zoBR9fK5g24MOokgfUAekGIMnOpZSGrEDqE5/AIViJNIR7yknzJnv uXHAxOt67m59kuE+/TNbjvSx1sBbiwhFVPfg2aRMZZIn4MWvhI0XH4epsqUHxv1fCBY/ti4/cP1t w7A4q9H+tg+1YEy/zToG+30C57QGQ/C5xUUSHCjd4L1ajETUCoV7nzsxK0J9HwMCbMVBulzo/oDa 2gYnUnBdbvY96muz2KJ5rmbV/LTf5alnAyiWTBFlimgbwRbYotfer8452DRR+rCNowBNjMS8E/OK ptXmCr4N5hB8ns01a8jDIgGwlGDwyGbov0pVPhstm9ySx8mE5Z7UL5hjsnxiA2aDByrewZqiB7T4 CILCtYeKx5jV4o+RWN4YXNvXxuMzUJYgfCIzBb5NXoRv09o8TX58s3rBwktMHY/3IFaCMX/Y9qey wQER9id2QqihMBEtEIScwGMWH3jYj4DCGzR34EkDnrNuleZhtypAXDGtxRnPtsHy9YpZmmDj2nst TexGr7rCwbq2vmEu2uYsOKvhpzT0FIAdzc+P0M2ThZuYLEZviW/8e0u3UWc4LHHXkAq+jWnq6OMh akbNtwZeYvrE6ia+j4Nrb9KeE8qdCNDPMPjYthrBMnVimdJml/jSB0x5Eh+YS6ydo68t3m3k6Av7 oDtnmwcLQUCsTRJ88JWNgsukIdP7aKIg9vDQmtDz/Rppf1OnnC6Kkp+vLhH7hVHaTaiv/yr5CTCU HwN18PmT+LFtaN/G04bNP5ZfMD6fduKPbqYo1Th04h3/mNK8t2e+MRNBcKzsv01e4oxP2W7B4NMT H9t8+TpKZonxbdpoBPvAnFNFt7FUntlIQRiBcpi4Bn/BKMQSnzI5nxMT4vmez2AJZIS+qUWHn1Cl q2eVaSYkZmNtQhDdCrbsTMQ8bGGyBBJMHkwSrKd5buofjNP12tQjEWYMFmAovwViAE+Bu64gMzwx sA2OM0RNeO3XJ5h5rKCIm6kuFhwmN8HrXOgg/vH1JVyQgzBR4T8zYPl9JsDECrA+Vt6nOW0i/2Sg BU0cbIuYrgdgMT7hTVYhCCuYIL4czDZZiENZsggZnsXnkiFyytcoXbICGuCsYNeD8e1BUWavk8Fh vtGK2ggUvImdISNmG4IdT7ZpksZjgWwj2jMe2QoxjS0zr/1gMWLve3YO5NszQN1KbasVy93iwgpY /42NaM9xudg0SV/GxYy7YfslJrH39hyXIHhjI9hz8F13rv0yrAYtETM+drqTYYq4PYHEtD4eoujg BdsQZ17aA5dmBcruQ9AH3fix4oZnHuyOuZJlBm9cZSafm8PMHsfu8aJLCArfWD1Y3MQQh6G4+iTG XDvu4+oTLXLyp9HXq3VBmN8F3NUqTJaJguVNUf5kRJIl9PhoBGTzs2c8CtKYzcuegwCSxQu+79Z1 IP9upcsmcrLCZ5MuGAc8T4ZW3rcyALc+aA4G+JoqGQ+NirMJgfj+k+Dgwdacqh/bI3ZvIne95xP7 1Ae4Oidm55ffJjclMHc2l4Qo8fRhE3bj3POSGwhdysUyaN+K93ZyBw1h6xErYtKUsderc2VB2vPq wOhuGltXTZccq1oc/bHvcdY+n+fuZtjb4psKxNfRTC7Q+itWPz6z9Wcdgte878qffNolxDO1vuYj e3SJn/aBj/8fUP8y07VpC5n+pZ0FShWLM0AMiegO4pExEu81UcJzfWYjJhBuisdxcC1MA8eUK+7Z WnuTrC7JnvWkghZeYktmCTNFe5nUhG1aMCFalsAD0SwhBB6lvuxW5NRgfvA3tm2CBUn2LPg+3TXb ONYmGjOKqoTn6cB8r+9Mufgbo1Dc+eXm82iIm6mPPl0jF1E0+XIvWBrNoJuTPhZeIl+krI+d0fdr Y9NnW7mu8eNyioGx9UhMkHgfKIetQxBiiuixfLK8UmUawGweNllK+Clf2JS97Ryj6riSJdJyj9s/ 2DrBnL5jhGUL3sYLNHSqEgdLr4Rh0+qLrFLFgfghbmyRA9XtWnobyRYwcB+4tG8zn4M0BQCJeZu+ IQU9Zob+ncZIXV/b3r2z3KuNlMQKd5v/DQD91R/iyeCIPgti4C3+EkvK56neJcb937vv8QCqpyhJ hfpYw6XIIWOEFOnc4zWGATZBV+FK8Kla1c9a245MysMY/RlY3WFGxE1dAD+jVCctQKqX/6+eJ2Ii 1nJ+W/gRrIIaW7KPxfyhEWYNdmw5WLLEemn5bYT/kbOpI2sbUAoSK77adbVw7Xm1AUUTsmhBebHG isocugAL4CRagl54kYiUnhaxCx5WByDbPBgS74Pvenjd0/qvkfr2sA42eYaykPYzRLGQsjonhZX0 YSpw5BHTtubX3gd5x5j5EQLjmDrwKhiHb13oFRjoVvubEjOJtn+UQI31R3x9orGwDxlvdJDNC0M5 8XFT3QVpxl53J30quD/c8zUwgLKISKxEPGLi72JxU+4VSBhJx1Kkv8pMP6lKkh5u7337fdena37m CX+N9TnPph3wzDYIec0GvQbdgBM9RDC26nwZg91F4Q2mZ1TCtbPg9p5nP9hszW2QRmN5mHeJ9xbC 2nJeM+W3K8kxfuTAFrCByPi2oM13MgH7w+BLyQBZ047b0B3bmkdq0ca6mk4A0XoY4uksGbCE9umS IOF9MhB41iVZXLzsYMQl8W+yg5sEfvqEybLSZ6uZLCW8xBcZ4dsIlCf2OhHI932fthxB2cWCBe/Z Lknaphvlj2VNuOlg+e+sWZfGTRd/tQqRfSIWPLFPiMNNOlAsdxCP6eJ+D+9ijZAys4xRMkZICVpf aHI1heIV8UPkdmKnmN0tptEUa/QFYnDfpQFMpO/xt/vVDtJsb6GBYJmyRd7qpEmEbQxe2edb50za 5yOaoQc/Pm7Yv8Y901c+9oNk4D+Kz8ni2Z7j367Ndz1sBSIkeGSPCuI52iDWDlXPPgwV1IAdbBz/ FR/Zw3/kTr0KAySrpJzktyf318Rsasm0FNSWkrpUJRGUHThFiahLisADQk0Vekj+qcCudc8hQi2O tRMlzogb3VYc15QRwZfFdd9Sb6ikoRgW3bQyyqzlp3QItLvKENxDptBJBt/YAWNvqEX3y4AaaJ3M aa2ThbbAfh26X/9Aii4yINDugWjmMoHf10T+XfL4fh+sGVQSZzz8vavJ8GIz0uqlw/Earn+ystgs rMyy93HndAnjIvbsJoH+mGta7ATLnJC2WwXxq0c5pke3EsdHNkVCqTmrpDf8wT1ubS9tOYfZ+lnH A1kr71CroLniWlgH2x5rpE18IJzQ1mAIQy+N2xVfH9An3H+MeGkzJicED034P/WTepo262oGMUhk WVYzAAJtEA+Ryewgia2g94xiGFcjM3EUQHDDuL5N8cMyJAumXMHSMlYUfLIka9OzKP66W+j0+MoE za5OGIWUOCY8riwxYKUiEeF8zG8364dQOWiCa0s+Q2DqpO2RDIamMD9WGY6mtfGjs6WByMjFvubT aJpglLXxmpXqQWWYnIOoPLaNwqJ7USMecvE8Rz0vsV1Ne6Vsqx8Id1p+5J3HwnMQBXfpfMagaPGo CmBVDR0m6c1IA77tabDU68MJDu4DoG1ZAo/0MnWTJcCNSxh8F29iY6PF4Nq4psbBcpg49j1S2rJb IIGz5bHAoxi5dQUaj3smCsYJAuHzWGGDb76T62gx/Dy/x6yT1ydaoCSv4+RXoJ0CUYNPgzQdq5eN kar9LTDyB+KwPNE2iaXVYipQPosVOpaPhdPDcwx0DFDwWUKGsZVkWy5b5ljyaHEtHIVBfCSJG0jW 00ubHeEwp2j7JNQhaT7BxEkjxB7aWkTh41U0CwvHf2BvY6ltudD+Kjfh1IdxPTgK8mUlKYM9AR/z msH0DMw5qFTrq+/5x9Y+MdsgNoIUG4sXxVHs0Q9zldgocXwfKFKifEYFgrUP1jhaNwvbh2lvA1DN JV8oPN+PMu8DkSN4af0Z8DlfqeUQ0sTpeHwRzRzXcSHty7iYa8tNEOc9KLNtRiIoQ9AoiM8GtdH1 TKynxHw0qoXOHG2u9lnsCWHbI/bWXtm0PNsi2Hdr3ZkVsJUIXmdVEWKgB8Hm2wUE2zEFaekKgcW8 WUK2xY499QGmJodojsEi6DV/SFtWCAUjRFP9D12wfraOwetsq+injVKC5RszFImCtl0nO9BoXIvj bPP6LuL55We59JIDvaCbXeap5TReBW35o3XoUZkIJXgkAbY6bZIEjD6ybaMVNTXgr83CliSW3MQx aWNP7ZWC0Rs/XjfbU9PHgFiwAZqJPoq/sAVOkjY+YnfvEupr81EwMXlk8cTzGi9Cd4ucKn6WbWGr yLOtVwxkAj5iL/RK664/jEf+IO8kRAreRhMwbi8JSfsIW2+cbX3sOa7YpIkYXcS96u4NysEsbM7J suO7ZM+7m1U0PoBZmDZvm380TpqLuLiUmUrPsMIAACAASURBVKA5ripoGfmDg/KShw02H3vvzj3E gCI7FYy4ForpNIHofjNpmzF2QopAzAyXtm9RGF15gpOptBLS4JdZT7YAXcDb0tgS+Yni4nXNJ+71 WnCzBmoQcxkarC/lmso2i2CcvYiPVDRWRxu/LA6Gxccy8aliXKMoHGHrKDtX6mpqo888TH/aNQ3b LLzvZKNHg39t8+NzDI29jnA0Rhhf52OsULv5+k1HMHk0VvcvQvjCug3t4Vh++FaYhqYmflMHHwdE vi0t5pr3baHYNe9ThXAA5ooVKzQaP0ocDKEQ2gH5cQGB3FRX26TnYJz4a1M4fhU6FDZt0dBYJ034 8CFDO9sFweYTiQDfSBJh3wn4obb4/DUyfgjVHvaZnk12uIxIw4olgIHvD6D+nMVoAV3YZltVy+8M IYAkQqF07rKNoE+aF9P7AsHDhxp53eq3UV1dHT7sami2FV+9bvPz8IC4VnzA1QbeB/Funyee+WVt G4Jtb/FIOAzEXTjMr3Db2Gz/GK3Enia/svAaGnz8IBrxw3ZnaG6OwWptAd6QrbaVvk32E8AcPgLB UvLjlWBMTUtaDcRAYYEbRGK8EH80xMWwD+PObW2GxolLXhMfFieWtpqb+Y0J1sGcLYAQvmKeXTC0 0MFyRVD3TrSJLxtYQtMuqByeo8mFVNUaSk6/2eUXjIVMO9tBzjja2QYxuMS/bR/LrmHQOsvUgfJF gE0WOYrOIFh7zXp0AqbWB/GZh3/NejFtXTPoCufG5pCE23nlB9KeAsezBIU8FqtTwi1oW34IhP94 oeAtDJyrq+t9OCJNreEoXVAmpAvMgzEs7VJOdpLm8bBu6XI9RwL8Q7qgPLIhG/6zcQmzjfyr9QAM i3BEsLwfAv8RPaRzthLxtSZCGG0SYRv5IUi34bCpjy1OK74WS/ljecCmiTvHtRXSY/WUH6KOCndU trmpEf2YaQvmzFzYn3XgxsrNMPlHmwgv4mCa+MxT8a8N3i5NDexzEQhMg38BGMhOQ1ukDcMsQ28t lDMZQlCm2j6Fdbc4ipBfkaGlkZYW1AnZBsggQw6Uq2Fp74i1JbnKtkfI5/OaGtNHaz+pTZWd6mNl VLC9+GFwS5sdKjSNbA8WtAMVIPYU/f4LXpNnlG8CLwKXQRDR60b0WRoYEQ3cTn7lNWUpTnW4Z5WC cFjGuAd4Hwy2iUPoH3Xfqy9XmttAnwqIOlqLNIJdCZsfOqVg0GyDgLK4tjRg259JyOfEA0WUbesY j7TrM77LJrSROFG2zrChgQ5fd2G+wTwJi/K/vgkfcMd1NuDjyuDfqM5KYLgP+f0bbxksf5u7nvza Enai/zJ9aKPf97dCh9QuAeAZi+0TIi797KJyWT/u5D+MnpiCtGn/yAd4BoCdzU2AkStNIdAXA+WC D4NaToj9KgMETUvIyADzIPCrSn/gHpetoCNV6EBpxA91fer0LCf5yPKSlQlMTX4L8hyfpQtB3Yvx CMumX74cfY0fqIOtyZCdFEmRo22w2GuLveRgc3StD42Cc56uCcOFQH6hvPPWu3Lg/gdIfl6eHpdc fKlU9R8oK1ZU+3jHhz6pUScJXctg4Ct74GVOfr7UVa+Ur6Z/IX/+85/l+BNOloN+eojMmb90jZm/ FpWWasnu/MtfZL/99sMXlFHa3AI56KCfyqOPPi7l5cUgnHYllNLSYjA1SR5fwMGXmbMJhYWFUeXy 22+/lcsvv1zyUa8cmClVVQ2USZMek6IiLLAC7RyLUiBVVZUjTaxTSZUP0+Tip7mlWSorKqW4uFhq a2u1bPX1UJwQjjvuOBkxYoQ88sgjqIPpNIuK8qAIxKCa1mG7xw4Ug6ypgV+ib2+FgoyOvHJQf/Ga 6uWmm26Qovwc6T9gkJQUFEsxaGFw/wFSUlohRx55lLSxo0gWEkiBNGDzUUVBFQI+BX0BxxEwU0lJ qUx64CH5y51/lWEj15H83EIZABp76aWXZNGiRcBbDuKYr9xT6PKeeM8USF+f//e/0reqCm1QIrlo Ex79+vVTGMQtYT322GPaZsQ3BUcbBFBxUWb4zJ8dgS1bC5TQ448/XgYOHCiVlZWy9dZby1/+co+U lhpYtRg4FxcXqOIOdkofDIqkAe3Ny1zGRyIP7T79yxlywE8mSFFesdLzccceJe9OfUPxzLhGT+dV +kB6YsgDXF4TF3ZQxcHgpEmTZOzYsVJRUSE77LCD3HHHHWLpLiv+8Htftj/QSmLmFQ6R2oZGqatv khdffFFuu/oqOeyg/eWKq2+S5bURKQD9ronQUFujJP/ww5Nk7733lrJi0AAQechPD5f//Od55Uua vzU1YfCADPPzWD6j9KWSaRrB/6mthgxEkjD488kpU+THP/4x2qRIKosL5fDDD5UXX3lTysvMR4hL y4rAt7nAX6PplIBr5YxoM1nnLrEcWjBoLYRMsnYY/FI8twWwr1y0aKVsscWPZPxe+8h77/0Xg06R 0pIYzVLOxYXAreVHThIVFRVptCLwYG5BoaxYsFB223VX8Dt4Du9IE2xr8krfvn3lT3/6k8bPhv8Y sZOFhVwpLkE+7GPQ+UYHZhBSJSXlcv+/7pMTTzwR8qZASsDXpOtV9b5iqrmt3s8tt94C+V6pvEiZ zzqQ9/v06a99wKhRo2TatPfJVhqKi4sgB6hAUJE2dBqXc8JAhwoaeT4HcKdOnSrbbrMN5EuhbLLJ JnLAAQfIM/95WRVeNjEnBplPUVGBpilUvKMl0rR/HuSXafuIlFeW6/zJvfdOlk033kzLT7685vc3 Kgy2aWFeIcgxB5Nu7ZKHNouCjqtE7IZyyyqybONVq1Zpey9ZskR+/vOfK22wH/vpT38qCxYsUpmr LBwDkeKKpcHgHwoY6aQA7RpubwONNquu0I6BwbcLvkX/+6hcccXvFVcvvfiW8iPh68RhFhM0lFtG 2ccgFm3GwL7X0iYHfrf/4Q5ZF+1cWFgM/s6XE04+WebMmaNxAyyhGozyDOhd+QMvM+GvpbFR873p 99fJusOHaz+z/qjR8sszz5LFixcrnPJS028RJuFRJLKMyUKwPHxfVFAEBRf9Mnixs7VFCkGfLRhE TX3heVlv/VFy4qlnypwlzVKCPoX6W6OZXwPNILEq1FqTZFlFn1n+Z/tT3peXl2t/wOfkzTz0++Sd wYOHyMyZc/CMfAQ9nbMBaQPyRl9fXIaPvYOXcgEfI2fJxzkCOUbaW7p0qVxx5e9k/fU3ULlcjHdn nXWWLF22kmIiY0BTmYDIdjDGPn/5ggWy7157od+FTMvN1z6/ALhcf/31pRB5lJaWy7777pcWvqrD LEOwHMr/tiVFGiCjQpChf73rL7LnnntKEWhs9Oj15fzzLpCamgZNyuS58OxhU0UnoaKFt22URP5j cLNqxUqVn7lo+7v/9U/Zbfc9oR/lSBXwd+M1V6ksIYTGZr/xIb/a0TZsHd07bXGEexMY25SmDYOx EvSJK6GDsyNjm7z77vty4IEHK7+su+66ct5550V1TqsbEA77hUwhAv5nKIAMqIMeQz2TA+ivv/5a /vGPf8hRRx0lZ5xxhnzzzWzlC/Iz9a92zBIE0Z4pn1Tvk3NZqthJn4PSgSzbRFE7Sca1xKF4QAyl GEU7BjZMFpEZM2bLscefDIX5SLn2uptk3rw58re7/y6HHHqYPPnUE3GVNE1iq827FAiO5tsp82bN kaOPOVY+/OQzGTBoiGyyxVYyH4K6H5Rnzkaww/H7Npa4+wGM1YqR+y/OPEdeeOEF+d0V18hf//pX WbJ0pbzxxhty2WWXydy5c+XiSy9S2BRubMQWCKtSKBTZhEYIUXZkX331lRx77LFy6KGHykcffaSM ++UXM+XK310t9XWNctbZp8jy5XUQRFXoWDworEZxic+DeIsP+fnEAAdz8LUC5iivKIWS2wIloI88 88wzUlfXIMuWrZAWMBCVQxvaIaTYYWgzEOeB5rC3rC+FYW4B0lHD5bR8HhgZtDBv7myZcMJJcs7E yyAt26UMClAhFMx5s2ZJGQYXfaoqTVYWmM3YP7MmfJU6IAZWNPMgqP8MxfziSy+XXffYS+6/7wHJ LywCngZKaWG+DBo0KArCdpacwWMnybZKG1BBdlZM99hjk2WjjTYSba/KKlWQFi5cKKeeeqrikopE WVkJYOZgQTx71rODpwUQ2ueff752QDfffLOMG7etvPLyG3LzTbdiMFYqp/3sWOTdDCW0XIUPZ78L MbCODwntjxWFSih8nONqhqAuDDfJ9C++lCNPvVAOOfZ4ufyKS6S9uUamPvmw/OaiX8t1/3xBNt98 EGakm6VfJeuQAT+IERXofkGoiBC/Tz31lFx55ZV6cCD4ySefyHXXXae0TpxRGc0YAIuBv6Q1ztbz jrOSCxcul60220IHGHtsPUa+WbBE+m0+Xvr1NWVuj4SlAArh6odOtEWpnHTcMfLG1Gly6s9OR/lv UEX27bffQbufpvennX4i2r9UOxzyTEEBFDDQpBHhhmksHQdYSIvVd8AACUFJu+O22+XNt6bK0ROO kH/e/VeZPn26PP/6m/LLX02U2//8V9l9522U/YpRNSomRsFLaOskFWVZdKaR7Qhc6gAXkz0chN92 6x8kD4rNZ198DrqtAFwDgGUNo/2KoDgEeT4JeNBlsb/Kgdqi7jmQAVxN6Q/+uBnyfo/99pF6yM8B qCfpgrOFG264oYKiss3BSLrAdVIqNgXgQSoRDJ2YTdeBAa6p4J540inyJtrjjLPPkYcxCN14s810 INe33wDttzJTsIJN+tO/f3/ZcsvN5e67/6GznhXlfaHY1Oggh/Ka8p8ygYGWCAWFecCjGWjpQ9vw tgdNuC8C/himvfmG/PrCiTLhiCPk+t//HjzeR/7xwMNyw003S0nlABm/y9YQsjHqySi3FCoGXRig FeSFpKllhVRiMu6GG26SBx58TG7/483Sd0CZzJ49R+6992GZ+dVyuePPt0lVv05p62yFIgcZ48PI dKLiTH7nmQNk4od83tzcKK++9jIm+6rkmaefkz322EMmP/qYbLvtVpBjbdKn0tS9a0aka0PbhRiQ k+ebQUP5BRyQl0Dha5Zbb71drr3meiizlTJu6x/JzBkzoMiBFjH/187VYqQp8QcemcpPurTKHAe9 xC1pbv78+eiLD9fBM+Uyy19TVysPPfIwJjcOl0k4b7rJptEpReKLOqEvslRecbKCwTZ7Ik7Jyyce f4JUYXLzb3fepRNn386bL08++aScffbZcuvf/iZDhg5RKcxV7SIANAM9KNQcVKTpv5SPsWpTCrx0 1i+R3LI+gjE4uukcufH63wNmjqxYVSf9BmKAgsCBM/R3f3oKZeZEIyZz0gUOcImrMg5yEDjxN3To ULn66qsxYbaTLF60FLw/EDxRKLPQ72+44frQNapVB6FszRTaSb/QczrA8/n5xZAt2K0DnQTTE5gc fU0uvvhi8FyxnHLKaXLYkUcgHgbCQPKQIQOjOE+XBy2GOOnNhqOS7mHiIAeTVIPXWUeTEf4pkPus p5145urHLbfcIiNHjkwHOv6dJQD7VAkBk819KmTS/Q/KbTffIhdcMFF22nE3DAqXy7XX/l71ir/8 8x7IyCqlMQuCtEoaS6QlC9pSG6gaPFEqFZQxq6rlRsiSB9CnnH3+L2XLm0ZIa22d3Hr7bTJ7yWL5 zU23ydC+FboC2tHULOXQzQLz5wa0X2bDmywNBrf+JDHlJMN7730kxx93MiYC95P33v1Avpk1A3rz f+RXv/oV6nStDMckAQPlNnXeTCEPbdJUX4vy9JUqyBby+QknnCAffvQJ2ngIJgC3wKB8pk7e5iqv xbASu8qUS5r3YLbVDp1exOvwwv7RjnPE6wQ0HvYi0o47PujowDmMoxk3jTjqvVBztXfJJZd5xx13 GvpUvPKjTv9qlrfpZlt7z7/8Gqz+kJTJcYQ7I14o0uExJx5h/BI0D3PRjjPzaIsd7W3eqy/+x5s/ b45Gef3t97wBI8d485Y3eoilcJl89UIEycLe0kVzvHFbb+7dessNXktTsx4N9S1apttv+5O37TY7 eN8uWOK1YZ21obFZy2HrkilfCB+NAuXbw+jcW7lypd7D3Ako7YQVnOf96x+PeiOHj/Xqa1F3FgkI aWwgDsy1Joj+MII9gMVIK+6RDkd9QzXwHcJ1u9fYWO+tWlXt7b77nt799z/oHXLwEd4D9z+sMMOI 0sFiEb4FhWubHemAr22UcAhvNB7aqwnlDy1Hdgu9a397tnfexZeAEjxvFd6z+MydbU1gHWE8DMCP ZmBeazyW3LYj6dHkiqc+DYTqV3mPPfyAV1lS6D391L8h/5BPEynH85oZDWcG4hYDH3OT9S/yA01+ 8sG73uhR63iffPwhUka8SEfYw6yxxzZ65ZVXvHHjxnlz532rtMz8eBh6zi4jCGQPAtp77bXXPMxw efPmzdOEEO4K7L5/TvaGDx3jNTUYfNXXtXmtLcjBZhaXjUUoyw4ssDEjaG/EIR69+oXewTuP8265 6S6PlFGHaOS2hgVfeOeeeqI34fSrvRo8Z/lrVnyLX2IyfYDS4fEgPmzASqq3/fbbe88995wHs0p9 TFrHoMrbfPPNtY5sk/SB9TWN2ICICj1cCyJa5rU11nozZs/zPv96lrd82SIUuNr77cRfeCdPvMpb hrhElaGX9Dmkf9vu1dUs8rbdaox3yw2/A8CwFyFDAnZTQ6t3/30Pe1ttub23cOFKxVcISGtoNbRH rLVGQvrcNhPPscACtnuRtiYDt6XOa6pZDNiQKzzawDV4/9OjT/GOO/tirTuxVdPQos1OfIdDaEG2 sR6Ap/xh2o7tZ/ILe+EWtCjlJmUNo+H0yotvervveoD3+JQXvBEjNvLmzDN1YLnbEIdnwojSmF94 nvjcHjAzU14whcILJFzy9Wxv0yHreJ++8Y4thNJG5vZG+oTANgxBxodDaH3WM0z8kKbDXnPNCu+0 Y4/z9thlZ+/jDz/xmlsM7omnVYhSjyprHRJgZn8b8e686w7vsMMP9Jqa61BFAPRDC4TLhRMv9s49 5wKtI7otj89swKQC+jtgiwjTg+0dPFAXv+1CzQ3exF+e7R171GF4xPqhBp2tXmuoxdv9oCO8Uy64 Itr+K+uaFBzzoRyyMBR2svZn3h7SROZ5s7+Z5m296Y7e689/gnTAjfYN7d4HH37qbbTR3t6Ux95A 8zXhqGUzKu40OUGkCLb/4mvL/48//rgH5dL76qsv0R+uwpt2r7p6hYfBiHfTjbd5NdWgedJh8FAc EQoDX7AE7cBpI8puro0Ea/Zqaxd7c+ZM9z779CMvDGJdsbTO22C9zb1n//2KB1LRurF+nR2EkzlQ /tpgr7F67mGCFLyxDs5vKc7rm1u0VDXoRw44/DBv4uWXeY3oKMmRtoSkN+o0YE89bLXs2eajAPEw BH2BR2czCs7EBBTu9OZPn+mNHrmO99gLL3iUfZTfoAzzut3UqxXlsXBi7U+djUe7/rV2ECGEXe01 V89RmT/xt7/zzj3lcO/Be//kjT/pfG8eY4BWSePMiwcKAdg2R32Q9sfiDZPM3pgxYzxMBkIuIF/U sa622WtuAo4tEnhGoH6TPkS81kb0HZRdrAfP2h+0e7O+meFhYsP7zW8u8WbMnKWoa4E+saK20aM6 QjQSnUiAdLwjzgzegsXgdUNTo+p0mopxO1q86oVzvX333Nmb9MCD3uIly8ArpvjYJgI9r93bfIut vKefeS6uSolw9aXN1p4pA3x9jO1C3XLjset6kx96wGtYBTmN1y31rV71kjqvf//h3nNvve2Rg9j3 1YXZqojCjBiiGSKR1pFvrb5OWdjurWpi3xv2lnz8nrft6OHeGx9/7FWrXEKatlZvwdfTvfXWG+Pd 95+XPe2lW9CnoB8nR5AOFIc2P9z7FIizT1esw7IF+pz8f/VV13lnnnGe6q1aPrzBxKn2+ZisNzIR zxgy9wesV8RrqqsB/aA0nR0qD96Y+pqHFSiF8dBDD6n+Vd/QBN0PeiloikczOmNio6fBn/9IM8LK +Ir7kziWI6iu4HKsHSY3KXLWiOdOLrt1YGVjlUye8rhMOPZEwaSnNMBUkvPHYzceI1uM20YenTwF q0RmnpbjWc4ccGaBIaP5iw7HkR+mF8fvs7cusUNoyTKYBRaVwFysrDSrGQjNLM1PK0bKQzBqvuKK K3R1qARLunpgqZL7SE4++WSdgeFsJGfhOKtCc55czBQlzswny4arG1y54JmzUVwyBiHqGY2vqzvb brsdZveK9Lm19S4vL+KqdsagsxXAKWflaMLHkT8Dl9lvvfVW2QYmI+PHj9c6VNOcCAETiZht8Y3i 9UniTzwdsPwaOJNHky5OBWDmq7GhHua03AkCCwI8KgRcXtMUhYGzOiagHUk7CeYtfGdn80y8hF/M MtI2/pprrpE//OEPstNOOwGPqFtZAepj8rN7FDhjb1d6EqCkvW1DW2y97bby5ZdfytbjxmlcrpwQ FtsKgx416xw1ah3k2YGVvbCuEjFiYMI4ZR52xpOzt7Nnz8by/WgZNWqUxrdmGjRPKMZM0rJlywC7 AzOiRdmt3iiUHFmFdORgYn0lZpu++ORTOe3Un8POGW2tTelJxbChcthhh8lLL78uM+dqQsxMmlkl c5f6lzRGnLAONnBljuUlfXGlk7zAFQcMNnUmj6aqpPe0gQXGARmqUsFQnaGVotIyGbP+KKGJAOFT 3nRiPyRZQpPxZw0ECG25Erx/5plnAlonZJoxC4vATnyXXXaDWQFXb5eBr0BwCDSFYQhh31Q+V3Ay BJpvqXkK+KasTxWnz5ECdcSKbh1m8tkm3y5cJG14zCqVV5TwrZpJRvGtK/98mix06kyzvvGXYlrR 8FxJY50233wL7LdpURlENqZVDa0QU0FLzIGmVeQFmlqEYFLJMHTdUZj1LjEmur6ZDnklKA8p42L8 nwg1/p6r5naFgDJW516BDPLe22+/LXf/7e+yGVadaBqERVlZVl2HFRTD//GQun935hlnqtlpGeiN vMrZdgYojPL666/LPvvsozKKtvfMn4HXLK8pMzEZxGb8fQSmaGEc7D/2339/WG4A+fgPY+a9qLAE Kx1HyLxvF0hto9mfUtmnTNpgX6t9g119SNP+zdxXAVzRRPD555+TgTCn3mabrWFt0Ip2zlPTm223 2VJ+vO/+8uEHH0tjayNKa/Y/NEDWZAqUUUrDiMgyEUe0nvjJT34iG2+8sVSUV8AcMKQrjZdc8hu5 6667JLjPMxN89rXEeQtWoEyA6RFmozn7v+mmm2K1KFf7TpaBq18gR+AO+34hh1nnTIFlNjTlQ0e7 MXB2fNiwYfLAAw+oDKutrVcZx9arRN/JWXCabbNsTA9VT9PZH4LJInuY15r+PgeyMEz+QbtzNWQQ VnIoOykzDcUZyMy/HX0qQzarkAV5MPduIe46pRR4e/WtdyDjX5Wrr/odeL1dqrECRZ5hKIHexFq0 AjwtaOLpljFSB+KAuODBvoDtU0KTWwT2vVyBYmiAEmj7ZH2Q4acYZVJTQh+ZEcDnvuS/YWWOJu7c 7jB27BiFUojOrC+2NrDfralrobVfVkH7c7QDQwv4JQRB2B9t/+Krr8qx2N4wdOjgaFtSFj3//PPa 5rvCTLmngXveadKOSUWpwEptG/iS5enfv4+2/+LFS9HeRkfGOEZXhagnM0TNmM1twi8r76llAZdC P3jvbRmOPn479L8FoK8O7oPCiv7IMRuo/vLxZ1/IkpWQFVzxxUGxTe5RqvbzM/TAJxax2OcGWhwC 00zG5v6n66+/QQ4/7CjV9errsGq3qlG3IVA3e+utt5T3Lb9ZmY7EKUMn2rsM7cw+hv0Hz7vtvrtg kK59Fq2LuDLIvoS0R+sfc9A0N54nU2aS5kVmCZImsUEhQdgjEJllw5Hjr1FjaIkHOLDMbMxsIljK r4a9bTsU0B0g9AWDGjAnzjSt22ufH2Pz8iq1tbbVtIMmc7aNpN0lfmL3phTMBx0ZzN8YaKpABFOZ GjJ4GK0H1abfxF393xIIyyYQ+MGHHKJmKBYS8yqASQEVwflY6h88eDAUaiMkqBwwULnIFDj4IFFY ZZmKht1Xwv0UtL77L/bg8D0JtH//UtQVjN5CU4NM0NFyaB8SrC0LB1F0zkETgQ8//FB+/etfY1l1 qA7OjFmQgcklee0TbOP4WSW2Ah/b8moUbihkhw7ToTA2R2KWQdmNYHx/CNpO3PxbwqXzYPDzslny TGFB/rXPNDobl/bZ6KwnweaakpLKR3+YCTEsWlQD+33uLaKtuGEBMisFEwPxQbxbRtaHKX5of00m LsV5GeytaYfLDo7tzwHP5MnYT4COnIGdcTH2rlRUGHOGunoIpAyBnSDLxvIQ51QEuGeLikgBGp97 fzmwpcJGW+yKCijlQEZhIfYpWIRmyKMfBBzbLRQJyaqV1TIAJgE0QaMFKCxBAQ74hEAdM3o9mPAM hM18h9SsMvvjMoDW12xjBqvQsw7cI8DBEjs5BuKawo6mXOPHj5dX0Tl1J7D8hvZQYCicaACliVIo rWqmBkQRZ8XgJdIK+cZ0O93JpWvcKpT3wEMPRh6wrUYb9INiw1AJkz3SPeulNvKgLcuPLGcBTOOM 3GTsxIAYLCRCOTpNlZdsaNABiJnI0ndVMIt4CHs8uIcMlinY/KuPdcM35YQxmcYzH5Z52/XX0L3B Xgcck3DCgbb8Rx11EHiLHQ15uASDP4M3QiDIjjQaCN8Hs6WphQ6I4USiAQNKKgWqKAMpVsGmnGMn x86OtB6UN8yzazAdNE2LrHy0cepgCvj4lMfUNHzYsBEwmTSytg37OwYPqNI9fC2+gwGbZnXOnHga MXyEJqU5M8tO3p82bZq2/V7YJ8FmKy42g2WaBBXCbJgBKyB6TvdDvBEXI0aMULt+TQcc2fpOe+cd GTVqFPiem78NJCqKxKPliLiGSMiM6jrN1AAAIABJREFUyoeJB7NHKBfr0DQJDVcKU+PmlkYMqAZC jgiUnHHy6aef64bwds9MbJVh712mQJnHdqQMYD2Im6lTp6o81gEn8FeE9x0wpyUdcgKCdQOrYtIh SEHBnEirMQqjOSzpvQOTZWE4RIrATLwASh7NOKkkUYYSNicGmIxmzUWQw4kbz4M52GvK3iAdssw2 cHKGSjL33PSBSWUJBKYd/FGuMV1QCbQltvtGUtXOwtcz8uuLNsAoWgpp0gSZ0gYcUSmkGe9wDETY axEWS2amIzWlmpwF0GQeJvxiBl/MHm4MKjGhffllV8ill18hVcOHYQ/6CsiQfClBBnnAA3UFBlrj Ky8HcJEANnpreZvtQ/nPtqCJO83RyQsMJSX5KhuXYttDZWUp8GbyIT1mDGjXdnbkfmA/ycm5f/3r XzoBzAlr6kXETzPafyUmTxj6VpViAI2LRNfg+jb+x/ASuhXwdinatQh0jOURzZeOHVQPQhKaz2PV DHtf/yMTJkxQ/o+HlOIuKSEYeUx9lXRUBzM17odjn0La5f52TtrSbK0AI0LGLoBcsWVhTqq/EHZS +IzhB+CwA30mtsEJVk/1YT54CmYUEmmslx133FHemvau9B/oywrwbBOcvcQHliDx4GRbnk6QkK/J fyNHrguT560xeW4Gzn1hFkiZsC0moadCLrC+lKHUZ4J8F59X7I7yhYEwaK5K/uRYg23G/oRwiAfS nh2wMz6qjLJlQV+MnCYYSk0TIfMrgkgDxn9FoaYIzrUtihnn2mopxgwUVAysCpl25lvgQSow2/pf jHpDaCzjFQa8zD8wcndCkW9HWQTCo5JD5p09b67UYfUDNLJGAhuPgZ2EesbCPYUAV6CoRO+yyy4y atQo7RS4wZt7bxjY+WYKJAIGO4rmNQmMR319MwTFozJx4oWwXb9B1ltvMOJx0zY6wNJMoydTZsIz ge2xSi/nzp0r9913nyofXImioKPgI/O2thrlrQRSNVVTBPmV9G0FIihZZ6KVDiAcySy0f6/DeHLu gmps9JsnS5bVIj73CSSUPwjUFhnnrtSAiMyUbQIF78P3P1Bb4SFQQFaiQ5iJ5RPWibKfOizrQCak oLeKPjvw4KA1kF3SS7tqNwS23RRoDOywP/vsM531HI8BAUMhlti4AsWDkx9VfczgQV+m+GGHQFgs zx577KHCgI4WaC/O8P77H0PhvVYuuugiGT16kKxc2YQ2MsDoWCR18NtfFS0/PkaVG262sbaJ7fgw BwDlHHQKBZQDt/nzv5WFsFvv16+P7jNKDT/2xgo5PuE1BRr5grNEFJIUejxzNpU0RkWL8UjjGQMm Trj3hdSiJALYnB6jfb7VT4k/Dqq4WkQvU76eqfIkI/wMEdSbKMpaADty7rUj3TU3NGHVJqQzkdzs T963/Mgxh1VyYNio0BM5MZhlBwefoEfCbefqMDoC3n/5/vtyBfbXfPPNN3LCiSdJKXnel2dWRlpv VEF4ya6j7QPc0eHG+4B90YW/0aiUl2wf0iEDi8Pyku+sQww+TxUo46wCgkYmY2inNnzoMBmCAXMj FMEZsFvnYTs60gJlKvPOFGxdYb+BQikFaBLus+FKx8EHH6xKz7y583W/Leu6Cl64OG9SnChjMmWW 5D3lIgfi9MTXgT6OtEt64yz07pgJZZ2o7LAvYOAsPgM7dstjSrh8HSu+xuFPc1297uk4Cvs3Jj1w vzx8/wPwltcojZh8ufueuzFrO032xX4CtkdQHmejfEQz0YS5sil4/58P3IfywkMq0MlVNa40sC24 B5Z7FPv17YcZ6iKpgwZEtsoUWH/KU9tHMj77F5aPuOPeNToa4QQeVyW45+3TTz9VHaC8nLVKH+gE RQuLOuQDRiH2tnLViaETg45W7NdgPzAQEz8cBKghDF8C16hWVsEOVskHbFvWiYFKGWWPpVNOKLD9 F2MibRIm7o7HKhT3zbBuzDtVbdIVI+rlDXlF0Ed14iCvXIS9j1tuuaWurNpKED7pm/1MtiEqYyEb ua920803k58cuA8JVFfY6DWUUrgNsrgJq3wkUWKXinEcwaXIUCdy8I75EG/kV7Yz6YF45Z6YuXMX Qq50aNsTDCdPm7HSkm37sB2MVDL9LumHK4SUvQyUkYsXLwM9F2FCAHuT8aypGXuZ9G36H6ATe/Fo wYAuhH2KP3CiJU0B+uQKDKhQJdStUydG6bSC8pMD6/79jS6QNgci1B6MaK95hqRdd71Rctopp8pl l1yqugxXhRbMWyhnn3kWJmY31z0+lg21XVAWu7BC/koeYhSnk4hg9i2xwvX5Z/9VvC3EHjSGHOhJ ecAj6Y04RdcJXgL20G59KjApEgXDCx5aaJxjgStQReDJqqp+cB7xri5cNEB+US2nakvZyAUFrkbT sQz7GdIMaSPaL8XAdbmydSRvNqN/JH1xZZn6EtOTX8mTfM9A3YttRZ22a2m7gM/4wOI+Y8R0ESwh WmDajyU8VAGqzxDLf9cEJmGF+mIzui/zqKdBaKONOPMBJMB2PG5xyahKsdIkbTbfFbqyemcuOmkz 68BUORjAVcHb0OBBfSlXexzC8CxXidmnZriALcdgsKAIHQIVZLTXRx99jI1/v5JzzjsPMyvc2M+B YQVMo4xiSIbM1IhWONP8gJ0OZ7iIlzfffBPKeqWcctpJst1220B5Xlfx2rdfsTQ2Gfh0JJE62NZC RwBiZWDnyM7o2WefhWAok5/97GcgPrP6RQLMQSMVYSaVUFvbfNi2nRWC+eGj6IGLsJodIT5WnfL6 QKjkoJEhwBoaW+ShBx+Q7cdtIVuvv47sgA58o7EbwFnBJVDWl2FWxOZBmmF5TZnNfIvJg08oJnho UXT9Gk9xpiD5ZuZsDNSq5Fo42uDs6sYbbShDBvSXk084TRbOX6zmCRE0DGfhCsl0gNMORcgOpvQB H2pRrKDg6oZPPFDgK/tilYDpfIU/zOVUBOx/wszKdrqZkQzL9mcbchWqrRlmnIgTBa0p7E8snyLM KnF2CJbNuvmWqwO3336HbAO49Fy06+47QziE4cXqIG33gYPKsXJn4GTV/iiP4pXChslgFnQ+BuQT f3WuPDHlZS0fB4iT//WgHH38CWhMeGrKN58DKC4DvfhtwqSpgu1EKdB4cHaWq2a8pgDkzBHpvC+U J8oJa4JgbRwV9QCeeNYG53I1AilYu4t8jCLg2SkHQpv6cYRuS4n4IuClvErKQb+sMQM/Dmhhmifd /81HR9rBwQWRh3agK+2yPuXy6eefyfWY1OCG3D7kSd/ciYp7B2ZEWdb8HC1xEgwikhIz4gC+Akd9 CrA63I5ZvF+ff4Fsv/NecuONN8lPsLK64XrrAJemCCEoIsWQQQx0FWuCPZs7bWf/jYfOJIc0AJnJ WeEnHp8C72iny8h1hmqMMngQpVlYJwQawTEfG+JcptuH/pk58mBHaBQcpOWEEWRAZT9s9p03R846 71zMrg+QPffcCx3oppgAGgNnDPdCgTJmPpk3EWNVj2XCn/EKaTym0a08EIUZ21pV9A899DDZYOxG sgk66Q1Gj5aH7r9PltY0a9sHqpNQg+xuOStPmUzPW8QhlcQFCxapQ6GDDvqJzqiXqXdErkpTOTSy uQmzu+WQsRossniOUoNpJZptNmGwtBcGSSecdDKO02Xo8BGYDR6u3sQO2u/Hst/47SEjsFpJwkYe 1r24eghXeApYswrmwGv9zAca1kP63XbbR35+ysly8inH6GAJeyng1Gme3HbbbXLxJb/CJGc+6ooB CRwO0alBNoFtz4EiZQD7kPnz5+tKs1VqOPCkoxGa8XFVkvJxwIB+WH0CvWXROFz5N30DS2MpGwnx nwtaq4DJVk31csibZZA1UK7QTNimqMTJmfxMgTLKBsoqlo80bQdRxOwAKMoRLAHTAVIB4kyZ/LjM +HoWJu5OB4/H3GoxLuePefA6vlVsLvHnIji6iKj3Wmx5qK/GgGkj2XHXHeFQ5jV4lTxeBmAC0gzn DDzmZ+FGrX5sXxUH2uCqyHc09dGb02Tq1Dflsgt/hUEn5Bm84tIUtBJWM8RSLupdCCcTDLpwpMIA MGLo0XepfoJ4o4c0rtDQmcpuu+6MibRR8pOfHihz5s4CrYR18pQroOzyCT55FiB06Cr6mRKUTTzI UkSkl9CZ33wFL28HYhLjZZhxb6TeXUeNHCqbYJDw7LOvKn5IlwpXG8LSjT3HasGugxNRtMophSMd yuN8eA1k4ULQX6mcEkSBb8lCqx3WdRAmiGK9eAAeLjVL+yjuxj70z9Rjof/SWyX7y7333Rf0lSPr j11PXnv9FfnFL06XYXCGwR6wxScC1sl6eebKqAoElNEEg0lDkYZO4MtZLSfGbLa5/PjAg+Sg/faX upXLNPpnH3wov/31b+SGG2+UdeGQgeaLqlQBKbCal2IUj8WPD8Rh7DB9EF2WR3RwVoz26cOJYyTk ZBxlI+U8J085mW5XcMlr0cF9fAbxd4hHwcqJkzIoPtQlqIfRCyMHUwoDK012sqoAPJ+Ltiorg0dg QDIYiQfZnTvWdLUDCxBDlU8YwRIhApVY2mIWUtBBzdHv7uQWw4sTPMaAICuwd6NmaYvkkx/Qt7SD JiugM7RjBqQAsxx0c0tJyrw0PxCujpr1ntdUhHigJOQ4VU3ITOzQSEB5aCAIOLiNJpxKmIXlYA9W Xc0y3d9hERCcIUMiVeQ4S5g+YFYYCiVzp6LR3ooZYhSIpmf/fuoZuP8+Qe78y99lzz3Gqy5ImUNT mwLY+7LcdjYyXR5W+WQcjtQ5eGLYbrvtMNPxLpaL/419D0Uy4ahD5cvpXymSytiTIq/CIvwQaXEh 2GK4ZqEiOMCs9DDzCWZtH3rwQbkU3mWABT1ysbaLbacY+MHcDkkYvaAkR5o4BUH4BImzvQzmALmD zgYNS0mE9uSl5GAQ6VXKzrsfICcec4Q8dPcfsCRci060VZ589GH5DCaJF198mQ6wEFtxqmf+qDCg 0II9Kw+MgvOATB20c6mS9hHoJTs74b6+vlUWL1kut/3hjzAXrZWPPvgA1lDt8tG7cGeb2wkF5Gey bFWNrkhQLWhC4ygtAScqJNlIGgweDD64fsABBOMyNsYU0F4oIDjbSGTkYsaRStSzz/5HTjj+JM27 jHSHtxwMcQBYAXphsJCjWUWfEDYUSXgszIdJDr0Wfv31dKw2/V5OOfVnMunhyfLRfz/FHsJHZPiI QXLkhEPAa1hdQRtqRopuIkazCfwEWwczw+BDTiXnoW0jdGdbUikHHHmkXHLxL+SMk38q/bCKNajv MJn05Aty1c23QnFql43XrYS5H+qSQzomvPTB8hZxpKtBiE7hxtWmNihOtNkvLYeSjudwQwNFrURW wZtVLmeh8IzPk52Zd0jMsksxIvCQXPBHbjkyQOcKl8ZFueR77Npoz5P6MJDRVid5fISoELFQEvye B/eJISsBjkT5UA4ZOlC/YtRjEsw2TzjtFLn6xuvlxwftoVRCM0LSKGm1GKaWPOehXBxCsYnsQTgm AK+UZxhkqalLLnka5ogYBF7w60tl6rS35P4HH5Zpr78s55x2ooTrmqDWQonGALFNNRzwKF1mKQwf lgIm7/DrazxjpUFnkSgrPfW4SbPagw85UIpLMRhAGzeDLzm/kpNrFFolccBpbKJZBOGa0tozb/E0 cNgIiMqZcVS4Ht8aO+WcM+RnGEAtwszwgm9hkorMLr3kcrn+uhvloUmPaAO1cbWbDZX2wFQG0oY6 sUcEuZKupK1RWuuWSyNWb3554UVy8IRjZDZcWi9fsUyemTJJJmN1/c677lbFk7TVk9AJuWgHeuz0 Obv52adf4FmVbLDBhnGgOWnPyRNSXv/+nHQBghU98Rgz/ZhpM5oc0sPUlClPyF1/u0duue0WeBR8 V5557hn50x1/luef/LdcceHvpAQ4ysfRsKpFyrnXCtfGEyFhc0BtBtW4QJa2/UEDtNvhnqwCmDfn lMkFE8+QUesPkB9hUi4/D6veu+8NxfYbePu7TLbeZkMpLuwPCNkNnpgXg52M4qCD+4bYr9Kkh/ji qhEDeY0euOilcMWK5ThzJhkviB/FUeCMSwZqBQ2YbaUFCydDSHVgQQRyFVuWvA2PkkB5nz5QyIkg hBzA7kB0DrrNE32c9McOlDjgtdKa1zT9DtEcnZNmUODywcuN9S3y20t/h0mIZ+TPf/o7Vr2qtBTM g+MwLjjblmaajJkzNeQY3BLg3C79h/eXRybfJ++8/ZJc/tsLscJ1jPzhT/co31srnfoGmpCaqkQ4 kcD+Mod0RsT4L8xr/GLw39KAAVGLXH/Ln+SsM8+TjYfDjLoU/WcI/VhRheSG6xSz1HLqoCNgfkYw H4RGxQXkv6kRTmmCHYTCAZZOYp588snqca22ZhUmV1vlTQwGdt1lB1i8HC4zZn6lKkkzJiFZWnvE txOeAt/knxwKUsZCfx/CyqkUeDDTW6RbEO7714PYn/hnyM9mWLjMllNPO17O+MW58sEH3+geSG0X LXe0VfTOkpw9c7Bl+i3EA1HmqFyFlUwZ+hk0Khz94Ixvg8HM/f7775cdd9kVE0JjsV/QaAh+CRW2 tjmXQTljAdrUsmv2qIO2FeuFnH25TRq/7oYb4TV6ALYDQN5Pext7K1+SQw4/SM4+72z5z8vvKlyq qmxhONXFYIL0D8jQNUy7x2pK2PzL0z810Ib8RHn6D5RrbrldRkIu7QKvooWwRtlm593RvyJ/eMwc AVO70TDh87CC3oKJbYoN5sKix6iaT3iQp83RrhvoyJeYYMDEXm4eZHUYvIT0GPPoGb8qIzh4ok7A QHmQcQ80I6Jq3PfGgUaIKy+450SM9cJKOLQ4og7SSt0IIcT6IsABhp579APiXrMh6vkDYH3vHFhp wQ0PeAcL0WcIPOfAp8fnX3zo9eu3jjd3XpO3aDE8UmGnJY8mOHeZ9PAz3q577O81wHNRG2pKbx/m oIe3DvwZLzL0BsKD0DU7/gCGRo5miws8o4e8x598wttg0429+cuXaDr6DUTjIoEJEJgelhHtbYYz M4BXl0Z4x+qkt6w26GxNHtzzettstb33zrSPvTq4e6JTk5Wrmj06lWOKVa0t8M4T8lrgOUbLnCEX DJzUC5uNBkKLei4DYcBaqd2DG0gPMxUaBUSTZR0wLIK3OMzioGngPbC+xvvtpRfpXA7om7yrnIcB HzimwCsu74NnBd5f7rnfa/Hrkk35LU6DeGZB8a0O/LbBKwo9pMCzC72GISxauNwbPmw976MPppu2 ZCbRjNhW8LZjvbzQvRUf6WMSCiLyGp4o6lfWeJuN3ci78tLLY3HwPtIa8trglWXcNj/ynpo61VuB 6PQoQ09GlpZIEuqlSWHzxhITvdi0RY+6Bvqkg3dBeICpra1BO5FKPe+Rhx9T74sLvoX3xVbzjM+J C1MYUDG8H/COR6yKzNDWr8V4SIPXtfZwM9r4l97FF1/qLVu+StO0oUhMB9fPHvZ4eTDBwJ0JUFLs ZfqzzZjef1hHeDJqqV0OJ1/wZtfR6E3//EO0x1zAiHhTnnzKG7Pp1l4z0sCJpbZArGYZsiETBMIf //hHb9999/UwgNK60LtmQws8SyLOQYcc7E169BG9tvhJdSZYFj1KA2y4MOhIvZXRCxUPemlr8i6+ 9Dfehb+9XL0+glvVcxHhki5Nu+AGgTzFI3MAvkI1AE8Kgney9kbv+huv8zbaYgvv6ZdeVfw0oTiW phQif+BFy4M3vo5GyozMudgYUESV17EiGC3fe+9+5O2w/S7w9viajabnrnWIQxLi+PRMz1WtTd48 eFvadsvNlPdhtunBvbsHxyReQb5VzQu8guI+3sw5Rm7G1Sku5/ibIB3SgyhmAjUC64CV+qg3z/q6 FnhQghfGJ5/zRgwf7S1dUm1wQ/ykPeh9q13bktJDvRZ21Hpfvf64NxDWddiYrO1gPW6Stl999VVv 0EbbebPgVipLLomvVPSOOIX3zqZqlV8kQtbp8MOO9s46E973LMpt+TUdH1r+pqcq3qcP9FgJV+ge rA7iIsLBoffow0/DW+KBkJVfx/IjSOTZ1ooL5h0X+JJHoP2jXmsBELjsBP/MnjXT+/LLz7158B5K ECeeerp33q8uUg+MxFl9m/Es1wU83gWDbX/bB5CG4UDCu/POOz0MRBAVnibV82vE+wae0+AMyZsJ r2nMtAHexjTzLpmY8rMELAuPJnhfDJHniVvWJwK/ZGEIKXgsXDpvtrflxht7zz3zH+RpvG/ZdMrm XeADjB/Y15rAtm2BnADN0ruhxR/7LCgtS79d6P38Z2d6Eyac6M1dsFLLtAwuTJGdXhPbqmZY9FPR oV6EvCmDWIS4YgTkMevTVrvECzcsBRB434ys8pqXz/Kef/ZJb4ud9vVmQ6VaCVD0xMZ6KTytGOH7 +FCa01JE5Sowj1qEvSefftTDUMiDVZWHYb2HqW6voqiI9k/YtAv+L6vwtj78yGg/uaoBObH81JPi Co3MEwL5nPIVJrXRN9RPoOSql0jjRQ9eXutr4YXxYO+ss85RkK3wjMDS8ojDj+aHvLWvQju316KZ 4dnXj7hg/mfeby8/y5tw5OHeksU1HppM4cE/m9cUavAu/M0N3tm/vFb1l6ZwdvpXtOBdLiLaV0bg IZWePxct/Nbbcqtx3uQnn9F2IHfzYJuweAZVLLvfJsp3eKN1SX5+5YXnvM03Hut9/D49lpo4mKjX 64m/udQbf8Sp6lWW2FUdhmSFa9W1NL7Ni2d9g7c2BMoSAq9oudq9xd/OVf4nf1KfOebY470rr70e /XNIYVveIbQMzW8zAu+0eR/Dwx+2bYC/Z8LDM8cBHrxvQs4jPPHEE2j/Q/Xa6t/Ue9MHeJoFfdGL sBk8gFKUb1gvyAS8mwr9bvT663nLa4zOxDI3I04tdUDwSLblT1UOM4Ds0RCsO4kxq4HZbgaOgvk9 gPXXH43vznyKpUh+oA+jQwwiMVkvb73xuuy6044w6SvQ0S7f8aBOn4ORo579ZzglDxgFdMCGW0eo iGG940GY63KhgUfTCszymKkrnRXjKJjPsgktsOcsxAi3takRs3+r9LsDNIG7++67dSN2nz7YrIqB b9++9BaEmXDOQmFYwg8S0gNONoGrUJwF4Uwezf4448n9QwwcYdOkgLbjtPtnYFzWgSPxTEH3bbBN MLVcArMMevX6+uvPYVv/mnzxxSfYazNTPzZLL1YXXHCBvDFtmhx3zDG6/MrVxUyBq2acaWR5bNuD sNXbn5pCYAacm69pJ86lb87gDh06SEaPHi1T33gtOkORPB+UmzPO+O9ywEsAPwq45dZbyRB4l7Hv w1hpycUKYDVWnohHekjr8FchSA8MBEeUENfJg42JuVjflIUz31yC5j675ctXChQENVMYhryD+7mI Cxt0ttzeJD3DJASzXfoRYpSFe5DWW2893VfV0ECnEfh8A7wk0fkCTTwtDVtTmNTlj2WmE3m4pTdJ OsNgKAFt5QB3XDnmPqXhI0aoid29996L7xBNULMpWKRi9UijZ/yB8ImavFi+ov0+N8FyozKxyaMc S/DVK1fI57C35v6YUBv2f/nvUp3ZWJxIgtVlLJCXdXYJqbjCikBcW7qzJjSEaYMtF+8pHywu7fuU Z0yj5aBNl6FtLrzwQoGLZp393Hef8TBHwEdQfXPahsYQaA38SZ6h3Rl4NA/mOZmCbUPyEWfkyDM0 f2J9WMbtt99GcagbvgFMV6t8oJnpy48Ivhu14Vj9dsncObPVVn3q1KnqyIN7IUdgz8Kj8ChG8xQ6 lGmoMyvz1lQ4XR3I03b/FB2EqFk2ys060ITHskNlJZxUwERs7NgN8Iz7pNpA25z1zxA47YrA5taW 1mWLXKyg0fECvg0CnqzFygDz4fsSmBBzFYRlqsGMeE8DPyip8hnyizTEvYk8+NFenfA05JcimyAF Jo/CcpIG+H0s4oyBm+QZyP8TJvwEZnZz1QSGiyEMSvo46wqhPkn2E8ubjpYiMJsEQWlEfih0ffA9 9yXQe+g777wnn3/+uZx22mmoI6IA13RSk02wfEVaZR9A+UePYqQl1od7rKxzAuZBpxukk5UrayGf zWx06nygT+AlplP1g7DWEVInEUFZRk8xKCb7SuKQ/GP3IjKKOp9LDVzfsI/gihn7WaZn+XksXbbU pMTK8gyU+xA4kWL/dtvtt2B1kat0kGdYxaUZJVmegaSpbcMfe+B5rCU0WvyPr4cU4btpBbDY0SUZ LDeVDhikdPc5LEYaYOJJWrD5EIA1WTLA+DJZe8HxCPY1jd9jT/nk42nYj/SmvDn1FZn7zdcy/asv 5Fz095vh4+bPTntHv0NECCxrRYVvI86l6QyBbUx5Sv2EgTKYbUEzbsonOmEKg8a5l4hmd+zj6NGw AEscrHqyUsdliTJQJtowct1R6rSJPMh2h5hVWgqjgyiGeTq/n/b19C+hh8HSAZ6LexooT3JB1/Qy ik9yqA5Dh1UMLHvG8mtEYNVfcUo8f7tosQwdMVLG/Wg7jdOEPX35cOjDeOSV996ZpnRMDFAfs0YB pNdYYKvFl8TQCuwQEA8z13HbWYZB3pP/Sffkyfnz5+uHqCnLmQehqWyLZZDyiv0WA3mHK8x0hsM2 pr7CQF6hbGB/M3r0aM3T6kjUYzMF7kMjodRDnwNBKV/RqRvN+Eh73BpAeusHs/FaWCS0QIcuBO5K sSyddR+fphDExXcXom1GqWuyInJs4xGJO+28Hb4WPsmUAfFJR0uW1MIF7St4twOYAykDpaQyZgIf xl5Es+LLwA3Na6iotAKRDMyfjUpb4cZm84wMyOcU9hapFIaxvDRp0h96ZaFQI9PzC9dk3H/+859w ab05FNs+IJYaKDk7yssvv4k8jNe8MjR6O5fXswgsjy0HOyBLVCQK2ylQeeKmfHrj4iCLgTaldpCV Mhva2CJgFK+EF4at+qhRo2Sc59dQAAAgAElEQVSDjTZSl9+Y9dQP3+26687aOXBT5rhx41TwwQu8 3aKSEjxf2EETr6nYs8xcUuXBsnLwRCHORuMAkKYR7733gbaFFURM2zXE2r7rOzwBM5Hhjz32WP2w Md31YurQ4BI0xI6Rez7WHbmOlKITtNDwqYBoR6SCmbQUoKf4vGjm1KEHacoOYNketFnmoBNkpX0l JuGi7Wjbk5MANt94uLzz3wAAv7BOsqfiR4+LlBPGVTkEEMxE2EFxIEic8prtzjwsrXSFHXti6aWk vFJN5uhJTnsu0AaXwbkvjAM4uhdmnS655GIdPGNyR2DObEsZA5jkinxly8Jrlo20ysEZZqV0Eznp gpvJ6f2Rihu9wPEL5lkFoIo4iQa0u5oSwDRQEYe7XJqPAjc8Ep3vkEZt+QiDHXu2g48Q2p28j+/Z qVcszKRpJ4FmVxoeP3489iu8j023RdgLB8UK5eSHt9X0h5llCFQ4GFhuG8hHVJBY7ilTnlRFavTo 0fo6GM/GT3eu9yddGGd3dMjrAM42MA/efvsfQQbsoK5yF0Fh3xGemDbbbAOY9DVjUGIUjwrddJMO unlnzY4trdmJHdaNG8YZGhsxc4ZAD1ak85Ejh2u99GGaH3oRI2/Y5rfyZvDQ4XLwoYepWWI/eESk 8x4GbgL/AKa8w/Hx0WFDB2ZFv2my14kfyugQFREUhHtTaa65wQYbQP6kS5ma84OpKPM5CKTsJf8x cBM+zV24b+gxmItROaVHOPaVYK+oMhTsN4MwE6/Z9+lEGs5UBBnI81TCFixYpHugKPc32WRDrSP5 h0cLXeZmCCw/ZSNlMQP5nxvsuQ+GvF+K/YoMxN3TTz+tvM8Pgw4c2Bc0HlQCNVrSH/JqBwayVnLn 0lSUZlYIHBzmYCDFMrCeDNyPSLM+iMsY4eib1D9WPrCclFVDh2BSDuH5Z56RnXfbVU466SS5669/ VsWwtDRHnn36VRk/fn/EhYkp2sTSp8nB12HYQPEvzGsqFPY55FYrvLtRMYqoaS7qqnts82TRwsXY C7kj9kLjI9cAZSfDCMTIL9IYAFlYSu3xdFeBfU2VMDfddIutZBN4Qtsc7qQHYvKKH7xdb9RoTGQN lh233Ew2Gr2OesllyQ0WMYEGM8xMgTxuBzhUyNlHRXGpiXO1j/lm5kx1YMNBlA5aw/AiHF/UrlkR J9hTmMPPQVDUc3YadVxv9BhVzD/44D3uGsCAHPvHMWG9smalzJ7zDQZq+yttd+potCvY7jxp83Wn POzjwzeu1HEM9bxmTJwFJ5ijTUDgvFHdK1MFDa+T76mrMJRDb+GerAb0AeShvcfvIdhyqyDZ3dl8 lNapTPOJfaj3ZtsLKEz1nFxOAHJiAAcHU+R/6kkUqqT1Sy+9VD/FQHnG+Ygw2oWBsiabYNuefM+2 5wemH3nkER0okY+op1J3pSzgxAoHWqQP1tfSSbp81AMj+KgPJy3IaChzOQfOkDcsPwfqPDc2NsHz Yh/9aDQHUW0wW7Z7/9PBz/QuSzRkApPkvW00/xUrQSUnD3b8HdiDRBeC9ORy+uk/02/OnHX2BYrc uvpVUAqmYAQ8GqPefZIAJlHQfp/qZ+bQAiafMesbFdxl2LxG98kULvw+CJFLBhy1zroqMNgRamfi C1reWwJInVMufOhPk/PP/xVGvZ789oqrVNn54IOPoYAWwNa7Qb2LUIkg0dkyt6BBi9HQmQI7Maal cn7PPfeoR5kdMCtEt48sK8w7tIOjckJPfOywGNjp2vqkzwNeezizhQ0a/OZEITZv2kDGbYCnvy+/ mq6j+blz5+pXnUfCFWVdLWzWh2X2MkP8kVHIDMEB3WuvvQY3ozfLj/fbW3ZGJ1BWVonNvrVY9XpS 7vjDn8C0+0HJXt8WJbszCSwQuIeGnTW9YZ133nn6PYMf/ehH6gXqyiuvlD322ANebDbXbsWmzCcM yggIi3RfcaegZuAAkGnzy4y7YW6Af+mll5SemBcDSB/KLpVyvVVapDMT6+LfPE3xi8QtENKl6ORO P/10OeaYE+B1caIccNDBOptWs2Kp/P3vf1UcH3300VF6JY1TySKNpwvcr9cEJYPflekHpYWOQj78 8AOdoecMzqxZc7D34u9wW14nDz4yxXyrC/UoLvYrkw64/84qLuxAKSAZ2EGzPueeey6cIdwIGthZ Z/Bg2qfOS6hEZxuI1xy0l+5s5ZlFw8B2OXDD2a5O4N6DUxoOLsDSENafgA8REfbro4cPk6EDB0Tx FuT5bPhnBb4rZ5y4jMF+hLt0AmUIDNHnzpkPxS0fs5/LVXkL1oWfPmDfHcFye16GQSInmbjicPXV V6tSQFqmAs2Oh96lJj/6hNK1dZVPZzUMLDs7Lau4BvMPXvfpP0BvuUGYk0E1GPz3hwJF2vlqxtfg lflC75L0zkd+GTV6BGbyWlQmsSsuoeaWIbAsPKxsohyjvOIgeYMxG+tgkHTBwSdX8LjSmQuw1vV3 OvA5cFdN5TLakVF2Y6NmKRTcY084RY445SxpgKJ/zNFHyczpNfLN9E/l5tv/KNf+8d7/Y+89ADTN qgLtWzl0V8fJ0wwwJJUggyJiWEmioAQlqbCCKyIuqIu4RPlBBAlDkgySg7qrIhIE1gUXhZmBYXJO Pd0z0z3TsXIO7z7Pue/96q2vqjpM4uf/ud1fvemGc0+6556b0pY8oHOk7I/6zQ7lhhhJlPE64+yn X/3VXz2mzt9RMyeCcmyn0BEtHXT+7Mwqm5ewS63rbZ761CfjvT09cGaedm48wuDIu3Dm0hfZxKHb LXAJ1199NTts7okO2X7Wp1zGCPGHP/wx1kP9VIxOKla9zO/kQGLyRt/V51pF4iP8Ket45SnhVifL r66teM5znsP64YF07jnfiV0T3//+D0dO09CsHPtxhKzhQCWZf1h3CwvT2UnGsM/h/QeSO6L1shnC AWRFHNp+nXjKaWwsMg38g+le97pn2r7l6F7urLM0Oe18jdc6dSm9gQ19PvCe9wZtHFG/8IKLYl1V R3d/nNt16217MaKVQ7izKSYqLEN9yQ9r/72c0fi/+IvXp8c/9nHpET/9cHaP7Eq7du2MkYHXvP5N 6VP//LW0fbPWEG0QZbjxkrKTcZ5hzqNPTQCWy3LN7KBrZoTJUSrsAPE0ie5wndoN116XvnfplRwB ciKbL53AZhIuyMe7z3qWfmyMowWNZoO6V/3/x3/8xzESoUPA2Ufz0zMY0Nemr/7r/w476YlPfCK6 OI8sxmjHUXDUBe+yNgJdaxWUwY708Ef8bNiSnmPnrJn7/8h9E8cZ45z7PGuILkgvfvGL0+Z6E4EA 7g786ad+bmRx2WWXxsj9S1768hg968G5VGP/DuSeol20bbSttH23I3Pve987vfWtb01/83f/kP7+ S/8aq4Ata7BmM9fa5s7Havprf/q2XMXYnt3ugjgT+vmmm28JHr/k8itiE6QXvOC/hu2k7pYerq8y rWugZujIb6jPNeTVmkHZsa3S/ne06dnPfnbIvyNRdpYNnqHqBl/Pe97zIp584vOxtL89zJRZQod1 IucaWrZ53+Fohw1Dm+OMUXdEVPY59Docc53oCXHzQJy0R2GtNeuz6iUVu3ODkwrbJhaCiFgjkmdn cgKya14WmMvL/FujfvFLX62e859/p9o4tLXatHlr9fzf+31OL94f30p2q6+uH3EOb2v6ay62RGQa pJNnd111bfVzP/XTVV9Xt+qhzP2r+oY20GPorkBo9drXvpZRTGd25oDXJNYalOf1r5Y+Vb3rbX9e bRvqi/UDmwYHKKeTH3l3MI849VU77nFm9ZWvfr0aHmcONSnKnFjXcgnusYZdu3bF3PFHP/rRFQpS PmadQn+FAVqh9OKkdwShlR1et9b9mjcW7kR66DPuHGXmyM5NjVcTnA4/OTFcsetPRf+g6u5lpWbM mdTq764+9bd/H3gvc5PXzLvxUnwW/JarsP3zP/9T9etPe1LkbTnW5yGc4P1v3/iPyjURqxgg8pSw 4h2445fnu66KW/iAK9Msq7Pf9OZqQ19/5VL+k7efUP3l6/8ikjCLm9UrVTXMXF8xF/zkOioCO7nU MFhmKZc1ApS7UP+cqb3/wN76+yJzeg9Xz3/+C6rff8GL8tqcAocZ1sE59GXev59X4rGUY/1mqqlx 5wizDnB6vBofH4XOu6rffu7vgqse5GVbxRlD1Rvf+MaYY+zcYdeYHJXuNRxxKfA5dxhe+OsPvLc6 +YTNwcuDg53VLz7uF6pPf+bjrEt03WJV3bRnf+BoDCYWV747UqDhbH3GgGrdeyNf/MPn/rE66ZST gwce/OMPqd5y9lsrdkGMfFugEXe9e6fil4/sfgiZpBl8PDZcXXP5hVU/+p5GomLL6szDzOvvHNyI 1cVq44EN1eVXX9Nal4PyDTwKm4GOf75Z9+989Vdvf0M1RBu+Zag39EtXT2fVM4BsumK9p7/aesoZ 1d/8/T/F+kfrsMBCyPkpZY4H5C5gXzd/lxnIoVWFw6F65StfWTE615L7BzzgAdX73vsh1guxBoDA 1r9x9c9q2KNAvpRrcDqP8HI9pz7PsV9E9g5X7333eyo8wZTVWZ1wIvSJLQp6qnO+c2GWEXJaybeW un5gVLa1DoKpmxW7SVaPeMQjIv++3g1VV2dfyMzX0JPjY3ltBcZgi7aFxquv4jCvawlqzSPFM67f c63IRLX3lj3Vf3/ln2V6UJfHPfbRFYe3x3oBteMyd64P+/pfWAMxnduxMXTml7/8xYpDratv/p9v B9yr4I+MxL+QNvTX+gWs+MLIWcXmQUF/deWDHvSQ6v3v+2g1Opz5SVVe8NNaP7QiBx8K/esra3Fd +zA5crB6/WtfVW0dGgw+vu997s16nmdWOINor/NagX2HRgJfBfpCnlVFrPGCjgeO7WVsywMcclrt 2HFatDG//MuPjzUSJam4Gxut24DysnXNsNM5CUxOspZ2eGKEqmfczk6NVq979csrTtqohpDHof6e vLaPdX3qza7eoepn/tMTqquuuyXQlf+0Ml9xo04wTE/LLcWOYQ3FyIHq13/tSbQnrBnq6ak2DW6I dt/8B4dOqHoHt1c77vPA6tDEUqW4t2RFEM1S2fdnnvHzdX72XeaR+Wrk4L7qbz/18eqPf//3KlxP sVbplE0bq9966pOriy+6oBoDT7ZfQmf7NcXaIXZPjMCGRWRKBHV75MmFb34WHumXKUL7f5h1nKwX m7ztpuqXf/6RoTdt8zs2bkKPDVQ//+vPqvaTjRpmdAy6sA3v7DDrWOqyeL1mKPpLPNr2M0pTceRG rIWRh7XJ7nnGadXrXvuailkUkcfumzJdhK38VhYDIFEn7EfW7izQNlq9qdHJavTwraDV9TxV9a3/ OK965E//PLLfVfX2d1V/8vKXVldDc+s9iR4emcht2pqAH9NL4ZirJoYPVJ/++Eeqn3nkI6rrb7gx YGajhVgnWGw965HrYBppAlPEj+cVdF/9zGYl1Qfe/17aMHhroC9w9qxnPr266eY9QXNp77pky3K/ gJFR6h+hLquV/zLdC1yWvTQ7Wb38T/4oZMS28pSTt1fP/e3nxFpRZgsE3MLu0l3rMQpDi8NZs49y 1v+j3JdQ7JKvf/3r1TOe8YyWHmP0NtbEyR90tkr0qt1eaH1o3QjAYnVg780AJz4XWb+1q/rxhzwo cCR/4UCOdt9+BY425HJD9d9e9jLWwy0A/x1fA8VyIv3jd10we71oLLLHOcDuP3gL3QLa3qXee139 ztvXU6qXwrjFS+387zL9Yy0IBbz0pu1N6mOx9x2hXHlwfcIp99iRXxPRNNPsNtXLCJE7/dlztSzL t7wydFhgj4Rr/mFnj4lhtkd2TjA72jBnf4iebwfbXDqcataGaaapdNPzdaQ5ntlZSS+Lc7YD5vx6 zb8wVeBGvLT3yAt+yrVkoKfvaCMPERccue6lk3U7zkPu5WRwh287mILi+RrdTIWwR6+3LoajYwg4 lzIx4ZzyHuYR6/NZP4hD8Vpw6oha0B7vPItyGZLmQDuST+MBGfAkZTAyh/d0Ds/Yxo15tKKVexQk 9RpUD1EBi3rQSqDMQju9aJ7N5JQUR5SslzT2rIB55kEvQQdZZY7h/35pxP3SPDvGgBO3wsy7uVBe q2zYxTh1Wcv064wpipuZE+3BfV1sMd46/8q4DfByaqey8TK8ZlzMtFVGqV8uxK2x+1kflDk8w+sX 1wmcxKiRI4WO7ulpcbSn1D2nPvJfNlbJO11SI0dMlFEUUeDHqQLdePj3sSvWSSedGtNRusCLoLrN 8MaN+n5rsNcpRto7CilM0l7ZlqflB+E1OKWrjE4ap4yalJHLdbKO105bKaRfZP1cF7srSkQ6g0yt G07b8JpKsUreRQDdf8zJcGJY2IcZQdrGvHjhkdf9lVHno+ORnbdGDrBVMiPZ7mTGNBEwB59x0CGj UG6pq7d+A1sBS1rWulKmP55YB7XE7o1Oz8x0J8IRgnhUbopuNGrgBx0SgSyLHhVu1+KtDNa4Gern YGZx1s08cqb96lV27gxTTA4xr1yv4Z69t+G9y4ctm8MsHt++eqcnKRhs28y6ce8UHr3hhdZ+kv4G 6wKoQT9syVgfsXkzo+EEz4EZZGSn0DZervlHmoFb6NuBkmK8G9ihMIeqcuYCmfel2/Ydap29V/SA k8PG0GHbNrIOa818j+WlOERX4YHujfUUnaxHO4xM5lG9UrdWToGonEaezJgTg/7WD3pwlY8yklva ARZ40566BiSnddTJdgUVgKx5HhAFrksc4SAgQAvQo7s135ADZ1l7OAP/bt2+LbzHHi/gyHqPyp6A Xym87G7gWNZcxId1/givfFBkvLRXvnN3UWVPXSg/ODVV+S8yuHaWGXYxSH8B3lKioANTgGcZERzE K90btKfyRJolT3f8Fc+qXFPv2895jCexyxz3y7qXh7agPhI+4TQIn/XxMPS5aJsH0ujBQ2kzIzQG 87aMCfaVjgOTSaaIlnJcfxk0UXEJnKPjpEJr1Km5NINTvShPY2KWg43lgW7qtkR72UG7PI+sqs8M NRvE/mfiw3UgHiicA/nICxRZcOD7mVo/hcy4AJ22v3JaHDILZdII972MNgrt1Az1Ru57YexuDRwF J4Z+zGn94JR21+mW0NTxkxOMSjpKRT3d0l7aiyKD+mzQBfEEQV8OQmOoccgdezjgExPRGRtz7BDc zfQ0mxjzc7fMkbEJzl5kZ0SS+d51UG49vzJv8z3WwHlCY6PMDnGUzRkfnG9E+y9UmBAx5a3kZBkU SSy+FtpHwSLRL2uH0lY226US8zBTxz1Cxw2mOe0kcxBt4Dy2bcFbievXwAMvytVS88aUjA7C17Yb /TEbybYKOwD4lMOxCeq1kQNv68wmJmfSRkbwDLlO9Yd1LkVfNdtX5aiMTBd9UGwF49m2Ndu6tbMW l3xxe8vajjLeMOeZbt2KDq4J6y7J2toFfo/V6YXPDccCf0Rc589d3oESGTaeiwyri8hsHEEc/jnw HEKDkLt3fTFiCiJzowvhIawdiPZQGMH3hQVrPdeKukhnpQuFOg3BBli4I0M6TcnpdXEGBWW35+xw pmUXQ66V2aobSQLx6ByG8WYjagcx6Ok2pxo8zGFmOkI/W4MaRjFYh9jq2LCAwuhrKbh4te6fggOv 4rQ0pgW/5Rr5Ymz5fS2ctRfgFsBlqprbXsb8cVjNtT25g8v2paMjNH7ZKJg+DuPJsorweN9UnBle +V+Tk0YEac3w0iCgBDyk00Xk27bVU9BWEEm8Z3HIugglqEasg0aSodS/fBulMxUGIt88dE3FpyFV gqpsHuFyLjWeHuhIw1bypWNhsLEz+NcSFxBOca0hk5UCedbza2XZoqztgDLyFAopZ5kNP0aQshJY s36UBgzSR/yY/4YwBOAjTh/ezPk8TsGwI1v4o3Q6ilIS1iMGhYgw75a84FyFWfrJ+DKpC7xLQ+1q LWXUDtQMfN3v0A5p3Q9hBeg5u1V/m/CU6QLygD/LxDsV03s0qsq0j1WZrPWihn/lJ6nDD2WwpJGJ I4Dd0eL4AEqLbefVNVSKQ0GPDf6V+Zcny5HXqAcdAPxhKOo+pg54zxTlRuM8iw4YYMqT+mkWWFac QXMEBIof8VUaG0suchQyBLHGxqboYHNOC62o/CbfZd7Lutc0mWPzXf4r7HUIHEJfyumpD3qdmMC5 gWFjfvKrUeTrbsooHSicl8jpEYCvs1fnhuEHnZvGVNENpYwCjuVYl9ADdAiONUR+YaECLTowIwL5 wlEnzuRh4/Qh28Ns6rGJdWlq5aPXYD0IxCFONDocOn+sZx9TijwyYTuLlpWPVrO1opCcLudq/Y6t jsp/OH/INBtWGIjkqzyKX1m6GURB6V833+f7TH83ipFPDbmjkadcZRoU43sl/XP6DPWKapUPbVen vbmuxVCcJcG7tW4tuqvJJ8ZtxvG5PciT1sK2yjZYmc7mMG/56JEVoQZolxfQXTpRenCSTdBpGGDK NeTCeQSNzOgoFdEBrI4q9fDIjR74apZz2WJKLvLOrqqhy2g+wp5rZiuG5fNwPwVTYAOB+w56oM14 RFsZ6Fi4LiUceUUxRwxyBGbbL4oO8K2C3TEL6oYxMm01FGv+IoJlGcRb6czpVHRdNp5DfuDSTpS9 Y3QZLp40SkdmqO7I6Jtgr5coo8JJ0dFDOgteJxTa+lnZ07bTMC584Psmf/hcjOsj4sWI1MJjQaxH Z70hxDSbkph/Z2ODLtuU6KSRAvMlgqxnupr188vj/iufLYXcdNFZ89wlDwRWt4vfWTohfXoYCDUF al7L6eJD0LR8jTdr/im6MusY+Fm5RZ9SRKsOHklSzqMSN9HBBxeWLi6FyVDuLZWpCqSBgEUJA4/8 4JlXhtJum8YObX/NB+FEgceOBX/KsUGbusDvs3nLH7ZtxW4pdkAp13jrB9tdj0aB66m7mzkxphTl KIDizKBunEP+haMbW0l2naHXOcg01COwbqQ92p87pwMldo8KSSFfO0i+P1IGhbnKdWV6UzZDeweq +a3A2ExzVLBXZND+IOzNegGjHiNDybguTCW3Vljn9VpR75p3K5DRrEvzXgqpNVeHOw7/ynKWVU1d lvCtKqSRpuB7NWhHf0O+tAetUIqRguU+WNMYrQ5UK3rchEcp7gp/1tcmXv3eytAH4fdn3JKO21bI 9bOzlj2TrQ/crBW/+f0475tw1nVs5+kcZe1yV1TrOIu+S6IHv4C/ALrGcQNIjeiM3Vy6tWp8Pk6Q zKk9t9xYmVFd+oo8V+mn2194zrfQ76j5NOEs0Hldm6458+XvpZjl9/nuqMW2J7iTnwtcy55dCmgZ mtS5FSHPERYLvipw3zH6W5l2vLbhs1mY0SM007TFL1GO9Vrq14xfKtd8t+Z9E472CCvhWqsYUxxz Ue3ZH9Oz8K2Eoz3ZSrjUl4ZGvWwffFmu3hqlDi15PGpFGnlG2vJcw7dG/mtBv1xeSe9ViNoBaORb w7riUieJIxzrDyWHfMZb/bLZPhKhVff6pqTJsW0N6x5GyBCdQtr9AqlxdDL6y6MofsEuWJmJX++k QP4NvK6ZaeBBOGoonVRpCJh8l/HYqnd8XP5zx0Gvy21leQz6v9XOmqimcyv98d0067VclyZMy/Uv b01TMJOxVb40y14JV7OcZqzlMptv7677AnepTbPcuwf+ta3iJhxHuy+Y9XpUbK6sVM66IKFkdNRM VkBk7BUpmy9WxLwrHtaqT1s5x1edtsR382Moq0KP9rLXYtL2OHf0eQ183sX4a2a/Rul3tEJHT1+Y 15g1MMuvlpVx/tSAsERqVuDopR05Rov+uZxSRHuiO7PI9rzvtOcAsoGvyDg/N9/esbo0c1oNefvX KMs/6yF2dRY/fHMEDIjGllZqTYvJU2L8lp0PGoXLMcvdHRt5Wg+odooHEOtFvnPeFwbOFT7OPIV3 PX1/nFndqdGbMJX7NXDbVubyNLhG3IKftrh3x2MDiihuffm/nUCSrEnBXF7BV1sN24vgOTpz7XwT 8Uoeq6dot9eprZTjfrR4w0rwSvl+qO8bHamSJtKZML7Z8VuZyzJvN6EueTffmdOdEVbmufKphq4d xDtY7OrsSv1WZyw85av3q9OuTvPDN0fGwB3vQB0x/0IuIzXYqUhAULBJ1rZ4Pioc64WaA1YxwqoX KzM4yueVkY/61AbfOpmv8/qoud/lEY4RsFXRVtDwjkDZhr9jyqqRZhVgx5RBK1Ijp7UVSiv/HLP1 GDk0+buV5Z1wk8tq5u6bVtkF93dCSauzWO60tZdv3IChWX4LqNU5HdObZl7HlKAtUnv58dyk6sr4 7dFXfr09T6vLOmoZR41we+C4q9JkLlgN8up631UQHCnfZfapPed5klT40YU5pkxpNsQ8p+XRxzwS QOfqGKfQrA/D7cHD7UmzPgTxZTWBjpKgfD42WG539qWY23VtaiAzaMAq4QFqNVyNOM0yGxEbt80Y d+CeMhuZNm7XzjMiCKf1Wwfe8v6omZnDWjJa59uWPh6XhSbDV+Myy0KRIz+5zAIZao/vp7Z8fXV7 Q8HCiiyjzJr+foiPa+CqwB6FNwE1rc81boodGR0y35PXirSRwe34sxqmFfVYM8eVaZpQrxl9nZfL 5dR4WhFvZRnlk29Xx147bknjdbms5tsfnPtV8N8ptF9feu8EzKwmU2Ta5Bbvg7ElYPnVRfu+MH39 atWlmdeqjz98cUwYCBo0Yx5JmNpouoorm/n8YNxbhfI7fojbePa4MxCfbTit81jrbbB7O8+3Px83 DI0EIKJkt1b5Qe4SoSRrfy7vf3j9/zgG1ufd70vFHYGKUag8CUkzsMWaZXSq+S4m7zaNxe8L1D8s VCK1CNVEx1oaaK13zTS34z6U2u1I10pypPayFWmdm2b7cZz51HB7Kb91Cln9+ngSFPqU6+rcbveb drLHc+tlg9ZrvPOrvwbOCLcAACAASURBVOWlEY34KyBqJa7fKvPNifsrIt/tD+3QHQ8Atzdt4brj 5LjjAe3/N3Hv4hGoY8Tj0TpKR8qmcFGtUErU8ro8t31eVtqrPpQUx3Y9ajntBnJ7Xe9g+ccG5fqx lhVQjnNUcJoV9v6oCdYv+8hf2hXiXSXud1c5R6qtMBxv/Ugj7tv56UjFHOe3NcmrB88PrY/HC/dx AnHU6IV+GQ7BaoZV7FkilKkhx433Zu5HUCOryinpVsK5Cr4S7W66FjBLcevDU/BcYnr9ftM+G1HC zPLhGrDsj9dMynXxffm2TK+4i44V31prpuos7pTLcpk5u7sKV+3lFOCPrbxjp3/Jt728YyunpL7T r6UCbYxbXpfylj834Fd3Ln8oUY/rWspZlY0fQlfW+GmLEJ9LSS041sdlKack8drKstkGtF42Y65z b9w1Ms6wFTx5Ba5mvOMpY52i77TXwJVtmAzv8hozSyh1YFpvrlT9jvfN+twBYEo2q1FSyi6Zr6Rt SVe+3rHryrzXyms1fMuxmrAcKV5OceR6Led699w1YbfEo8LfTOD9URMcuR5Hx/yR0x/f1ybwx5fy h7Hvdgzcvaxxt1dvvQJ/kHj0LoJVFXkXZb0e1n/4/gcSA3JKe4N691VkFZ+67R3Bv+WXX/iU4VwJ 7cqniPvDPz84GMjk/j7Ce4Q2sjhovJb7NkgD/DtQhzXTHzE/+b3xM275tW7b6lS+l2ujDr66o+HO k8D2nNrqsQLQOwPyFRn+gDw0aN/igx8Q0P9fCuZdPAIlwdZh5OPl4TvYU7y78F+qtbw7W1vJRZk2 vUZtUb6fj8vwfz+huJvKLpUtxcljhT41364VpUS/q6+l7O8n6wvDmuWLp5bn9K7GxNHzL7hqj1ne r6rDuhVrz+F2Prf4qD19aejX0Yvt0e+WZ2HJcK3GV4G3HZC7GoHt5R3fs1CXurSnzO/Xq1d77B+E Z+vSzk+lfu3vj1yfgrNV8lLzx5FT39lf14fmjpcEfqKSx4efo5db8N4es7xfpzyruhrpDR4u6XO+ PuWc6vya6Rv3BYNFvnMRJa91YGmCrh5bWh1vOd9m5Dv7vpSyBmLWKSpGo0i2nKKuaysrnxvvliOu k+Nd+7qG5HYV0qRKqV57RsvVa9S51N/IbaPvJZ/ldCXHOwJpyeOuv64Lf/lwJ4NwF3egJHGDzFKl VKRQqDyXipX35XmtazON8ddI4yujtX/KSdnutPlhhSGYGaVsd1ymhvhsiGRrZRxfm38a9fZ1pGkw YTGwVpTdTL82/CtjHO3J8trgOFoSvi/vZmTkNdI3cVfya+GkUccVdcvzjtu3Q29C2MJt5FmXu1ZZ fs+EBNhGeSVd+RbPjT8r8iKdz8YtsJerSer7EsVX64eCo3IlJgkji2aeKzIwrrAX+Btp63grwOVd dMoDIOPW8ev65/OpOAVFnJfAN05JiJgdZX0IClOQ3KtsRf4rHtq+lfya10LbVvn1gYR1OXFwrWVE /T33LcOVp1hY5waczXyP877ku16ytmrligmT5TdpE+94HQkaNCnvTdL6VuDPdW5GMVqEJh180Uqb P0v3DFuebOZ2wYZMl5y/+ZaSWtt0NzY9iHLJJOcTyRt/Sh0ar1bcls1CjkYHvxcomte1S7WINfHB +zVTlMgNPjIPwwonVMFnxCuwN/MEzjoPy1nmb9/nkv1rbfKTd+I8b2/OTS6vVY76yjj8gLFMdY60 wlyXlePwvCqY9hhCq/45bnksKTOsPDU/1C8DjIh4pLIKzUqOy9dmlstvj+OuhSvT1PhqvVPm5fGm iVF4soa3DQAfC7Stegc4nhppXqSrs1iss5DOK3AT8Y/lTwNnKwtbJztlvUBXroWXmuU18m2+brtv K7Lt61qPK/NtPZlRMEKNGPFfMud91r9QpzaUOV2NBPXaP9/V75dLNHGDZs38liPVd1kOs07P9PdA a0PZeEK5KdjKYPnkr1GGCdYKJliHR9peE9H8aqzkguoc29/Vz34t+R9Vluus2i6B9rZ3+bGmxZrf 8stSdDNKA7J4XXJpL8d4K6q4xnMz35bQ+LJV1/ZcV6ZY9RR8UCBa9fWYXpQSvTZDe12Wv1HeEfgv t/3C1I655RyOeEfB7bAYf014CvCtDDMubmfJrVxW3lhI/RsZmeBhOXvPZVvEuFpC2iqI6I9zGDO0 QOxBoxPTs2mGgzs922CR71MLk4g6ByB2LHBY3lxa9PRrA3ktcOq6ZXGeWCkyDrLLzLIUh955uKUf ZzmV2iv/Q3SBIk0sjPPsqfX5JHa/edo6J4txN58OT07XSw3n08ToQWOmGSItctCquUxNejCjeXMi OM/5R0oOvZvmwDFDPaMkDqDMVPEwUnPyW4Zmft64wMfPg748aMwv4su33k9y8J/X2jaNl7OcFO/L eF/H8yA/T11e9LS7Ok8PMC73Rp6Z4rTxOpGnTRs8zd0wO8fBeN7wODdjOugnA/Ob4cDAeY+8JkKd nJPJOQiNWHPz/K1fLnAY38IiZQBHhPoTuRNlLs1Cwml+UpKY/OPUae6nKdvDLmuwW5Wf45BIs6qz z3jzgbA0P53mF2b4Zg6L4Gyew+OW61cSLZBHufdQUjO3a7FcmADx88C3GhcSLw4TpKzDhw4FXsRN oWkNAnF8yeG/nNAnTT0E0G+zHJIc9CPRPAc9Ts9mnuBTpFlaMBanr3NquK3czOxUzX+gTjSA6oU5 4TEB8lLNcaDxYR40TCiL91UcULeUhscO8GYmsBmFC5O4JK6lBiVkKHj7wMRIAkNpXP4hhEwF0ZUl DnbknVLrgYwhvRTktRxOPI2MGmOWE+qNPAcNNG7mzN8AD47t2xdgC8Y0J80LhzBwWHzcB54t3wgG 8llQLiwcHHrAtaFcA0YRX3/3qtzZOGfK56zACvwADyBTS/B9NniEC5zVB2GGfJHOtKFrxC0xFGsP wLQui/Dq7BwHCxOCjY1ANp4zmUucRf7H46C+qamJKGeGg4jLgYEeABuwUobXSWUuQj5I0Fs/zc+M k6nfoAuEssSMRXheXuZBbEex6qWKp2C4DLOHQs548DNxJqYm0S3GXkAH1TkRd7HBd1m/zBOfwznD qxwUjkPGwzgFKV79efCwdF4MJW28/C7qxn3mEvheulFOFXBBb8obp77WYxaEepU31DHCqYxMT0+S TlhzbReUWWo5NTNZx89f5jioc35+kkTEEwlkMK+8EEsxlf2jo8S9MrM4L1Y5B5Sfx0eGiWbnqbM3 dLD6xXfZdCNWR19CtYZOUiNEqV4ElALnF6YoLz/KqnPQwMPRc0V8I1DgXzzDb+LXwxs9cPrIQV0v naiLZdW/LNngEP0d5YG3ECu+L0lsYJul3TH+LMyRQaVNgXenOcAz04TPwCH/m2ABHe11Fv6U9w0e KmkaD8sVh8b350HjgUFoZF0KP4+NKcOZ5oX+0VbyNsguIOBC/aveUlSVIyiar8iDzwEHB9BGG2q5 VCWFHjR+lmGhnrOsRai0wGGw0My0SGSOQV6Ttx0C6/A+v9FJeD2TvQUvr8Et6aiDn/wtt7sdUW/r E+0NeYurzL/iNEM6BR9niAPtcR9ygzxoc8SoDHp/bga4BJ6funF6SvlqvYr7BdLMgmthKO1+8I3I IkR+dR3iBX8y7jmkOfQL9FbfAZCdFUnrVfhE4ag07hA/0EBbxw98j8PRLYLfYaIYNwTHDJZmoRcY 7CSypKX8jCsPF1WCeoDLN3zk/xywz8g/EUnekFI5TI6NBFDV5AS8C6y+5kqF4WPaBm7lZ1/lu3kO 0h2Op/Y/8qB0i3L4sySjklK8mX6KdmeCA1itooe5Gi+qQ4+aY10juxloknWhFUPnwnPWYTr4vw8Z 5YBo0nm4csK2zDCZIz8L4TcyIs/n+3JRFufhP+kpnxiUIYOHzCr7vp1TH3BViq1/uarPikwpI6bV 5jI3IdVela72cZQr35lf5EUCrxXt6yI2cigGATJCCd7XP22XoiuXP2f4tEcWQcAs/DeN3bHSfuVd 034lv2jzpTsQaSMY5qmLoeiU9nvBsC3wGnY/dwswcLGLgDzq41V9lKUOXNl2kkh9FfRQRlT2/I/z susqi798Ti5tFGlKuzWHDe+zQVjLYbrSu/yCk3gmi4BhBgZS8k2lSSzLhX1mhPLjVj0h7jL1jc9h xq8j8O32ByhdkWlHJxvGqnRVMECxYcMAyJVMeCmEDIA9MThOyg5gUUe8W6DRm5ycTf393amH0+c7 OSlcAGcXpjnFuQ/nYU7RRWRPMs5YkJRmyBMyM4FFvgTDxGcKM15vL6eS6w0BAbPTntrcFQLX2WV+ MNeiBliVuuitdXUjUORvnA6Nf+HsHbAE9NJY6qcuCykLXW8uJHV5WjcRejkNWjJMosgts4vTyf1J 7FmMkJ4e6mMHJAwZSoYZuilHodYw7O3xtHcy8j/wKlQ95D1Lp6QLWKdpsHvMl6rIR3Mo6W7LhumE 13fTpNHANV0XdMgO13zqt2WJhEWMGZVKf/8gz/GK07o7wAk0IkonibqBOxQW3NnN6c16pzydvotv nnrdDRyG8YlxYPK07y7SUSfqKqwGqE9a7jVa6OR21idxAzlYZzSkk5OgqUsoFgzCURqIfvLq5eTw HsssDAvPzGBke7p3FyhSYMSdCmQOA6yb5w7rSxI7YaFg+d7TTf7gWwWU8YBA0BnspJIdwNUtvYBZ Q1ve8scL4LW+XONnTeAw7j3Ne8PGDSHY8tWC+OIqPPKvHO3/SAGReoDXoLKQFlbH+D3BJ9SD9Ao2 KOC9eDWxPAE+OzlZ3MaRN2YjHmU3cSxY/f0of2RsHgkXL6YHK6m3D9hJNQlvLM31UxaPQYMQcR7I a2qUTDFI+jaC+440AF+KQ+ukUlfReGK3IZRO/c2KWoong/f29ub68aKTulbUsRv4/Vd1QIsg0nzq 27CRZ04CF+benOfYPBXhuS96JBCX+vq8wHPwUV22FZWW5h/wECfrAHHQkcbGx+Ok+WmMhl5OWY9G BfjEpxl2g/Mu0oo38bqABTxJw97XPxDy2Q1/GKYxSHs5iVy+N4jKSAOuxWknhkUndfI7LIp8WWc+ deAwIW5P72DgLtM7KzjLFQb1nIRX/3ULSwe6iLTiVRk3vZ08y092EOD9JXSQJkk/v0SntBP8LBIR 0YrQg6MgWlb0a9AZ+RL35i/Eyquy7kjjPHVWRyyB267QL8Qgrw5o0tQvyv8cOip0JZUX7zoYrJM8 Kv4LzBp/4i7khzouom8XUXJR/8AZsKIIuoCrl9PehSl4ixvtoaVoeOBzEKGesuxQoHbaiNDRDb6p s0aq2Az2hQahS1QYVeajLph2jt5SB3oE1ZRUL6K9E5g7a9pGx5nOTieWyOjoKHIzgJz1Zr6QPuQv TJPoly7lQHkR09JnARlEv3R0oWf50NXRGzb+QiftHHn2oIw6rRzth/baPLpXvaJ+ke6dNf+JgMOH x9LAgF05AtVdDvKy+h09PzqBXqUjRwfYNmUJOulkpEY5P+5MGiPL3HQrT1zV+7kt45Fye0LPgyYN PGVKuQVvnVE58C5+iDevhUAZXSAuZIy8lCt//f39QW9pLV19Z5APpOXExETwhXpA3AilUeSzji46 /MhUTyc0pIiqS22PsVfJ+/IW+OvgO3W2DTCxZAVxpMchgY6uKHOJ/My3p2b8aD/Ah+2FHNAxR9u+ AX0MzTTMN9rOc1U/Ca88bBA+n62L8Icu4X2JY32yvPpOAz0+pvHxMfi3F0Md+YQuJYgJo2Q7JOPF b7aLc5TdBezyddCBz6Pj2hfgmbpLn9ADwGFZYIxf1qsykZ1R24rZcHpl/WGHXBizfgngWvDyOkL4 OMBDB7Tv7UB70KnprNAglD+H/WQ9ojcDfy5SFUvts+NjhwIaQrTgrSVoYxtgeQt0SqZwgABxqy4W FnIif0pcYJeXbIvk+155chpDHF6fhbbq5H7/SFtgtb0RY5MT1HMJewKYu7sHyCO3j3yinYWHiDs4 MJj5IrAtiPK7qdFVwNmlnVDbIcIQnQ2EQVgM4rsH3s72SE4nT4hfbTHlSpz7xVv1ZYVzvoO2V9si 26/z2K8bsv7uNj6BBIKRZVwbMtepouwu6YTtajtvGMe51iHPA5xtSNY41BkYAJmQU3eTdwUyZtBn s/C/9o92rLwo/Mq4HTaVoXwr9N3KtJnwbfLw4dQ7iD1nnrJII2T90pWmaC97aCenJtUvyjQ0Nj5X 24Ne2wwSL9uvyspK+1VekO7W328WZtsvvbq1nQnKmXpBp0S0HciFMqiNK2/ZP7AO4iU6XVZBmHln HZUbO+i9ISOUyPdFbFz111LYqKXtAmck0/a2fJlamluGdFZe5GODV3/CZrtW9JhxDaELyGCRdkva 8CZgkk1s922/ZZI6O2sdZZouS5Nf72gQKeYCs8hAXTBFNuhQgkBi4cpAAaIUJzD+o74wa1ZU83Qa FmyQAAvSxlXDP/fAMNTxzFUxuqLFvswxff3EpgPWCXEX5Lo6RFzqumGjHRuJjRCGR6OTztlAKHuN 8HmMBVFqT3sORgOsYFaz6ZJSfBRl/oR5Tq8BD4Bq1Ah5ZEODUEVkWSiDwd5aCMWFCrYnjD8T9Pf1 p75Q0BBfTwhGv2FwMEyoYEKf+6lb0It78+5DGAw9AyrAjNd+DLE+jJYSFuy9EexMGPRyqOj7aCAN 4XnhGiN0XKOj6QeC8cKAphJLMF4fAtrBO41cGdFQvA4yOWoU5kUhE7A/eLZsDXfS1426wjcNXaZh XEFT6XWqDIm9bcMW/lJ34ujNi56/iIZe/Rt7w3th3nZ6qyUMQ9+jrOB4Xop9c6HR1tjVKFcR8mlB PjEffn0b6ZzQeVCJTGIECH8vca33NFaYBqcllPg535zWDr183a1UkZdXaW8ZQXvLoF4qDgVTg02l UXA/RcNiZy1GUYgqHjX8NfgKzxjHIN9k5QlvAVJUj/caB7nhkgcWWjygpzs8WGFc9qaNA1vgHxII E53l8ORxG+oCA9WmDCwFhYwyE15rywKv0DgUHMxWFI0KqfwGI+Nl2pM8+ERFGoCi+IWNP34K+AM1 8MwEHW7bcmUQKga+IhLwa9iJN2EoBpqwFF4znnAVpTgwMBBJN27cGFf/qOYW5C0NAeCJH8y4CCzm b2NoMM/iMSz56UkLPAEWyWXDqI+dVp0BgqvY9FEsbTfeR2tFRQhFEStv0VhQ5sTEVJShLPTRsRXH 0tUgLgueHalcksgipS1Ib0M0nnGlrMIQ4GYDde9R+AgzeGRDvqMB4AWNYh+6RSbN8n00/YKerRVM k7c0pn1fGiQbx2KElnr7zeAolHGtX3GkTNUjnNFhA9Y+jB4dNAbTm0bD09AhD/BvdHw02Ie2Dhoi D/yTvxyFkA6VI901rKaryRrs57N6S5kSf9HxQxC2bN7ipyhTuS+jQ9Jkw4Ze3sdn9BE3eoKoUg+O itIZk9yKl1qml85BqCrelXQ94EU9Yv0t0/wdtVN2t27dBC8AP7xg/PxdHlyeTdE3NBQA6Ngqetjj S/XaSmGrK2i2OeJgYnQ86NqDPjOIZz3xeaRwpX6ZE5EEnWAGeT7TCGOEjhTZRQj9UleoyQNFBkOu ianMNeXOzoaZLDj8B/1s0wzCPG+lrQe4MFg3/0WgAZhDLsoghrpQhyt2YgQ75yCSvEkLXEpi+Hub +oXsjW454xiJ6gX50foV/hR+3/l8JP0iwEUftPQLTiBDKXsRhvQnmvxJk+LpLjzvqK0OScMA7Xgf HQsfW+lIpKNTvRRMETGJO6DRp57JnXxfF1p5L/6zfqnQLzMtntIUcCJA5hsysGFSJLmdhOYhNz0Z UVIhKEGUxRiVpPOOPaEpn/UiI3bgTqN+48ZB8JaJIahTDtPWQbiKvgh+pm0Lgtff1WZB5YwG6JNt Bj9vxA7rqW0Qy5Q3YhSJb9ovhd/E0UytG0xXnJ3Bu7kHQoc7w5QdQugX0osjg/Q2jU42g22x72yb taHUEdIwaA7tS8cn26/d0T5HOtt8Qs2GcY0X/FHn6xSPThmokr9sxydw1m3auIWOQB/+SvULo4/C QZ3QyABHve3Ahrss251d2CI98G8HuF+ChtbT4GyafjqD1kpIlrArnGEUep14G7Zuj5FW6ZAHL2j/ xKv6MuSuMw0ObaYCncim+sWcsK1x6MmTuUsW1Aqc8DHwIy+KSu1XBzdKE1Xobjx1OZgLnhLamRhJ A9fowx4ae+XGYMfVoAPNktSjg+iJXtJn5yJ8ryOR0NfbTyr5FaYjdPEsT4f+QWf0D+R4cqbqwWDd DdIy6BlP2WYq/KQO0AYo7VfRwzb4dM+otJmhG8FvF06yyJ8/FfS3zfdFtAPYlqHrTcNL9VTGXl3o 8V/MiJ8Y96plTFCxXHb5FWn37pvlm2BW38sXRRHlPjiQ8b8QSKMgPPVmCdEX6Oz0wFxd0YtHyQWz kwnewNTpVLmJ9LV//U5yBDmTS3y7asknYWF6E710h3QNKug+OCMb7Iz2qB1AQYdGMXd6C6NHT1LJ HuTCg3vJOeemnTfs5o11oNMHk0g28BlTz3y/fft2Ly0lYMNph7AQTSYw7QhD1BpP2WgGb9YVAbdT 8y9f/l+hmM2n2SHSa2hvuLcXWEmygNE3q1scfNtgq6RVDAq1054sR+Yuocn4F3zvwnTLLbfEJz0Z KgCNe0eVVDqOuBSYbdhaAkmKwqwnbD8h0s8y/IuYo/hrxgY2WWH37l3pm+deTAcqooF34R5EmAbp uCBkgNYLLXvs9BiF8p3WkTsWfAQnTnlYsCElMn+NRHouMpGFoJivOO+7addNe6KzhuqHhiggooRy MDJZHTiwP64i1s6nxmef1nCU3E1DhzEKPZuNQNyTVp7YddPudNXVV0Wx5u3P93yOYEMqPP0oQAXY jkZRGqNjo+FRU4FLE2lTpsKZ2DQG01144YVp374DwJarZxXlH4PGrIIrnex0FwPBq89TTDedmavS 6BidfwCbj1Y1OzTMQbSl3qV0+Nab0kWXXZ35mlfZm6QzEn5GUOVRjRENzSbPWE55Np51EWYVkx4t 8dWD8rezIoNedcEF6aabbrXUCBtrIzFoI/bqhg4tGt/NSxg0zkojaCNXOup1NnGxTMONN96YvvPd 7wQdQlbJowvZD0MNGOyo6gwweG8wb382ngadNb3QRlxTBeLxM23om3mMkNH0r//rwgQZA6/aJ9aX cZHgNdd5aXwqzwblRuOjFyYvOk3ZMH+D9bGhNWzdspVB2sx3e3bvTt+58Jp4L1+VzmovOJV+ti+d 8oq83whO2+qnsZIHlH+NN6fa5k4i9JDPqWwnI/l2WP7lX766jn5hahqwSQNpYcNT6lRoIG9Ik0L/ Aob5Fn0hn+/ffzBddPElkY9xSuPovR1b85Z/5JVe6jSJUWPQuNZ4lWT21Ws7KfAddBQxdTCPL3/5 P+JJPEu7YqgrK2FMA0sJyo3wK/+h7zAu7NjyCh4J0jKTSW+xjEAqh7Xg84u/89208+aDoevhrPin 3peCelQ1TDSGJxk9kq7iwfyVF3lMuNTZwigP5O/Uu8ZzoefXvvAV8J07O/N1h0McGSIf0vY6ksVV 3ojRO76Njo2jXzBYaDfX0i/i1yBNLwr9sg8cZH7PdM6GSugX4khbcdTUL6aX7uZfeMJnw6ZNmwIm nZdqRo2fL3/5e9AYFGJA0vphJIkP9bkGLdOMw2GB3GEMMViZ5mzH2kKvuluHoDgALtsyJJd68o7n ay+4CP1ycyvVUNEvFBS8Vct90RXHpV9qvrlxF/rl/O9EGVLekac8+hQgRDuss7iC/sH/wKrc5xkf 0lp+19DknrSAHTwt7Zw5EsYIDHLB9y5Oe/bQRhmIv1DrfGcjqHNX6peOtHEI47PmKZPQ5wpbRWsl ZNUR7c4FOu/bMUD5iJ205+Yb07kXXh9tlw6WLmcI0NPq6h7kqnOjL2Sm8Jz5GqanHXXOhnTpeEzi hAw9gEypS0u7AFDpmosuSrcdyPJcAwUfZDks/aF5dQjtoPnY8VQuDcqvHXDlKZyMwk5YoV/Ia/8B 9MulDf1S2x7GlW+LfpFXBhh5tg02yANZv9hG055Cj1ZY8QAswHDZZVeF/Woc5dgoXkuwAxEjfIFV +BnaO3qmbJcwwgh0D3pisF/j3cQQmEtGySz535DOu+jS6ErZtqhbHKGhtMiiF75ZxDkxM6VtxggK eVmvUBEm4Lu2i/xn50+8abNlupNHrUO+9MUvL+uXmr+qJXiQoPPNsJ79OjjoLDDr7ogMdie/4eHh sDUjIX9sTm/Cpjz/wgvilfJadIgvxL1BPWx50lTY5qPTpe0JTzH3M/AMWAvUVTqKLhGmXSh2HMX+ 8pf+D+nQL6oH3ipvliVcyorpfI42gEhFZ5lTCdIoBiLED79B7Ss+Wkfldtfu69O/n3dhEkXqNB2p cqk/UEEwnTJNexnPd+SPQ9IMzTtVxh7dHL3r4eFD6Q1veEP6xje+ETkLp3KCfqYBF70ocQQ+M4ot zVIaZ551IBCIXE/i0GIfw4NmXxrHIBWjEInh6qXZ0bR3703pFa98Tbph1wG8AVlhBTNRwgy9d4fO t27fhKFKowDXOfpkfla6h/nv3fTEnZPprEaZV0bQiqoQ7kWmn8UgF6NS733XX6Vvf/Pf/RrKQ0CN K+tZnoZBMYyKQslDycBRNzbZ2MQjusVRgsEQNhVWrCsin2uuuS696lWvTpdffnWLmcTbdEw/ZMQs pmkREVw5PNuHd0CIbbDVx3qOhMUpgdHQ8PXwsGtmaKRo3GXaQwcPpje/+c3pnHPOQfHHp/ijYA5t HIp00YmRiwh6MhTIIgClbnYEFIZuBUOFjQrAfouOnOtsvvq1r6T3fewzaRhSzYLHMM7RqI4tiv+M bBiTDp+dJ7u0eSqjpRJgjT4aWD0ydvIW9ApQb6fkhNvStQP796W/etvZ6bxzL2AaoP5JyuKPvoQY 6g/jczGdePI2aO541wAAIABJREFUcMZcY6ZMFYNa/qfYkAP+RggYeSlNBNH1ZDPU83/Dw29+61tZ ZzQWc6/9Zsc74vDHhiA86aQzj9IBMFMNDD1SGljizjqq5GLUq+YLvUoK/wc/+MH0hS98AX6hfPK1 4ertVWll7775WZbBcgy5k90J7bbSkPZyZaQFCa86NOid/wvdzUzRnxlOX/zS59K73vk+PI/ycVZC Y2MTkZ+8I+waIxpUBnFR3vtsuSqewgfhJSR7O9mO3ogUZeedb39HOu+883ASLCtPaTNJ3XJnFYig odNRHRFURmxIVXbeqwCFI5RcDUeRL+OJB3XLe9/73pjOVtbwCaOyKG+2h6xfsiGjktXotNGLoAcq a8bMm/DqLGsk9966O73yFa9NN+4agX/8RMcxDEMUc6wHzB3nTUObAjfCrhdalKvvdHroSPFn0AtW 6hgv/IPSty4f+tCH0li2S2PEt4xK1ktfcnQyruCVaIB4M4DxMCMcBGXUn53yPryNtTKLKWZ+D/3y yj9bQ79kh0nBtXGlrw2QobyXN/zJD/7kDZ1BdoRsvH22cfziF78YdZFeGpCGWSoxjYK2g1L0oDIw Ax03bMZDWgfzJxm4BC1MaZmKefB8VM8Q5At10k033YSufFW68sq9YawbXwNFuEooHmJ5IWSvYdgY 144txcVAdhQo0fg5fS7S0hH8q7Pfnr713fPSMHxszk5vFtuu5evoUUY0hvFuDm5YYTjFVMrCT8Qy a9sw5cc6iKsSrrn0qtD7N990C7yjzGZe0fAyyOszyEkIF+nzlDbjLKFfNqJfptAv2eGxln6xbiv1 S+ZP24xeZl8cWb9ouKRos8Rh6dgX+Gdj7ZoYcS3FeLr0sovTq+Cxq6/K61vU/aJBJ1MY6U6llEbY C35YgF/CYUkcO/3TCJn6O4JVRE4NjmJkDc8D+HjHO2r9gsOgtE3ym7JVDFhlUYPKUe2j6RcJ1NIv tEmTTOEs+kU5bI6iZDou0882ys6Q679kU9AUzkjrTdPVCrE+LBpd01Ib6uaMiLe/7R04af6N0RE7 qfJJ1l3yCTmEHNqOOKUv6xfi8UXnonLlLJg51wLBoX2DQ8gMxi22UQTLnx1JX//ml9P7P/zXaVj9 4jtkdpxlD6aaIQN1piFkWBrglDU4MlZmKUh/5VMdVtqHcDZR6RjxAPdvectb0le+8pVEvysH6jAb ax2zDPjSESinFZ9wQnbCDvTnDlapdzF4pas6Qv1iOQEbea3QL3Ux6llnD5mm6BfpZru7eVO7flHG XIe57CQym2LU60C2g/CG2n41b3W5tMn0yaOQddFcoIGzPULhMp2eui3SSVFjbdvG6LeoFdEqQ9sl 7BCtlGrycDr33P9I73zfB9I+mmvfKklGj84WvN0VHXI6zXT4+lVW8ZXvdhqySgx62rHQMRvOWfkm gIXQGPlXXnoF+uXP0s037YWWjo5nWpcZDE6JPJL9Olu3L8JkW+Bv69at2Jw6EakJdVqg/G+fe056 2zvenkZxxE8y4jZlmw5fjYyypg14nLrrNLmYwo3OtBfQh/5x6MLRZ2GNDMFC6GVs/ymmwcY7HFXT 0yPol4vQL69Bv+yhZNvXPJ3e/IXLNqvZBqj3is5SvksHy7S5LUGv2uCAM/sHwYOLs+lrX/0y9uvH 0yh8bOdpkcWajhlKo8wEuh1oB6FyIYOfbldYrBf1hr4HB85/337C1nTVVVfQa3YeuQyRDcKMGBv6 5aJisRiIHhraEJ7zeZRu8eKMjdmjhEgSUWoFIyqdeCkwLheo7BV0ODYObcMw4zPlq8BkERdhG8/h Uxfgu2jXBsPvlsEFJqD3TkLnv47hAczT+8jDIUa9kGbEt2uuuppRrtFI0z84EK9F5iKEa3rxeYVy yR4Ih24NGzf2U4c8NC4Ro2cdX1C0ePtVSgZHoK644gppSR7Z0BPWAToSNnYK/dQ0c9AR1vBg0dDP qNxj+DFnKCPZ+JewbSudB4JMpCKSya655ppoaGI0l/ydcpTXZ9E2oXCKcRZrnzQ6yLPAbHqDSsqy Ylobi1FdDSyNXatkZ+XQoQPpyp03pUXe9YW3DFrxKSDzDx0ikB5CGHN6ubdTNT3u9Ce/5bj7yQe1 wBxhN+oAn8E3XC2MRmX39TvpeCskeeSpHnTiu8/8AxYVm56OPujilM4xpsAYgk/AdQXT2Flyykz5 4J0eZpWhjda111+XNm/elDbURmURUum5Eb4NT68Zmo6reLTjpJLYiLdPA8v3JQxAjzKVQaUvXq+6 6qp0kA6utG9E5VtuYOzWiXNDNjQdEWBjCRfd+lr0gJ9pNiboHQA/jNzZiXf9Wnwc7EKZHUzXXXtj HtEIXIpGRuCgp8G6FiNPZaMCsjEpwfKte27c4dMaHzZwpZgOcHbZZZeF4YKoZER7obxB6hY10KgF tl68WxuGNkaDLB7k09I4W6Z1M4g7vxtKIy5P7t27N3DX07RUiGMd5GMbFBdfG+yQSS8NtSJzdh6X 4Df5w0ZNgc8dQWDDMNITpn4ZYpqps0Mxk6Ii1sGFxF6bHk5hV/6lh2Kt00Nvsc6NPCq0bIySNE/L A4fWU/rXqsBPWZlz1W8SOFMRgvsOeEUa5Klb0KCe/iB6XDOYIyf4fDS841FXMljAw3HFFVeuoV9w JFGwONN4Ea8+i3N5QJytFYyjM6gE42sky8PWRVwETxDBqUwDTIsrwbjKQH89B28GI9d1AzZHirY/ DatBprXl6bWkRCi7QIbeVdNfedmlwa/izPglyLPCbdCjLd/In/KsxnRr8wNwcuBA5u282JoX4FCq OrLQj7zvvmFnGnH6qXzM56LrndLHY8DkDIfMCeJ4IfSpaxSlRy2uLTwEXxJHWNQN5EiaxXTl1VfD KwPgrLu1ZtDstXVsF3UA5kx4gd53A5OJSRyOlLxxwyD6ZdmpYbqmfhGQlfpF/Bkrh5Z+AdiV+gXP N7JjG+X7MlIgf5TOdehBO0MsChtw9AAeuvyqy7kGduCjfvAdfR7oKM50KLrZSm4NutVttNO2NdJp gGc1kZuPBPLq9iZomJW/XqVl/ULDKC8YhKVMLxSOyA/Z8p286PN6+kWE+N2gYbhhAFsEgFv6pR5F 8bvlhfFFFWwyXGNikGfEkeuMW1OGaZvtwM9jp8RmTuE9JBHM3Injs4/R4507d8Gvsxj6WV5iNkeg L3canHZmED51S9Yv2kjQFblS/F0nGJtHEG9wC86TrtzuadinDZ3p8Cjt8VXXhJxIA//P4V4HyyGz 0tf6ikP5IfQL0/a0WwIeASCoC6y7MmbHXtsj634yRJ61X5Qx+l05ALPr2A02FdPT1n05DA+PRuff jqDrx1pBwQHP8nEJ4t28VuiX+qN6trXWkHfGdTTIdtdgWywfi0PrZmfAzqH8EJ0/4gT9SacD2dEY dZg4MW91DJ/qX6a/dpY2hs7dsBXh7jGmtGq/Of3R8QR1luvv+UTzwtWXODX5wxr7lA4e2pduYJbW UF1No8F+0VZWxsWGHDt0kPRO/8OSocwxHCauj7c9LdgsMiDfx/RQgQBef+r9K6+4inqgX6iLvxLU L/K7oTge2u1X6W9nU5IUuhtfJ7ptn+vYXEs1gS163XXXJe1jl4qoI+QNp1CXMnIn0lrm4EYvMwy4 GM/mgf5Q2C8s+Agn4iC2cwTqKn0XsTUvv+Jq6ljLKjZ6gUlaycfqLHnUoN4TJ7Zr0leYtHVMY9xu 9Yv0IL6jxDHwgM04DF2uQi4X4OOYb4LcmmPkKiMo+DgtxEmGJIq7fX8K8SbYbUuPt0Gg9TCoSKgX lXJueu7JN0vRqOgDc3MYnDYMeqfNT0N4agIP2xAVhr7RgAgqIxALscMUmXZQFsy7ZdtJGGNuEAEB eDXOHGGr6siM1z4YwJGoJedpSzt+SzAVDh1gmkuHYAJfO+/d+aUR7A2qXcQYSvHeO85AqWYulzjG F3HdwDrC/MEyMnCYxrQ0HgqRCDbcdtttcVV4mwaJnqWYAkW8XuZ73u9+DwgiR2T+iLs5pmbZF3OX NpWCi8MLnjVgJbrtjYaBjCizKtx6g4sn3vcGheSe97xnjIws4FmxIk45KnPXrZsdLUNR3BW0LFNB ZDqNPRt/jZQxRhpZGACeaChIk+u7kLZv3Zy2nXx6THWJzPigSWOcEGyvMiF5xwvxRDYDTn9CgWuc GrZtP5E00hIvCf9iuofzh/2hVLYjnIt6J6Ql2enBN+US5cny1lqj99DIfu5UOhr6CkAGg0di+R6l qleEqyS3LHHnt174Ql4230lw6nc9LF7dVEPPegmls6HiVjkbykiCNHBOtl61EmKnKGC14dUYPemk k8on6J7pLz8p8OJcb5qjitbB0ROV3ZYt20Jp4+iJeuU1giRGVlyYntciCO0cjo0t6dRTd+QyqJB6 pvCriscgj6psisLR21TCIXYjNPgtFJYZGOQvEWTnl7DjtNNaw+JEDmWrNBplzCk7duzgxYOHnF7r nP65aOBMKy5s7NqDOkU8WK58qlFkpygafwTENVAG8WzHNzyX1EVlHjgPnNX6hQZUr/1mOo8aMj0a qNG9p7OdtwrkWQ/tAl7Ek8BJqAF2a5tNY+gXS+qqFzJzG8GdyoqR6X32irK7Hka6fCbNCo7tfOj1 iyl8pN7MKIyNtuWUNRSFf1BrmNkE5RLcqBTk4zx1yw9uVpDxpSevTFfexBTBDnSBnjKDsn+/+91v Wb9AjNAvOJPEp7BZprJW6mGDYzq/K+/CbZAGGkoGO6nycQknn3wyONvWysO1NiXoWDCfkEFelrU5 6rFidI6N1TqY73aqeqClYT5GYeI2+G/HPe8V9FecVSMaCsJpoync6kG1QO6oZJ7VmNZAlOdNd+KJ W0O3hvGg8sIonKWdCKcUjpVtm9AvtEvuLObUqlmmyqqxpEkEnGtbqatlWLb4KVM4/W4Z8oFBo81y /InfmGodaXrT6afcAxlgdIuqa9SM19P5TB87YEUOOBTCmbGUBuk0Deq1hROnprPcymPt+iWMw/X0 C3SR11r6hcLkQ9uwrF801rOM+azhaijOFuVOHRPrxkIiMu7vd+YDwlgLYSeKax83sczLdlz5HaAN 07EzOT6MCkd3KqPwnR0Cpy9K/T49huArCMuzMi0ti7PwNPSLsBmodugP9ZZBvlQ/iWdhPi79gn63 DPV/s+5ujlL7Q0OWtS20O1V7g3RwZ2IaYsaH+NGfMzUzQZ2Jp2FGByxGBwNaq0V+TmUEh3lGyoZc VbLQTipBnsphCeN8hHZROeMem8PRP9ueAwfHojyN2KXQ4cyC6NFmyKMhYD1t2jqYtp1wIg0WTxo+ wDGA05HiwDmopt0rcu/ok7zk+hdtGGXLdVfyr/pBXS1uHXXX9tDOKFOklf1TTjklg6yQqLNjdCbL gps7GMZGsuNiK3aCnX87gvK6BvkQNpEPjgTZGVC/KCslrNIv9ei+37XDmvqltL3qg2X9wrq9OtjO FF0k30Tng29N+9WokkF2N4gbeVX9Yqc4Nkep+T+3nUQi7tRE3tE41u2YFlzBCCgPjRTqwyYrruUe pE23dtpHU+A6fD/Ed1mJRuom1lFqG9uuW6YOkx4GD+QMTB/swqwvO13+Al1sV93EbVG88N+Nf04/ vdYv0ER6jo+bmmz5OUJ0NPvV79KndEhMKz9rj9hKziDHGxHyHfc8A/zY5uCQQDjkQeXW9teNIMxE HbmozUQd3aTFmTMGcWx/ZgCbJpaGAGjN7vEdTuV7d7rffe7PNXeMraD6XDta/lW/yKOWUdpjaVLe 2W75sx6hL4RJuqB0g77xZzFtA+fb4GMtu1l2YrWTJ41aeh/YdbxrwuYWsQbx+C96UjS4F5jHuwfh Z3oAU/RmnH4B0q6//vp0ySV5vmrfQH8M/WkoODXJoKJ7zatent78prdFp2kJjljCvYcPMG3ZdEL6 9Gc+mZ74xMcE0dWPExB7984rQ0G4C9KlV92GcE8xtHdtum3vYNq8RS/QSHrQj52RBiGMBhCkTJ/+ xMfSq1/1OqbkaEgrxIwMbNyE4T2T/viVL0kv+e9/mjYNbs4dhanDaQ/rnQ5PMs0DAk/fdn0Q5vpr r03fO/8SMIcyoVO2+bQzwujZSiPr2Qq7du1KT3nKU9Kll15p1VAMQzESISPd5z73Sf/nm9/AeD05 BFkP3KHDB9Kte/elwZ5N6eCBw2nn7l2h/M8991waRZQjiklBfeADHwgzsmAwvCkL6VOf/GR66Z++ JA0fpKGAem7FsMQKt00w8B//tz9ML3rRi9JJJ54QHn4Z+IorHdXCQMJg1MDXCL4aj+f5p50fwjmH Mh/YOJAecN/7hWIU9kuh2TOe9rR0w84bfIzpfQ7Nqgce/vCHp3/658+nU049jZLB5eLhtG/ntenA 4iSdruE0MHcda6xuSocY/zz3u7emkZ5DCD7b0594Zjr1lK0pBu6B6+DNt6Tdt+5JP/sz0LfWTi4i nHJEE774o5e9JL3hTW+gDEuh47k4lfbctDsN4q2aYpvsTQwJjA6PpD233JquufYA0xamUC5ddBBP xiE6E6MjNoS33Lw7PeYxj0k33nArcMCpbN/U1zOIYl9M9znzzHT+Rf+BJ5zGgqlZ0zRKBw4cCCPC NVjyp7hSuX77O+dF4yH/qpDvea8zUx906dP4BjGf/cxn0ov/6A9DcMV7M7zi1a9OL/vTPw1vDLow pm6MQou9+/ZiCPWkW+lg79+/nznRu5leeUHwDm0a8rI57bjHyQg7U1BRoLfeujc98pE/k/buuQ2Z KDKk8ulJD/7xR6d//sI/0HlRHhV9t/IfT9ftvI06H0onVruoy+WkXYIXb02nbIC/lsbSCSduTve4 x+ktg0TF8wamL5x99tlRBRWNDYrBxvFjH/tYevzjHx8KyzJm6NAdPsS6PjTMCLgboHGwkb388stZ 1/WQ1FeNpjGmxNzrrJ9Jm9ksJoxw8HbxhRel337e7+BNviTwacNnI6eyftCDHhRTNe51r3tFufKv HXoNIhs987gWebz55ptj7Zijh30YZeLr1BNPonHPC8AdhXrta1+b3vSms8MAsGO95NwHyt/E6Ozf fOqT6Vee8DiZgsYNukCT668/zEgHjXfXDemKq3anCUZFL7lsZ7oFuRna6pSnvvSjP/pjKGGmrkB4 G5Hrb7g2PflJT8VreQ11QO6pw+DAxmjMzzrrrPR3f/d36X73vzfKW7pkh8qevTenPnf6Y7rNzp07 o36XXrozbZo5mDb1VeGA6BrYlLrQU2ppYfvLP39Nes+HP57G6eRV9U5m8t4JGC4feN/70tOe9mSq BuMQ5tHF559/fnTKxdvOXTdn/XLOd9AvjNIwqt+NgfSQH7s/fN7VMjA+qX556UtDTwStyEuD387H S16CruRnpzob0kus29sHXfaH02MSL6Q8LC9/97vfTRo7yo58sw3abIS+QucU77e/7a3pzX/5VjRx DrVTkSnX907ved8H0m8845ei4VO4JuHJnVffEp3WGfT7pVdeGTrZtmVm8h504CaR9960Y8dp0Xkz xz1796QbbrgB2X9stB/iSYdD3tSjM730T/57euOb/hJPp+oGKMDXHqYGHkbnHz54KN0T40Vnke3a NdfdlA6MHA4n2tD97h90X2I01brYeXzFq17J1Nh3hxHgZhC5o6xXtT+mS1v/U049MYwQabF//23h EOtgkeiuq2+KxvgC1g2O4SnvxDNewRf3Rx9vwGAIzzqw/+1nPpX+6A9fhJHJLASeNZ4icPOKV78m veylf4IxjkOOb45QjR4+FI47jQcdeMv65Tx0DgYIxpjycs/T0ePqF2Ts1ltvRb88MkZeiszXpaSH PvSh6fOf/3w44HxnR2sb0+OvYD3KNNPEOnsX04UX3BD0vujCS9LBsQEcNptolyfSL/zCg9Ff4hlk g73PfvYz6VUvfxW4pbNWF4C2TT04RH73RX+Q/vzVf5ZOYt0IiiScVfsYOZ9gV7nxfcNp20ze6Sv0 y+VXpA10eGbRCQ9+8IOjMyLPahRfxHqc5z73uTFapb5eW7+cEaW7AF/9cgBvf4xU0Ntr6hdx4+6L 8r36xU6ywWk/X/rCP6Xn/c5zcaQy08XKUM+oFPcvf9Ur0ute9zrSZpkc4wiJg/v2w/8HMCjROR39 gUfXc15wwZXAzcgko3lnnomTc7PrQXOnNvTLk5+MfrkOOe1Dv2AoYk+5c+GDzvop9Mv/TA88c0fC 1gOLC9D71rT75l3R3nUu3pB23nhtGh6dTJdceihtn70qbWQUYsPJP45zaTBtHUC3A562wetf/3qm kn8k+Ffu1vg1nHGPM9Jb3vqm9Bu/8cxoE8WHHapvn/NtYMSJxxSzeXjaETvx9t0Lr0hDrM/bsgUe uM8Z0VHfhj6ENOkaZPc3fvNp6bIrduU2DPvI4AjU6TtOTed965x08qkn1eteEjbS3qDLIkw/zuhl u36ZRR5OPfkUHBnoF6ewE9Qvb3v7W9Nfol9aIVcFp8nJ6X3oymc8/WmhXzrzlpq1/cr0SEbmlN9i v15wwSXIJ859PAE6hk44YVvWIwyXTEyOph9/yP3TvttwYNX59/cNxUyAnzjrESEvp5+MI4t6L9Am LM6NM/34WsqYZPlvxTreG+gAH07nX3GAKX3j6YxtQ2kTgwI/eq/TFBaUCzyCvfNK9MvZ7/5QOFd6 +jfGrsLscBC765137texq07gR8cV/hnePxKyri1uuO7anQH/Bd+7KEavtLE8Q+1+9z2TTjQzInBC Oz9oPfvVPB74Yw9M//T5f8QBd59oe313/Q3X4wxlHRvTxQ+gaxyx23/wQPq3f/+3iLMdu1j76SGk VQeJH4+Defc73pne85734IjMHdnQ+3w75YSHpne8603pN3/rp2M02wVI+LCZrrcT/XIIvXgoXXjR leiXKdZzXox+6U/bT6TsvfvRL4+OOlqe4TPYYq94xSuCpj6rD6Sh9sULX/jC9JrXvCacRYvY2PLx AezcQ9WGNDLODKDZvbX9OprOPf+y9KM97HRIZ3Ya+E7avjGdCC1V5LItF/StOd/uYJ+M+aeTI+lx j/9l5nReTGF4Dxg1MVMV5obBTTEn+ES86xozz3/+86MDpefDTvbuG67GGzVGGroCDPnjp8OgZoi1 fwhvxIbwMg5txmuI9/7Sy89Pv/bkX8RzTUdN3qKQhXR66txwKoMgEGTuYNq4vS9989++mB764B9F mWDI0qEbPgxToXwnnFPJW3vlmrjMbkynnHkahhHEZkxVtTgOg7/8T16WPvWPXw49uDFiYcNsOTkd CDc/08E2b0hvee8H0+88+zmRhvEvztAYD+Nbb40otSOp4aEBqlJ/6FkPInfbBD043emcc7+VfuWJ T6Je7A6HwOor3YQHUI+AU0X0Um3cPBSG6OYtG9NmlMMCncZhGmA7X7Mw7yKdzSXWcc1jTLvwViWi 0bIh5k456jeTHvWoR8W0vbGRvH7G+hsG2IVwmu2S3eLyLW97S/qjF78YCPBsILTCeAhjWANVQ0n4 3ZJVV5eG1AknnZiGgLXbk2voQH3mg3+dXviqD2LojCTGHNMMRSwO3hcFAIFnd5HrbHr87/5RehtG +YOG8DjMk45PEyiNa67eRRl5CopnTdih68fLsv30kxCQ7QGrPLtEB+oJv/AL6eJvXxI4V1UqgvvT NobRmErEQkv3gH7PB96ZnvucZ6QBhImBdOiCgU9jPwZ9Kozn7i6MazvpCKi25oMeet+Y6seX8Ja5 FuUv/uIvwPPhNFCPcDjFSIlx+pRrUB77hCek//E//yFtphETtgqcHUA5HESRaDw7JdDtN6W9QqsR +ZNnPYyYChwKHnie/1/+S/qnL/xzCKLGRbS9GEO9PRvwuClXS3TKPp2e8cxfBz9+pZEHv/togOU1 repMm06M3cl02o4H0wCxwDyxbXMfI5A0YH/7uS+l3/nDV8J0E2mIMmgv04Gxk0lKN3b+NnAxk574 K7+YPvrRv45RNo0MPa82UhpT3qt85AeDnh75S0+1ysrppAsTo+m3fvM56Ytf+zoQVWk7vD3GSNQ4 nGDoSpNpEw3DK97y7vTC5z8v9TvlIbRDb/ru+d+LdqIoPhtmy3NkydG4MkVMOfr4xz+eXvCCF0Se 5Y+NWt6WmTd0op769F9P73rb22nwdzCSlLc534kRLf718LsGrgN5sSPVh0NiCzK1lR0a9SJXGOGX XnJ1+tVf/e10YHh3WmAhNvYRSuJMnDEnpflOpiTPj8Nqp7I+4t/Tgx9y35AkNcko53Pt35eNrwre ivpAy2xodKWzznpwJnAN+NlnvyW95v95NbLPmjLe2a1a6IGHGXFN+25g7eVSesrTfy196OOfSb0Y a/JY38ShNH54f7pteCKNMuS61MV29Rj7s/UIxE8+7GGhVz0fr4dR4W9/81vp137t17IxgOHBhIVa v0zU+oXpXxhpVzGvfPOWrGfFsw4Wf/KCesy6aEyrAzQgpIsGqUEv+Kc/9Sno8sKonwaky/3dOa8b ZltAVnhIz3r2s9M73n52Ohm9gcjxahG5xxGGZTHBxic6lBa68diytfHgwOlpMwvgt29lBIQdxCqm bezeeXP6iQc9MubbT8/jKaacDUP3QN8oB+hj6tvHlL9vfON/p5/4iZ+I/PXW65F0WpFyokGo95Eq RoN+ysmnocdOQPYZZXYa2tRYesJjH5O++j2cZITTeKXGHKUdwsOUujB6+3HavPGjH0u/9Z+fmbYB g3TSW6rhLf3FWS/b2+vhtIdjefe///3RmeywldVudKge9aj/BA8ywg0sTKxOmwa2pUPM8ZfdupyO B8EvuejidOa97kEnGz5CHwwfwrHDbwL9Mk/CTuTMEcYNg1vDqPjJsx4i2Fm/DB9Mz/+d5+FQyW2Y +Uob9YwzHUKeAehTn/10+o2nPwP8SJU868AOcZl9IN5sQ6S9el/aywMGO5fDIwfSWbSzE7jO3RBi HjUx1PvicDnWAAAgAElEQVQjaYK1XFW6DYckayppmz/3uc+ln/+5HwkHFbY2eJlJl118Gbzlugg8 zsjmHPjqoYxN0OREjLqtznGifZ6cGk7P+M+/kb6CfpFMO9iIaAQv/rjT6gSbDtRW9NEb3/jG9Ad/ 8AfBq/KsesROvPchj0RdrV9wThBcqP+xj38yveD34WMDuDI4Qhy7X/oAfE/FqagBqMNpAeNDB8Se m5hGjjHoGUNOS7aNUf87o0Wc3fue9yYxjhL+7j94a/rNZz4rffvb58YMGOnRQ3u0VNHek0aHr8sM PvrRD2NIPgs5lXKOEqBfcErYuSsyGfwFTHhz01kP/TH3CCIwGtF5kDVib0+vfPW7Y2tw/DxsLc6n ztPxyJ0KEN8LHvnlp/9u+ujHPpJOoDnswunl9N/sYB3NU55gQkeaxJ2diR974I+g/7NTyE797ptu TC/8gxelf/3Xr7NnxUIaBFTHQua3nULzjhxwpttGZPJdn/jr9LgnPTltHxxyokrq75qm43ANDp0D OO9ODWeAcuIumJu3DNFBPTlt4irOdIB94hOfSL/3+/81t4/WI7Qh+MRwX1K/oKSf/VvPTm9/B/rl ZPQnQf1y9TVXBuziTLqLL/l4w4bN0RHesnkbnTQyxJCcpiP0uMc/Afv1fPBPBx1GVl/q/JaGTs1z pPnP//zP0XXar6zVxE6RPpdd9l3Kc0ousxtIs8i8L69bN58QsrJ5k9qbYhiR/NvPfBQH93+DR8ED rw8D1mIv8jQEXWjbHRR41KN+Lv3bVz9PCpQDTgOHYfajX/Zgj3jsQnfvJuC2Q8JMAdrlH3nAPXBw 53bacr7zre+Sx6Oos6ihIITEwYIxOh5yk7vxVTjmL2bzinvd+6SYAirl1rNfpc2ZOJq1LWGF0G3i 953vent6+atfFaNdAJO6sXPsJEYhlDNEB+phtElf+eKXsh0BVlzzd/C2fcFntjWdHEmxyO7Ai0u9 aUP3vdJJp2xOJ52s1mWK6MgGbNDp9JCHPAR9sh96O2KufjmT6YLql1s5zoAOIPT83Oc+n372Z382 9K9tk/qtDNxog/ksD9iR0wGuI0TbptNOBDbM32Dz/dc/ezPrt3CSUvo08r8whJ0EjdPMId6k9EvP /5P05je+NT10Ox8ZTEgDrK1TTyCQdyBAornxanzkVvKYqmZmRpi6OcX9YoWXunrHO94Fb/HIr77E dWZ2qRqfmq9QnHyco42crOanxjlmg2VnvJqfiSzMJn4symMH61kepqqxg9dz3c9vb3XjdRdXO+71 s9X/+vd9FdtkVyabnMNXz363swujlEWepLEMDpSsFmfIvM5TQNgmuDpEudPEGDMmhyBUCxNVBTxz I+RGuTB+9eSfelj1vnd/qBIC67Fv+EA1wnWYn1HyX5aazc1gX8/j0OJV4zc/F5H4PldhnPAgEPMV IzbU2zKr6tKLroa/+6pbbj4Q6XlFHYCcqN7n7EwHvpao05JQUy++zPLauiwXmfNf4rvl0NBxXazG x0aqZz79WdV7/uq94ILY/J+cmmnlz1aU1QKn4jLcCr6pGdvZtTLlHoMk6mA5whS4Xby5qqZvqQ6N cPxjvNtbvekv/7R6+DNeXN3Cs7jAI1oJgTUPIrFTAgBUU+OHuZJKcOsfG4gEXwTqeT3Nh8NzI+Q9 VY0c3E11RnkJ5q+8uHrRk55Svf+Df1vdMpnpdxtoESvywdjsGKB7J/3hzemxim1BczkUuWQB1n96 qpqYHa9ml+YogyOI+c3z17oY5Y1nv6V66jOfHpiU/uVnziNT5k0QIfwQUmY8kgeuSbAYecxxj6cm oljW1ATAipOx8YoOCDgdhXYT1c/93M9UH/nIx+Lbwf05zviYpRgyPYP2QMJIBuXkL/6dmOQdz2ym UE0jgxnTw9XIyN7qEBPZp8XD9Peqd7/txdUv/vrvVXt5RAQrRKJi96/ICEWJ/C7fW48SrJffm+/y N+IsQcfDB6rZcXALwkauu7Z69hOeUH3yk/8Y+BPRrL0K+YJy1fQCcjiX62ceyoT5l2A5/kooZaJw Kxr48rp65zvfWT3qMY/O7MRbZXcG5WFOUKEaHTnInfmQHzppZnqSDbOQF0BW72ReNTJx5oFnDg0g rLcV2HZX1914TnXmjsdU//H1QzU/zIV+kQcmkDcgj7KiDGgiXUqA7PAb0GSAAs/L9VqEZtIJ/lk8 WH32k++vfvE3n19dehD54+3s1DB8ORG8pl6Sp6tF4qLTqpmxqEvIPK+NT4MSxaA+q5HDxLFMyp+B JvNT6ADuL734CvRLz7J+IY76RfFrD+K8SZP25+X46H9wirLglZposfrrj3yseuKTn1KNTqEreCsK Jigo4GSrJToZEXcOHYsABGwSZWEJPbwwVU3zStVk/Ky/lDFygjUnD5OG+8uvuJi6bK7YlCT0i/Xd s8c2KAcON+YGvp8Zr/OQD0ACP6YowXPkThr+Rznqp4p2bPa2XaSyHvPV1HWXVr/31F+p3vrxz1Q7 JSuRp0cnW3ys3mTbWz6Yt7KB1gAXhZXFK4fu5ipyf+gQur7m6wMH9uV0wgCovYzbXnnZzkh7kOFF a2mR5iyM8SeAJaOFWYpFhohhO0dzh37hHdFa+oWvU2PDkAX6w0defz70y4fNrcLrHfUeURe1hbVk 3XdNfihJ5hfQ+bPysZJ9W7X7Ztuw06tLLhiDnpkvD6L0aU6ibhO28aGPJ6rpCT5Qjyx/cxWjotU4 tJFyvM2Vt/GDt4bH9lXDc8rzTDV2zY3Vs3/pqdWHP/s/og0WR3TmTBFBfeKvhCPrF2itcQEepd3h kUPgMbcBZ//VO6uff+yjQ8aNMY1wzdoe1mHkMHXxUf2xBK/PTtBcqpfhu1n0zaL0yXmNTI6CD2mE /pi0FZSniQ/+fu6Rj6ne++5PFPasxkaRj7qYrPsyj4lrfxkxyudChok38srsBHWeE3vaRvur8Uk1 h3i4sfrkZ99W/adn/2F1ISgM22jqUHUYJGcpIUpwmuXAVdgvTBsNvs31y3xsLAMdEv5mmNRRHJaa cXB4X/X0X3p09fp3vq/an1EK0maqwxMjLX6e0EgL6mIzjmufZfmThzlMlVy58WWdv3At0l5kPZBx +aGPfqz6pac+pRoGRvlE3ppB/xnULUW/zNLGSI9ct0xf7TPlP2Q0yqEkaDU+kuVxZnq8YgfbgOHx v/jE6h1vf3fcK8vBw+RmMtsP23TthiVoiWXFT0sFHuFbreJyNYBvbpw8Q9dB85FdvN9bLQ1fWn34 Q2+qHvu8F1bnYQYJgVJ0cATkmWaEtm4eei9KpSlgnqKNp53nyZ8qDLEPu0+ew7kStpsAHt6nbBGJ 3/yUwxF9Lf0yOrpYaQaXfDIafFrbftV2Vc0xRTrsA9vhnDn2AjgWw+PI6Ps+8ZHqSc98WnVgAnuG d3v37wsdEzTlORBnYf4E3h+I1UbTRrLpDHUaVjU8TDybZZqEXFx1EP1iG7a9uuTC3B6Lf0YbiZAD zutyW+E0RRZFgrBLk+mwX1sRvFH2aU8reHRkWDz77mD15je+rPqpZz0v26/QdmLqtlqqJCOAwvdB Ixgw+vTRxbqdf/RQbMQDNDExSe+URXl0r2/De21PUE/1FCdzl0D7wbMjMC7i04OuC8nhMEZpXGxI b1FPnSP9YCr38OwN4mWK3W4Ad2gr62LME2/X2DibTMxOpjN2nOSmbOEBcwRMZ4xzefU62omMQ3YZ au5krm30Gu058nOa1CbGMX3En0VeZKp7gJGWDrwMs0x7wx3H2peZGHVxyiRNSdrOuhP9CqZxfrTj baAe8F00rpebD42A4yOCHj09eCj1mN6nR7+b4fRZPMpO73n4T/5EjPoYmexER/T6xYX10TNiXTp0 UdaFOGqE44u4uVDhcx63P2lhkA4GvSlOIXFNDw0i+GL6Xqz/IH/i630JLz001YNXyojEPOuRso5R X/7Gji549HG3pa0sgnUHOT1EJ558Kl4oRxUdceMNCJDRMl2gnRWD0I5+iesgQBTCJ7wjDpka9Axa K+eQ40dMm/XQ63ZkdC/tOCMhpAz3spgdh4wp3JjQ+P4GdU9Eqaw3wWXtWoqyA5yv65lOrNXB641X tocX04zqzTE0L04NriE6ibnjeubiJHa8sdZDvFreRr0dTKNwRyWDOAuPJ3Ureehpke4G8Rd45V75 ENfOA3aE5MQTTwwPoyTbvt255tLLRZD4Jckj6ImX0nwDnwISwS07yb+uuOkrx+iRlc14ct29x9HN 1LeJYf4d0IjpTqB9eMRtd4WDtX8UZhnhOSdPedl6YPBFCcKcy8yjKsYN3iLeAjgZ2ML0V13LFLP5 jDPwtB6MUdVJB3wJTnOTM/z1QUu3rB8Dp8EQRmgEy5HHzN9y/Bl8V/hYr6Lx5ONhToyXr/J2yXnt mnIir5dgXaSBeXAb1wKPPBLnuTD67f3mbUzvxOPq7kLjYyzYRb/s2LGNkb+xoEGfo4Ek9jR4aeF6 Q73H5i1MawUX4Up7v4tT6+SUXL3baPrw8iuXp27X6w6fwBtuweuBuS6hccpWKIT4yBaseM+U+RI8 K67oi81M49JzO8eIfd8GRkjxAs+ypsZyH/6TD1/WLyQG5NCB0tvv8oF4F1+FTy2j+azeEP5Sj4AB /oh36BB52TzEtzCFePPdYDkFR8Ypaw785hb0yrkoNB1qLnSr3+IFl8FNCDrphO10+Ozccy9hulJe ZH/aaUxhIViHwsdOoStyGB/547Ro2x3LKLsjBkzk2Qs/Can0HNhxWrr1APqFdmlLJktMK1Lu/WW9 Cb/V/CmO5IG6qsFnbiASOIBWjqaKO4N8a3BKyznnfCudcdoO0qlV8bBy9p0wGFMcuLZVekYwcxpH 20unpvMQeF9Pv3h+nwulV+oXRom3b0WfLcV6ipZ+oQxp0pT1XGjWa76Xxo7qiWPrEpswoTuz8umM 3REf9uCHwhtM2abplC9ZiseUUerBmgzX8BrEST8zU1joEc8yotMr3bglvvuHNW0UFvplM2fZDDLt 2jAE3ZUVR8amRRBBvSBvCZO4EE51tu/ag7SWTtbVeP4MvmvpF2ZGGE86lU1iXM+Ued9Rx3zQas4b mDFRndUSB2/DB05r0/aQPv7kR3EmhdUDBnpUAaN84RRSfHGBxiG2KS9B+IVPGnUxZVd8lzzzNcec ZgGwdgcFB96c/aJ+UQ8uTLpJB+uAD+xPO7bnVG6Jz0Bn0GUOPaYOK7gyH2kBOiIoI4WPfaFelQdc b6eOcuMYp9iSKN7H+jTVoKYHtBhiSrNBFlZnlLBCP8PWyqWy6pon+V258t4QepZnd0NcoV/4pj4v uso6NPVLoa15SF95w3JkC7P2u3Ib9ittinpVvlhpv7ITMWX4cz2jxw2oP+TlfkabxahLDKS3cPot ltXIegoyoWewbp+NOwA+GF3tYISqj81KRg4eSKciI0YX5Zs3gzzS9fAtjJRAgfoYvg25z9kqKqj2 ECbr4Iha0S9bT6xHiQ+Nol++jX1c6xcKGRoyL/QLohM6Vtr7D6SIo3b7VZYSX9qX8nGRHUoOe3Ga 6fkeU6MdNcMGF1s25FFdZSfaRvDp3gLaL/QCTQaxqak/GwdxQnr5rcBEtycIhBgxbZsoIgdr+6ab 9qSH/fhZ8BHHtjB7Q/y7BtwRUnkypgoSUzw480e8GITZEaeW7JF/yBVT+KIhZT3zZmaV4QwwNqNg p7G5tOvHmYXADA9lW9qYW/AUo8QGwI538XC7/9DoqQw8r0nSOgdfYspoCvIgzFPjA+byOSuQvA0n CynBqQaC+lLGEVcqDKfm1PJDJZxCxQcjo0i6VL4YyAPMBz3M1ApmUqVTGHFD7iNaB2PjAw5zYsy7 OUCnByDCNeYtkehMM7xpgczl5a+7MFl+TH2TkpTVjfLvGyIdw9Zbtm0FBnaII5LM4pbt4+MsrCNt jw2a/8hfgpl/lIFeVvnYaTQ4J1UlaiiEtBEw9IEjN09wHulmpu39X/bOA1Cvokr883pNeUkgCaEE AojSERRQAVcR7NgVXUWs2JUV2+rq2nZt2HtXFkVFpag0KSIsglTpLQHS6+st793/73fuN9/78gg1 /nUDmeS+75a5c2fOnDlzzplzzpgsI7ff74gEEuZ64B0VFEYQP02TKvOIw6A6EHTw1OlQJ0/rZ9Ls QuZTMzO/7e7Zq1gaNkUEkjgTzDrVlfXWERkRPu6JmLYx2svfhsDuJpZbXXaFwWmBAILYTjAz6GcZ D+gr30FA4bkY0oTPj6vTMnhuUms/OLiCkIeESiY+LYo2097wsyL/cBBfiJ8zs33EyFaw7cFu1Zp6 KB+7+ahts47iX2zE7JUSE9clgXbDSweRTpuaECmY2P/gFEwXqhDfjmsHpgFEUGeBZ+XkJhHPyX4r /QCpAzATRgqxMmEeCqUZthLAHLnONugoa5Joaz8uXkjcTJV5lmyl8GL/54nC544R4ez3+GoVBzrw 5atrwMQq9rmhndQpmK069sSgn1j58HUIafkh8VKiIIExSYws0+Q3nfTyddzkjzjgs2plKcr+A9h8 dzCeWZ7j0lDVOdmnfrUJYjsV4c4kNvn9zJDnb5X4XpqRREb+2H6fa+In4yEudyEwSNiiXMaGMBbm OVy8uOw7udySFtn/0hewhhf75fDAUM1vJAgKHk2YCrUx2UlfNH2cuzWmE+yb4rcMYKKzq990jPlN k98wmIHKDpRe1f6yLVnBUU7iJQG2jnUwJMLKiR/oRV1yZC/LRL8Su7JXYe1NkkOFReJghL0ehNA7 1k0G0Ii6VPDL9jgx3njjDRunL8A1wzv6lTLESemV+G//iNsZv+2H3A7bkGHsuz6zLfrSOT/KqGfY y3BlBkdc1+E5TKQsP0ZwVB/8ohs48gQ45tgHDuPQUyoa39ZXceedd8a/qlQO+ab1tNyoJ2MwFE4V +mI7xDH730Q1KSd6sxw74i+9Owx9cd9BJo7Uz4Ta3007eOLecirghDsL8Q72wAPLynX3u6HokiYH 4yPdL2m8bbJuaEJ9JWjEDKLVLliwU/hEyXhZJ1HS74XJKSc6SefAPqUdHt9zbnAO49DkqxqSeBJ9 CRNKytqQvoi11KXS9vumLxsGbfEd+85+z/3svTElfG0qqbUCiHNYyYT71DFR/uozyBUMMJuZE4yD 0rzEDIu+p99qU9RQDlEFWyUNY8opQwYA4/tBX0CS/gxPPpTxReWU9EFc9Lg/+hJKtco3nDOk3TL9 mb5MxxQpJ4UoGfCyTzRJoh3SFuoftISMOpeL78Jc+u+YVPDRdMoAL43wSaJOHXPbTJRzBt/SNK69 w3pWKxInk8eksJygLypSVWaKqkCMwBGRGon4Wo/JKP3RqIlk20zmZbco0WcT8OFnp3m3FAuREAGo 5BOEU22yLll48r7KUse0SUZaXDd6r7jv3ooOWufFnCc+AAyG5K34DmgD3YYhsBGV5FgxAl/mX7xt PWy3ykVpi4d9Ikwz3lXpC/mtY5W+0O+19CWb49UKiH4j6AsACHyhfPFPvDb5ffveedA2yq86luUX jMjnHlImeRbbxhvU38N5mH/2LaBkaAYDHr3C9SjzIi+B9uC0HYH/Y/c6lE2YQdsXcsUUGccwc7f0 x4HuXoPO4B4aeY45t9hmytAdwKiWJgMLict5c3LH1vSZ06AvO7J31nLaB31hSAlr2+/cIY11/hLv bbfwsHs8cv97bhLvxGmT/WCfrCUYSCeCnibGKzHNk7at456YpFAkvbV8+Z94R/jwzxTBQZhfVExb li85jTbAq9fjGxiVtL6yzAITKE2banTE6+Ap3YZCqJUKXU4CJ/3N/K3n4oVzmOO/NtlW8aRB+gKt j70I+b4KN5aOEaTGUhf93MUnOjDV061C7LCPFLKdBAyhLhz5v4kJgrGWDcNamBwNxa0WRp8WEVKG 3WQsecO15jSIFtxw1w5eQ4hLVPIkIfI1skLVBMHlUcwZEhgBzzIqRXiT5gxLqOrTvG22xkb+lpis 7TiTDA3LtHQSHYN9cU4+l4+uc7UGhzsZT+/Vk5egKCUwwMz1EIIB2uKUOgyBa4ITXEOEmLaYBKBV IMUM/CYy0czl+xtAFTH5rJqb0n9FBU1pT5wnVJl1J4FxRw1Jx9Q2vrMVASCslHAAT2NA+jzKdQTE oqE954pKyRhlbbQDwbaLvDmpIZKRMDmB77LLLoFsftukU2RObqYrU+9gVHtpirDBnHsvT1A5vxUV wTu6iIRI1wQsEWoHEZ5ZmwF2eSCKxP2BhKAL/iUQLQkX9fRQAGlGnRJh0S3EbuawBl626VcQGkiI ALbU7kTXx4Cdv8uuOEKywmI/gxsOKYMJNNPJMubiYgM24grQedXONjTAPBjJhnENzBE26H/3NMoa EiPGxGokA7sfJl0nYL4cdZJAzoBR6MF3YwLKfLiSghDRJvvBw0lUApE3Ktbp3L2PTIZMdSCqjVNj M3fu3OjnHIksR1czr31a26+lRkjlgM8ktDDvDjFhNw5hAD8cV+W+D0ASXzvttBfsvH0ysqrdG1oc 8DJrbsRN8SJr8G2L47i23z2vvW4EZw0Vbv9BKVMP/l1bo83Q70y5JIeqlkYi70VEHkw7QAJu8N+J 0m94SNQs2+/WJgm3xNiUmXkZYo9BBUDbXEnBZFXOLVO8lbbU0hcnExnILNR0KsxRl4BffBrhAXwa Jw7/NvNmpTsJyS9+29+wOQhXXIyjWKBvc02j3/0WjIrlO+6FsUk6YFJx4SFRFy+i87iWTs7BCXjN urFQ4rQjIDpBd1RWh+PlSX9U4LnanhlhJ3brUEYcJMITUdoMEz3OaoAp6Atq5/umLxv2qxOe9EJc sF8s2yMmHglTJbmKIoydPMVP/WRkpNUAOu9ZPx3E9etTay2O2f6gg/RrRCK0/Cokc8nCuoRuxrdM O+1365En9F4sEUzC1hQ4Sl1CkObXCdx2BD7kDiOfaCbqxJYC0gHa0U64X7+7etmSNH/XndMUrxkv mOTGXGRXGjxGdsbquaVErqfwCdxCWM0gchsLaYYCkSkze7muBocRPsPBjDkmy/4KpjjeqPyxon5Q yiZdU5EY9IUyeaZCT5yppS+uPrlx6b3pS0l/1hCEJ6eAGe3Pyf7PMMvw95nnPjPJVOm3XK4kNaSt Zs2GHrtZeblaNIrfKlVEOIjsjC+DkUzhYLzZHuZv+z/PNWWuDf82Qo9kVFug4TJjA9AV/TCDvjBg 89YSwlX8kPH112sP8eSB6IvM3Ab0hcpl+tJHhL3J+0DlGgadhElxo2ppbdk34AD4Ju7ZP86/JX7k rQy8KuGnT4g8yBATpeStltErzyFKlaSwJOyjPeBcCHOVYdisAAU+DuMHPNqLuAJv5NiI+YLr7tXD ad7srQm6NAat70gtzDdGAexsA/4Svo0kwBZ0CxBGkq45prMCIFZgYDjjWryhLSo0HANVTg/GtRUe pbQ/KcsRP4P759KxYgS+zL+YI3iPGjyUvtiOoC/UdgP6Qv6Sx3L/OOgLNMi+z/QlKzBDSHCwT0rW 1eRqpYyxK1/COONL5l9VDuZx61guFQAq7F3hdizqy1f6WUaRgEPeVRhWJg34HW7KcDB2i/V8d9Sw 9J1pt53mp1WLV4VyWUMSR6CRo2l0vFwXeIUVDU/EmxJm8hc8JrlNikJ7wJXrXM8BcIEXoA3SF6yc Inp1DX2p4A45opz8R9B75P6fuBZ/y73WzGufzHAzeM5bwX8VzzvvtCB4Je8Zct0NanMK/lG6IYD4 r/Jc/rUR66XAU5vrATxZ6+IcQFO1WC+IQB/N0Jc50Bf8pToBFMkoovZX5l8cMypXPUwKwM5hjpmN Jtqgcq4DvyjJkamOxRm3CGnjziCrt+7ohXkpEVhZiayAysis8lshS/CR/G5ZwkP9KyNAgcOYv8Uy M8yKqVZ74bWMc5kUXJSl1ZGAFAgE1sCBah6MH5ERSu2tZg02UAQQfUxuKtgCIta5+sF7yhMqwHwa DBCMjRt05YTZK/Xi/QoyO7hhNXm1NA/D4J4ORLjBId2OrxtjciH/CBp74dVKxBSMP9NoewlkHeXU 5jQwscoDOqGOox1ztcPOFAEEqWQyLrmj2WI7kd5MEja1Bs2Ynkm02xlEA0x+Mk1DwNAB0AYzNIST qqaOwiWQON6lvSCJcNFkyQfCzDa5CqhQ6OSmvgJrzShL4qEApVZVZnXtah0iywmsB01UMwywmzNi MBrvNooVJM3S1P7Ex6kEJqmcl33gqpFBJdx/Zz0hHpuaFULqaRfwapeZQdNItKRWmGodR0UJUJC7 wC3EKK4JJmBxw5StI7H6fJoVfRqqeCtBn7lRaKNEFqEXaPDcg4y0dxzhg1mAhSVDt5cMdgsRpaKW ZBnBBDMCVJRNquYx5GfZV5SVE4AU9tFm74mX/JPI6iQ+a+asyCnxbIsQwoCDO+upX4MVpy90IjZ/ YDh1FA/EPZN5TWZVUJOg2Ed19eV000fYU8fMDAKa8FkGsZOd4fntF03qvC1TQLmBawrkEpEyvHTg AABrZDBgNs4ZK6REbBoA3i6JTxmHoMJgLRoqgwnI0zTznZIIRdWivpnYOKloYio+ibOZMAs3D691 /rdv3VurrYO92KTqhDTFGSONsneS/dcMAkQ4WZw9Te3Si+hDkYIyaJs4LNzKPinr4jc9JICOEyc1 k0TceyaqH0oOf4UypdH2YfDOscwIh9GOXcxpP9WN/AZ54GN0L/jEd8dwaG9mkqqzEiQjMTbhkd1o vcTKsZLOiFQOMUTqitBifcpJRWZX2lemUotnE02Osa4uwq1zbmCYEr4+9ABnx9UgEnK5viT6WHOk BhhPfDlR3HTG5n22rWMY7S9jRqfxAhwfg6BZpnilJridCSwgAH3QhKoVBk5mohVtuita7ZhBmU84 1NIXSEbgES8HvIW5fWG/5/6wr71vCvrC84n+t922RYjjo75iTThYz507B4FJ00VXw4BkMHllP5X5 eeLVDA0AACAASURBVEfiHQf4RUCT9Si7xseICOd3gHdDPVo+xogKkKE1o+zNBGNeDwPGxGdeuhca xCVfjtC+1LOssyWUK1C2RZhnptV6huKL/pbUaaUNqGDQpR+8p/IhkqHoCdHcvJUxZ3hHk036BNiD GiSEFfZca0C549cs32/HSrePyUNXBO5KB6lyTQJTaVeYIqPxrJfR4LnlyFt1s0owDcZIGNeBdFJ0 98sLglmiadB8eyQzUrn4oC/SFfPZ2RIJUr/7xzB2Zswot2Tog0kwFP44zIG01bpLr/ymv16XsLQY xzp1qeCF5XktTmh26RhqaMEqo4++GpsRAlPPSA8bgGKdAHq78oi/D3CW/lsfVvKYJhpDsQCgQEJq EcFURnjcCL502h0iZxObcfatTc1sacImFyA7+Ean9c9g/iWLotoIc7LMvSnm3mi88BcOJcD8ze0x n3W3T6UlBsPRhcBuda5sBCFknExSAZP8hyt+7hsnffG2pr+hhGFFetz5gzzxPb4lWvtlx0CsWHHh fkRTCJCE3xXzDBp6ymqqmCb6Def/KJtzA7QooEnvHHNueBqJ7wJ62sn3KXMNQau6pqFIhdLXyQDV lXQkNMISIYHEWFnF61ofTytAeII4GTK7hRX24BXs33J4U/9SYWbdTQPAWvo7vas0iS5xxAAKdQQP GWSOYisIgxXA0/QSkbVhm/mBm5390BEiVa53jFFOI+HWtBBplN6prabnBllpaQaWgJXGOCc6bwE4 fnHEjj7Kii97wCquIGLxMM+2IfKeGy93wAvijxLjn8eVZPkeZbIPnTOte9B/b9NBzr0NQQAxy6Sf hHMjgWxM98W/lrCnwrRlQnVif6DgrwCxHp7LJI8zAn/Qgc18CU/wnBVJ8zYiWJt/QHM+xppUhyKj v6gGBea5CMGO6Ckx9qAB8U3hZfPA7yFwyQjXckcbpAqSxNxZEWQMmGO+ta56ElhC95MIUsMcfV/8 q8UECakpHl+yoF/WyT7URN+5RQG2C6FKwTXGm3SaOS9oCef2Q+08Ym1yEoW0BGqgrX6vpNeeMO4c A/DLKonq4cvbO1DUItx0IkgNyY+haMw8Qh7j0m7Hj7A2+Ztpm9dRJ4p3r1rdO5jx6SsU/8gB4lov 7XKjeqPZam1SGR48cZQzt8BLWeYmRuFj3LBqUWqZqU0liUea6LnfgxpwfwspO8jqvgj2vv0/AHWd ojleJcnDeJ+m8tdDQJa5Nctzwgk7YGHiQRbdPfptLABW0JQ4BYJ6EZMz+UwUlMvHyAaAgAQQnHaj sgE8F7fUCrbCaDajoRmO+7zTtzy1ck2Q5WCgwvKJ3h4aRYBgRSqQPqhUbr8TEUVy0PeRDDtq22PH 5bgz0b5oh0Qj8pZl+LraepGtXKq0SysJ2No+Q5t7M7ep+rxSvp1sknlVWySxF8laW8uJBr8/mAOI CsWYM79vN6nFBjGqqwdlg8xUNsj6laX7Hku5q/sidj63Cb/eA8JJ7FtSL7urd8r0kAhCyu7nmnXi l8PEWhYFgeEJoh1sPpOEGcVUP2CqVIpuh6DJTDP9WgUnBhDbEDLdfWvYg4AIMfwr4UK/0zcBfPNa ngVzbr8ofAaBpt4+7oO5VCuaPxYCKgJ4zAkwoDJfRnvDCTx8B8gIo0DIdLSsRncMgcebJgsk1cLH 61gVcZLiaMV0Q4LpLDjC4G0gCk25QSfRFFlWV7PI2IxJRWVCS6tAENoeluxHvFcCB2dZ4OLk4nM0 oZgGxKkTQwN+PEDW3miVY0GF0l+PbbzXFEXkYb4vbEuhJDMcEj9xJTSs5DUFscgIXd7iLxPCOMwT wgOsVOpetTpNV9iDWR9jwl/Xj79gB/UAj4dCk8Z3KTeq7ioyTRnFz01tlJPXfSVNQ9SiOx5yPuus yQKlRXONSORZB1otfzP+T5RZwsuP1/ZPQJcq2t/eb4Rho1bxvuHhNbXAyjP8xtTZoBogHwxEvXQj l+k7+bz8Zd4I2pdXn6LbyCUcnYDGmLTatc/rX41ty0xiJ3akbt5pIeLW7JlEBQSe/VwbMSn6b5z+ U4BCmAh6BfefsUEzIb8aK/oBDZ9UkgPcJANeqaNPg74wgRoquzblScYJRjwwWWdTvo6L+GO7HUPd bCg9DU29fgtoyVmBkZ46VmUgpQeW5ErsGEwiHrgx6ZX02XpRTj2h42mp1MBSxQZYTIY6bbPN7mpo IQ3QDHCoHnNKkyvgyGjxTJ9F661gn2mtY0+cqRWg4kXqJ2gyuRkdRYmlhpiIUKaxcZhBmOrutURT m057/DYjh7WFVCfS1dMfVtKInsBpY+X7RmZAgkkUe8BlTdxUoLlCHhMY+dz01MhtFi2043P8RtO8 kQ8fcGS6zRX0hT/CHsEp6Iv14lqNerTduZD+L5kMvsFc4Kqt/dAewLOU+0/ihf0/GQeGeqEdmNTU NzPHyQbST1Z1vFHOXROnkvF2nnDcaO6jQUQr/Wfzo6HQKpVroZjnlrcJJEoFwQT2eywQvlkDIAol NHiM+UuGjU+tApfmQJvrauhCLY2ghKBtwiDTDe9NpBJ/+2EoO4KhhL6g8PLuMMypJuQmGb9h5hvb 3hEMVtyMZwCROlZ6yx/hym9Zctk3kLfKyCMrMNdsXGuTGJPQF81cXeGp6Nqi3DVrVlUjHpYfKumK 5ZtoMpvhUgRV9LN4IsV9NFcxJkbq2NDWunaTEeGzB0TSdbxj7eI0haioMFK0kfklfD8toVI+v9Gk srT4G98CPxUESwbV1tmfaudhwtV2QMcBXhrAfFx0nCI5ptfWM2dD4aNPRctSTBbL8fPVjAzluCl/ 3ek5BOcqBJ1ve/ENnBaCk/SlgfnZGvjOevxL2+U3hLlzKvNAlb7wfCLlL1R+4zvyr0StjQ1by3oo bIaZPwNevtVNsUMBU3ns1G3y+/pMd7q8WinLH3Gl/Oc5gkRJJOJeCIcAN8YQvKn+dW2s1iPKQ1Uq /A+FiGuBs8Auhjbl5h5ybMS4sAI5yV/DZ5sGgr5onUTOXFleVpkYPufksUyToy7oS1xNwCfIPfXI aK3vl1FNFe7LceS3cgVKc22Vraaq4MK5K+LZfSHnjkwb+ePXhVt9nq8q5esCYOTQ7Cbhq7Xjq9It UaLzlDyMdG7yytPG+Bf7S75pDZGajWsgRjlfdThf8bAHH+ip+t1WkpZzYr1WS5m/2GQBSkCqUSeg BswHTGCFseE7odWIlZ9A7rI/FV6IdIOkKSpANEdEVAhzBRIloMsOKsMwOp4oG+5lhFk/tDJo7WSm JcQoBKsdbTttmAPJyUlEbKHTRQiJQPQN2o8weQJ0frJO9SLD22ciKXGq46Sb2J+ufHQwW4ZdaRsa ddJob1/FREH7a5AKJkhNloRFHyWTGk7r0BjM8IR2JCOXMHOgN8bKDww0E1x/N+Vib+1eBwo8GZ0l kiZNnGM8WEnObZSrRuNywGTO+UVCGQg1ZhIil0dlsFpcJWLQ2j9qSTWXU+Olg0VG8jEQvlkmwvJz 4juxZwUfj9UZig1GifY5mNy0zXC0zfRh/4B7SklW2eAR5Gufoj5doQpNODOixIQcPC3riyEPd5gA 4xocUNjWD6XsifiREbOJvuOADn8LOIYw9/MuGgvD+jaximWI306cGInKGn1ggA4VvYFqvK8mXDwr HbbtA+ECAlljl+kp3xU7gBaw4kGZRCDu6XPkJGKSCXElstoXwqkCuLyKFXXmnoPXftAxVuKZV6XK icI902De2nUyVwyUCDEhKgeQyq52xVStjtUQX81VmeiwLwICMESYshE2vm4Ee3rfpe+J/AQ/w47g XDZbKNf92iwD9WHwbRZhrE1ZQPE846iESBzNy+M+M4nXJtsRK8R8W03SGBOb5pOxAsWkNtQwhdVN 2qo06GRNLezLIEf0V3DwrOJG5WiXDY2+rZSvUOU3hClfim8aTnYaGzhGEjDcJjIWeGgLvQQXPbEv qvjpXg+UlZegfWweUmjKYNLUSrp66HBob2G8I5Q2NXfySz+ID6QqfZBxdlkVHyn3FHJSsW+kf6Z6 8DCE/LjiD3XUrCjDUQbPurmqTg0oa5AgMiPslzYLU1UYHO5C2SiToCZ8ZpR6wZ8SoZ/+E5lDyKDv QWrrJAPTGivumAKhATSct7gmExB4R7Xq0LD14r9gaFnr0ua+HJVE5CPOSua4ZI7KB75rXb03+b7P cgqaxIXaxzZwyyd9KEo0Bd0ADr4ArEN/UXYX1+SW/tKOVKcApVBIuyrFw55xB23gGjbYnDYT5qAn tbPXn8LlWIEgQP8A/hgXmvAomJj0K4nvU3QIKdyzzhXUIr+w5x4Hwzjoi33Bl7nBX+h5XXDwVNTv SEMY9n0ExpneBn0Jv64BFgOlBZZVNsjy7VvLj5UJnlik3xlAW18V6mA2YyXShiqZCUR+7M+VbJg6 bcr01M3vDH6jRQ45DwsycdO8+Za6Eoso6QuYA76XiQfQ/KAvmlRGPiwFauiY78pIldSZ8Uq5UbI4 xAftr5LhIyMpGDrq7Spc6MPNHwebTLMX0lRWnlmQJhQ1K3RYb4yNulLO/MBcZzZXePQltC0EJWXl 2ruMCRo0RiMs3zY3AuPQJGmFQXPY3pgxQGdD4wg/l3oIQuUc0EhdNKk01QpPmY7Fg8of58VMv4Im 8J54YfuctaQvnZm+5HfAWcdT2cNlU2FfApaShnBb4KF7qUUm2mXfmGyCK6TipmPI+aL8Hpmi94Cx ND8Xzl2VuK6muYqcV9010bJtfiDqUskv6nh3gFD60yUSVmDEPb04c1ozgbtE+k3dCOzOC+3SLnkc cETBzclR87M8VscrMGlQ+UyRAzAg+q/Z36Vy0fFHsTDUzpVq7vt717CPJrSceXmwpTP6udWKkYa0 f6X/o8p8ug6VHqHMuIWJMXOTioVK98V70T8AOM8vmTGUvrTG3KXCvEJfKF9Mr4C72rcZnrlvrUeZ SsA57Dzsg3qUisG/Al9XIUdZMVJhapKPC4V/5QO+Ir0kGl4w6M5LwZOqhKjkccz4z+SoUnR0pcc5 n1kGnC83LCeIIjCAp8BiSl+18NUGGJp+RqI8YSMulaVZZ2gL813QqQoNE3l8PgjexP5unEsHDMYV b1pIZX60Rmvx6Zw6bWpay3zQhdBDtLtYSBA/N8a/uhhSmQKjWvbPhvDNtKb0sdd/zNTNWHKz5fBv 4tq+8EVhANZFsmrCuCWsE2hb5IMGsCru6qDfCdeLEntKgQaFfLeCzZT2oMvj9IX5slWKPEs+z/Ou 3864ELSM79gOVwA1zbbtzYwHfaE1cbVF/bhodOKmY1KAjOBRPJBOlIKxUJc+Rssi38P4IyhKcIyj SQliq4mFg0p7/qkgVhgOkgfJPhL7q1iBEvU1rdgwWa0yZTBn3CyRPz+lkPygeuvBnJTll2VXv10h FuX75TMB5VmpjyoB5/N4p/bbExUuX89/q4WXN8wmMgVhoJRyZcil1wqlcZaAUCNPRir3dVCBJPFF owOhG0WF1NihZhikh9urx37Uh5aQoVO+PgG7sjT+2sZJycHpu6X+r2ybU0WUkduVfyv1Kpn+2oIq 5Zov8tR8ewO4yvwJxwoexFX55VyzDb4bz/mTv5uv8298r+Zb+b6QyHWu3qucbFBW7buVd3xebcfk lx/69QMXZR2YVUgjTHLNTBB2iITF+ThkD+mpXE5gYy5RiGWoccozMCLuaRJbTbwHGYqcdeCeaQwc sxSJxAbg8OFDTJajBsfvl+VxJ5h86+CkUtbFfFjKBh2X5XQncn3/mmXkwd9gfrPZrRSb2XwIfxkD boifvl+2znqDn97wsAEcZdvNkYUtv5vhUOJdec093zNF43nHVR0mI4x44lZzUWpyR+pK4tnsc56M MP4ssRHmWnYuoWnNxFQSKgOiOWQaY42CFUGZLOe4YfwbwqY9Si8FBFca3SQzmJaQ8OVzynFRwrFs bW27Y9qxDwOmZds2aAq1KpPvTk4ZFpPv//+5zvWaXHqAvPamGT3sQxRVTqGZPmT8HBuoCMjeYEPu wdElCE1EkVuPwoF3dRfIDFht0eV5Ccd735+4U1vXEsYVWMn4RY9zTabMFEcbos61cH6Y8LWcXAHG qt9w9vSWJUaT+TWNweyqaIuBQIYxTs03gS+R7V5/2BYCRaCjjrIrflgKmr0IO1NYmYhC+C5uM1FW o5ps8QyuSQZ9FCVTq+8raXLdgzRZz3UnyD2m+TKMuW5b9XDYmmkOYBvW3sYzV6ZRgkSjKnSgrFxJ f8rzKJLTDGurU5l/lAICNtalfEcFgXtx6TPlPDmEMDYFhtN+i6y50PjNfcL7JLKTyvM4rTS8IjZX npdP/JvfLt/jRu0H8nl+mH8nXo8zs93HI55Yl/yVyP6Q/+RqOIv2Eo3UAFSh1ArGX9NZvgC/pflm CytsxjHobAXWjLUCK406+AeVRAoQsRCNMrIHX5kO5qEGmFi1BgMw4kb5m6kkCF7IxkkBh9nXSNNM x+wwZvxTWCUYgSdpatE3HDpJwzUPLVQw2zIqqwlhHfTUwDEK1eHgIm7cJ5DuDaPc5gyseLX2ZqWs 2lvmrX6i9kH1ZlmajybdKh/U/o1MGY823n8Tn9iw/hsrO+fd2DM/m5/nKkS+2pv396LPzFvNU9Yn 8wriILNQLvr/+2+uSm31/Wi1eveqAfXdgIe8V4ZNvjG5Lha40frkyle/WOIAWLxpaRSNhlrx0FxF X/glhCcdvRw5IUBxr6YCJcErifrkr09U/gE6diLj5CLu97p8bVLZG5RVPvOWk1Mmchtk2eAiMt3v H7VHoUmA0YoVDnK7yiQCV8HiidqQSQitP1d0FbBswstwmE0EJZJ1ClYhZU1qS9TEe2UHx+XG/lTa 8AC5Nvbmxu9VYVJTn+o9XylRbYNbtLWEcU2RG2aoeTDpNPLVfKv28YMqY9K7+Z38W1vewzx/0EXB CRq6urSrgaRVgOJi4INLMh2V9mzw0Rr4VpiYe8H7wX3gPnOhv4ln5TQJNvn9ENZAWIc935UMKAPK m7HXGNpK1KOx8ouAx2Qf2lWYolEYJO2RLUM/R7XIDQZCiC9khUZcRNkxePh8yUA7gMxpC2v71vOy BE4mpXw/6wx9bL0RdKpwlKX1czCU/AYWV4RU3w52j7yalTXDkCg0mQS3YGjBLItNL6LdbUTDimdU WLNewxd3VKKSbkiIy/pbhYn+4l6lD6MQ/lSrmG/Eb/nuBrf+wRcbr9dGKmFGuy3SxFvVM5416CfD 7zirDvUtw6zSNbHpKvb2MO2x0ppf3+jvA8Oi+q14Xxjngmp6hHvV2z6OiwcuO5d0v7+WVYWBOUuc tHSP0CYjzITwpBZXxOSBTOoof9qxkijfmVyf8rqAKTbJTOcVOq9DePLEb1OkP/Fl/3hRQTw3aw5N js5M+BS4shf5yNOAIGbW0ONRL6sWCkEHgZ8tl7Mojzcm4W6UQRZHtSDI7Q7lSFzzxwcoLjS1V0vs CoRJcUsNckfW1sfdB/qTv2g+a71h8k5ZjxLu+bya9d6vlAVUM25Ynlf384ink/vr3u8/0B35KE2B NaHWBFEYayZpOOYOzOTthgGlW37ZsxT2QtHH7+qTB+QBpK5VIwPcwzpB0aiNlaSghhLVKM/+5Tl5 x/DnHMAvt5mwpG2GJiWnHEsz1i2utTQZcIW5rNA+mFUco1ZWwZaBQaVcpQ/zpPCFuj843PtZLoaP V5K4lc/9vfc7tU83pgCu1pGM+XyDIqOACv5s8MB79/7eRJZ7P9ugLlxM5J38pLze6PON3pz0fs6T f+NxWZ8qr7CRuk8q5e96mauSfx+4cOr74DM/cHEbyfGgi79XxhKWD9zDG/lo7S2XH11WNqnhMnRq Dl3sAH3EJwG7saPScJcUY3kUrtjofXBTaG8Msw28gJXaa5dR1dyHCRP3Y6j6h0PLIPe6YSaNGzJp DWjhdFRkVzjubWwIx+2N/8l1rTydQADPJq6qL0/KHxqB2lWOasYtJw8bAnI3JAWGzLggZxCcQffb zSWJKDlN4JHL3yaV5y4ydUZkOduLKYQhXFk6b/Uer2s6oSOpeBiOtTBsGy/VEispVufyxcR3853y 9z5wuwbfJ6P5hu/XXEVGymMM5K9pyuHYznVduZLxyoXMRewjAzPSBnPhCnSYOMPQuMdX3tKhpvQt p1UIlGMiX9aHn4PsebkXkYuXWK08IlPGIxun4DSIX0NITDK1IJ0h8vsIHmAEswdKzj0mTXJzcosR L9ewT8y9knN5ZT73mSZ3BlyJyBAOYu8xsa8jyMyo+5TF3n/2RVm+UbJMjmtXIB52qtRDB3IVLBHy GsZcHkM5srHSrly+MKuFWzmLlsJZeT+P1vzGxG9+1xz3mStnqv2dKOKfdIYLhGZ4pKZG/W3sg0bw QkUNvBjmTe2sCHW0Klxh+tXs/ko0wGUk4OcikDxGKOoUlIPeOsZGUy/R79hrJPiPDJMGTLIMelUm t1DA7Ba+RZDolqHZsNqsJs2aa7peocRaVke0K5PiVGXeK8vb1L8b9l5tN3k+kTbMN3G/PMvvTb5f YkaGxL2fbrnz6ITAJmOEfko6izkWDMdq6FSDSgz0oJsuaekjGrISh9pjcmO1x9Rsr7RhRsej6Z0k h5f0S9JGP4IKQFAq82NJxBsghqxIuRQ+k71umDEgTsafL7VIEV7cF/4u6eGgge88nPf+LhV+xBRi mGHt0Y2U1lJRqTPv4Zitr7Ravs0sTRKu3TtDLDWqoMl9YJxK2XqcSb/UUBoRLAQt4BBhreHuYjKO Nx7s1OVXPMTJ6lRdud4Insag5X6FWfTN0lzXe1yQKj8bnseYqy1PJk07albQCMxiymFU9YOZht8R LAV3WYkLX0lOKVjl0gCRF7ek+4EATB8L7ml91iPgY2q4mc7WKeAR/mLlgsT9FLCZPBLRanCuFu8U uNsIoBLL0iV6wfCCV0ReG6343d1fK7M/VF59cp72nrLQDPaJiUS5td8sx1DlEdJK1Q8BP1GNLFvA 9eldXVhEuCJVvumqeVaWxAI0Sxul43ftWKk9v79aTzxznjNYTBM2Zvqf2g557/U0ZNDVlYeU8vet s0epBPHu5CcbLbZs6sSjydcTT/5hZy36kUJ/XIlSoOk3EmI0Rr8y4EPfsiAFrmBSSR+Fb0wFj6xk 8G2lXEymUiGrt84UttUA2OF/qS+55QyxXYCvjuC3o9LITaZbjNrHPTeiF1cjA1YFBjVQ52v5Wjav R7jS3DssbIRbFqI43bRU23sPpaSH+95D+caWvI90CMRQ25RGxg7yqDActPIWwzgpr2Wn8Ne97nXp tFPP2pSi/8+/KzGRVas9vJeP3ABNECJKCg8Mq+yhQ2Y3e1rEio4Ztbmv2C+UdFltDtHLoEnQozg3 j+FMh4f9IgCXCPF18+eD00rKBKLye+8Mkc/b5vD3QaeHlPlBl/qozOgeNO6d9OpXvzqde9Y5rOAy yVUUD2vX4I29uaUqbpSYpabbSdSAKt5pjxUomDKDKDCji8lNRE8Yq1UGwN2pdDA6lrhZpmzqU7m0 sOq3vCcXkDkBr/Oo9Lwm1b5X874jqfwWN2s08OXdih+ZxfhMDq76rnt8seJE0tfAlJlKtebWyfDR +kcZrEXfpwiJzfsdhJnfku4LAvYf0MPN05gDY/h/jqtsgLr+9Zq/pqc97Tnpnnsiy+b9R9peSbZY HMw4H2Mjh+8neBEcMjwuG5r24cxCaswmcnF1/380lXXfJudpBRGFnT73zxKPORyJ+bsTuK2Sr1wd DocoBFiNxMzr/OUQW7WqO/xoWnFGU1li0uqifF72YbRokmIlMlb+lGbrlZZX6lP7XEf92OdKnxrg 5earzputmMdOTvn1/Dv5+QSEy9Y65VYPM9f0R7ybC+I3Hvmbj3sX/g+/41YFBokySIEBCDoJ8Sxa qNRpqQS1gt0I2jMRvKhsi6t52fU0TC7Z7LeaXE1iMhJKU4zUwkkrjvv2qNuOiAcGNTCKqgefNLht FGykzXpMbzW4Ed9kU+qg9evJ71FNtTS/evMff2Ld8/HAXxcitccDv7ElxyMXAmLCJiU3mcuRNiyo BduKLrQXS5YsiQ3vNqnwzeDlCs2o0l3JQyYRPosVJ6hI7GcgJ2niQR3UZVrXjDAPD+KlugatjfQl shlKjih1OcrUAOE2FajUHGqWoWnD3zuJDBKSamM29oHIsLEHW+49LAjAEUydMSM2hnQDUk06XYEy dRludrNK9yYnrrw6ieqHbohQ/fcCyXE8duPHHp1ZSG4JMMDzQULEa5rq+HCH+zyxlWiXR1YtUCbf y3WYGGuBzw7GycmqwA4aeqKK+yE85TJ8gXOYtYz2pQa1dGr33ihmLlMMg09Z06ez1QHD2FTu6WbU L5lQdjKHmTGktmY1rkwJk4hHUWbf8nejEECLXaJH+NvEfkn0xNZbz0mrVq5h4+mNvrRZ3hQ9PRRB PDK+hVaS62bDciKAu5dSI6auxnR4MMnoZSajuxkq2yTjbKjfToNIRCpXUcMELKN+tQLgslo8TSFg gmGbWU3uDYbYoTFr1jRvl9Ws1MnIt47fUb4T46emrMoHY7zl8/v7VXhqRuCbQkQsI1cqvMR2Fnxz uLJicn/vb/yZjcwHpxn4GaZeT0r5Vv6d9PifdmkU0BxJdhTiY1TOfqK6ul+SdE2aKzKFPIT53rp1 bMNAI+wSV/PGEUbHtGoRHNwUBD1EmwxGA3zr714V+BgNBOZGBc7Gy+qRDJsfzq1kMJqfsIxtOfjt JVqayTL9npGXXYPyCEWUtNYHm5AoydIeUsrvPNT3HtJHtmR+VEDAYbNJyY309IFygEqYDfkdm7DC IdTaXW/SR/6PvyyB8MgDs7a6mh/kSXDNylXlejYZ77n9jnghlDAaI6s2ojckSjJX7EjIe+yehOLR 1M5k18ceMUGMeO4eJZFCo1OpQQ1FyHWZ/Fu+VMlfXgQNuzci5Dz5t5K58pPL3fDulquHDAE5G1AD PwAAIABJREFUbAaPTtH6QDVhEuMKlBH4Btj9+v96ClS9VyUr2FQzOXpah3+TwsP6ASZxGtjChsSu SIHpMTG3ECSlDS2nWlVhoibTQVKKK/f6yIY3NkBIcdYb/k5OMnXlfZkx9e4eynXlTDzRomiFmnMO mVqvNXLRCDcnN4q1lKWLV8b7KjgUomQiXWmWR9DFUe2/wrFMamFkP+6pod2SMgSqHVC54XUFRnaZ IbxIa7rXYpI0yubEM1HSxa3N+0/ZzBgDYmWMk0ktGnES0EQUM9/efvamw/fJSI7OFQ+U3LPksssu S/vuu2/63Oe+gOkjm7jDOHey940huHMy1Et1nFFuWS1rxOEkValYP3t+TTEAEvdWr8CCgrTozkUx ftx8tLsbE91KXlfXIzmGNpI2ercy3nJ2hadIVEjGX4Ggp5dNgal7S2V1rhyZ+Y38W6l7vowxawvL VlbAXjbUi3yj9pfz2kfVompO8vOH+1tT1MM4nWjjCObDbtrazOZ+HR3N+D110SfNBIWgWKLu9fcR wZeJZRob4rqx+iArkCPDQAOh1GiJWrmIDb1EDZ1a2Zuzf81qNuk1rPN4Wr4SfyjRgE7ThG9Yu0BS hNau9Jnm172rwImwjNGUuR3BndXIyDnxh3XEiYu/w5lQyPCfKC7DJv+WTzb+5Zyn9neiJM9y+ZN/ N8y15erRBoGN0rCHAgQ1Uu6nohZKwizTIDM4Z86c0Ho9lLI2x7wOuTwoPTfl6zgHFm7W6s3YLZ2l 9sV33pmOet7zWWLHFh2i1sS9tvop/LZiXz4Lu2Lsy+u7eDYtHfKUp6e/Xb88Ss27lEdYfyawMYMO xEfiMdQt16C8fd/koHwevhvlafx13tug8jXPak9r21d7f8v5w4CAzAkTWhc+BT3szZATyj/8tpGk NoskGfEQg/j1x5mWpFlPaXIqM8zu9d3r0otfdBQM3Bz2WOpkU+WO1InT87wdFqSTTv5VvNM2hRUd xkRDhUGqlFr9QmSqIqEnFbyv3jOHXHflxgb3N8xfspDUNd8mAl95z/c9SGGzU57mu/HFKHc8rVq+ NH3ty19Lt968BJpXavetUy+rxuo3DAjiHhsqlD7wwfczttvT7Flz0ldO/Fa1imXpW/5uCAEArJDJ MTaAMA0tncF+UL3QU83EZpTbzG34ymZ6Jc4FOll/TsrRk9LVV12VFuy4U5rGPj9dM6YGnWjDmV+B aOni5THU7q/JCu1GztMixDnZDcAVolR4alZbJlegDAYAdsfYnSgx78XofcBPdDc3kVyf/nTBBWmv vfamjLb0gucflZYtW81Yr2fjSRzTqL8rIVGWRU0qc9LlxMc2cvbZz3wubb/DfMgJW62jNJwxc2ba as7s9P73v39S7gwxb1NRgZmPSTl5GhTDx2Wq3Jm4Ebcd9htPuQR//7lJ3suk+V5HhxYL69NJJ/0w bbfN9rEiFOZ2mNztuec+6cILruA53YESS6VRM3tsocmCMNP/Kn541kHQCaFz07XXpgOf+MTUWtfO 4mND2vvxT0j/e8Xi6Mpmyhtz41zyZfxyDlt8x6J08MFPTlMwBWyhPm34Kq7BPL1/oMKn+Ibzwn0I 1Dx+SMnuyj2Qfx9MAf93eu/B1HZLnv/LEKilOg+rnjoT5s2pogAYQk3M1hKlR+3Xoz2pTe+UIYTA uDGedvwKUm5e+pUvfiVd9Zer05WXX51+9j/fC8XNL397WvrfK69M1157QfriFz8aTPUMTLxMjZhx sEclocy5gPZphhHL5y5XQE2G9cGoTAJqwXPylmRWwhGb4EamCZLTs64/NIhhquFL1LWanDW5NkKg qfTrKJ8+bAuK8vUtf4UAY8VJSBObHHwg9+HmAKAHYobEmmYYK1dh3E+mGabtq1/+Urr+6vPSS150 RHrhK16ezgbfT//9H9LTjjgyGLtq+417XsW7cjWqChPxP7Sg2uHjG8LjCXws0qo1K8qsfNdn7oEy NOigsEZEx+seijPjPgQLojaeR254Ohy2dSqGHFcyGewD1d8XzINu1NxlHJFdLpTrcfL/4he/widn CQxmI1rfclVKxlX52B3NTe6b8opXvCRdfsX56TG77JqmTy2d+FfhM2rK5laaPaqEenSnmvZz2lCJ 7qZoYcAOj9Af1ZCqzRJelfr7E6f+ob2OK9NOO+2UzjvvvHTBGeelGa3T0ne+/710/oUXpF/8/JQ0 a8bMyNMHbuZUq4TxXvgSQlve/e53Y/q4dZB2haj1+OQZiMEPjRF8YHBgLbkNzADec0/oj2I/qdDf xCpQTDnIW/pdjeMbc9BBB6Xfn3VW+ux/fyYEMQNIRXG869xTsCu5TempmFCI27V1Kwg+JRPeTWhs mXlXhtZDJGIvtUrj3bT0FUe/Kv3+d2elL5x4YprGJp0XXnhRuvjiP6d3vvNdFUUHHyFpKh+pAshQ LrqsXBMKeIRBW45YV1HKNo4POmdyoUl8ZdJ0ZS4HxHCICwtXkI1eaNU8etnoWDHEVDsn5qmzDPYU jylrInqgd3Ke8inzdkUR6rjPVjvLl6s0feCkX1O1/207kHzxC49Kfzz33HTJxZekj370vQi6C9I+ ++yTzjnv3Gr7tXTApY5EA/m++9eXrnWlufLsbeams3//u3TFJWemX//iJ2kQU7+CoFd+oruvFx6G wCbQ5+xX1Yfyb96OO0AHf5Euv/zydPJPTg4+RwGqk20rBsuPsZoFf1hRrq3VB5ykMsSU4SAMMhy8 nwNwSRMzDsn7iG+upFmnWiHNd0Jp7clG0hAMVICq8myI9gQOgAdGRjYtXbq08rT86XZ3aJL4owue Pa/F1Zb06IbAFiOSTex/JdCSjE5oDSv0P0p2x/nYIR6qGRHGuNtIoA3tL/bcc8+0516PgzuAuWoa SvO32z7tvNOOaddd58aK1J0L74FaF0x8MmQjae3qNWnKzOkRWMKIX636XsiZyqUxURjxb6B/kKhN RPejZ9fBuLXjk+bqoBTDENH67ju1DeO7UU8EnbH1RFRimX4Q5rINZ36TDN2srWYmI8QZscloSnUQ PaMeGXJ69do+NKGdsYeEhKi2vVHAlj+PXghU1baMDBBDBsT9SLK5UTOM8LbzZsN1dKTtt5uXltTN SI/ZfZc0jbwapYZGB/OkONGWNVZVx8Fbp14wF8bL6HUthPLXRGh0tBfFBIqaChKuWd3DqtZYMJdD wwOptWkaz3lMPRph8tZ2r0CQ6SA63jQ2ZeUzoPzanu40G+bUSbSJDSELvqWYZKjkcb5Vj1a2ua01 re2DaeqcnlbDDGyLMFhHPUf7u9OM6bwLwzhaiTRo53fDYE2bMiOtW7M+bTULOxqa5Jjbd5+9OcdM M9rCO3Bys2bNCnxR4aTCRcFLpiLvqB4PH5V/MmWd3Hg6u4pnk59tnte2NHDfE4lqJU3FL3IqwvZI Z3fabt62abvtt0+P22OPBEaC26XQ3QkzK94410ydOjW/GooZLw4++GAEsZ1Zgdo6nvUzRxgBVnNT gxu5n1Mb1zgfEtDFMNbOFUSAxcZU53+ZVP2OTJoTtk9pRYBtSQsW7BI4/ZH/+HCaSUQ/BYNBBlUr CoQx+kchpIX9gtYjCDWxeiR+u3o4ONgfwpz1dRwaWEAFUic+j+6NpkBi4CXNYLfddk7amhWn2++8 I81mBW172j+F8WYI98qQjwATUzq0VaMC1HsQE+G2znIljALDFLiBca1i13fW9AyldkwYTaVfHd9D y1LPiv8Ic3MzZY1KHBylNJuqoPhhnyMimixefDcrn/SJSlGSjHooSONKplrGHpFQ2lVJCgDtlQir y5evxDd8q/ArM896hFcVqr7jXKsQ4TF79uxQqDywErqewBH0OU3vY8W7k32ajOy7z367U/2G9N// /eH0hmOPS9vM2yV9+r8/l97xnuPS9Bn0FXXTuyA0S/T9shUDqWvr9rRy3cq0DYJq11ZbsQluS5q7 88w09dbF0MTm1Ng2JQ0Bi2nh86mgUaTbb7stLdh5t9RJP44gYO72OPgZ+nA9eKVVRa6/+7eZFKQ7 Aw/6WVGdEcKRdE5618L31q1bhy/p9BCUhJtlKExus8024MVoFb/FHTuzFQsHh0w7Qlo/5p3NmOc0 w+TYJyp9VU7WAweTrJKBK1uI6NgHrW4Fh4aHerH06EjrCNsur9QcUQ1TmjtnbuCk9wbQvrlJ8Z13 3U09tgUPEJ0pp575RDhmPIyPbPnzqILAxCh/VDX779tYgejhQJo8mPSBikEMF7ceW55xtOWr161l kiIqkpqvcmzz0wThH4ZI4AcjYYNYt7d3oiUaSGvWjqS9996HwbsgzH+mdc1J//uXv8CE8r4TBqt9 H3rf+9JUCFvnFCYhBKNjjnkDk818JqWp6agXvSQtYvCfcMIJQSSmd01P8+bNSx/72MfCtENFnRpE IyoZsnQWxPN6lvA/9KEPQFBaYSQbYAJnpU9/+tNhqjF1aqefLVcLqOqWtAUCG4NATC4MiIkx4VTH XYQRnJ+Y3+tgklqTliRuJ9M9wGqS3Bv3QeyySLkyJuPY+JEJ9fe/+106+uijY2JtZKLef//90le+ +pXI63CagZmTTNo0AnC0tU1ngt0aM6jF6RennJkOPPDJPJ+Xttp6Znruc18OM7Qu8clYCepftoTZ dTytXtOT/g0zu3k7zobBbMUnqzO9+FnPSeecflr65c9/lmZ2tKadYRJuuvWuqNPPTzkZBmY242th etlLXsZkjVkiTGNX11YIZ43pbWjK77mbwBg0IyZ9dfmav3BjmNWuZcuWhTmSKwUyEK44nHzyySE8 xQpzCYVH2V/7vnJMIM8kGDyypq4QWmwheJJRPxos4jB3aKKlT+AoSrAW5hSZX/E9M6jiloeWDaZF ixalHXbYIRh5g9PMnz8/fe1r3wi63YHvoQyrgpRy6Jmn/SbNmjoLJUVXOuJZL0xLVwzjL/W5tDWM fiPM54477phO+MDn1REgPHWkERQOwzDLHZ1Ngb/z52+fbrv1ztDjnXzyz5h/mtNWW21N3VrTNttt m37D2Inw2dTLVXZXwmznehjiXrX/3mfuUkFiUpBoJlCGSQVME/5vbrCtcBImYxVhrt+VHZ4bYCL8 Jn0BoUTG+a+XXJo+8dGPpl0ZTy2s/CqY7bLLY9J7/u2DwIlw+KDPilU9qWf1inTgPnulDmCkSb3C 2q9+eSp1b8KKpoTl61//etrUEHPnrrvskm658SYrz36XfdGen558SvqXw4/kG/hw4nR05LOfk773 wx+ldfhqicWtCE/+nn/Rn9PcbeaxzcvU1DltejrqqKNCeLrnnnvSN7/5zfQ46IrKk7e85S0hWOS+ tVkbT/Uoaiqrj/g5dUCbEubBxRhMRf1QuuFvl6Vbb1mYDj7wqenJT3lCGlnfm6644lpW0qC3yIex hVQTgCDE+SyEp4suv4F+fn8EAmuiLU844PHp19/9Zrr5+msRMhDS8HdXoLQtgwa1onOs71EvfEEI KQo7++69d/rS507kUcEqznJ8rwYRwFlRor+/+JWvpun0vyaB0xD0f/C9H0Zfi6tvfvObEZa3DWXS D3/4wxCULE+BS+HpD3/4Q3rmM58ZK6rSSgXpb37z2yi/2FQbchpwRqOQBddrr7kmveZVr0TwBRfh XXznNa85Jn3kPz6Wtp67A/2EiThtUXgaph+nz5yRVq1emV537DEIxx2BL3OJUvOqV70qffHELyNA zURJsFUITw5R/fBAqS3pUQ6BR9Ys9E/oTMdQPvy8AM1AjfHFnzyo9elwAthh5wXpuLe+Je2y664Q IV6Ap1ITvd7ZQAdzE74Y28zdDiHnI2hzhtK552C2ccrP01SIwUkn/YSJjQkmJC0mUTRiJ/zbe8Mu /p3veGe6+ZZb0rve9Z505u9/n971nvdgDnhteh4+V31E5zmZMs448/T09a9+LV2OEPbKV/5rWrhw JYITmnC0iC0435zNe895znNCE3b2Wb9LV197dRD4y8j/nOc9L119zY0wj7arrOqWv1sgUMaxqyCE yBHIXwMXZrgxmI4y9BwIj3ncIPjo9o8OAWWmznaCNVQUCnBLMGrrGBjkpbibrr8+/ehHP0rHHXdc evrTn57OPvvsdP4FF6a3v/Nt6de//nV66mEvZrLVtAZmgDFy2WWXpu9898sx6b3u2DelX8IUvfm4 N6Zbbr0i/c///BRzu3vS5z57IhMhNrGkDibHFbfeml72iqPT5VddjfnsielPF/8hXXXFNWmP3fdK x73h9elTn/5k2v3wZ6RTzzgzzZk7jzFapKceemi6/LKz01RWsD75yU+n22+5PZ3J+LrxxqvSJZdc nN79ruNhDNqDuWyAaxsd0cl+PJQd5593fjrsKYeEpvOvf/1r8nj2s5+dPvCBD6S/MNY0+X10Jdkg D1P+La/ib/hOgAzV35pnm/mpTJlHNVUuXJkQz9QsjDMWjGCW80XQJsaJKQsQruK4mqPwdOaZZ6Y7 7rgjBPLHP/7xIaDDR0bSn1ZByrlpn333Sn+++Ez8896YlixfkQ4+5NB09XXXpp/+9KfpSkLGH3/C e9N3fvDj9D8/O4d3x1mNZf8fhIJB5gxXT4YwHV+wYMcQzg5lPKiAO5BVr2v/dkM6/bQz0guOen58 c/VaTLao/BADdR3MamMT+w0hOGWTLn2zNCN3XrGeBsrIKWODm/p616NcJWP6hFlvZVVjBIVE37o1 qX3qlPT5z38+LUZp+DlMDG+4/m/pIkz/VBheeuml6V9hpO9Z0pNmzpqapm41K/32t79OJzOnTsEf 8yc/+Ul60UteSNCEtShBOsOq778++an00pe8PD3ryGem8889L83fYfuwztB/88Mf/nD60pe+lJ7/ /OenM2Hyz7/oIhj116RvfOMbIQhpWuZqhcEvDj3kSemiiy+OoB5ve9vbWPlrYm7+W/ryl7+MaeKF 6ec//3kcF1HGr371qxCicvvv67cVfyNhMUzwh8KQlYyN5jbM6xrG0oXnn512321PVh7nsaozJb3g Bc9Np576GwRKVmEgLQqRMc4QHE8948L0rGc9l8iWczEZ/QP1uSDa9sPvfD194ITjgceq1MPyk+jj 0Ua//eWSP6fHH7B/ms0752pmeuGf0nFveWs67YzT00tf/vLADVfSWhDskYHTG1//xnTOueenKzHZ PhI62o+i6/LL/hKCpIqj733ve+lb3/pWKJSuQQCSV1KIFMYvpzyFrEsuuST6UJh949vfSa97wxsD tmt7StM7lXKaEEpDd9xxx3TWH85Mv0PpdsEFF6Qn4tOlYqAZgXrJ8p5SWWd7QLbFCHGvOvqVsfJ1 6i9+mW666Qb64Bdpv/32D7zZbv4O4c8lrE0GyMjn5Z0tfx+VEABJNyGNFePFSLF+fJhgLJVixgeL sZH+4ohDnl9cdPZl3B/lGCmK9Twn/AsRqDgGyO67m3+yDbXH5BZB5Asmt+ptbLXjhYG+/vLFEhzF wqtuLHadt2Nx/U2LAkIAsVg/3FcM8iY5i/7+3mLd2tXFEc97cfHvn/xCgDPg2c/Tof7i+ssuK3bY enZxwR8vjPoMUC69UnzxG9+DCnUUx77l7cWdixfzHnuHF9ZnpFi08I7iwCceWrz1uBOib0YGx4uV S1YVu+y4U3Hmb39D/ey7UQKmlf3b2zdUfPxTny1efexbi2uuXxj1fCT0IcD4JyUHxFAxPtxbHP7U w4qLzruwHCfihI88AsCeeBPciV+v//nJqjmsPcpEvXBcqAz0qPoQ1bbm+N4VCA88WsOxhBt3Fh94 96uKl737PcUdPF/BwZOiD1Rjw0YK5a314OlgL/kHilN/flLxlIOeUNy96K5i9Upy+nGOsaKnWLlq aXHIwS8qTvvV5XFvzbrFPFxdXPu3y1BDbFW88y2fKXrWkpeqDQzz7aK3+OH3f1nsvf+zipVcLeul Xt1DxfuPPrZ46SuOKa5fdg+90k3x3QwiPkI1LjnjNN00ij1e8oLiTt7p8/sWSM3vvOHSYs/5+xcX /f76YmCdD6xGX7Guf20BcxfDaNBBDN0rirt5b3FxyL4HFzvO2rW45MJLC1YNfMgY7y8wny0OPPDA 4gc/+EGB9jXuP6L/CEJABpUMujQa9Gk04Bfw8rnkKpDIkxXFVddeWjx29xcUS5fxns831ySqOKT5 XReYTGNGaOggh3S3bDTXtPumJcXB2+xSnPWni8lbGXPVto8Ww8PiijfGYq7gJFLGqec976iCFagC P57yAd/s6ekrunt7uAb/hm4uvv21/ygau7Yp/uf3lxYruL+eyvWP9AX4n3P0vxUf/q/vFiO9yxk+ 4jBVZOCfefofih23275YvnRFsfie5cXuj9un+M+P/1dxx6JlQRekDavW9Rb9fNfmln98OTq0GKED +5GUzOdhnv6BkQJ/xbjw2uOM359b7Lr73sXiVT1RH1trS0Z4OIrz1MrlUBCRwXKZO5fdcVv8FutH ijHHEfkci+ddfEWx814HFrcvHyx6gf1IP+0fZJzzzhtf++rife9lLiQN8H3r09M/Ulxy6eXFLjs/ trjsz5eU5Q+Qf/1A8duf/aTYZZddiptuu7PoHy7z+04fRO/Ou5cU+x5wYPGTk0+Jclau7Ym6DlMH jxO/8vXigIMOLg4//Ijiq1/9KttmAW1C6dUmTNhqLzd6XsKHUB9j1Gm8vxgfooyx0WJw3R3FM5/2 +OJnP/hpBVlGiosuPr/YbsHexXW3rQ6eYm0v9GjNHcXaRTcUezz52cXHv/fLYtX6HvgG4UFLulcU K6/8TfH0fecXdV37FX+4saTR3bR1+cIbi913nF18/ZtfKQaAsfVYtwZazWs3X3tLsdv83YvWpqnF 3/52W9D0Phptj/dA28Wbww99anH0i19a7LXHnuT5W5XWTaZ5Z5xxRrH//vsXd9xxBwuL40EjBUR3 d3chTA/6l2cWPzzl9CqJuGfZyuLUU08tDn/6vxR333lb9Bcmnb4S/fCbM88q5j92n2JF31jwR/jh kWeo+M7Xv1wcftiTI784hF8rMLXGRXH6Gb8r9nvCQcXq7j7aUrYjcIdntntLevRCIHQQj0rJ8e/U 6KyRyb+Ti1W7oS1vNq0YwoxvBHvrNuys9VcyQbtxRDefmx2yJI22qhhi01wiHKlzNGkWNG3ajPTv //7v6Re/OgXTu7VpwI0QteXAZvq3mGEceeSR6dDDDglNoE6v2m43tfCctfqPf/zjaVuWwvuwD3cf h77+HqIb7RDOxWoqb7v1Hha06tJpp50WNvOHH344y/SleQDECi2a2saW9KQnPSndcMMNmDrMjXpt +fPohoAE5F5EJFYIyjUEV5QcG2q6GzUXCRU4OM0qjHtCqb30fbV5Lj6Jrmq3LXVw1eowX+rFJ+8s HNZf/OIXh+nejJldOI0XqQe8HGUszcT84g1veBPa45PS6tX4503rSr2DPZjctKbZ7Bn0rne+G40h jsaYk7S5MShjavbWc9PSJcvx5xthNag9rVt0Z5gH/ud/fiJtN3te6h5aS51c/SJy4PI16aBnPCP9 23vfwR4pg2k147TqgoM5XhcrwNvOQyvNKkFbpz4c+DHgaN+JCS7Vi+RCgts7jI72s8g8nHbaYX76 1Kc+hTP+gaGplT5obz9z5sxYKdAMUfOYR1eS1nk8UBJjxKpHTqq22oEwWbUN3rjvn0FLDAKkjUKY ugKCZUtKZ3f9SGBjMM8q/V6FjP4k4pQ+JZ47F7XFRtY+ZcUXPyFXgHoJDe/Ac3xK9w88+MBYIV26 YnFYIZh3LuZVd929ODVheqv57UAvgYf4vmaDln/jjTemw556SHrta1/LHPU+TKxmx8KZi2fTp3XG d4cI+qI/sH08xCqZ564+NVOGyQASmuxpPmf0TrM6bgaHyy0eNF/UrNXrDCKGZwS2cNXLNMQ4Gmbs zN5hW654mVXv8D3mhWwxcffdd8d8PMwKVxMrHHDL5BtOL33Zy1ihOTUtwfSsubX8fjv+XDDx6cCD npCeQOCM+DA0pHvxknTOWWenT7M65Yq3Plmj2KmNMNe24mNj4KePYkJoUAVTFytA1tVVH+EmT3DT Tbekd2Mhcuyxx4YpW15xXo0/TvaFipfv50/sLQdM9Emz4OER5+z16aorrwM3VqY99twVMMQaf9pt tz1Ybdyb1Zg/Bv5MwVcaBGDF6Ry+N5Je+aoXpdYGTKulxFYS3Jm1+27pRS94PjRrlLLL5us75CqZ pnWveMUrUg8rkOLvtOn44hEtc9fH7ZLedNybwwxZc0wWOymuNNCcopkh1env6Sd66YqA946sFGVa l39tslYCrsq9/e1vjxXVTCN9pq+fMP3Xf/1XVv5+Dx0fwJpgMM2ZPcvHwaM456yHN3J1Uj8q+0bT P1ci161jA2gGUg5W4cqtkSpvhrcRcTUZz5ZDrqK99KUvxezQCIVl0qVL3NySHt0QcCbakjYFAlLy jR01ZToQm9k13WxuDlrPkrnn7RIwUgOCSzNOrijQsCVmwQhb3jq922Eiy6lFPq4e4rQ+7bLbzuGE qp2we0MNw0QuWbw4nfi5zwdh0Iepn71C2lolADqWDqT9IfxOsOizYklcIxAdj3uYOHfeaReW0vsp vzHCLa9cuTKIVhvmCVsxKbnbu4QygklQp2c+89npiv/933QbzqMRDTBasOXPFggAgWxaVQMM5+GJ BNbruKFkjxmPzNAq9hphi5FUGmCUOceIbnQOTIvmbGvvWYx5X3269OI/45P3oTQF85xWgjrItHjM mDErmIdjXntMumvR3SF8WIqbhjo5DrJRrxGUjMI3hfEi7g+yia++GJqHtHc2p34cxm+9+Za01cxZ mObNTWtRMkzDJC+MhWDiOmcRBZNIe/pu1DNzTsNMxGiYo9oM8o1p+HtcimmJgS0c2DJCA5gnlvWI H77FGOa+AS/qcEJeuHAh45n34VVkfEv/KCP29VSZ0vLNR+NfqaPHxjiUR+6UZYs3mlpoRjcwAAAg AElEQVRaUgNmR+JI0GEyMYVEEl9NRtnT1EmByWQgIAUbfUgcBzLsXpvWrFmHfw+b4VbGpnND/8pl YUa7dNkK5obIluaiZJiKDy26OMYY84PmgpWXcsQ0lnXStZj7aVYrg/vYxz4WZhVTPVIoGfiGgpB7 RLViO9ZAG7733e+GD67mf41IFAaI0c/W+r3//R+Iuvm+dXYOa2bzYINQxJYfjCHDpWey0keQF31t Dj7oSekCzMhamV9bGNu3XHddes9b34rwRsAHmHYDCcyevW2YrA9DXwwW0NlellKnTyblPgXl4+P2 eGz69re/zUbYKjBTuvXWhekrX/lK+vCH/j31QqtCKkSSmAat0JzvJS99GSaLW9M3+EsiWLXTxubW zjS9a0Z6/nOei0/l2rTwriWxz9IQMAis5o/vGNzjsMMOCzqU2+uvShTNEx/YB8pAH8Ci3lLl6DGB bgTY9evTNVfdQvj7x6Xd9yOoQ5OSD8/qOtOTn3xw+tOlF6Qlyya2zLgMs8bDURDhLpTWEChn1Oij qrXsuL6edNihT0mN7VOAmbXjNvhw7jnnpIOfeCD0GLN/FD0K9Pa3QUfsnPnz50NjCRBiZlILNnyO XAwL0gjBqObN3Sa9BJ/RBTvvXMVZ84m3WajRB+pcogm+4x3vCLxXKFUQU3jy14173/LWt2PufHma 2UWwLHDEfhMHNddbsGBBOuSQQ9KrXvlK3B5Owgfwa+mOhXelx+7+OPCPrWIAmdvumI563nOCz9HU 9cn0y9EIhgrAnyGM/lIi8r3whS9EgNT/0H0DEdRR4ImbW9KjGwKZP990KDBoygRWqXYy7JWoJlM1 aX+iGJyBho98DJQYqFWRxA3CxRnK2NCf7hbe3twOUakADvWUdux1GEzHHQkRSbJjONlxYpS1EiJ5 lEH8oRPek9755renV7/0RWmHnbZP73nDm9Jx7/631AZhiQ08/RhpGI1LIwKZYZZHWPlaj2asFaox iHa+BUZwKpr6hsbVaSpRjZp4JoGUsVPb8pF//xBOlSvQSiLMMVuPQZw9CgStTgjjtC6cjv9+2FNW +NH4tyJ0GMijOoQyHO7jRqV7I9e9suR3/wG/fru2LtVP8iDfd4NHGZH6gmh27DcS8fKZ/LgIZqOT 8dAF/+I05js9yBRdbeAiTssr1+GkDaOyfPmy8JP67Gc/n54Io6Tmz4lZTXXf0CoYvq7Ut7aDlaCZ MbHCXhLVkmiVg8sYD+K1wSrK2o34XnNnuvuev1gFhJjxtNW0JsZWM8FaliKE3Z7mo0HtHVmZZjI+ UyMfG4NOwSjedMvtMIFE76OobeS5xuE064bTwMp1ae48hKsGGUwXhIdTF075g6w0tdB4ha3QwqoO sSyONqJGTSEYyygrzU2Ma2mEwlNmgGVGFaxkFB4dSXrn4ZwAzKvnnJpiDoGhM2GYWeaLq837T6V7 bVGQU5QF0dZgeMfTOPS+3hjTCN2D0nHmEPM5VhRKxhkZrhz1sgogYynjXQ/OzELoN0y4YceboPUG L1q7FgGA1DWjFKTUYxiFrAOhq6VtO1ZQ6tMMcNJVEnsASy3KG+F9BLe69VRB+FNhVPdd7GPmwoY4 Om/udulHP/0J74+HAPSBD30wfGVlUE2j+G51MKZtqvsWvfxlr0oH7HcAgQwYL4yPJoQZhSWFMZUi +uuYxH3Huis31shw65inBWZ4x7lwaieCVYHAhM9KM/67FJT+il+NqzoKdafj/9KI0mL6zNlpMRHw rrruhvS5E7+E0vHutMO83SiDyJs66PBfzHvHO98WTPmrXvNqlCnbErnuM/hMHcs8uzPlk4GVKiS6 NLB8MVYZ6xEGv5N22u1xWIegcKG++p8556ugCYGTV+ZvTwQ5YNkK822/2ZzVq1byV9iMwhM0x9i3 //KYV3iSH6hdkYkXNvhjje3vwJxoQBPBEbrXrEyf/8JX0t0oVpvqO+ObLa1TQsgZxZ+6nhXED57w YfgAglkQ0KEBOjc6RBRESmvrnAEciDJhRRugyp0EyFny17S+b0WaSQb1XzSD1aZZhLtn1Q1caCeK n/OXbF8L3wft8C/rSkuXLQZUjcBkJE0hwqHymLDW4qaXwA2tWOGYhIFKZpUDCk3+SkPdCsf2f/CD HwxByHsK++K4cJ45e05agcVBOxJ/D8EkuqYioFP7+fPnh7/s5ZdfFj6pN992a7oeH9pxCP6HP/If RCjcP/3oJz9ltYrVfpTXkfj+7353RrqQQB+3L7wztqRwRWp0dDGBJ/4jPeUph6bv/+iH+Ihtje8u +AzNzp0pqEyVksqLDf46mjaetAuvTdUyLFSaF/yB52Wu/K38TjV/vrHl9x8KgcrI25Rv2oU13RqT G/cktkFwQZAQosgWvV2LMCJW7fWm1OOf9O4DYHDWLJutHWYxp05WeAJsypnMnoMjLoMXMFwIWyqA 6BmdT51Y17M5Z/1UVrCYiKagfXvagful3ebPwnHzd2nOXXuni25YlE74JM6RCETCWLf8lWjltpo7 hw0YG9M1f7ks9ohqJPJPb18/YUinEn6VkKdo5K+6/rrUxbL3rLksffPuQU8+KJ126i/STkRWWrDr Au5ZIMJdP0vhECp72qg3KH+ifmWfcnNLeugQcFwA0DqZHs7rnZ1MIssGqRwjeZSRu/rUs3tlrz79 /3/iXii5XoXMH8lW5HvjIHMzqkmde9MwogeMYITzYtKGF0ojaMKJ7xQaWne6d4i4GtUD09gLLVmL o/q8BbsSeOUxBKZsS3vssUcI+2NqiMFtJ9UWGDCimweqCgwnWEYbzKMCjqs8PQj+0zHhc0+2mTzj aQd7CTUMw3SiGKCyex6wW9rlsduy8nVqevWO74ER2Cr1oVadUgczMT6Yrr36b+mHP/11OvjotxKB LIovAT/CKtZ0NicdWJX6hlcEObO8EUKWNcO4qYDFzxtzWATIepglyh2HCdbEb7xuiFDsEyTYKHwy TTKTnsuIZbMeGSuvM6MRjdjs/wCcegkgnVaKD5UWiUcVBkVEkjurF+gG/MjP+PXZ5pwqzbYZrJGU goH3JPoKTTbb/a6g1S3g2DjhwxtgNus0S0NY6GcAKYib1pN/DWZJvh4vYuqnDs5xt+zuRWkuzKLR xQaxUGiGYRdHfd5W1YJNY3sMtgbAQHCsHyGFCHsFqypip/Ub6VuStp7BSgPmc00oEZykFNSasJZo xZphz732QWiYmr7+9a+nY445JvD0BS94jvJMCE+OdRafQnnYTv699n18zB9q8S3fVNa9PPev+8eZ VqxYxZYAhJjmsp7tOipyGeMcWEAjVsGob7tNGXZ6DKXhN77z/fSa170xvfUtb08trD5ZB5UlCx6z S2pmJWWgD6ERk0XLQcVY+XC52nXokw5iq4E9089POSk98zkvTBdcfGn67W9OSzQ7VugaXGUe7k8t CG5POuRABNq+9KQDn1jSt6ht+ccAHwoPJgWLOgTHcQRUV8YNfd7FSrr3WonmIA3ThMzk2FeAiBUW AfYAqY55Q3MzjOKQa/ugF/XpbzfdrCST/njhFcinmG3C7A8MdcdGzHcuWphO/tlv0mmn/IrAU2+h zxvTgU89In3i819NreP/AUAQyG0jnTEO3a5vnJluWbIOPdLqNLdlONWxsN4wpSXtse8B6fvf/24Z +Gp9PwJFBwI7+zSh+Jk+fWq66torQ5gaHu5FeNqelSe2UCFoSC/WLvhXpfauKakfQuoefrU0Ttpt +6V/CqUHHHBAmDjvtddeITS5aikdlK/SHWLBfCIqKpRRPl0cOPRdVjgVtN74xtenpx52OJ1fYpZB tAwq8rSnPS2d94cz0pvfcCxvyKemdNIpPwuYv/xlr2Q/wmdwv8Q9fz/zmc+kI494Vrr4wosQ/l+c pqIMGBp0g2pnv4mU35jA43JfqWYUGDgAp7rQKDBf0t91tA9Ipl6EsVaES98FFKyqlYeYGdJqpfgR 3DqasAbyewSfjC1kfEcMmfheJTM/zhdZGPdXYT4L4xnHJnJvOXu4EMh9/nDf571chF1rp4PGMoZB FqEcUkePnOJZ7Tv5waP0V3UNIwAnYAgJoWghhhJc7XMNG+vgaGNp2rSevGuXLYVxrE/vf++70je+ +dX0pW9+N73smDeknR47P+bcXkz2BPhWc7AJh6vs716DrfDU9Mn//HhouaYgBPWhEnd5feHCu9K3 0KC9+rWvjoB+qwjhbKjQO++8M+HETjkYMak+pz6t2r7za2jX67EThgZkumTVtqSHCwHHg5MgsJ1I XEyiiqWmSvOBcuxskH3ixX/wWTnmJ6YRNeKBJtV6tMKohPDEk0GE9zLROMxMmUfTTDS1GqtqTeME 4l63stTDaKMb8SEahqEYQNP82mNfT2S8L7LxJv4apAa4qVEmBfezGUDDuXZdTzrr7PPimRvmjo+5 WqtPAgqD6bCngM3JeZzVn6HBcUz/ujDD6E/LFvdzn9eY0I8/4R3pfe97f/oCYXgvvPQGmMyGtPTm 69Jvf/QtGLJjYeg6iNa0LGEtMpHwGVi8cEnaaecdMIu5M+47+fttaeOq1cvTVVdfhWa3GeFJFa6C EeOcyXRt96roZyc3mQLfy1pY78kklMIg2WRWecfnOTkxbv5pMsbUtMjmRRPJEwo5EMQUcwi/k8ZI PNuM/tg0cV0IyMxjLFBOp8EQc247IbQtMJJLWFXoZY6YiZKsE+FJfyL3vhlAweD706Z3EUXVjXIp REUMgkbYZHM+h/2f1mJ+tmLFimAsA6TAzlURzUpH9cUFL2XMOmDouxCe+hCiTAw9cNP7mKHX47do 9FfYtgHmFTQ+MVfM33En5oV1Ifw/8Yn7pRPZ9PaLXzgx3Xj9rcEQqtwQbaNqfFydnKnC10Y33ldX 2p6tt56F8qMnlH4KHOY1kp8mgba1FUGlCQnJMbK2G2UJ7yxdvhphqVx2Vq/Ty0rzokVL2RPpddCZ kbT1rJnMhyh3lMoYp4aIlwZLq1559MvDF9hIeS97+SvS3O22Q2gs+yrMEmGIG/CHeeazjiDS57fT 3XctjDr1IzxYN48R+srfc84+O9rZYh3hjgdYOZnOnkJEUog8jmfHtYoR6+2Ytx2mrHyNi/v5I0M8 xj6RzQhPQ6zS/ZjVlWdjPnjAE/bBlG3vtPvuu6e99t4jPWbXHYl+97T03Gcemc7Fb6i/F9gh9O62 x94I2XemH337m6kV3FJItsx6TFKuvPrm9PXv/Ij7o6l7+W1pBsKTtfuXZxyRCNgQcFIZ7D19WhWe NLv7+S9+FvyKPnc+GxpCWEL4N+R8A3zOLawK6daQhSe/Jw0UHpnmuYr31Kc+NUzvbr/99hCkMl3U NLWV+vVjcvi/f/4z3xhPK8FvhVFXp/TRWrVKHNW3fCxw33q6uuqq7PbbzI4VWhCIOaWbiKsXp79e eXWENRfUrn7lpGXAnDmsuDInrYP/sT1tCE99feUYifHEPcehKa4rNxWeTNGnaBHGEeLqvMfq5dms jp7yy1+l2+5YHu8C+hgn8QKTkv58o4P9KOzYm4y5wT3Wfvjjn6VTf3N6fCN/L/Lfx5877rgDQff7 4RNmFuGX55DaNt7H61tuPwAEHljF8QAFbHm8aRBYgUDUvbaHUOHXoKlui1DGa3p607xtt0+zZmsG 4KAqmaYmBlEXDo0jMJFPPOxpaBQ+nv70pz+l937wI6F9gS7E5qJEHgqzu16IwBQmVgNJnH/RhZgn vItwrC+OCfU6QjW7u/ve+x2ELfJLohHuoaOj+0c/+tH0jre9Jd1116Igvk/E1vn2Oxela2+4Mf3s F6emRYuXpv/GnOoVL33epjV+y9tVCMTEXL165Jzo5Gz4bpmUtimaDhVpxcJ70rJ7FsUeJrfdfXX6 /R/+HHuAKB6aVYf5a66+MjSVs9Gc97Hnhv5Q3tubfUY+8YlPpP333Setgmlz77SLL7k0nLU1e9l2 u5PB2ccSKvfqpLO4ZhB/uvjCwOM99nhcAPaiP10QE4rBHlatWpHWLulLh+03Lx3wzGenW26+Pr3h +I+kT//Xicz6vWmnqYMskoyn9378v9PSkfb0yz/fFOaGfJb7TuJtYTtvAJevfv1raSV+ha945dFM inek0888I8LudlPPc846Czv9Gel2fK0KtNOa6Gnvf93VV6d5O2wfTueLMbm56qqrwuH/lltuSdfh xzF//vzwhciMRjDIQhFmS8Yg34+GbbZ/ZEnuL4EUITTxmzUN9zILv7/3N5NnGQyZI6Pa7mm0BFy6 9m/XBeN5+V+vwHSqQPs+kuZsMy/22DE4invptO+yIBhImdYhmC6ZzjALhyEXX2Q6b7755nTXkmUw r+3p0Ccd4HAMhnPRTbdEIAhxkqhz7As0J+28YDtGbWK7gIui/CmUaxjwA/ffL5j7O2GC1Wqff/4f MW2aE0GG+rFUWLBgJxjpaWyl8c4Yq3573333rQgrZV8olMnMtaN9v7+kGZUBMBwLChSGqHYPQ4XB WTNmYmmBfxHaRsObOxZmMT+6WnHKL3+TvvCFL7GC8QRWYZrT2ef9McKFv/m4t8aWHGf+7oz0IsKr DxMQQZ8qBZg6BBDpxROe8IQ0Bx+l8y+6LH39mz9gBWWihjQFFLSD6tPTn/aMdP6fr4pw5c/Ah0iT Qfd1M+iS/WEobf2cdt1116ARCgYG23C16WrGvXCxPX5b2qUAYd0VNFxBMfns/tIwwk4LAS8UwZes uCf98bzz058RKN5w7HvxTbs57cLKPW5Kqb2pHQG5Dxp6XZR/6623plNOOSUd8MTHpcfvv1esHL76 1a8Ofx8DRWlKZx7Dist/uBokTTLttttu4R/tvpCvxL/IoFIH4Wdt6HzDj7unlXjnO7ZPs2T9qG27 Ao7PbO+aNWvYl+qKgIN9Z4AH/ZyEk0KLJo2aYkrHjzjiiHTMMcewf99zA48NluL2Fb/97W+j7N/8 5jex+bCCinh/0kknBY11temwww6LNhgs6/TTTw/42y/i0yAriG7mvDX4/tnPfpF+uSb2Gdxn7/2i jvfcsyzgZFCfJz/5ycClk/4dAGfwoUPR8GCEGAUgeTtFLBUWpssvvgTh/OVpXf94Ov5DH0nvfuc7 0pxZhM1H8RYmpfS7/nwAB4TTVHIkfQnT0w9+6EOpEfP2uvqfphe/6Mgo6/7+2D+XXXZZ9Jlt33nn nUM4tH89tqRNhACDeBOSocgJi20Y80oIVWNFjg2tL4447IjionMuKmNHci8elzE34wLTHt4tw0Ru QgU271eBxxte+aoChXYxpb61QC9dtDV2MGJaiuOP/3DR3Ud4WmAn2DAJ4IQwEITcLIbWFkNr7ile 9qKjivd+/AsR/nmFt4VswBi4Gjqe48QvfK54znOfX9x46x3Fu977gaKlYyqOFQ3FnnvuWXzt698k TC2hSfvHikGz835vN2FMCe163eWXFce8/CXFnOlTis6WBuqWisMOObT49nd+UFz1t5ui53qHiM23 effAP7f2As+xQdjeIw/9l+LP555fjhPC8gZgfe5R+fHU7LVH5bFZ/glJfHQMgzyV8T+5jl4TTano XbuKvEPFwPKFxUsOP7BAlCrUH2NSE6GTsT9FHQ7u17cVde1dRX3btGLW3O2KRYuXRZhimIpo30k/ /XFxxDOeHuvcrKwWrNoUROArvvWt75RjhFx33LGw2HHHBUVDQxNjqb7AAb048shnEfq2t1i06O5i r732ifuJMZcaZxTv+9hniIW8uhhdcj11HCnuWLqmIOp58acrrisWXv0nnhEimVDq//n5rxSPf+E7 iquJfNxtdWjcWB8hkvuHi8E13cWn/vPjfHdHnRjjeOVrX1N843vfKa67+cbcjcUJ7zk+xhIK7aKr taNAi1oYqhemosDWv0DrSt2wnmpsLGA8CoK6EHra8OdlQmgivC50l5C+Hpt3MkyzuONcUOK1YBW/ o2U+9oaEbdwwzcQtL1YVV11zNWHMX7jZhzGvbXO1Jz3J7abtN/zlSsZJXQE7XUzvLHFD/GKvI8YK S0CNLdgSOWc0Fe85/r3x8uhQb/G5T3ysaGNRw/emtpX0G/msxPu6xmK7nXYr/nLlNcXoYF9x4bm/ C5ycvfWsguAK4G5j8T+/+G2E+f7Oj39WYEKL6yv3GUuOufPOPrO45dqrCuSOooG8uz1mj6K3ZxAr JfupKD5BGPPp02YVjQ2ML+a0ffbev/jLZVfGMzT4kS/ykv2BEsw4ZVjvVBDEpYDxjnMYbnVOxbyt too22s7zzzorvgHBKL7/3R8Uj9/viUVbK/MdsHnX8R8sbrj5LubBJcBtCvRlZnHY4c+uhksvw5/L x7CBwbqVxcuPfkXx7x/7ZKCeQbBz2HRDobPfEofbKxCevXtNYR0JWhD1sn4e+BEXv/zlLwuiv/FC mfDDgSbFOmOBKVq1HbbN+whuBQJIzv6gxnd/n0AviuUrby++/q1PFNvu0En76PemdsrvLG69eWnR 013yZ0uXLSy2mTezQIArpnTM5fnU4oT3fijeJ/JfgVBXPO95z4v6C1+UNwWCSNyH2Y76IoxU6yXN Ov/884u3vvWt1XYhKBeseBTs9VT4jrBAuCyWLl1a/PjHP44yMgxyv/qLwFi86U1vKhBAoz7+yTQO IbogOnCEM0egjPr7DsElCvbLKm666abqOwhlBcFUCoSt4rOf/WyBMFitG9H0ClYVC8sz3XPPXfwd KdauW1a87e1vKl76shcUX/3aF4tnPfsZUU9MMItp07po39uL664lhju4LQsWxInzNeCytCrTrEy3 HMJlIjMvOMZiSw7mlvVsbeFcsmLRLcWLj3pusfNj9y6++aNTqmU4LmKrG2h84CTzKxv9xjf/eN5F xY6E0z/k8OcWNy5cXsAelnQyf67mV9g5TxAAJeaU448/vvrUfsvzafXmlpOHBQGl/01IWwSoTQBe if1Q5NG1MAcMBnydigE3GHCgcqxc01+MOI74iONpiM1kelZDkBmAv/rJt4sD99+3uHlpT+wL4jYz qyGmDo4YeCMwXQy+H3z/u8URMI9reiiLPJhDFavXuJNImRz8ktdlK9cVmP+VH5Mpdg8EvD3HEKbG hhjAVgDpDBt6hC52/6JSvmvdtqSHCYHoWN5Fen2wApSv/J8ToJgYyplFerBh/YZFlEjg+QCSxyg4 1ocwtd69RgZC4F/VOxw4KB6KU+61sYb9QqrtBPVM7mnj0dvLu3CZ7otmIqBEHHFR+YPfRNwjtHjt bfYbGa4KWu6VRkjyot8qrmUyHVXIY8Li0t1x4v4g97w/1FN89Xs/LR7/guOKRTyTodqgsZSzbs1a 6tZbrfcQG57YHndJ8RNOWpiBcOJBkexjMgazlxMmFYWHiRWq+LW9tYJS7Xlk2Kz/AIegShN4I7wy I1IVJEKAgmEdd7cwBaj/x96bwGt6VAXedfe990530gmbrAPIDCCLIh+gIDs4o46Kzrh8jPLT+Sku 6CcDbp+ODoIw7FHU4QOHEUVmFNlDQvaku5P0knR3upN0upP0evd9e7///9RT733v7Xu7O30DBuzT /dzneZ+nllPnnDp1qupU1c7a057xhtpDqMIwaL5FaVDqimUutSQeJIsvuWaH0OwShHeeHag8+LMM P44TUXkd57yynEZFU3Q3ByCRMMTjzKJoE0jEMCb9EOcpmY4dgAiD3ON2Fvrd7x7DNEzCpn2S84I8 D0ndH+fmzE1Gu5AH6QhAogOcATTtmWn89wg3z3GasILx++gRD+zK4cr5ToZhh1henh2YlYkAzFzU 7r9fg7cBSHNy1I4MZfYiTMlnhpHH0qEzawcITenIQ4OFtDE4GfopcOPspNGB0FFf/eI/1ZhlqR08 7Hlw1GviWt+lhUGj3BPQbU7DdqZeV8XV+snMmqHqZxuJux0UodRfwzQOjPithPEspPM2cAMhY6sv BmpHH7qT+3htzAP1JImIE+bYsQfhn1ptOvDzaKRhz6zjf+lQlMEZAtVxK/gyM+nrAN+FnVH99rmU 2VelXJajPPves5vMoxEKfxvf+WxYodChMX/fm7Z5lnDWi5K2OlQcC+52Yks6BW9muEiFwSgG/yc5 hzHrIfmm9HtxTlQQj0cBOimz3ksniseQKeWqXL7zyjAXNlvUvWgjsc9G0O/WSa7J0aHakWP9IWNV 0jmaCXg2Gh2vCQ8wNEPeSbqJSdrG4dxG1eWxyq3xZtkLPXyPd0P9s22UUGhR/3Dx4WFT4Ozzw3Tz L8I3lgIuKHSth461LUzFd/W4BTJnXbBOYz2LLZjNDt9XOMtUfWfqY9p1Ahe/T3E+wg/9+x9Jl27t 4xwGHQoYTyJuOws1jeRUuYCCibUVPushop+059YI+sC6fmSaLTk3bVqLCwbT6pxBYWqnTxyPMM3k Oe2CLCJTKUmLbWRZtDlKvFHcNS7CI0cB17wtC4yHNX4qldZ74/tl434zXsZ4HRlVeIpXwVGXCtck TbDmqRV3t9h9xF0V3I2OxQmug1iDG49OKHpneXdZwlq3Hq7SofHjCTcUXEG8etkEZQi3Hs9FE3RN cu2CdWWSRfKex7R588Z4F4u2Y12gazlYL0IgFzP7jCt+YhQ99rVIpMnWmOxGNRnrD80bl3UGr/Gz f+hYuDnt3H5rupxdmHTGKHSfcX90oTbPOpR14advXIEGjG3aT1GOpjQ+MR5+8LHgWz9FEuhgFyrx KeA2zmWraddDGd/yljURJU3fqw8a45Y0vuXuy/quLtAk5h4s1KJwfq/CFEZ8yxV8AeEziuCL6mqB /xwES/0ZZTOALP/Kl3VijPfzbJrgWsLmSv49Kyp2Lon4/NFXjo0oPA9H8FiLaRY2bdqYd7rrZp2J tXUId6o23MbU7xPsEsTGq6wvjChpHcdteB6S39wOXJeiZj7O0y54FpuwlrOewvWIZ4N4jlNntUFK o6tQkWU9k5idiLhn+6P7mKBL2xWsRVL2dXUr7VsHNJnHvUlwU4ECrdRx15QMDUHYONYAACAASURB VI3hDjbBEQP5y6Vb14ZXlL/UFcqRu+mpizpph5u4v+9974vzrB73mG3BBtWbgCdvFRe6QgPpNoIe KuUQJzoM4Rpm/SxrmOSVrmlC6EN0jC5rJZ5lKnXaMLpFGvd86ve4a5QpwyAub+x3mrZtfQy/m7Nr JGhKZ938PMuoE7czMCAvjzPxWAeFhDO+2Apf10PdBb0sR8lbWtNRia3VIzB/LI/6ybJ6vpLPlkd7 wnLIK9OwHJZR/Sw9dMkzfd3zBNMp8kAHKFz64gN/3CxCKDR0a3fBPAXTFjfTFHw2baHo0JK2x09Y Hi9xFdSrlsvjYTrcfhjQ3XwKGXK3ZL95tIyuewUm2X5delrFJif5AxRdX8IsvuedBZUtd5gUOijX BBtpzHC8RgebqVy6ZX3ImOtyldM60Ea0gKtufNZdNx6xeLqbrunLwjzCzoPnA5ZBF0rpLb/KhiWF FueTxsUwy1Pg7PxfPs7Ft48gBWZiqz3YQMUcG84H19pYuTWti29Ze4oScpFpU7qd9RF37LyNtRYf Stu5M8UeB+qW891UhyoJd7lRAdzKeU3H2LrVs530Td5/4J60fcftKDQrJLvy6AOL1drJNs+Ciy43 oKj02d2IwtWYRMPRsORV86ZtXBuSHozePg7WvQirpACk1zZc1HnK7Dgj4cbXj5qKW6yLgi2/C57i iB3AbkxsK26DxRkgTMrQ6iA3bJE7zUIiF1O30PnQHJml4dIAdNt9O1Y+m5YLsAXXFRToqgYd/N3L QbjKpg0M43TRQfK9dSA3mtnv3M6Uh+sKLng2bdHPbVszG1GMJNxI0l/9xcfSLdv3pl27dqU9O3aw tuBk+vVf+430fz77mfS2X/7F3NkjngvZNTpNyAXkgvkx9hnPHay92Mw5VTbM3V3d4fvvInJhZJBF yhiHbiYhnq49ETRANBJs7DQeNTwK+K2Az4b59gNpl+lXL1uQQGmSY9544TEZ1c/88tvsr2XzYle0 FtZPaOy4DkJZEdrb2tndjveMNjgQYIdH+Y8OTtXpCPPOw30ADUzBulKeQ+4rmVrr2hOeFbfurhwn xLgSvzHqqoa3YPswg1HnAbVrWOfizq5+8cwjD8ONUOA+gcFpGdwJTkPf322OjvDOzk1l70aaK/0p xrb1QJnXKNaoLsbfNHXQzpxGKi679WROsnOfsHZtD0Z2V+z4R9UMw3eKjTcsm22YgymmvZ21Otd/ /br0vz716XQ1a77+1VOfnu4+eG9IomuL+R/lYlw/0i0dqL51bPtdFUSjXsNfHF3jKJ52JEpnoNRx 67WH5QrqC397lU5C4XFJN2e4/F87tcLaNRuRDSnfysBm7mQMD4+7SzwdAesOm+4wsOS9010YKb+h J9k8w/y2sklCwUnaWhbpYsfIchScfGcHSR1lJ8SOmWB5tSdKWYxTOjt2oiynnSShdHpMu8iiNCqd TMOYjuAAcAHj2xkTjFc6oNK4pOl78xIfQdtHUHYKPU3TcJZDGIoOHXKF/HjWWFdnT3SezMuNLIRZ CNbDzouwNto07yMc3FsgU7j8Wrir3wUPG86dKHZFpOPURnsgTDC4aNwu/G2V0zoorHxhfQxeuh31 svrdzhtqAZ7ntqweZ5mHUgbbCuktv5h5qvNzmSgXXz0cClAhVgEXXfhWQbyYlnWanUrijHH8drZW Nwdncb30+PGOMqq96EXfXaOxrLHuNXzW4XPtLb/6X2LyfrwKV5vVjWG6xjadsU4EJRM+7ewBzb2t 9ox//ZzayVO4H5Dh+NhIpD08zhoO3DPMZ2pSt4q52vS4LjNMLFfX7IwTxiKZ8XHK2njGuQgXSAGJ xzUP7V/xkpfVrv3q1zJxXchWfavfG7Jo/NTw+p/hEXkIV0/kRP8ChVcRqRAseOp2UN7pWhNCHYKd 48zO4Gcyp0QZeY71FLqYsrYSmdPljcaP3xkaXTV8U1w4rB80nBGIxnHR3R80svHOPzQquPfNhtvF KEmH+8RYf+2ePbfUPvi+99Z+4LVvZB1BT625o6dGkxZrFN/8Uz9Ru3H77TUdS7xODFg/eGjglfn7 agrfoWloIRZeuluxhW584+eiOBwqGa/KH/Eq5aDRC9eT8ruEKfdSzvL7W/JeuadIt0wrXFfC6ZEX sl2vGt2QcBurzekGhQvfrptrT3sm6yrw6KtYzvtvPbDMpdzlOUpRfnCfrtyqJ8ayu5ufZqgrytcE 7p/SjCXHOR3ehYuodWcS1z9oNo0Lduhw3p08eTxXU+KM4NNmWhI51mgEsYnPy/Ay5Yv1wvS9OHw2 h0feZ6Z1QcLlzzaC37rQCuXu89SUsfm8UHXjt3+WutXWP5zlwTrbCMo+Rj2vbKsoqyhwnTpxMj/z 03XDU5XuGZ9YWGc3xrtSLqP1D56uvebVr6x1t7dFu9rNukQ28GZN2W+E+OkeryufNTWXlLLZHqr7 yL+43vFj0XPRW+oscV1ajzP+pAnRS9jGOl2+m+7KQPnlR3BLfDJOjeGld6Gf/GXmLRckFyaCqj+F 7NoWj6EjfSo46fLV6Palfirhy3vvvi9xjF/SbkyrsWw+N/42nFBw9rm4NPtcaOWz+ZifUN6Xe3mv 7vedeZR2oOA4z4ieNMPxsjY2rothpl8JJ28yfyILbCb4qExLOy5vplD9rN95FTA1IW+MUF1ELraV 7tsTVN4SP+pPPSHCmxHX3BQus7p6800X9DHWTBtnwW03slr0p1GmlD9/C400bXxeFPnij/OmABvK MKRwwcBoK+MYrpnO+/wz/c+0okn+NIfPsbgwvfhlL86pO4TjJbDTDWPR+TF2so/Hf3l/lqN8RaOl nwrpYnS2GuFmsW+cmWNYx+hjnF53hBhbkpxwhjBSuqRnOnlsJ9PfFaeN0Lgldbw3YmRewjEq0hBh Aa+Glxcfz48CFSFHGRH78R//8di1yXMvHHGK2ReGufIZH1VyjzpiI0PKYpQD+RA/d0trwLPR88qJ gzNB9xk+NAYsgSKdBbkrr72XpBqyavx8Xs+m4RyOObRy0G+Uhdkxxio9HSTqSf19Uxu7n3H+B+8F 515zfYuf+Q/IFLxy7Vr4VkoR+JZAfl5NARaS/9Z9qmgRs7CUogZH1EHMq9BMQLVqwJ+eRGrqkaoz 6Y49B9PPveWP0t9++u/TNgbAHQ3+VoQiBpZqRfloLNgK8lXiGjTqWH2HQusmXxfRZ6n+PlNSl8Or oLE4fd825l5CfRPvBdmlWS4q80K9XBpMC8bdPz2wPmjVkJ6kU/ykkK9N0n3XIulKLmMabUleBPsm gZgV/smHRl6U96LS8L6U758NZ/F5NEEjnRrxaqBZ4+slz4WcS17Xfy4m85K8ELDGZi/C1hNcErbw kED1IOSyOP16thcfvkkUWHUHalYXA/xtZuLgOKZEbfSAa6+6Nj33uc9l6+JqWlJOF25f7EAFjeJP Y23wRUWjFV4ToKpYBsBtQYcOHzXmomO0TAeq6HqCRPILHSjTYkrLD0DOulTccs/fFpTw0ga4fL94 vyAK6MKJBehZFm5hq1sEo2Wc78JZXZV/96J0Sx1a9PKf6YeCYwdKg61uqC1ueBobCLFc1ImyLI3y Gr8bChiPJb1yN5Us894bQvvzYYHoWzdMo4WDQaNu2VGisfLbcu+zI1RDfSNcIxhPWKn2rAbfnPK3 2d+KYAsdKA6ZhHq5A9Wa5vBGiqOHZnGX6dY9bCLNzLelz31+d3rNq78XgxY+fQsT1eIrK0W6zyhK EcSK7Uvlq8Tz80LcpdJXRa5yKWmcGT6nVr6XWOV+Rvh6nS8h/hnu50Y2kFop2DxDJZY6OlDV4cUR wcJyzXnFC2nKuklCBx1cwynkyPn5m/5XnIoGwwIohQwEGwdSbfFBtHwXz+hkGz+GgXzzLxTOXlfO RZRGki4XNlhxxgfyXKnu1BNcilclbyVBw5XnM9K/+OKbRYFVd6DKDBQzjdlvVSUk75cy19/l3cUO 1AJ/6xWmgT4LX1d+qiqQalJyhyHhU/HRNiYLXZ1hWrYDFYarYaqKafiHDauJ+7Az+/aM0Mh/J4Mr a3ACH3PXDZ0TSp06Z8BvQIDAvUHRi4sNg7AEr8Zi5gBVkJhNbUjDhr4x7goNTUkvB22MX1I/9926 YUwxbmqoD2d7X+qSJklBs+By7hwXhyjxF7/9F/ZLBkCIhQ6UB5DagWK9wTyDO/Sb6NNydtZkaupl befsMGt+1jAPxcY7QNZ78fgt+edcsqOMnC3MRRm6cLbrBcMWHJEAx9nmhlRie4VSKB2o3BnJr5oY qKTTURRBFe7CsVhNTCuPiFiBlnSEPHi6jiTaatnvFrTqXPF0ER4+Bc5WN8+W2qJ6+4gkcrbcLn77 RlHA6r8qwMko4pdFf/5wcbUwdXGXtqDDWf9IvnKdNeCSj8Sx3hn1TB1+pkF55hsjm8KyX3h/PrCa uOeT/r+MMO6wI+CTDFOzNo3O02q8a78ZpCtyW+4XkmfERYLtyMdVJRIdMd+dK9ELl0GTtu4E4J6X BxPyCPPC+wovQhpec+OR6DyZ54W2m8b99gX5KWUydew86U/Z5K5n9LLcCGR8Ki8Qr9aJf/uSok6F b+siProKV0SvUisOseT5aF9cuK75xhWy1BdyKLhHZv4ow6u5Lp35/dFYnm8cpR5NKddZVbHmgnBb TdwLyvBipKUUWDJssfTzuX+7w1QrWy6ySK2+y0kn22FPs811x8Vd2s5NwDNCLFVqdVPujJDlRdiY UZmMuzh+4y+fNf4yEKFUwJjOL+9zfuVTebtgxzameG7cSvyL9xUoAGG72M5asNPk4IODEXl3twWq rxD7UfB6iQwskiXR83u1xiBkM/9e6LosiU9oZc+JuEYZXEqJpb+JcgFQ8Cp5Ve45pLSQ/mL88hpB 60B5n2exSublbfm99H6x9iylCL+D4b6XOv7wzlUxgY0aUzM7k7KvIlR358K8gvZ8JmiJ9C0FjfKx HOJnyleJsfhLY90xnQV5LqkaL8epk798intJt7xcPv0z0y3hvzn3c5ez4LG0PNKkrMVeXLYSI9+N 52VnxHALLSg//pmh4LYS/qUuLYdmiet9pfjLxfuX/k56FTh/ujXGevixS4yL90cbBc5fAlbAvMw8 uW6jcT8Kt5y8COemgCpuaSNw7liL4wQTw3BdPqXlKm/Ogy+LFqWcT86NYUx55dQbQ158XpkC1qGy vXXZnnfl0Eu+LM/yJYG+cT+L/Jb7mTkVGWm8Gyr/Np5OKI13v/r7mwML8uvTQr4L+C16p4usM4Nl I5dVILk4v1Uk9O0cFSK5672MmR2fRGo4Z4Zzjdzl93y2wf52Js3qy6YEXoQVKVBV/OxSaqhHcY0V 13ItKpAvl+Oz75Z7vyjyxR9npcAjRb8LSafiXyWjZ0Xz4sdvGAVWPQOVXfhYNUBrZgeqjEh5jsBF OH8KLOxKuDROqVy5r7u0vvg2aL4qg85UC+eW5r/S7wuJs1JaF9+zNXGwwF33YvYJksxydkM5R+LR SCEloEhnwa+MyOSZmvK2hCz3/L6sNSpvy73E8l7Sa3x35vNSLM4Mca43OuqsBKZer2cRyDd5JNon 8b5Ye4Iwj8AfKepVgYSXwIADDVPTY5x91M6rOOU4f/g2/FsVuV6yhytf9Yj/wh4K3Rbo1SBLi2hR aq7roBrqcEmgCusOw1kevS+kWn1+FNyWKV+g6vsl30rZ6sUoLx4FxXjUo7CElhW+hZQrUXL5WHWV llOp88ufK7dDOXCVYsTJby7+/eejwLm4dQ7MOJwtDvbLG0g0xzoCosDcLg4Fm+XE89A5RcpMrWED ibqwLCN9digWX+dA5Tw/m1VJNysYBHJR/gqoeZclmAu/68HqD+eZ6YrB8paoGpuSaIFMsmXplRMp 4c6YOKqvHykszaktTaV8zblpBJYUTX/ha85tub8lTMG2+l2nSaZX0Lb+znR0gZgNuvo6X3kJb/lt qCUB4tWyfyLthryisfA3UBJces9fq7+Ncas4fol0qyCrvJ1fUhmPtRxI6RqoOQ7OEzwWYFHnyRnG mGXM3+uoBRtKXeFtY5mhSZndyduN599y4vxwq+ey7INZF2kwH6GJjrxXjYXWlIA3JSdDFvcX3vG/ iXVOvi2SVO68Cihpl9/L3U3djli5lguz+J2pNl5+XZqTFFpM56hvsS6r8MF4xsx1Nz/Hq7P+KTll 2hnXjsBsVTsKtXLelq3OP/GJjS4W8MplX5qd35deS8N8Y38XvJbez8jVAEKd8eLdAS/duRVK+b76 NjM+nZrae1InlzuHtTe3cWgrj2eFBVqtFKwRx7rOCrwaZIDfJVykE98babxS6ud+X4pYJwFRIvkq avleJLYxXA5SvizOq8Qr98Vf/bV8vDPDrfxmMS4VveqEUgcsZVChWZVmPWz+7c+6vNe/5Th5gJFn f/LNcEtTz6mc71/L7/CvOsjn+JnJUojGPQ8Jq8fUXa2EXFxqo60EFmFlsCCrA3Usx9pmHM9Aq/BX vFvyboK5yJWAlfzPjuV5YRi8ghvoffniJY+8vNV56vtg4PlyruAYEeNPlWxJPu4LX5c+Ed8I54KS qOFWDF/oWclKpLnwfAb5+X4m9hEp/tTD+1D4Un9ZhfP3clf1eWVcCVDKUe4RJ2OU7V+DnA3Dkskj dy+oeG+8Vs7hPPm3cgLn/NKIR3leNpIfF4G0O9uw66LAK//wNOfpSYwAjAtO68oBK4Fo7aDyIgDT M7zn3fTMdHLbc2FmdobTsOfoZIGZyFVRXUslY/03MTMR99HJ0bhPE8ddn6emCeydQ1lsRI3uFaP4 xpvgZPTqqO2ZKVKqarBh3AjXtNnPiSfxzhn7jYPM+O276TSAu0iu5jPYLWydy/cJgxqQ+GOjU/Eo vv7mQDY/BHCIYHkEx1xeX3A4W/U+x5mdmwa3hbDZBTIvWTWbIU4S914uzuckDfHLyVi3pqaqk98h MF6UfCJ+vTNl2WdC9atGOYEx6uPUBGWfkUk0DPN+WTilPNdmeWmE3MC4w6K04WDCCFvuc+zxKioc Uphx4kdWoTNsIJIXehtgctpyT7GD1lgaxhCyxHalJnni3PA0Pj/FwvDqhB0TNG8DlWfuhc+85Xv1 IQz16TRFunJ2esY0KLMd98CfW5Evoswhh/Jrdha6h1rPfOBgyIiXI+V3HIBXl6GQJUI07ukwhnwE kK7fDS9wQF+gzZGUgYLSLLZeHPpnkPgxOe5GK+Y1lyaQb5/b2jo4Ob6Zk8JpGtvYQdFIMHluXmKY km6ys9XvfIq8ZfH91Pw4IUjPODk4nbCpNArf/GklmB7uT0Mzo2wEzcno1UYvylzBq9EFVzrplsvh g1EmDkg0lfpp8vHDHKkbnpo0ZJ3zpUI4NBbULVT1Q43dOWvqCEIHuA0wQe2Y+Cbegn55nkHOS9tR 9AqHNua41V/z40xMkkF+eVadTYVV3QxN80Y2zuJlyClbXUtna3JaXjUnedlMYlRHfitHxoWm1Fff tYAnH5Af7nRip+EXpxpGsp7XNTY6RCrQgmdxnq5wN07ueAUb6+UxbO54keC8ec2ko0PUAZ5MdWZ6 gqjqv/k4dypKoF6aYrMReGooyz48pktboJZGx92IxF/5mhgfZT0d9QKdWd4V/hrXS/3SCMrugo7K X5QD3xfwe5EX301Pib+6IcvHBPVYDManrGNkT0ZTs3P5GRnMOPBFV8gYEDB67khORdk64EcLW5Ur K9SXVsK21lJbD4ZioNHN+3ZoRFcL1VXUBoeF1vHKuph6LvPIeYZ0JycXl5VzNYMG3BTDND2fw8bL 0C9mhnyQPUWJMBOzlJHwWb9YlzNtOXwz8uFPwDjyxGGl8ezEsqDcCdJSfAIvaeZ7LnWIGMkXX01W EZVayTSNzvZue6lMmZ7hRNU4Xgt8QW7kfZV4eS7fOTQ952MkQ1lnAXlT6r010TJEPmYEcJhpfuCv cfw+eJp3kY51aS7qiHpL+eVo0sSRtbQPtpXok0qPcXh0Ro1sPQPPHyZhs85xrkHVQN36CaNNd3Ci nxBEQJ/VhiaUjKgvQd7IMHd1is7gcwVFo1Djohz5d26jXVHXQt037nwaHkG/IFNxmi53tzCfopxI H3RuJYx345M37ZgVuqZtI/LcIv0oe341hl0U5UI2p7mkb13+iTCH7hYyXvFY169FpryPVJsMKbMm GDYFd3/OgNO0SDdB02aowbu4fOdpdTMMOMy2pgcHqNsSJwRamls28TOChLEOY5+VNoo3o6PYH0Ez 8jIzIOuC3IZOUfdt56aVNevAxHiaIJjSHcnSZoxNjwevpkAtqhU8nJnJssmBzWkSXWnKPi8sA1GX 5jrVqF8Mp52gtI6Bq3f1S9CW58b4oV+qcnG6NF9poyv7a3QM+SE/0yOFNBPtLxZJseH84GXZuTsR oIgtQLGX8nffS5+wkZBX22H/TaEvlPtsa+TYc+hjOaNdIt/VjGPoAWlfdrCdpL4IZmkZObI5aOiz MMUOvTVonQPkt8XenaXOeIl8o12jTrQeZXxoW8AtMKsG5VayX20+1K2NMpp1PbEreqkzhMa2Ygz8 xL9c1vDJqMuZrNPoNzGvSBx4jdNmLdi3fqFODpyuJ6IsFr0tP2zqzTo23yK0/BcKn61rQ6Ff4nV8 b2zL7IsYYxQ5lhbm6G9xnqBtLchrdwtTtCE+TVbts/TM2iA+X+AfakVHx4K7nsaDMDoKAlZYoIVN Jsy4uCb5TgK2NLMguLUpzSEvnPAcCOsKaEdLaMeg5EzrZCdNYra1MpIC01rsIACcN0oaxMXgHMYY KATs6upyB++AtjbGl8BDG2CSzkwosfiCgGO4T1eGpK+mDaQRTgvV2V2ViVbbiTXxH6dsI5UR19EF blA7BB/czFuFInR0sOCZCKdODvIMIjzLcPM2nOvDbNxbWxjREjm+jdE4udOUSmualmRsYjb1runG IMTQGUFpkFdrexPuKy6mJkqluE1fxpNEam7hWxS8JWg4SiempQX6ztEZpJK2NBOSgB2d7Ww4RgNp RY1tszGBaZg0UBVGK4J8aOIbp6yH60xrKw0Iv/0WHU1ER0G109JZ4TQ0SGcmDNd5NhBhm2HLbPEo t/9aWttTT7e8RBhRkDRdaRIetDKa3IkMaaSPDtAgK0KyGHS1I6Sz+VpZhDkMkHk7MKRvF6+VdGeQ i2LkB44ovTn4LX2n6OyODEILOifNyI5lEacCbW0yGCVlw16978AFNcLwe3RchS8OWUnaEHR1ZfkY g1/S0vBCkUF3dNOIz00zZUATRQe/yrYTGc0wn7o6XeQhK3KF6YDP8tufpczSz6/mFesO+dEJH92V TFBJhwkGjXL1mY8ZrDY7ZCj3REenva8zdbT1xtlhZeyk8FSa+SxPbbD9bT7WvbY2+FOVL9fFzFPz tW7bjW6v6IGWBLGF7ddjLaQF4b/i5qYzAfO8oFXlKPlcLtOiKM5oTyEHPgvWr8Irz8jyt0ow1zvz RycQTpmUtMqC9/ZWZigI6yye97LGLPQLAwGKUlt7B/jMZ/1CJIIG/5oic2QYBUPy1JOE/PiNSEB7 J/oFPgjm39GucaXiXlz/HbiZmSFhEQLEWxk1rAbb1JidHoV9Pq1f2xEd2xk6G22kJzSju8QTVSBh QBBkqM/qClHp6enEuGdQyefuPgYoZtLJEycwBObYkKQrdcoTC0DLk/VL0xn6xcZRfiu38rmswSuG lPTyfQG/W3+EoaGBoJ2Gh3Jh49xCXRY6OjIfLGwreltoQt/LNy87/tJlRv0rQTARlDmho7OVdFrQ gTSo0xh7LbNpwk75rAGpu8iOKkdVbBtgOuJZ8DIdGzf16xSNXRt0U37tRA0ODoeseHah2UHuuMLA kGHyCprOTFnns2wiUnQG0C9TNKCgYLw59Olc8Fvvi6wXpYcGQDdtRyfl19CtyF8vm7QUV3luezg7 lg0h5Uk5Z1gx9Y9AV3AfxVCyPbCJkJ7iVhNhwCQmNNDFh9/ycZF+UadocXB11vWLhctpRfNRlcV3 5m39F7fQL7yTZv6Wnl6FvtZpw6t/1q3vpcmkfaGNGR0diXqLHRQ4tdoW0XjaVgrDo9AeOQ4dAira X71r1kLMeWQQelOmZnCYRsHW6DDSoBFd2aGOdmUbwAaxCd1pSbzGoJF4F91V5Fb8spxV+oawlsV3 1sHMA6sV31XoQJf1ifZsCoNkIgamkLYWcSceA7HeyykhtqFCE3V0jjTH4KM8ETQjDN3V2ZYmaIcs gzIIkvynDYkOtO0hEch6hjAaafKws9KdBf+sg3N9K4Zh2BSkrxyKVm4Z1KUMNDtgm4tDu4dsiQi/ 165vyx2bWd61wXigtaWTqofOp45It3b0TotyRzxFp5fNjULnEb+0rXWa0ptvp/Ll9pRy2DkhXWWV JyKQAPLd2Q5NQcImSFkVoTZsPsF604atJIo+N1NZxAfh4g11mAKK03xlA2ritmDjGF4Z8m7wFmkL GH+G0Q71/bz6kmTs3EH2gGLwZ/sQPWq7Du/b4JOg58Rs1ckaK/YraTiYaRLSpAwqFJ2ox4gTCOJv W9ze1p5G0OvT2Dft6MlxdM6cnQXsSLX5OHXEjnMbtLKZUcM00w41QydLLXRSX0x3aCjvzqtsK8WD I0OhXzpoB5uUE3GlzJKr6E7bu9ZKENvAxc6WEPUYBjhp0U+noh2lNsK30hlayX5V1Wt3m6TyN16l J3+KvCurJY9CF+V2HoINDtFwAsqotJFn2jLq5ootmAzq6ybarN6wbx2cGR8ewR6bSWvWr8/6hbox OsoGWwjY+DhtHpFZChs4yE/Bdsw2ttgoyrSePdLGb9JA/Eo7bBszTUcy7HXiDw0PwV/bY+ouOrwq FvEyptnGy7axpZhDGbT8DhAxLvCPyqMZ4XFENmdoRWhO+/YdAPn18JdtZzF2WzFSFWQVpJlLslYo YIWhHFSkLAimoaK2wk0gfJ1tXRFHo0BDrZXAzS0oISrKAEbxvv2H0+atjlRuzQAAIABJREFUm2i0 aJhgikRrgVAaYTJ4GsWkYMNPcOAF+VsRecIWaYWgNnTTDJpPpTUc+tvUZAOFY00tV6o2BH/3rdvT IMM3Wy/ZkLptjFCCNYhqP64NXE1RxaPQNPHSRrSVZxtSy2ORvWuoy8R2Wn87ggqebo+TjIg4+/D1 a69LT3nKk0iHygiuFIX3NnjQgwo1gQXaobFPek2E8awgidckLmBtx1OhncWQMq8OKqZgnuInbe64 fTcClAWrFeU0Tt7yRsEqxpHhBcP39vaGAIqrV2lELauNgu2b+asdOzt9N5/uPrQ/HbrvRNpy2dY0 ibB30vhZcSbsNNfaQ3HM04GsQev25kpxkFcHNGi3YTJ7kjQOaId8SJNJDCo7BAp0E+HvObA/HR8c SBs2bQ06ttMJQ5pCoTYbjsu0LKcN3gz00ZCURq0o4hBF8jAv+bPwgrxp1DVIxjHw7rnv3rRly9Yo 5ywGzAQzam3wUJrLS2Ea5dKCLAjBA+RV+tuJasOYV26lnXHcaY8D2DJ+YQo3pe3bb4Pe82ndurUR huLBM407DEHKYTxhDmWgLMygdDRMT506FcZycxNyTMe7nXzsR9OaRv2ZbevkHfLUNJH6jx1N+x46 Cb02p154PhMjzNlwLjwXR+XA33aefVYB2bEuyrGEnYc+iopykjA0QDc1E+6hA3enkSZGPuHnuq5c 5olp5B57Xt7NQb8WOxY0gk2UTYVqHqarXAWdYI6NtkacCs/3uX7ZULVGZ//ew/el7jXrkQ/SLjIL j6175mN4wbudpSzDGtoYPWQvb7towNUXGnOgETRtoX5PMUqqsb3/zpPwfn3qpjgq7Fk7/oR35NS6 Ll00hKxfmT7US+qpekGUlNtpDCTLp6yIyzTll3et7eDHCO3hw0fToVOzafPGNamHSLPIudpOfaY2 Um15vG/UCJBo7+gCfzpD1N1uGltlY4IRv0541cPAhQ2uI/WhoKgAkxh3bcjB16/9OvrlyYFT0S/t JC6P5WHhsfHlhY2l98LvEqa8C8OcsI6qiqtw5MgD6d7Dh9PWrVuoB7lKaYRNUg/a0THSxTZBnk0z a9vexYwSPJttYoaFzlczl+MYVFn0gbKAfFCWto7u6FAmdMY8decrX92Znva0bWHQani2tTOTiGGf G0/1KjocvKLRDp1IfaScuVOQa5P4lUa4AxprbLXS3qjUmpkZPHD3gXT8NJ3bzWupP80Yg7oXZkOp rl+0CslLWTBtZVN81EMO3jkY5iBhDpNncO0MTdEBayJuK5Xiqi98KV12xRWRtkZgJ/wFNdo+Bi4q PTOLvDWLF+8t/6zyRLtgJ0oDx51wo97w3Y5ik/VJ+Vexgd+OHTugxyz6ZT2/MdqhqbI5jz5TFkNm iKsh5WWdM72BgdxJjrRJR95LY+9hVNOpbaPD28zsR3t7d/raV/alJzzhEgZt1HuuWSPRGnWXKV7l U/l3JqsdebR/NYFBqS5th3bq+9D55NMWA4EyiI4Fs4MtMCrM2Im5dOTuQ2mEtGvQcT1pShONu6K3 NPItQ/ltvV9ev0zEwJftgvLbXLWl5jWMwXUf+mXDxg1BL99F5w7hzO04mSpG5NOMnEoTeSYE2blP Ue87qOMUJ4KOU0fb0bvaSs56qX8O7L8H/d1DvZU2edBynrbDNlz8lWlplvVLrmMTeHxEh4yCm/Y0 PGya18ZCF1B/5pC5Zgz0cAFH1xw5/GA6eHoybdnUmzqxnSB6msbuaEZnazmYfjP0Vga81FOgGAZr V1du35Rv8cu8V/eMROfV9in0AG3BwTvvTBPta1Nvd0fqEDGU6iTtkHUaEgVz55jtyR2eNnQ49RUe KsMqixiAkVKWC/2t94BtqoNu0l/6hn45gn7Zgn7ht7wHhWhTxVvDXH3sgISD4+0Y1/OkM0f6yqx0 nEIoW5CfDg166KMuisSsK6TYBD32Y7+uw36dww6wkxgM9CtpZDrxw9/UIdNSN0aHjHddXT2Brw1K e2sn+pu6SRraiQ46UDRgPu07cFe6/8TpdMnmLZH8GDZo6ATx51+XAw+ilElCW5X1yxz2GxqURiHb NOZvkuI1iby0Ijfax6bRSpwvfuGL6YrL0S981+7poPOl/d2hbQB9tauli3Kw1H7Vw0kdHBmQhzKp HGi/Zn2bBxMfOvZQOnz//bSTPcj9NO0SnTzyUycKtnny0zqkLSS+Fm2C+tRJG2yJBW08OMoYbA/6 jgEmytFGGrA/5PJrV92Afnkcs0C0Cci4niqmJF/Mq65fqI8+23FSZv0mPoL3rM/oPMMMSicFUje0 6kBXH7z7YDp4+IG09bItlfrE5iLcBHlpf8pH6aRcGHcVgBK2pQOUseYYWZhPA/2D6ff/399N7373 u8mIkYxeR7JKNj6o7CEOFUMYprdpJybS4DO6H+NuJvV09YGsDTQ1BOGesccdhgQVi3GNibGh9NrX /2C6bcfBaKynmInSsJAxGszm6WgmSaDsyYt0zd21FzaEY1QwO3eOnq9dp2892fCuhmFig9qElTUz OJTe+yfvpmH4ahhdhtGwcOTHtuFk/2kEJsZcohKJe+nRWrFVEoK4NI7uh1Hd4iiWDGlJ999/NL3l 538h7bvrIMJmCVQM8ygx3IhIpx0DQTpalhGGw+cZxXLETGE2dBgRYaBQQWjobdys0NJY/BzNEe/3 ve996dprr2UkJI+Wd7vlPAJvA2Oj6VVAg0pQOL0MI5Re/MkTxyAYjRVKkSQCDxBLX/7il9J7PnBl Ok3Ro2ML0rOYgK0tPXkQHYSb5L1KjfSaKKczBgV0MXRa3koziEJw4lnmaSyGcIDHKHm//W2/mXbs 3MWoLcYTFcrUpklLlywVpkal9BqmkzXD1L8jvmsYkVDB5Vk0MkBeHPGwbCprjY4JO98qWCrd+z/4 gfT7v//7dCYGGClhy37kvYfR/QIjw1Z4+INiKR3MUOKRDgY6sxWCIzFFwVqhW7gyNKVTp0+ld73r XenLX/5y0NH3oILxQocxWh4VjbNZVHOUj/RXEQubNm0K+SEGfHdmkZeQa2p0kIa5G8nKUBs/nT79 t59Kf/iHf8xIVsVH6qC4FLmsgiJvCBywcePGepl6UIwqniIHllV6zSEjZhl85G59+Z3f/u30T//4 ORRSSkcfOBr0hTwBcjJmoimDeJYZYJVdAdM2nzKypNIuys9vGmCf+MQn0i/8wi+APzwrEbkXGfXV nB07YJgRNwdUMv5ZhBzk6JOPpBcjwuKCzIlTlAaDfmx8KL3+deiXnUfj9SSj1QTn2cEGGggaHekS RnpVN4ytQSEJnYX3tQaqRpe4i4PlsZN9/IEHrEzp85//fPqjP/qjdGo4Mo9GXx6P0RFDrBVh/vCX SjbroAlgI9zXS+MVvxztplEk+jw+LTEq6si6vUTAme37adze8pbl9EueuVcOHCwRP2ei1QPO+Ilz Ab9ZXhsfDQYbp6HBwWyoEWiSOvaVr3wl9P7g0GjgKH4UP3ip/Cprxa1C42ZWvsDrNhp2L7Oj2gUM MeIqhOtYVdAahL0TQ+3HfuzH0i23HED/Wb78UboKyq95lffKRO7cxufQ+RoGxh0ZVYsD8KMj6ioI MLrez0ye+uXW23fG6K9Gl80l0dKwo/zomWndPMjbcmtMFLDOhquJSfFdGSh1qsi0Ya0/e2+7I/3c f3pLGIalrvvNeiMMV/qltfJqcMAhOuy0tRofznIIdvaX1S/kP8Agy4J+yXVCo2iAulryVNfLa+th 1i+ZCesZAS60K3W0lFWjZB79b6d2llmbffvuRMbegqxhCFJHsk7CxYyOxBguy+pVXZB7+2hrZRlX l8/wXxhFb0/Cu/jld9ujqg2KAPyZpi7/Nvrlc59DvyBYRx98MGhbeG84ZVmc5XtpwwrufrecjfpF 3V1kxW+jTKEV/WJ4+e7It6DsF7CeKUQarbYhiqGXLu4jo252gmGNnBQorpsavM4ki6N18hOf+CT1 gvar1HXyKzNRoV8oT12vkX4nPCe7sA1MvQ0c2luyLtONr6XLDmNKx9Qv7fPpc1/83+kP//iP0okh 6zLUxThtbetGjpnJp03TxrL82gHaQ4Is6WNAeWAgz4IoJ9oP1nlhTd+atGH9hqCjv2foaKvDPvOZ z+B67BsAJJzpGGdWT3yFRvqtWZMPw9ZeUo/bbkr/GBgmrO2E+kVbSZhk0KGuX6gXyolcadQvDmSq 7wX1i7Oj8trOpPQmeeiX205nHOrtsAVWIQBD/f3R5mu/aj/6yZkJeRuDDpRL/ad7pdck59JZn/p6 +8L20ivAukW3lwFk9BuY6orowKFMnqVdSXPj6dZbbkz/9b+9Oz00lJeLNNEhamcQWphmEMSwzeii GWa+xycy3f3WSkdx3ikYIOsXDPyKwAueLXxDVnfddlv6uZ+r9EuDjXX0CLYbcPoc9qvlbIQih94t rzCI6+tnPvvZ9KfYlkLRcbrE6gWlftQm1RayHjpDqD0q/9Rf0mtwINuaXRgNDgxFpxcPlXld/YFZ ZCj0y8//53T/4RNRbt8rO8qtOsm6Hnj10W+QWUAfz/JfsB3RLva338O9H4GYAz9nxm0ztF+/9OV/ Sn/6wQ+n0+N2/ukscSm+NWTZVB1Ata7qzptTNvULBqbHhvBTNHOMXEdV161bE8hefvnl9Yojf3Vn Ke5fiDSCjyAjIGvovNjh0ahxitTy2vsWuRojXDXixWyVRjcKeHp0AMNriMp1CsKPpu948hMj9xYa FUd4MuQpNqYq4mczo8oal440T9LwMY6b+rrWhDBiFqV+pq0lUpPuOVQ0B2o6VXIQ7b6Dh9IalA4/ Q4FomIqj4Tdu2FjvdCjEvreSRoeN72vX5o6ZHRwZp5FSGOronoh3MFNlA/jggw+hpByp1dXGEahm jBh7/FGEGFGdnZ1KfSieZjpUGn7KiUxVwakIBY0zhbhHRVlGFsh77bp1adeuXVHZujG+3KhAl8uM d57eLBWyCKLfwoAh3TD8EHyVnO83X7KZt8wmgCeDXygNZ8QYZYF3B44cT3NVH0HBPoUiCVWtmKCM umh8u6CtResAR+ngbJgjrR2sd1CRyLneXulnJKiNrMyN4bcDE3sv3ZpOPfQglTF/xarI/KNDKT0d GbKDKf/XbOhLbeECAv/0+yE5jd5IFgLG1D+KwlwE/bol7AwjgZdu28aU/Fhau0FDAgXPd69BOsb6 X8uLAGhSKq0dVhsbFUbpXDuVLD8Ewzlzq7J3tHEdfHmwMgTkp31Y5Wg97jGlQTMt+TvCiK0KQzcL wdmOaBT5S1JhRKdWaEjjxy8uAcp3M3oIjx584FRa14chCN2UK9PXEFLRyFfT1sDV0PUqDV7pZIm7 8utVo/FtAa9mFLM00X2z7ZIt6fA999YNl8u3XQ4WGCVjNBwEEiPDUqEDbRs505Re5t/YiS9K0XfK m6AC1qjQuPduvXKNjSPyEzRSBV/Dmp5gp9nOsGWo65fK8FSR1xjtddau5hoNoowxuDDFeqPBoZPo l/H0pCdfHrgykIoMOHqHgkc7mae+3kLBkVfEZYQT2jrgIQo+y9fgO+WwrMIWZEuwTCdPMjO4pgk3 gsptA16rA6nmejqyVIoGBoOilXILjm47rhSjt/zOcmMj74gy9YdBgpqzI+Cpy0folweOkfdS/UIn WwSBQvs1a9aEseHvoqsiAH+kqbpBOisz6hRBuSnlU5bXre0N/GL9K9+1P5VfdYh1QbCRbIUvzsjK O8FyFFjb58Yq46nPPKDjJB1SjQJ5r5GscS+oR21XCu/F27zUfUK5K0+2MXoG6AYlb9b0QlMDyThe jGq4gMPGS7elUw8eY9Yc2eNzG40HTQi6QsOMP63whtm+Gr1W3Y+VRRvnUi8dHbUs3q3L4iRIT42S QQxDYZaZ5KGhYeouiQMjdsqAx1BvhGJkBgGkDdc0LleuF9D1V+NDWLuW2csl+iXckZC3xfoFvWZb RDrrme2u65eqHmogZ/2SB4ZKZ1eeC5bDsgri0M4MxQSDNc6AjbEO70FkbHBgCJqo/K1U2OvQS9yU j0wHKGo50BfSXV0o9MKXTmRxwjLBJ4iH3u6KjrVeIw4itTPzcO+9DfrlsstCJuVtwdG0pLP52Q56 X0m/KHsaUnX9AoPFdUG/zIQblq61XkXGzCPnV80qYHs48yft7Az0RbsVofwD5Bk/Z2vHoZNllhbd 1NOebvQTbajyEiGhid/UVUVX2PkSR/N0hF/R7u110A79YTxmlHiC3uAwgV0BbL18G4RghqV9Oh07 dRoZcXAE452MwAa930XHQjdgBqOhg3XKuiE4wICYUseykey7QhOfBfkRMgdebcjEgQMHQrZhWwYe ZmmrbWtVMdaD5uqjZSkuamO0+9ZL2zYHU+IQeVLQW2RF/UK7a/+1rl9I2zpvZ1h9L6hfnL2wbPJZ KDT2ea3uo9b5qi76TvzMU5tH+zUaK+hb5MMw8kY5UG/qDeXMqrNnI6yFFbro4Gykbgk9ulHDo3Ya 3xZtU+zXVtZ0hlsynaL70DEda/GyIGx7h3zJ0MEMThirtEl6SfQhx5N4K4R7JUGacfO3DtmZkq65 XvmBdln9MpDtnKxfcMl3QR8wwnIQ4TFXXBb3jRs21+NaRtNSpor96swor7my3i/tgW2p610dqupk INL1RHvu3BuzqbpqW45W5KkXHalc2c6KgTpUeXD2xtLa5rospZeBfKoG+Tj4zaAsBqWTM+200xMj 48hpDf2CjfzA8WiTOztzeSxEkcsF/eJbbaPcobJOCtre2jq+z7YNQgledq6djcw6eTY6dQeOHE01 8h8ZU09jY/AXJ5ooh4XTc2x2Kk8AmPaFAxTpo8OkglBSNOpPnT5BRWK0FDetqm2Oe25UdHtRXDK4 hmbQhWIYx/YmVbz6GZ9k/ZBJopep6hQU0NiyMO0Yxh3ruhEsBJKC9A8wI8EAoDMWtkN5cSQqgul/ 3Yw0omN9gnJLUr00wJLf0Zd5WhJZqxFdZwmjRnOMCM3rx4s7RRvaynVXfu/FaLCkNqqjMMK1N6Vy lbuVtFM/fvJSGI8fP01bkEf2ZHLpkGgATFUjPh24ckSnpycrrGLUTGk9ATZ04apBOnCRN+CnxewT eaiEytoxhdPGXH/XRnCUrKRrYfTtbYfmCqBgHEdprCQ2nDb0hm8c3bOMliEaDyV+BoNjshqVWm86 8haKMnsYAx7gpiFoHmITNMWoUKmcwmicxJiMRcX87qYitlJh5MsYRqgjAjQZaWBsgA5Lf6w5aKGy BVER/EvWb0yjI3kxqaNQJBG8cQG2fuzG9u2pkyeqL5Y/a3d0YDQQNlLG09aUXj53U+mDx5TVhtlv Gsq+K7B2DVPMvB/Fd1+FJa2KsZEbokzT4kapci8jxDYSjnyVkU9pKe+t3LYvsTGIiAClQbOxEuSP 6ff2dpNnjud73bmtK3aW5tgowtEHO9uTFlQ6tBi2HWVF55s3S0QjBgZUKqa9YcOG4Ll8VyaERhlQ IYUc0IjQigbh9fPOvbc8c2V57DAJKveenmwgDKEEJ9ARyl8NQyn81Sm/+SpXlq+Acmg6vlMO5YUg rcVLfA3TAfP1++6yriJ0um6psFWMpj/oQAVgGRx95FM6eWogxEi3Hfmo3Ia7Cjj39KxJazAINLIx w5PqaWSc9JAxy+TkjkULlx8rO1DqCmhEHg4WyUfdZQU7usqH5bAu1Bs8kJH/ll2+hIKn8RYcySYZ ykde6j5bsuAn7xioipFX6stoZXTnmefp1I/rpSBO4QNvGtCmi0a5p65fMp2loaChJp29Sscz6nh8 zd/le6n7Szf0yIYj8gWNvRx4lzS6CBZwYMfGS1AXFWOqE3rIf8Giyx/jOwMlzgGkVYxXGzr5X3TZ li0bec75WB5pKDizq9tUGcTQ8M8jlspP5ovhhlm7NDPAJgV04lwPoTGkjr2EwbEhRlBtfmNgDjqq UdxMKM9W2klyDclU8NN8rZeC/DeP06ezUeW3UpeU2S0MNLhofNu2yym7bqqmzCsbjAom0f2uDXIm dZ5rDDyhDuHtRFpG2kz1ISCtl+oXXXn8sFi/4LsBjUoudf1S8UX+Z/2CgUqepbNbZh6MW2Q37ri4 t6rPwUX6Wl+VNWFsXJnPOWm46XWSXZ4ZeECft9Mu2LSXWYAZGm+poAGKRaMAxwylac1ieBbaODMe +sUPQNYv6GPoqlwWmVYmvSz/SvrFEXv1ROgXlSig10bRL67h6WZ2N9peKpz1O9oMZKCsVcy0sSOF SxS8EY6fOB6j73beXf+iLdQLfZw9tJ3TOHRm2o6DV2HI8HB2fZQPpqd8CVm/5M64Oswy23mOTbj4 Pj02wzpBZI0db9pZzjCN7o9Ecd2eralvs32jDTWJTIccI9h2CmN2gPfq9CKH6j7Vu3Ds2Cnyp8CA +BQ5LriF3UN8+e+gShVNBRZ46yPAY+hb05iEzsZdu5Z1mwwgOJOeZ6GyDiidnR4M3gKhXzBy6/oF sZI0S/VLiauuLPrFDtmCfqEdpyihX6rOZG81CGRedrpOM2Mrvb0MK4T3D/dCH98pZ9nfSV2SlzcY 3uvokZNWibBlY9MZRyyj0YXy6O6Ei/gIAw9rNmwK61Z+eA0Nu84em0rbyhEy0p1FL2lPdyuL6BdR coxhAgNezxhBWdHLQtC+2LRlczxv23YFNGK9vvoFmtVi07D4xMwQaSPrwT9elbt0LfarbdjAwCD1 I7fNxXa1Y+TAkR0nbap1uLqKg4OlE8wUarv5XbBtCVkhfzfbKuuy/DZfLSpUym3PzGdiMutM+otB w6z351IPAwZd2JXaMMIYHdBic1kHDad8COoBdYQ6ofDeOmMZs44iHPxltMHGOWjjQBOMQVqZedIN E0Huo2On/5StlnQJ3aL9TVmsIwutm7leAExUjf2ePXek227bnvbu3ZvuuOOOQNrnm27akb7+9RvT NdfcQA9Pf95sBCpkGhXvfOc70qXMJthrlQCt+Iy2cL30xd+f/vEfvhIYNdsz0pKgx3v9lz6f9tx0 Xbrr5uvSnl23MY18Sbrq6uvT7j0PpL13Hku33rqTgiIY+E1PsZuWIwSf+uQn0tOe8qTwvXTDAkdo +3rW4V/elX7rHe9kijmvJRinQkxhbB25+2A6fPCedPdd+9Jd11/POFozee1O1153S9q1e1f6/Je+ wHT4UOqFQc6MOZJxGL//Zz7zmeStP3QnRugllImYCNcb3vAGRs0O16lbjIirr7463XPPfem2W3dD t7tCEG+88UZcU+5I+/fvj3sXa0jsUNjBFP72039DL5+F3E2d4b7lWo928nj84x+f3vGOd6QT0Vmg EWJ0SYPz4KGDaefOnenmm25KV111Fes5tqT77rsv3XzDLWnPbvhz483xW8EqDZR5v/GNbwxjSsHX TUzl6LNlPHToUBiBIIHUN6VjRw+nq6+9mXx2pZ3XXZ3uuG0HTO5KX7zuSLr66hvTju3b05FTjIKA f/gbayQghPvvuitt23pp+MtmNwQ7by0xgvS7v/87jP7mzs0aDVpGxQ8fvjcdxW/4MFPft332M2no dH86frI/XX/zobRzD3ndcBuGLj6zdnjDoJpPRx64N73qta/ASM4dxcsYsWxl3ZUuWM961rNZ2Fzh xeiQMnii/1T62jVfSzffcnO68eab0t677gw63MZU+K69e9JNO7an2/bsjrIoL710pBwV/8IXvpAe +9jHBo1sRKRZK7zpYJT4l375l8Kod7TO0c5RKvvNN9yQ7qR+HDx4EBpdHYpAuh84cDgdPXo0XX/9 remBB06EES3f5eftd9yenv/854eMKWca4vKkGVl42UvfgBvQGPRjFseFwmCoUjl46EDavf+OtP3a LxN/O7O2o+mmW04yHX5v2r17X+Rl+hoZKkBl4M1vfnOka9qF7z5/13d9V/riF78YdVuDY5z0CZju pZ4cPXx/Onzvfel6pvJVkrqM3X77XemGW26ibu5h4aqdOcSCARIV+l28e/Z3PTfo48iQSk6jwXy+ +7u/O9ZsqOhsOAXXY91yyy0xyrl7927KeiTk+5prrkk3b9+Rdt5+e7oTFyLBNMrI7Tvf+U70y6XQ qOgXZhzA/SUveUn6HG6G0ilEhQ63GwN87UvXpe0335xuve1G8L496rEyvGfPrrR3/950C/rFDrWu de4aJ1927NyRnve855EvRkpV/8XdTRzk1969+1HazFhQRo0PZ0ycCb6Vuv4A/Lc+HT9+HPnN5XKE /bbbb0M/MdOVq30aw63knW97G7pmTS4LuqWNNQytTe3pid/xpPQ3f/P3UXYXv+qiqoI/dPDedM8h 9Mv2naGX5VnWL7vx8b8beu4G/446jU3g05/+dDQw0lAZNo7Pj3nMY8J1ys6Letr6qIFxP3rvBnTk Aw88ELzRva4fXK+66muU6x508v50K+v7dGmyAZMu3n/xF38RQxme02BuxiAOwws99rjHPS596Us3 BE90E3ItyP3Q48AedDH64g50mXVGWVUerrkGPca3G2+8Kcpvg+kl2P7I+85OXRNdR5L5Y6fg937v 9yi3BkqeoWzj3UPoxf2Mot+6/dZ0w2f/Txo8hX45fTJdv+POtOuOvenGa69nt0ndaO3M0ZCFYTid fvd3fzfoYR52EmyvxE9dI85ChVLUrxuo+3sZrb3+uuug09U0azPIw560e9eBdPeBQ2nf3YfSKdzg O+k59+Hipqtf0S+uH+jr602bNm8MOdbt8Jd++VfDQFqqX/ZR/kNn6JeDlX65KT2Ax0PeUdVBLvQL dSjrl9wxVL8U/n/f931fzJJbV0snSgP4Vur3/v13pe233UxbfxPh26It27ljP7Kn/N0fsthNXSgz gX/91/9fesJ3PDbaY7ejj3XN0E4D5jd/67fSQDULqxGs7O07sC/0ie3WNegX61DoF9rkm5CBPegS 5VK8rGMaUb577nPRLzyfTb84wCLU9cvd6MsG/fL1676ebr4VfYBs06AvAAAgAElEQVSO2bu3Ub9k Y/V//fUn0nOe++xoX2JAkvxtk5/y1CelP33vu0l58e52d6DDb7uN9vjG69Dx18eAwpEjR+E/fL/r MPbLrbQFuSOnDpMvO3bemp73/OdG+2QbZSdNfdKDjIV+ufOe6Ixa9nk2PxkePhH65cabbkz3H6KN uXdfOnbiZPrqDfelw0ePpHuwRXbecQhDNHckLL919m3oF+u1cpzXI+oS3pa+53u+J/3TP/2TwYIf yrZw9913h56yzu9FpuXLvn370k3bd6c7b98T7VsxyidYuwYr0yHq14tf/OKQE3Wy7Ys2mc/q/b3w rbih6aGhfrn+hkq/wJsV9QsDDeoV49rGFv1i2psq/WK5sn75UtYvlLXYr3fCc3XLUvv1+utvQMZ3 pquvvi4GQ8pAuOUfHOpPj3/i42j/8UjCprzkkktC1tyc48d/9E0MZOmebN3X6GWt12B/2vH1q9J9 u3ak3bdcz8DcyXSSzslnv7or3bjraLpj34PUzQep3wzCoBchDI3MePq93/1t9L6eS+gX0mnFXbOj c03auu3ydGelXyhaBtrvG6+/Ke2jzbnxOm2+r1EvKv2yG5sW3bJv3xHWTuN5woyXdfJs9qtt2Jve 9CZsryPBe3WC4Jon2717Dt+Xrrr2a+n2XXdAhxZssRtDP6vjDt1zKNz3+uhsOYDswN473v729PjH Pi7WHrnJzKZNGyhmE3X/Celv/1Z737WUeAfQtmCeQ3vaKuyi7TtvQL9cD99we6ZsO3fuxnY+GJf4 iJftkvDJT36SdVJPCHxtC9QhXqFffvM3o/01XGzIQ/lPUv++/vUbWAq0M9123TXpdvoxIJG+cNMd 6a4De9JXrvpyuvPuB8Esd1RjoJj21f4wa9kbhrxM9WGBSTJKP9KfXvWa16XrrttBRciZuA7FkSi3 L3ZmZNPmzdHQ/OzP/iy4OetDARhxuvfeu9LxYw/iDnYphuUkI+nuokFPFt/HZz3rmbh34ZJCRbcr f/eeHemlL3k+CsamCyOGazJt4wc9xxZ+zZxOXeta07XXfC49+zufDstsIDX0xtg84U5GgNZhpHVE j3oDxsEgU64br9icLrv0CvyBJ9MmFEPT4LH0ph/58fTZL19LzOa0hlwcy5ls7YlNEJpa6WjAp/d8 9GMhWBsQ6uGBE3TkNkVHpY2Og4pP4qpoNApV7i/63heEkZxH9ObTXfv2puc/74VMT7qNZ6ZHazV6 7kLfQdbtrNu4PimIT37y46EjPX2M41FGTe4+uJ/OW2c6yehmz5oNjESgnPi+ZevmMHTkwQwzezZ+ L3jBC0LRjaCUM6elHPWZDsUMI2OOErzr3f8t1pPEB/6oiGwMN8MzDVg7YipyRcXyPOMZz6jKAiHm B9JH3vWe9Bt//D9jy0n2ZEoTZDHX+2QqP5272kPMAgynF/7IT6ePfuQj6Rl9MHOYEXJcfAbprNx7 z4PRiMeIG3lMYTC5Q+PGbZck3b+m8bHvoKJNjA+k177sZWnPzUwTg+NaLscpjqX11B5+TdLodNTS B6/87+k//sQPu4ErwEwJsmejtGHdRmSLHeYY4dlyyWWkh5sPSueZ/+ZJKD+buQxXXnlleutb3xob LHSg3IUpyq9rZw2FLrzkFa9In/n7/536aIGiylKZnE3bd2B/0Oz0QD9GdlM0RtJSPnzn058RI9Wd yJ9uhD/zUz+V/u6zGL3wau26LmZJ2FgChNpQxnaYNTje//73pZ/52Z9EAfIN3rsI/2o6DMpaczO7 6NCBycbsJSx6hi/P3EoYd7BzBqOVtSjvT7/2X36fwrGbDW+0q48PMTLVvgV6PcibkfS61706/d3f fTr4WhpsDRWNfPltx8pGTuNEObajoFESysqRGFycfuClL0tfQmm3U871jpwBxxOZQdfWdvChkL/z B/89/fJb38IXXFCYIeud70x37sG4pAPuKJZlcebLkSPTf85znhNyqFwofx//+MeDLzECFDlQDI1/ fcGRF1vEV77yFemv/vxjLMrdhLqgXoG/nZFjx47RuG3FiB+lbtLBRjk6k/Ts73wmLkM44zmri9zu 330gfe/3viENjDyQargMhI6aQRGnPtxUD2HM4zbVd0k0ps961pNkHcs/7LA3YwzdiN5CHhj8kedO 8Yu7vH/6059Kp9aGISv4d73rj9Nvvf03nRRMqJM0S/ZTrSxWt2c2M4D78Hz6/le9Iv3NZz+XZmgU mLxLndDs2L13p4f66bSyWD/hSugIdDdyKa+e++xnkx95UvlttHfegq586UtjBsbRQF12sn6p0ZCo X4bRL+vSzddfk578lCfEyJy4Sn8NIxskjcrSUdI40qXFjpQ6wZHIDRvWRZ3+1V99K7MNeBsw2wTZ Q6Z7122ou8b8MOuV/vzPPoq7DzUXo9hRxjtYW9SGcdOOK9wghsVU03hav+lS1s+m9OSn/qu0AXej Wo1ZCwbD7mBg5rUv/7fpWD87DNKMobowkpRodZl1ciZwueEGN+F5CnxiIxGMj5OnTiZlWXzbyCd3 3kgBXmzdclm64rGXxbpGxqjwAzyZXv6Kl6ev3L4XPqR0BbyxFg10MNrZSScGN/UOGqI/+qv/kX78 J34oOVbZopKnXt53+L507KETwW/1v7RyZzXl4YlPfGK4QVmnNb40AF/0ou/G+Bqm/LioUA9mkFMH YWbh+xwDf+su3Zyu+spX0zOf9mSrULi99J88zoYDd0U7eoop0Ro0dAe7mWldNtvQL09d0C+skf2Z //gf0t9/9h+IncKdsp81aQqsm4lID3dJVb+8+ad/Kuq2Bob4Xn311VEPNTysk9ZF5ULd8MIXvrAu J6a7fcdN6VUvf2kaYA3Huk10Qk4hz/OPhUNifYL8ZknrcdH5e+5zHhtrWFpxKXM3tB3I55o161jf AZ2wE6aox5PQYS0j59+xbVvq1LRgwDR1t6T/6/tenL6OMehEVx/NPI50aQiczMaBsjbi/cEf/EH6 lV/5FdGKTok4awx714hfXr+4IUQb7cJI+h8f/0T65V95a7i0R8UmnRbKHh0A5AUlga58XegX5T7P /KDLWEqwZ+/ucFfyuI4O6mY37nsnIIYd6Cc8Xv2RXX1O9R9PP/rDP4KuuIH4VGNGsGen4T9lb0H3 z9HWOdP1oQ+9P/3kf3gT/KA+gbuybCci6xc3Kcn6pVkLE2P96U9ncJj13y3t4nkqvec9705v+80/ RY6ZNUeWZ6kvc01X8MeKc0/I0/e+6kdpw/5n6qJ+dbe5cQhyTF05dYo1R9DE5RVRb3h2lP8FL3we +bsBg5t1tKUjRw/TNr05feXLX408nBPQHpvdeGl4lLTjat/DAMBv/NffS//5rb/uMjmrCvIxwsDU Tty+NlMH6PTgPqNNhMnMEoDT6UUv/B7kw5kC3O+QR22GX/m1X4VHzH5DD0wWErLJ35DGaY+sqz+C fvnYlegXZgs0il2Lv5tOqry3LLZb5rNRm48BxKc89ampj86/NpX6ZXx4IL36Na9P19GG6b2j3TbK Omxn5qwXruHpZvDzve99b/q/3/xT6CVEG1mcwPNm390uiWADLGZFjrFBU18vGzT1rE1DLC153vP+ NXU841tjnfgnP/5n2Fm/EvHdjJh9g9Jcx0b0C5UHd9jUPJde98rvT5/6yyvhCQoIt04Hzh9Evxw5 cQr9yuRCWx/56rnhJG1bevKTtmEP9PEb2eH3vj0H0C8vwmNnmI6JG0TAM+jZ3oLHCq2A8rSRQfSv fuVr6enPuCJq6sBZ7FdlTvdy+e/Mp22qExTvfd970lt//dez4QQtIDaFgcml8iBPr3zNa9Ln/+Ef o+6V9VL37D8Q7ZW6eArvpaHJYezWx6XJob70mMdtgUfDsBR7Z/7SdNeu+6KzbXu8bvM867VsLy+t 9Mtx8pxJmzdsRL98KT2b9k+9q97SZtHms+0KXVfVY8vuoGAZ6A6bkbJc+Sd/kv6fd32YQd4TYSeN U57ZtZfSrEDkKWxV+P2Sn/yF9NEPfSA9uQu+aOPMoxssNwRZBbDJ+NQw8Ue5OMGhNlmbm51gi/rR 2ite8Yrahz70ETac4TVXdavfZ/Nr/k5HvBoLnQJKwDl+eRkQzUrF4BqvzQ/fT2LH+Hakdvfum2rr 1j+rdtd9tdoEnyeI2z8GTqQ1Mz9CJK+MF5Ulp2ea1WVWJj3GZQkCg1meponjD1EbHar94Au/q/Zn H/pYvJpgv9EpEjg+N1sbKnHiS0mYl0IpR7nnt9Vfw5oBGyFG2Wq1vbvurm3auK22Z/fdeB/lYg+P sXkuoQqt5utIGclyTUc2C99LtiV985ipsciR+1yNhqL2+te+ofaRD320NjVK4ZbFjaDnDaQLH2oj B+t41qburf3pe36r9vw3/WrtEOlYFvM+wd+TPooSu33UZrnmuQrZyp3wRuHsg9oEH71G4NA0HJqb Ok2RofoIqZ16sPbvnvO82sf+4rO1ExDgFOkOkIa8HIB/SAA4SaNykZeZm7h5STTu/lReZvnReGXK 1Wrvfv/7am/44X9XG5mdAZeMl7iZ2hh+OgEm4lVBTjNnYTaN/Ilw9fAiMlkbHjlZe9WrfqD2sY/9 ZW14COkyWcKQZQWG84cC6d3fCyCNZ8gEFxjAMNCpNsA1Xhsk9wmle/KW2if/8u217331T9b6+TJF nGkLshqwTk1BX6yJoTHupFk7PVj70Re+uPaRK/86eCFtldvMz8zTKXE0rPh6Pwug9Ng3IF8Gw3CP 0O9///trr3vD62vD07O1UdKQKl4mh1tA9au8LTQLAkUYeRIwzzfrx7yyPF2bHORt4HRvbc++r9Y2 9T2vdu/dmYfWfPWLZVHOvC/kZdo5fR5yGhmZKr14W/0p+EGzuVO1j3zgj2sv/rc/WTtK+JCVmVF4 aW61mtpVuavNSWdk3zpDPoazVN4jDvdAu+RZoTM3yVee9+7aj365tLZn16GsXwg3PMafiETkC4Iq Ew41wSiuTSALH73yz2uvecMba0PjU3WeNOKZs6nKX9fJ/h6nHNbaTNdcJtOVN9SJEb74Etm58aZr a1sue1rtjj0PZP1yRhmq9BdhUOFqEkJVdJOcU4Ynoe3Y6cBgShoPHqu99vnPrr3vrz9dO0qYWRqY eRoY+fFQQUX863mcmX7QVtxWwo/3e2+9s/a4zU+q3XrT7iiLPO+fzLyXFhE10iB9ZdULGrB5Q9BL /DOtGsLK8BKW+9hQf+3VoV/+rMamFLkpJd4UO+2sDqgL4+oaNcqx2vad19Yu3/L82h3byYOkEYGc l+jwO+cGrRvshYwntOWtZbd2K+FB1mki0k7M86Z/ytaDLwNjtTe+6OW19//Fx9FtOZjBLwzIF2U7 P4d8eYduI2PD0HOu9qcffH/t1W98fW10ehLbwvYh07mejwjHlfmR9a6617IsbkuKDrQcuXSj7Pw/ SDM4Unv5y15T+/MrP6UKjXo6SWVX7+Myl1+Q1oKMmVe5sg6QZl4RDJ1Rqz3IdSxwyDgdrH3go2+v fdcP/XztXpKMtm52uDbMs7Q2tfzXfLwqiLLxXO7lfdwzTpaTIz4IQyqnj9Ve95Lvrn34E38TdSSQ wkdshjBFV0rDXH7tsszzQtd6Nj4EHqWc8iXrF86Uqn34z/689soffGNtAP81y22oc8l/rjML5TOL Emd2UvzhS6kvNKRTtGU/8PJX1z78wSsXyl9HkMh1EDd4iYUib23nIph/SnYiSWZzI2gObUv0fW0e jTKxv/bhD/1e7Vmv+/e1gwRRxyjPExYINs6PQiPs3dqc+i/XCtMX70IZRcSsFjIj05Jvdd+1/c7a tq2Pr916495cB3k/RJHpUEY6Ob4ploiRYE7Yj+WqXuebYcVlBrtoKtqnP/7Ae2uv+qE3xu+qyLXp 0I9VxJJOycY7NJduwQtQyMG1W7TvI4tadC8MgAW5/barapdv/Te1O3b0R5zxGSXLgBcI1hfqYG0A e7IkM/lA7b3v/i+1F/zkf6odIll5C8VqD/H3eGRDwBnkRZx4tH+8CshrOWJIgFR0t3DnOHvw9lp1 yzg/OAsa9PL0qwzguQkXiThwjFEbz3CwN3zyxDAj8HlUoK87j/LaG633hmOkcgkm9h4Bb+Ze/fTV AviSnUTCvYkRWfqeDBTk3V+6mLZYNs5C7PN6YmArwFEee8yOtjvCcZoDCt3BbjE00qnxeXGopb9g dbyyd66rkCMzLv5dPVSU63Y0mBEodw9k1KaPxd/20ll+UIdC53jhELkv4i5Vz4Scci4jzkrwSNcc Rjmc9bA4DAH14MriGREM5DGSzegEwY1RzqJxxGEB/JLTi3eR/8LXpU+Ft8qwstzJVK9rpFwl5Uix 390C9JEAR2Mc+Rf6mKEraOcNIs4zh0XloZxV1WYOhAT4jaDpruPor+7sLl1iwGr1ID8A/fpd1+Ko jSP8joYtz9lFXDhn/jHaitwqu4IjgoIjofLX39WreH9hfxQo0iehwlLf6DfuzN+pE+PwR3935qIq /TKF+3HG6MJyrMditMxRfsvJf2Qsz0bESFo90IU/5Nk1fevxt1e/sIA96xdHVYuUX3j6+t0XPjhi K+91Ue5mvR1NwarB7WLlS7O7qSJeg8yKhbsfjCp6bbWZeA4LAhZXoCzizOTp+qXu52tslNPkFAig 9568d73EasEyOCNnXoODrHWgjN2u/zkDyPECm+vF+qUn+GXyxZX8jKwexotYU4O3yTiuY7b7ynE+ MBf9SFO9GBoFQgp6nQOgv9DTDt7O+DHSfi79co4UF30WX9eMnF2/nG89WSlcKefCPeutvPOd5aFY AdLMwXxlonG9zSKkV6JbuPnbJpV8jOXZkdAOd2MHzuPsGtoyve8bubE4/fP/5XbV0WBRR52VVp6d PIzEizI9/+TOCLlIv+C9UdcvzIYwybFqKOvvTMj6rC5zS/3zt1+ldeF7I90r1BpNhJBfmGA9xvNH D601fbgwEtSixOUf+N8EDnU+qgMDyp3vhivZVl8j3SXvXFWovdeLW+DgoGvxbKuXiVvSeBh3sWln prJkOYQ7or+1MQqI5iIogePlQnnqiZT3huPS2WJynE1zWAPeybKL2EylSt8dHlcHZGA+zMZ7d7bK 3dCy/Uo7VtVJ+aAVZdA6VD8aSlD/9LAeYgcdlJyNcituErFFMZVJQZRx5wYx8VqMSrQVdYxt0LgU JKYxw4fDxXAYhS3MUa/lgFA2IYpUhlyAR1pugZ7TVDyr9EtW5R4hsjFs7vXsquDxwo0eYNipfqby AP0odYgx/COhgNx1znz0ae7HpU0/WsjHFtLs8HSG9IlBQc7n84PCB6djvUrH1l3vVgUySV8oD0Kj zuiaiRTg0sG6IhrUzVbUCpSEkAaDWMCiFOJ3CZXv5ZXhJ1hJ6A5MGq+xkNUep64L0M0F3rMsAnSm 1bCuRzSuh1DmJflySf4XGeBRKBlUj4ZqvAwiGEz/fJW20MGzpz/pJuC32CBgWR5F8PP640YgZW1A cU+LU+6J7S5L5wUN5cmU0ACzRLghxUACz0z9exgkpImOpm1bZZtEuAv+Q0ITuJWOwwS3fsdKj7v1 v9BU9HwuaHoPOA/a2bmwUXZARGO2+DnrVqgslw5VSfLh3HP2uIUEdsoIirKyXW2cdX9oYQ2l2/mu WYM7B/88lsCy9FFfHxHAeLNcloMN4ej8K1+zsSbBfC4YKmLP4lYkaES7zqGuXzblHQKDKReciXaA a1azW5HJaJQXY3Talc6rBN1j3Io4lC3iVTpPGr4a7KuFcVrJ6PibkG0W3I1tk3GbHcatZpZNZqr9 HdjIwe943NQFePUtgHp/hgX/umn1ImdWIdQY7m4LRoioLUBjTToPCaFMugcKC/olj2x5UOrqgPyp KJ34Bnd39AU/dL1yUFO5YjB/mUpvjsTjbKi4zoUAuLuZyCS7c3mEg/rF9qzol3NFP9d3N/KxoQ39 ostbRavz1y+WpapsoRnMUb40XstgQdtpnXegqReXP6pn0KqsfzKG3zI0ptX4XH1edFNCSzw/6Nam VGMnoV/ifC38BwcGdK3O7DHUhYKbEKi/8J+Lu3wJafNP6RVeaOLEU7/YPlrfhUdcv4ij+HO56UR0 qODL+dmv8BDKLtgagWIQtYiEnVbrQjMu+dG4sG4VX0R2QGBzI7Zinxxl10uqujVRrrn5DCTkgaFa dA+Vlx+F5zwCSlu8qapXvAyDOZ5ygOqxi3ztdIR+6cU1k+RMP8yCKsxqbu7EKT69uDj2cYmXtFMu dIcUQHMRThGhVJmIYYACllfJrABcXdfW3cmeBbhSe/5UPqtVEkmonEcJ/rDu4gCejiyYVPRdyNsj OOYh0CXRP8u1xL9iFmA8gfsqcs9ptLBeye3vmmC05zVplJ9mYb+7f8RWijnYWf6KAlcRAJAK4eNt EcJGeoZAhVDREcAP1nVBJ44frQuVfvamqFC7i1GU0kVLQlVw0w2m0ipLmEyiCJH/GM6LhMaOP5Q2 sqbCQ1Vxa6eiYW4R2TgKfJUkTxcGnu9h54Pp8PDPPImv+9iYeINjRrIh4YpWBbnzyN0dokqjcIKz TVzb4CzU+AijxPgMrwqiQ0vVxw/bPpF0mZtwtyQWoLOFs+sZMopuWh/krP7wqyJcFNHncvmCq/Ck D99iZ6DwEsfP3M4zNEDZjTFjt3HrJemybfgPA1LGeCZjXGes2po1ckvChCgyxtsFyB1oQwneC5X9 rf/05ZdtY0awn/NB2GqbdzbghlvYMt+QFwbOqnkWg+t/yoj6mjX6GuMjfSrvRnNeKZdiBvbU/Kg8 +ZDUoAhrvtzRsW9NJzscZjJWkzrnlfyKgci3E0PMbUClzdQDD4RhIN2qDSTrUQuKhVf1D2d5CGVM h0JjQsPcTpONqDO1XjGSe5b45/wEUi7MzrUZzESOkdwmFtqsXbuR9XE1Nio5GrKtCu3Feb2UY8o1 GqsFFLUjtxohD53OQ14avGWQY7XJuxMbftWkP4t+2cjI6tn0y8PPzbV/+IYEf5whkEeuabARKmcU PfxUF2LEbANG1LSzHAyOaeA4W2tdkf+rBWfK3OgnFkKiX9QbuJKk05zjsnHLJemKSy+LtWoy3fln xUNdpgyU2b0LxgE5G2dHMhQa60wGwrgZZgv9CaaH3UCkbNG8kL65L70Wvi77hK5y1m6xfmH9B4FP uahglZC3R8bARcbc2MV1P27nLbQ5zbEI7HAW/KsWYVmdvChStFmdtDHCeKN+sRCrBDvPIWPqF9oW t1h2S/1F+sXG7ZxguYRyz7/y31LmkJochjVP+dDSCdqYftYqalzYP2TtKMGK3ouX9T8lnfqL4GP8 coA5QKvP9tKwJDTOGp8Rz4GcTcc4FNr1WI6irWNwTq23Woi2UPqwXs71Jeoy25eAqjO6mjzUL+7e qf539qyuX+h8uL33aiE6TDaEXA5ceaaX56Zt27Yt2v5zpy+di0ZoCA1JbIId/JUNzmiH7cIMje3x 3HxrrL2/hPV0Q6fYFVG28MWNHRzk1JOnyTWj0Qmx+5vXyRcJMMmYheJ+NrCDY8DQL5BrGLsvDq+l Op2pX86W0vLf+ro9amUUmrnTdBtiMIxnjmvoWHtVDd7VYwbS9V/Vgy+B+jepED2XeEfTEndnY4/c /xD6hUO6OWJEcBOlVYOD8chpkJnE5rFf5xjc2djLjB1HmMhb9lcMW1+2BBi4oE1DtAo1ROnsYluB WMwZyqNSiP1M521Y71LbDGHPlR9ZrHIVb1SgFVIFoUw7fznj453LriLT2z5O0tFopleq/BtWGY2C uQiRURZdSmLHB14XyELtLzspuE/wzxFo1Zesa5qnQQOnOQ+m890c50to4KzdksNQyezNs1yNkQMW 2POcTyyy/EJ1F91GqMqWX4ltYJxncDTg+O5J1O67L46DbGe6Zs1CB6eknqduiWv6hBP3KqWG3FSU vs3gaECcucVPF7+6W5DxPX9krVvQL8KtxDqfOzRkO85QIBySS98SO4QKS4KnJ/KomiUweeYP+ItB 7+/AHUEFCTmgspf24hSXz0bi6sc308WL7taVOcVLRZaaNdk/lIYZsl27aXMEl0ZGMyvvIQ/+XgoR qLwUr4xbeZPvWeJ8VhEoS4ZqBHxgmc1pSKx6tBhLwy7iX0kEA2p6mrNUSNsDk3t74QWRma1m1KUK FGkWHE3ZF6ZWUswOrtm0gxMG8XJxPRWDzakjZGftOFFb0wNjbIXKaKHbY7SX5Ax+QQBe7F6nxj/J SH43ctyj8HLNwTP2EGH8kxEj0nZcMtCCMnFilyubhah0+fFcfzUqnGZ3NkUwPdtq0w/5qe66LSxw j5cBhV75ixSNNzTKxo/RcB70smjmHC032Bhjv+rOZnaiI6B7VZhJU5MuSh6k6BbSbnFaeLOQvslV hY3H+BOZlJ8lDvnMo6TZFZLtYNgKgZFIZm3mOcelZ+0mFmWjY3gnpTo5GyNWUDsoQOeulLAkW3Jf pB/MLvRlprWHmTrAlPXLVMyqFboZ9OGD5RBcnIwmCo8DZI4tezvYYCX0QYVgwTPnV5Vf3R/6n99s LsBpMpDNM7YyP5uhiFvIDrJZzrq1W4PRE9Cmq5dF0xgg0ewQNtIuGYhOnSfxo/pTKFTdER7p0D88 GR297iY6wybYjGxJxNpoGmEnvOG0iYXNbGNNKsaUR/K2nc0eolcdLa+Zn5m+QeuwLH7E8aBIC0zr PEbHqY1dFJXrfjYR2sxmH9IreOrLAqQl7kYrUHJf4H/+6llQdqLHxsbxVHGpP8eIMLLdTv0UVsd/ EpBUcyz6brUmdqWTD3Ww0QV0YjRtDtluZ/MlIeOnLqhaWviXATyjPHI709cvHdE8862ZzWBAsp+t jXuaOIaglj1LJjEAzdHUS0o8PkwoFPTuuW5Zv7izoe2qoAFsp7qwT3rZ/JTfESg4QfjqpawqKefv ftIELmZwDlFDqTQ5G1GBVdUlEO1uHhDQmEp5xwejAy5ilwxbrb0AABBVSURBVExmy8bm/OWXdFWO HWR2ZFb9jEwPaCQBa9jMYJaNL9rXs9kD5aKWEj+XPwJU5S555Hf8rcqWfxvedgfbA1zi1B9mOeYY DJhad0lwuI/dKm1g3CDHfOSRtGPjdv6Gpsvx+SWU0tXldwkF1S+MXEbIMbwdOunoioXpitoZ8SvX cj5lKBYyISVfKXGT273r+qhnS4ApsnlM/3Bav4H2eCmcQQcD5NQWZCZHKjjZSZ+bnaSdJw/t5ciC Tg3eDCPNfQyWsYMcUcTAC/MVl0vPKppIfdjQBV9LaZqBglkK/vAy0ErgN8KM2UYzAGgNPI3ttHGD m3dcOP/Nrn9wBBuSjbwAjw/poPOkVae3xkpQvuRyZdo5+G4UHFd54F0NSlR9AwcAm9jUSek5eZzN 3nBtclNuZ6O6PFvrgoF8kFt1aWplCQIy0+JuJ2BxepJjUTq5grfYaZlp2K/im3WY/C48vkAUiB6j dybjDkzsSoNy9mwcO0+NZ20sZCAC5areShuh3Hk0hH/zqhNZkj/PoxjyXvYoUwxB173oYhG7tEAI q1hsi8qTB8UGVOmWRkcXPI2sgoeVtjA1wpOmX72m6FE3u9aG5zF6pzFdzbOGajeZW/ILB1KlYzBv pQLc594TrO11O9K+IoRgkXMlYCuG44NCXVzEPCPBztMYh7Cyfi93ns4W+ZzfwIHdwGrVSIDFKAcz srEctFO9Z74xRgmtMA75reIvBmD8rsIYNkB++YH7BtYgddHBsAPoSLGj3XE6PbOenZs3pks2aWQQ mO15bAjkR/Rp1Oym03jxM4OJe4mf92WAeMqEh/nZeXLXMk8Vb+S3fuqrBTtP7lLpGggBe4cOI/RB +Mqhd+fOo5SFkPXyWhMy+GqmXwOcLZCZLWLDpgyrRz9NVLMAPbjxdHjuQ4yoUw5kQQ+epbAoy2W+ Lw2f1zLmt4526rZlHbQj5cDAovSWRj7H7ywFIMFosBBtLiO5rqvTJOnpWhsTE54igLdo8N78Wgnj wdyeebdqqFxTxCWOnaOR7WUGR3An04cHpKIxEDJd3aHZfIWnu1Qt6JfVNDwLWKlTPKdI3rhbleBZ fgM0rI1jCwsxHv7TOrYhVhk7A9VFPSn5kO2qYS0zsm6bi/8GjHX7XM7vYhbIwYc+Zuy2bmSLYnJh YwGomj0Woi1XWILWq0Sh4r8Hmnsm0wj1R85trIySVaYenSfd7MuZOm5p7ICUy7zcWn7VYPUJ44Jd +0iPjVsDpqbH6Dw1aktLZYUPDZ0DRf1vDJNfN/4t+qWvExdB9Uulb/QGeQTYj72yUMd0EQz9Agem GYD1ENizGYKNeJ7zOay0Una1SHbhM94oB0Tb5jvzUDpPGs/FdXxR2kGzRW+CqnVqaHhG51R6A57+ yU7I8QjNWpi16VjTR7k4qHecXexC2uLzBf0pblrOQLVUa97ZkHPBLfaCUl2IpH5Rz4d+4ZgJwc6T ywTOLjkLaZz1yU5Z1bl0Bkp3YY/nsPM01XBW3PJpFH6qS8/ERn0hF+JMLtsYO3F2MBw0wRTXw2ET nSc7TRPoHDsR2qIhBwwS9q3HK4V0s63UkL4yUC4ezwau62IrBNz3p6Lz5GHFYmXn6ZGA9egpMZti 1NfOUxyGXLXK8m05KKhnCa3KVW/IbYu9AN9xZTf9FkQM/XIJHk+883yqR8IDiGmzNG8bSVbWt7E4 U5Gt3ek8TVEvo56i3+Swl7iLQN6jlwmc+L2KPyrneTsqGPP6wnegnPUfFhT6c0KhZsasCh7FCSQz oqoH2I4SasJwtigqHMHBFjv2a1l8zzYebFzgDIjtoVsKOwMVP5f8MXJ1Vd8XEYI0C1odztDwcRhj poP9bp3iZ8szZnKITyCCrgrYfgdjEEbRGOuatH49Rhv5dXbiesG5WSvCsuU6M3Rx3/NL6ZT1MD3p aL6bcKwOHM1hi3FPlgTs83WxoYS+qU34wq/vlVcZWlDYztSJNtISSqFwQR5HChKzEL66k0zw2nVB 88hYE2vg2pypQSHNoxRcsjrLSGcTRi+7qMEPRlSI61kci9LKaNT/FrmKF0vybAgUnXHR6sH1sQcD x2dlxTw0elYLroEqvu6OsjkhrGFo1eljbd+5QcpZAHHhuZQlYxnnFYlz21osG9YNOt9X1nA8rE0q SGM56KLRdIaOPcHyZ+s+ldIOYGP/sjQO9XomnucBGjTSxG2UY8H3/9/euXBHbQNRmJCGbCAQyv// k4XwKIHQ+81oZPkRshvT9nDO1dm1pZE0M7qSZb0siXct5WNggLTtMzkiSYMSJHNCIUqRXEJLCquO 1fa08lcSP39msw8q7zy3ap9sxYa5KjPSoTo7DGeTMGR0rfJ2umnlgQKq/0/rF7a23mlYn069jyF/ GJ3HVF2Trj1XPanie6869+Wb/GaHOo1+RxO7h3k8a4y1fGDal/eLphsvtZYf80X1MiujmGxitvxO 20zHs4/nWLhxP9Uo/3+og1uDMXxHcKdZgzvVC9rkac514Zx7PuDSg3hOGZOhzs/6RR1BJeS1vr3Z a/5iW/34cDC3fy5+bHWtoa5yzu8M/B2ZlqhfhA/HWYSJ+oW0MJO93/CNDYU26heNANJhYliUD9Rz G+hjapj24KLOkekKzWm8yHBIa2vDq2GYGxlAH9/duLfMJI7nXn8IE1F5o5FM1cVoeEVzDL8PPPc6 2kKz0bGkT66nmltGljCt88SgGVt0s+nLvdozew31Sw0AR/3SGP6q+oX26w8qExmWTl+oPLBCA3NS +zVi1IUB+vxrgagYqW2sxlHMUGkCgGGYrxqM5z3/Nwe56t359lrpbEXts9qaLCO+0yqHlqtxJ+sy yEgtmct7hmGZMd9YngdzDi1W/aLniTqGA56jzCyjnuBmdo1OLsdpoFvdYVH5hn3UuOzQVybqhnqy tbRZ+wJEY0j0A0dKYCSIQ2yrD5DE06/kB12gjxxyLA05Y+tSB81/1eSCTmB49ucrtfcAXX+t5Feu oTlOnqb0GJ788Dv5cq7RxufqwdDDZSQSQ6PjvUYLL2JTAQhBnl26YPzKv+4tJE4+f8Rk47IFEOlb DW+LdCtZMYKjEaQ66CvX3CgiUVo0+GDSSTXZtZjoTH2LXlG+01FSVf1KH+PxGmIGhBfRQWcSNDwj vC7DXdZRbjGLMHVJ2WfKtAMvMlXiLE2ikmB50Bd1GN6+zY/ySsvIzOJV97nUYt6p2m097OjNIjhm VDAX6gzGSeoDn/A48fJd00lXr1Q5SEyUQ2HH2lTtxRppCp3FkxfT2J1uqZ/BFKLRp/6y5rSqHky+ Pem6KjY/5QmzEZeafudMlXhgx0YHWTfw6vzDMlyi1dzCDmSscTCfllVxBgZlDEPHCV1oJDxkKs+4 lz3U72nImDEoIGRqpuWg3g2N+U/6ZmltFpEjQHLntT/nn3Qa5XHSPUtFxJIlUZRwyjAfsO82wo61 /Ac9NxwsGwVBiqhYt/yu1E84RKZsJeUBZRiB4rmujiYDDbXyGO5VrmBJxyPLXMnlPtpTSFFrBBXM q+hQVim+Fe/9rV6GKt+stL26ohKXJAhU9mGW9wySGdLsGXC4Ng34PlNlF/mCLGaMrzRAkA25TFtw p4zGTFnK4loQJiU7YSkAn/zTKDhoyRv6LuuXdzqLbZ/REkOmTBu+b65vNFqc5fZah31r6+qmRUpJ PUuiXJOawaPSNIUjgN4Aasw+V32lndI1wflJz7kat8oLfDsP7DNTXLiP9hYoIgsW4c5Yy0sdthsv Lujhp9kIfX9J54rH/IXKN4cWz+p8lhVF4Af4NxnJr8nttxZHYc60DIVO6EfNPmlvXO34eRkb1pxP FV7GKn6dR6aspId3hYnyQraLoIKbMy10cjT7RKNnMZs+sDzJevPutd776ippEPVC+UQ5Bm4GTFiY zQLzST+Uawp2PScS4XiWw6sH1ZOgcn/QYeGce6ZRsgjwQgfsVDNLUZ5ommbiT/3CtxsYvoGSoNCj qyEKoauOkPWnptLMvewZuShwziVw3wBNTnZJ5T1Dw53Nc6YZqM5hJRMfOKUUuUaFS7LIwBZ4MdjN LrmzWrP4113eI58UgJDB5PvmWjuY3Wo2KHqAmhWAQ9THsjxXewaDG3py7yHwGugtHV1Whs5ByrTf 6HwldnrGxSY+vAMInr6L+K38hy/2MHWf4tB+PdMqEJa60inPYJpN1TdWf7RdN5Ooa9etU2aW0Rs7 f56A2JRGdmZkaNud6zlh90o6yNesruGtJb9a3cRh6JxllTMvE0Yj/5nghxwtAnKoXz5pB1a+Uz1o QOVCgx45BgQmhUvdRaoEwHtTcMajrFZnllUhyKJ+YeXTaIpz3dd+vL/yOQi/kH//7EbfhtOvuFM7 /EL5wS61GOqX2QR3UE+/MEhF3U+7gYFgxCLnntmzFLVgWilIUHYepLvgfbSzFdTKOBRdZNJshiD4 Tp2ao8VsBExMUn4XSUOoO9KPXia2ea+zBdvQd0PUESQkVIasg+8X83P+a4k7KF3ZxC84zXDNzjXf OEyGEZapGxtZkBk0Ben5MpHCFvIGWd1beC55lN+M1xi3xcG/p6MiPf1+HKvS4+FykBpUOFzLsIx2 Jb06rOHUrCavNEKfxfo0dZz0MiFsb6hEwD2X1KvLab3MHxpSxSdepmEbdZZP73wo0CxfTtMl0z3F mbNCg1HuFG5lK0bBINMUcYtOhO5XfI/kvRJWBPioQSPG2a2tfEn+iC5J8XKJZWPITLml2jrNCjIz e/WcMXvUUXotA871bL4VuC2Hy9G99Is0F5MqLxEuyzBemzwrTkevE1aWEo9HYtywYggycJZbgWIF VoTRhUhNX9lkduBbCrSElDP5DukbPYawj6Z/VgcX13/j3vAa8ol3eC7vK3mUZkzDq9I0pKeX9+6X cXBGMJajycIycGi/rh5DrzQlutx1b2qW89F713kzZKV00/Mo4qgnNUiYccMsAjQlwAsT7ZmoR3BV ua07tCeYUCTzn/cLhhF7DM9NpTRVwMV/bAcQcstUzMmvsZ0Isj2cL4r/aPlHRhnp3vAqylPuk45z /bf0rLBbfsgu/9Ijwo3En0XEj7A9TOqTbWvyiedzZ96XYkfcS5VRfaJ19VY8jsm/VaSTCEtdiLyp TynfuWe5+Z86UF0LW4yAETACRsAIGAEjYASMgBEwAr8NAv9d9/O3gcSKGgEjYASMgBEwAkbACBgB I2AEthFwB2obF1ONgBEwAkbACBgBI2AEjIARMAIrBNyBWkFighEwAkbACBgBI2AEjIARMAJGYBsB d6C2cTHVCBgBI2AEjIARMAJGwAgYASOwQsAdqBUkJhgBI2AEjIARMAJGwAgYASNgBLYRcAdqGxdT jYARMAJGwAgYASNgBIyAETACKwTcgVpBYoIRMAJGwAgYASNgBIyAETACRmAbAXegtnEx1QgYASNg BIyAETACRsAIGAEjsELAHagVJCYYASNgBIyAETACRsAIGAEjYAS2EXAHahsXU42AETACRsAIGAEj YASMgBEwAisE3IFaQWKCETACRsAIGAEjYASMgBEwAkZgGwF3oLZxMdUIGAEjYASMgBEwAkbACBgB I7BC4B/dtEk56n7qngAAAABJRU5ErkJggg== --20cf30334961b6f11a04d1b88806-- From fgont@si6networks.com Wed Dec 26 17:19:56 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF8AD21F8CA9 for ; Wed, 26 Dec 2012 17:19:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6j6ueb8eQX9 for ; Wed, 26 Dec 2012 17:19:56 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 2B2B521F856D for ; Wed, 26 Dec 2012 17:19:55 -0800 (PST) Received: from [186.134.45.182] (helo=[192.168.123.123]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1To285-0007OH-HG; Thu, 27 Dec 2012 02:19:25 +0100 Message-ID: <50DBA217.80004@si6networks.com> Date: Wed, 26 Dec 2012 22:19:19 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian E Carpenter Subject: Re: FW: 6MAN WG Last Call: References: <50CF48E8.10708@si6networks.com> <50CFCE5F.4070804@si6networks.com> <50D023F7.5030507@gmail.com> <50D9D273.2040008@gmail.com> In-Reply-To: <50D9D273.2040008@gmail.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "ipv6@ietf.org" X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Dec 2012 01:19:56 -0000 Hi, Brian, On 12/25/2012 01:21 PM, Brian E Carpenter wrote: >>> Nobody even suggested that. For instance, if these addresses had a >>> lifetime (in the RFC4941 sense), they wouldn't be called "stable" in the >>> first place. >> >> I suggest that you add a discussion of site renumbering considerations. >> The problems described in draft-ietf-6renum-static-problem need >> to be avoided. > > I just realised what was bothering me about Fernando's statement. > It's the stable-privacy IID that has no specified lifetime. The SLAAC lifetime applies. -- We're just generating IIDs in a diferent way, but *not* changing SLAAC itself (that's where the lifetimes come from). > Any IP address > formed via SLAAC has the lifetime determined by SLAAC. Exactly. > I'd still like to see a discussion of renumbering, if the prefix itself > is withdrawn while the host is connected. Whatever happens to traditional slaac addresses would happen to stable-privacy-addresses. Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From fernando@gont.com.ar Wed Dec 26 18:01:28 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1919021F8C98 for ; Wed, 26 Dec 2012 18:01:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.577 X-Spam-Level: X-Spam-Status: No, score=-2.577 tagged_above=-999 required=5 tests=[AWL=0.022, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NwP6Ole41Yg4 for ; Wed, 26 Dec 2012 18:01:27 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id E5E2421F8C68 for ; Wed, 26 Dec 2012 18:01:26 -0800 (PST) Received: from [186.134.45.182] (helo=[192.168.123.123]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1To2mK-0008R0-DP; Thu, 27 Dec 2012 03:01:00 +0100 Message-ID: <50DBABD7.4000904@gont.com.ar> Date: Wed, 26 Dec 2012 23:00:55 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ming-Hong Wu Subject: Re: NA question (ICMPv6 option) References: In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Dec 2012 02:01:28 -0000 On 12/25/2012 11:53 PM, Ming-Hong Wu wrote: > In RFC, it says, Length is in multiple of 8 octets, so in MAC, this > seems very OK. > Type; 1 byte > Length: set to 1 ( meaning 8 bytes in total ) > LLA: 6 bytes (MAC) > > What will happen if LLA isn't 6 bytes, for example a 8-bytes MAC > like Zigbee, this will form a total bytes as 10 > In this case, how do we set Type and Length ? "Type" should be the same, and "length" would be the one appropriate for the underlying link-layer technology. Since you know the underlying link-layer, you'd always validate the TLLA option to be of the appropriate length. Cheers, -- Fernando Gont e-mail: fernando@gont.com.ar || fgont@si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 From albert.e.manfredi@boeing.com Wed Dec 26 15:39:49 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FBBA21F84CC for ; Wed, 26 Dec 2012 15:39:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.155 X-Spam-Level: X-Spam-Status: No, score=0.155 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, EXTRA_MPART_TYPE=1, HTML_MESSAGE=0.001, MIME_BASE64_TEXT=1.753] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0RIg2KSioTpq for ; Wed, 26 Dec 2012 15:39:48 -0800 (PST) Received: from slb-mbsout-01.boeing.com (slb-mbsout-01.boeing.com [130.76.64.128]) by ietfa.amsl.com (Postfix) with ESMTP id C55DB21F8442 for ; Wed, 26 Dec 2012 15:39:48 -0800 (PST) Received: from slb-mbsout-01.boeing.com (localhost.localdomain [127.0.0.1]) by slb-mbsout-01.boeing.com (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with ESMTP id qBQNdmYM027986 for ; Wed, 26 Dec 2012 15:39:48 -0800 Received: from XCH-MWHT-05.mw.nos.boeing.com (xch-mwht-05.mw.nos.boeing.com [134.57.119.160]) by slb-mbsout-01.boeing.com (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id qBQNdkf2027976 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=OK); Wed, 26 Dec 2012 15:39:47 -0800 Received: from XCH-MW-08V.mw.nos.boeing.com ([134.57.118.180]) by XCH-MWHT-05.mw.nos.boeing.com ([134.57.119.160]) with mapi; Wed, 26 Dec 2012 17:39:46 -0600 From: "Manfredi, Albert E" To: Ming-Hong Wu , "ipv6@ietf.org" Date: Wed, 26 Dec 2012 17:39:43 -0600 Subject: RE: NA question (ICMPv6 option) Thread-Topic: NA question (ICMPv6 option) Thread-Index: Ac3jq/Dofr036RTlR0WA0vGeX7DtUwAE69tw Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/related; boundary="_004_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_"; type="multipart/alternative" MIME-Version: 1.0 X-TM-AS-MML: No X-Mailman-Approved-At: Fri, 28 Dec 2012 01:30:12 -0800 X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Dec 2012 23:39:49 -0000 --_004_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_ Content-Type: multipart/alternative; boundary="_000_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_" --_000_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_ Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 Rmlyc3QsIHlvdaGvcmUgdGFsa2luZyBhYm91dCBJUHY2IE5laWdoYm9yIERpc2NvdmVyeSwgcmln aHQ/IE5vdCBBUlAuDQoNCklmIHlvdSBsb29rIGF0IFJGQyA0ODYxLCBTZWN0aW9uIDQuNiwgaXQg c2F5czoNCg0KTGluay1MYXllciBBZGRyZXNzDQogICAgICAgICAgICAgICAgICAgICBUaGUgdmFy aWFibGUgbGVuZ3RoIGxpbmstbGF5ZXIgYWRkcmVzcy4NCg0KICAgICAgICAgICAgICAgICAgICAg VGhlIGNvbnRlbnQgYW5kIGZvcm1hdCBvZiB0aGlzIGZpZWxkIChpbmNsdWRpbmcNCiAgICAgICAg ICAgICAgICAgICAgIGJ5dGUgYW5kIGJpdCBvcmRlcmluZykgaXMgZXhwZWN0ZWQgdG8gYmUgc3Bl Y2lmaWVkDQogICAgICAgICAgICAgICAgICAgICBpbiBzcGVjaWZpYyBkb2N1bWVudHMgdGhhdCBk ZXNjcmliZSBob3cgSVB2Ng0KICAgICAgICAgICAgICAgICAgICAgb3BlcmF0ZXMgb3ZlciBkaWZm ZXJlbnQgbGluayBsYXllcnMuICBGb3IgaW5zdGFuY2UsDQogICAgICAgICAgICAgICAgICAgICBb SVB2Ni1FVEhFUl0uDQoNClNvIHBhZGRpbmcgaXMgbmVlZGVkLCBpZiB0aGUgTExBIGRvZXNuoa90 IGxpbmUgdXAgbmljZWx5IG9uIGEgNjQtYml0IGJvdW5kYXJ5LCBhbmQgdGhhdCBjb21tZW50IHRl bGxzIHlvdSB0byBjaGVjayB0aGUgUkZDIHRoYXQgZGVzY3JpYmVkIElQdjYgb3ZlciBaaWdiZWUg dG8gZ2V0IHRoZSBkZXRhaWxzLg0KDQpSRkMgNDk0NCBzYXlzIGhvdyBpdKGvcyBkb25lLCBpbiBT ZWN0aW9uIDgsIFVuaWNhc3QgQWRkcmVzcyBNYXBwaW5nLg0KDQpUaGUgc2hvcnQgYW5zd2VyIGlz LCB5b3UgZ2l2ZSB0aGUgTkQgbWVzc2FnZSBPcHRpb24gVHlwZSAxIG9yIDIgYSBsZW5ndGggb2Yg MiAoMTI4IGJpdHMpLCB5b3UgcGxhY2UgdGhlIEVVSS02NCBiaXRzIGltbWVkaWF0ZWx5IGZvbGxv d2luZyB0aGUgTGVuZ3RoIGJ5dGUsIGFuZCB0aGVuIHlvdSBwYWQgdGhlIHJlc3Qgd2l0aCB6ZXJv ZXMuDQoNCkJlcnQNCg0KDQpGcm9tOiBpcHY2LWJvdW5jZXNAaWV0Zi5vcmcgW21haWx0bzppcHY2 LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBNaW5nLUhvbmcgV3UNClNlbnQ6IFR1ZXNk YXksIERlY2VtYmVyIDI1LCAyMDEyIDk6NTMgUE0NClRvOiBpcHY2QGlldGYub3JnDQpTdWJqZWN0 OiBOQSBxdWVzdGlvbiAoSUNNUHY2IG9wdGlvbikNCg0KSGkgYWxsLA0KDQogICAgQXMgd2Uga25v dywgd2hlbiBkb2luZyBBUlAgaW4gSVB2Niwgc2FpZCBBIHBpbmdzIEIsIEIgd2lsbCByZXBseSBh biBOQSB3aXRoIElDTVB2NiBvcHRpb246IFRhcmdldCBMaW5rLUxheWVyIEFkZHJlc3MuDQoNCiAg IFRoZSBwYWNrZXQgZm9ybWF0IGlzIGFzIGZvbGxvd3M6DQoNCiAgICBJbiBSRkMsIGl0IHNheXMs IExlbmd0aCBpcyBpbiBtdWx0aXBsZSBvZiA4IG9jdGV0cywgc28gaW4gTUFDLCB0aGlzIHNlZW1z IHZlcnkgT0suDQogICAgVHlwZTsgMSBieXRlDQogICAgTGVuZ3RoOiBzZXQgdG8gMSAoIG1lYW5p bmcgOCBieXRlcyBpbiB0b3RhbCApDQogICAgTExBOiA2IGJ5dGVzIChNQUMpDQoNCiAgICBXaGF0 IHdpbGwgaGFwcGVuIGlmIExMQSBpc24ndCA2IGJ5dGVzLCBmb3IgZXhhbXBsZSBhIDgtYnl0ZXMg TUFDIGxpa2UgWmlnYmVlLCB0aGlzIHdpbGwgZm9ybSBhIHRvdGFsIGJ5dGVzIGFzIDEwDQogICAg SW4gdGhpcyBjYXNlLCBob3cgZG8gd2Ugc2V0IFR5cGUgYW5kIExlbmd0aCA/DQpbY2lkOmltYWdl MDAxLnBuZ0AwMUNERTM5Ni40MTg0RTM4MF0NCg0KLS0NClNpbmNlcmVseSwNCm1pbmhvbmcNCg== --_000_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_ Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable

First, you=A1=AFre talking= about IPv6 Neighbor Discovery, right? Not ARP.

 

If you look at RFC 4861, Sectio= n 4.6, it says:

 

Link-Layer Address

       &= nbsp;           &nbs= p; The variable length link-layer address.

 

           = ;          The content and for= mat of this field (including

           =           byte and bit orderin= g) is expected to be specified

          &nbs= p;          in specific docume= nts that describe how IPv6

            =          operates over differe= nt link layers.  For instance,

          = ;           [IPv6-ETHER].=

 

So padding is needed, if the LLA doesn=A1=AFt line up n= icely on a 64-bit boundary, and that comment tells you to check the RFC tha= t described IPv6 over Zigbee to get the details.

 

RFC 4944 says how it=A1=AFs do= ne, in Section 8, Unicast Address Mapping.

=  

The short answer is, you give the ND= message Option Type 1 or 2 a length of 2 (128 bits), you place the EUI-64 = bits immediately following the Length byte, and then you pad the rest with = zeroes.

 

Bert

 

 

From:<= span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> ipv6-bou= nces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of Ming-Hong = Wu
Sent: Tuesday, December 25, 2012 9:53 PM
To: ipv6@ie= tf.org
Subject: NA question (ICMPv6 option)

=

 

Hi all= ,

 

<= p class=3DMsoNormal>&nbs= p;   = As we know, when doing ARP in IPv6, said A pings B, B will reply an NA with= ICMPv6 option: Target Link-Layer Address.

 

   The packet format is as follo= ws:

 

   = In RFC, it says, Length is in multiple of 8 octets, so in MAC, this seems very = OK.

    Type; 1 byte

    Length= : set to 1 ( meaning 8 bytes in total )

    LLA: 6 = bytes (MAC)

 =

    What will happen if LLA isn't 6 bytes, for example a 8-byte= s MAC like Zigbee, this will form a total bytes as 10

<= div>

    In this case, how do we set Type and Length ? 

3D"=83=C8=D6=C3=88D=C6=AC

 

--
Sinc= erely,

minhong

=
= --_000_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_-- --_004_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=110890; creation-date="Wed, 26 Dec 2012 23:39:44 GMT"; modification-date="Wed, 26 Dec 2012 23:39:44 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAA1AAAACOCAYAAAA/x+nzAAAgAElEQVR4AexdB2BcxdEe9S7LvYMN xvRmCL2aElpCN72HhE6IIaGF0EIvIQWSAEkopti0UEIHU0yH0Aw2rrgXyerlTjq9//tm3969O12T ZUDOvyu9e213dnd2ZnZ2d3ZejocgLjgMOAw4DDgMOAw4DDgMOAw4DDgMOAw4DGTEQG7GGC6Cw4DD gMOAw4DDgMOAw4DDgMOAw4DDgMOAYsANoBwhOAw4DDgMOAw4DDgMOAw4DDgMOAw4DGSJATeAyhJR LprDgMOAw4DDgMOAw4DDgMOAw4DDgMOAG0A5GnAYcBhwGHAYcBhwGHAYcBhwGHAYcBjIEgNuAJUl olw0hwGHAYcBhwGHAYcBhwGHAYcBhwGHATeAcjTgMOAw4DDgMOAw4DDgMOAw4DDgMOAwkCUG3AAq S0S5aA4DDgMOAw4DDgMOAw4DDgMOAw4DDgNuAOVowGHAYcBhwGHAYcBhwGHAYcBhwGHAYSBLDLgB VJaIctEcBhwGHAYcBhwGHAYcBhwGHAYcBhwG3ADK0YDDgMOAw4DDgMOAw4DDgMOAw4DDgMNAlhhw A6gsEeWiOQw4DDgMOAw4DDgMOAw4DDgMOAw4DLgBlKMBhwGHAYcBhwGHAYcBhwGHAYcBhwGHgSwx 4AZQWSLKRXMYcBhwGHAYcBhwGHAYcBhwGHAYcBhwAyhHAw4DDgMOAw4DDgMOAw4DDgMOAw4DDgNZ YiA/y3hponX67+LHYl6SFDldntm0PPvpPZxtRB+Ih3v7KAbCpo3PN/beXTkMOAz0LgxYPre8yzOZ HNzt5etVjNFt3FgNkssAx/8xDLkrh4HejAHwtPbvlv9tWcHDEAPs5xnsW3J2jOc79B3lROCheeZ+ HQYcBtYCDCTyv+m7g2OFGL+vBdVBEXuofRAh/hEVeyoL9Y6CMHhEGBXPeIRCIX3rhVvwoN0/IniG gAg11U3RuBHcdwbSeoDqSUQ6PQpV5uCCw4DDwA+BAcvPiecg54fDbdLRbvhdn3vg3Qh4Xtol1FEN Xm6X6pV4A/ZvQTS+QQz/4DVTked9IaAVJd/bQx+4H4cBh4FegwHLm+bcUF+LknVKuLVZOsNg8gj6 bu2/2yUcatW+vs3n/TBiNjIKzp4VLCoVqCcoGPzwkrBdcBhwGOh9GDB8b/p59N2dHXp0Ug/wxwwt zY3S0Ah5gMJ3gK+V33Hd1GzkQXsH+3zD8r2vfqZEPRxAJVYrXqAlVj7HH17ylJeXp5jJyc+VD958 S366335SkFso+bk5csnFl0u//uWybIVBLuNz4ioeemLe7t5hwGHg+8QA+ZshHV+Gw2EpLARfF+RJ O67boEAJBEGkPSwLFs6VRyc/KFdcdbkcsP9h8tKLc6So0MzqdABqa6Q1DnY0H82Yd7YEWgz34zDg MNALMbBk8WKprKxQdi0sKZL6+nq56YbrZejAQVKQUyzlJaVyzjkTZdGSFVLb1KZcXVwERQq6VpdA ZcDXI3o8/9sFuHvgMOAwsCYxkAs9v76ujl0+jlz597+flL333BO6foEMHjxQTjvtdHnsiaeltTWk bM2BVHFZiRYhEuGQqneHNTyAiq9sVM7hMTPC2MiXfZ2Sj/ETp5dmzZgjx5xwimyy6dby0Ucfy+Qp T8kn//1UDjnkKBk0uEwT2KV9QueMlOcUJ6LCBYeBXo8BDp48MG1zUxNWkTuluKREWpqb5aabbpIN x2wmZ5/1a3nj9aky8+sZUlpUrIvRbZiKDofapCSvqKdL5L0eP66ADgP/yxjwwPPDhg/XKi5fskRW LF0qBx10kNxzzz1yxx1/lA/ff1+efvppqW9cJj/efzeZOWO+xg1jgaoAkymqMORgssSDUtWJUVUO RlU8XHAYcBjo9RjoxCCoT1WVlvPiiy6SO++8U44//nh5/bWX5KWXXpJhw4bJVVddJbNnz5Z2jJ6o 3wfHDb29gjlQblDkngTOBPPQIZICsgB1jhj2d3l5QAmyycnBG9rpMCpehltb5dprbsJM9BL51wP/ 0LTE3lczZssRE46WW2+/Rfbeew8jQ5mEyIX5Ty7SExSLnpu7BrZxmZzdr8OAw0A3MBDkc7J0MOT4 a0ctLS1SXFysPKvvwbN1mJGqW1WDpfoa2XjTdXDdITtue4rcfutdsu9BG0t+McVDh5rw5Qq1KApV ShOKjlzlfcmh+S5LwJmYxNzxyAWHAYeBHxADhl9ZgOqVK2XAgP5alnv//ne58cYb5bEpk2WLcdvA dgcdfn6OrFi1RC6+7ErpP2hTOee8C2TwAPK8gPs7cAZ/d/o8nosVbA1lRtliJBccBhwGehkGDP93 tLcLdQCzAu1JuK1NCjGJquMArE41NnXI0RhQbbH5ZjJx4kTpW1Wher5gv08+rNNs6K1sHiuhLelq nQGGNnYJQZ9gwEPlJycCy2Zcq92zXndIQ22dTJ78tEw4+lQJ4XUTtkNFgKmxG4+RrcZtKY9MeVTC HHBFA2wiCQ96Uw7WBHOS5BmN6i4cBhwGfnAMlJaWSjuFKFadNIBvq/r2lZEjR8pmm2wqebl5UoRJ kFBziwyo6iuw9JP2Nu6LaMPQCIMlJEoUnsEV6R+8gq4ADgMOAykxQL4fMHCgTpZGYMJ76KGHyl13 3YXB0zhpxwQqZleltrpaioqKZP/995eHHnpIqF/RlKepFQqBCw4DDgNrLQbyCwqkoqJCyPseVqN0 6w5N87AKEsJgqry8WI466ih55513pAqDJwa1VKPN31oQuo56VrfQgfraS55zdamIm8g4EMKolBvI 9DoiqyA4W9oisvW2O0sI+0OLYbHHgVQYUffadx+prlkhYTiZiOgGUsxEAZYdPCUbsK1u0V06hwGH ge8OA1SOOJDibFQYzmMiHR2SB9M+TDFhxqQT9tB5UoDBUqgFChUUp8LCAimBOV8H9kmtOQH13dXP QXYYcBhIjoHSMnTqCIWQAVSe+mEwtfPOO0v1smVSgJFSU90q6TtggFSW98fKdJOM2WCUgPVh8tuh e6MgJAxgVSo4q8374DPz2v06DDgM9E4M0FJMFzzQ37Pf575ohiJYplRX18lTTz0lO+ywg06UovvX QKs1Oo7r7eE700/sICqX9nYIHr1ucfCkgygOpjqkdtUqKS3rg9mmHCmA0OTqEw/IWanoUyGffv5f 2EWGkILx0Qg84kam31nxkZ8LDgMOAz3FQHNg5YmzUapIceCE4GFA1daElSkMogb1648VJzA/LfP8 wP0TDORye+gD/FDQWmFrn7mzw4DDQO/CgJ0w4Yyz3RRejEHVAAyayMHlFdjXhB6ei02vvfKu7Lf/ nphUbZM+FfkCZ1w+o4P7c3CTi71PHuLzcMFhwGGg12Mg2oejz29pbIR1iTHh68QgavqXX8qjjz4q 06ZN031RHVDz2eVzqw6DlRfmrnf+fscjECpAHErB4agqQ0YhMoMozDJBuWprbZc+fSAb1akENo4W 4HkIe5vgZaK4tAhIhPtDHUARgYEBlNWe7JmvXXAYcBjoVRgo82eg4wqFGSmGHDB7cZ8qqVlZjZmo arO8DznQ0UZzX6xIYyqaK84uOAw4DKydGOCECWegPa46+xMnrXAow9XnjjaMmgpyVbG69577ZcbX s2TCUYdLn7JioRMJ3xmXX3FOouKgPIjKhMBsy9qJHldqh4H/aQzkYOKEe6Cw8gHT3BIslIC3Ybp7 ySWXyLbbbivnnnOOnH766bLuuuuqY7k8jEhowtfeHsFYgIOC3h2+4wEUKs+BE4RnPkx4NGAEqktM MOWhWQ+P5cvNK0xIC78FUVqUo9+J4pI/zX+Cfi64omXv4RXRBYcBh4FejIHoCpRfRprvUZgGAz31 VVZWmgEUXnCliqFTV6z10v04DDgMrKUYoAKVw8ET+m4qT/n+QCofylQrZqWvueYaefDBB9WUZ/jg wdIcbpVCROeMtAsOAw4Day8G2N+XYw8UA2UA+Z9OJM444wz1wvf4E0/IpEmT5Pzzz5e6+iapbzB7 pTl4CnFfTy8PvjHxd1VKjHAwiPQ64fBBs8C9Kk8444Mv/fv3lxUrl+JRpyxfliuDh2FCCvE4AR1p 75AB/QZC5sKwJ8eORAOKl7205++qCg6uw4DDwGpjwK5A0ZSHkx92cIRZEIyQoCGRtTHlxHcNDQ3S 0TpM8ivB1Pinx73oZPNql8AldBhwGPihMMB9j5UwMWlrasQe5zI14eVAiub8C+bNl1tvvVlmzZ4n L7z4rJT1KZFFy2tkyOD+0tjcKZVljGdL7usAcf39d6y+2Kzd2WHAYWC1MMBVZ7oy154cur86kQAk rjiNHjtWWrGestFmm8mBB+wvH3/8sew1fndpbglJBazPbNzVyvh7SgQJ9d2EqNyLgkdWXDLKwxCJ A6KcAhkydKiMWX9d+eqLj2T4ELxCIkw+SQn2l7859U3ZZaddpSCf34Kh8KTkNKtPugLlmwFFwbsL hwGHgV6JgQ7MQtGUxw6e+EHdCJebudkRoaIKClZHO5b3EcfsOZcwHEg0NsPUB4GGv/bQB/ihNIjT pewLd3YYcBjoNRigEsRBFAdP3P/AiRPuhZg1Y4accMKJUlPdgO9APSv5he3S0dkhwzB4wpdPpAyD pzD2RhpGx9l9B6rXtKkriMNAthjQvt73uteBft/6ROAHdrk/qqgoX8ZuMFoXU2pqanQVqgyDJ4YQ Jl17e1hzA6jAiMlemnOudKqtnRkAQYsCTnidJxX9+mGQ9CN57NH7MTTiE52MlmVLa2Tqq6/JTjvu Ivm5UKr0WzCcbQIsOyXFj+u54DDgMNDrMUDHL1SidNUJpS2AiZ564cN1qLkRS/t50tDarGdWpgmO JQrwFc3SsnIdOPGZCw4DDgNrHwZovmcnTnTiE4rTp59+ql63Dj/8cHnwkcm6P7q8rAgz0O/LFlvu IQsXNKs+UMgNEdarjCoT9t7f+2QVjbUPLa7EDgP/LzBQAPN84//AmObTjC8EmUB9gPujOvC9gi+n z9QP6Q4aNEiq+pRjG0+HtLaGMImC7xn08rCG1sD9mSIVe7Eac4hDkYdPYuEMMz7uCId7QnrkU7M8 fCjr5z8/UU497edyzlnnCwVqbT2+DfXYFBmz3gZy0H77xoBFr7AKxcGTmgLaHKIv3YXDgMNAL8IA lSZdigffU2jSsw6PmpUrZOmy+VJY3I7rkHhQlmbNmyv9Z+RLQ8tiuDjOkXVHj5KqCnrril9tUscS bvlJ8eJ+HAZ6MwbKysv1swVhuNnjfmZ+SPcXZ5wtF008X3bddVf58N13ZciwwbJo5UJ443pfVqxY IUOGmGXoNqxCF8LJhAsOAw4DaycGGmGWX4H9zdXLlsrNN9+s34Tca6+9ZIMx68uCJUvk65nfyr33 3Sdnnnmm7LbbLtLUjG9DwYlMqHXt2ACZAwWnB/M4GMDYjd5Rjw5m3wKHNjbQLaFdXeKzSEdYcrD/ IdffLP7ic8/Jo49MkSf//TRGXIVy5ISj5Oprfi8Dh1QpCBbQ6ktGnOLDvNG5aT5xQlYR5X4cBr5H DFjBkWwaI8afMMvF0n041BrdTNqGjaQ3XPd7uf6GGwULzMrbrc3DISOgbMlyyStqk+13Gif33nuv jBm9kdbIwsuzH8/O4Sw0S6CS5XustcvKYcBhIDMGYhoAP6ZbWloi9fhsySGHHCKfffaZNDbGPpKb h8mTEMx58ktKZdSYreSZ556XUSMqVS7Amt/09eR76hq5dmM5nEvpu8wlcTEcBhwGvm8MxPifpnrt ba3y9ttvy8svv6zOI77+arqEMEbadrud5Ww4kBi/5x4ydMhALWQ7VqWK8nN0FaqkxJjzWf3/+65F pvy+0wEUBRwPDm84iMrlwRuM2TgLDcsdBMxKN7dAacKHM/n5ceyNyqfnPbzhdyD4VXINPgbNUMkN oHysuJPDwA+GAfIoQ7oBFPncbAbt1C+Pt2LwVAzvW8XY7yQ5+Dq5NElzW66U5Q9SGeFxTRy8vmzV EnwbahBuuHrtK1E4uwEUkOCCw0Cvx0BMgdJZ6PIyaYPpDvdC0aV5Y0O9VMKE30iPPJjt5Es+vgXJ aREeFAPwIyXl0BG06+d3oBi4F4oBDyl/fLVAH7kfhwGHgd6CAcP/dB5FE/6CAmPsRt6nSV8bVqTL qqrUiYQHs96iAsPJoXAE/uXyuiyJ9FY+79kASjUoX1BqDc3qE5uQT/laB05414kLKlPFFpF4y9iR cDP2Q8BTB/y+50KCep25KjjzYN7HwRYc+OnWCVrsmcGTVaasgOZT+waX33uw5WDGP2Q5vveKJ8kw iIts8bE6aZJknfWj7zu/rAv2A0W0+DC0awZFwQmKoJUv49qldeNq3MTvWnS7YsQ3dCLBWSj9roN6 1DR5RiKt4G/skcitxAxVicqKfOhHzRhklZUUSAgmf0UFRmEiPJYwhzPRKmsIg0c8z1GqMGgUvUr4 sQVOGSEh/lpxa/CZiIveWnTbBCzfd9sMXeljzePE4p6Q42lxzeeVDOJ3kX8yvNl8sq2jid+Mbz7R jE89ccGMVzt0+3E3nDvb4Z2zoBR9fK5g24MOokgfUAekGIMnOpZSGrEDqE5/AIViJNIR7yknzJnv uXHAxOt67m59kuE+/TNbjvSx1sBbiwhFVPfg2aRMZZIn4MWvhI0XH4epsqUHxv1fCBY/ti4/cP1t w7A4q9H+tg+1YEy/zToG+30C57QGQ/C5xUUSHCjd4L1ajETUCoV7nzsxK0J9HwMCbMVBulzo/oDa 2gYnUnBdbvY96muz2KJ5rmbV/LTf5alnAyiWTBFlimgbwRbYotfer8452DRR+rCNowBNjMS8E/OK ptXmCr4N5hB8ns01a8jDIgGwlGDwyGbov0pVPhstm9ySx8mE5Z7UL5hjsnxiA2aDByrewZqiB7T4 CILCtYeKx5jV4o+RWN4YXNvXxuMzUJYgfCIzBb5NXoRv09o8TX58s3rBwktMHY/3IFaCMX/Y9qey wQER9id2QqihMBEtEIScwGMWH3jYj4DCGzR34EkDnrNuleZhtypAXDGtxRnPtsHy9YpZmmDj2nst TexGr7rCwbq2vmEu2uYsOKvhpzT0FIAdzc+P0M2ThZuYLEZviW/8e0u3UWc4LHHXkAq+jWnq6OMh akbNtwZeYvrE6ia+j4Nrb9KeE8qdCNDPMPjYthrBMnVimdJml/jSB0x5Eh+YS6ydo68t3m3k6Av7 oDtnmwcLQUCsTRJ88JWNgsukIdP7aKIg9vDQmtDz/Rppf1OnnC6Kkp+vLhH7hVHaTaiv/yr5CTCU HwN18PmT+LFtaN/G04bNP5ZfMD6fduKPbqYo1Th04h3/mNK8t2e+MRNBcKzsv01e4oxP2W7B4NMT H9t8+TpKZonxbdpoBPvAnFNFt7FUntlIQRiBcpi4Bn/BKMQSnzI5nxMT4vmez2AJZIS+qUWHn1Cl q2eVaSYkZmNtQhDdCrbsTMQ8bGGyBBJMHkwSrKd5buofjNP12tQjEWYMFmAovwViAE+Bu64gMzwx sA2OM0RNeO3XJ5h5rKCIm6kuFhwmN8HrXOgg/vH1JVyQgzBR4T8zYPl9JsDECrA+Vt6nOW0i/2Sg BU0cbIuYrgdgMT7hTVYhCCuYIL4czDZZiENZsggZnsXnkiFyytcoXbICGuCsYNeD8e1BUWavk8Fh vtGK2ggUvImdISNmG4IdT7ZpksZjgWwj2jMe2QoxjS0zr/1gMWLve3YO5NszQN1KbasVy93iwgpY /42NaM9xudg0SV/GxYy7YfslJrH39hyXIHhjI9hz8F13rv0yrAYtETM+drqTYYq4PYHEtD4eoujg BdsQZ17aA5dmBcruQ9AH3fix4oZnHuyOuZJlBm9cZSafm8PMHsfu8aJLCArfWD1Y3MQQh6G4+iTG XDvu4+oTLXLyp9HXq3VBmN8F3NUqTJaJguVNUf5kRJIl9PhoBGTzs2c8CtKYzcuegwCSxQu+79Z1 IP9upcsmcrLCZ5MuGAc8T4ZW3rcyALc+aA4G+JoqGQ+NirMJgfj+k+Dgwdacqh/bI3ZvIne95xP7 1Ae4Oidm55ffJjclMHc2l4Qo8fRhE3bj3POSGwhdysUyaN+K93ZyBw1h6xErYtKUsderc2VB2vPq wOhuGltXTZccq1oc/bHvcdY+n+fuZtjb4psKxNfRTC7Q+itWPz6z9Wcdgte878qffNolxDO1vuYj e3SJn/aBj/8fUP8y07VpC5n+pZ0FShWLM0AMiegO4pExEu81UcJzfWYjJhBuisdxcC1MA8eUK+7Z WnuTrC7JnvWkghZeYktmCTNFe5nUhG1aMCFalsAD0SwhBB6lvuxW5NRgfvA3tm2CBUn2LPg+3TXb ONYmGjOKqoTn6cB8r+9Mufgbo1Dc+eXm82iIm6mPPl0jF1E0+XIvWBrNoJuTPhZeIl+krI+d0fdr Y9NnW7mu8eNyioGx9UhMkHgfKIetQxBiiuixfLK8UmUawGweNllK+Clf2JS97Ryj6riSJdJyj9s/ 2DrBnL5jhGUL3sYLNHSqEgdLr4Rh0+qLrFLFgfghbmyRA9XtWnobyRYwcB+4tG8zn4M0BQCJeZu+ IQU9Zob+ncZIXV/b3r2z3KuNlMQKd5v/DQD91R/iyeCIPgti4C3+EkvK56neJcb937vv8QCqpyhJ hfpYw6XIIWOEFOnc4zWGATZBV+FK8Kla1c9a245MysMY/RlY3WFGxE1dAD+jVCctQKqX/6+eJ2Ii 1nJ+W/gRrIIaW7KPxfyhEWYNdmw5WLLEemn5bYT/kbOpI2sbUAoSK77adbVw7Xm1AUUTsmhBebHG isocugAL4CRagl54kYiUnhaxCx5WByDbPBgS74Pvenjd0/qvkfr2sA42eYaykPYzRLGQsjonhZX0 YSpw5BHTtubX3gd5x5j5EQLjmDrwKhiHb13oFRjoVvubEjOJtn+UQI31R3x9orGwDxlvdJDNC0M5 8XFT3QVpxl53J30quD/c8zUwgLKISKxEPGLi72JxU+4VSBhJx1Kkv8pMP6lKkh5u7337fdena37m CX+N9TnPph3wzDYIec0GvQbdgBM9RDC26nwZg91F4Q2mZ1TCtbPg9p5nP9hszW2QRmN5mHeJ9xbC 2nJeM+W3K8kxfuTAFrCByPi2oM13MgH7w+BLyQBZ047b0B3bmkdq0ca6mk4A0XoY4uksGbCE9umS IOF9MhB41iVZXLzsYMQl8W+yg5sEfvqEybLSZ6uZLCW8xBcZ4dsIlCf2OhHI932fthxB2cWCBe/Z Lknaphvlj2VNuOlg+e+sWZfGTRd/tQqRfSIWPLFPiMNNOlAsdxCP6eJ+D+9ijZAys4xRMkZICVpf aHI1heIV8UPkdmKnmN0tptEUa/QFYnDfpQFMpO/xt/vVDtJsb6GBYJmyRd7qpEmEbQxe2edb50za 5yOaoQc/Pm7Yv8Y901c+9oNk4D+Kz8ni2Z7j367Ndz1sBSIkeGSPCuI52iDWDlXPPgwV1IAdbBz/ FR/Zw3/kTr0KAySrpJzktyf318Rsasm0FNSWkrpUJRGUHThFiahLisADQk0Vekj+qcCudc8hQi2O tRMlzogb3VYc15QRwZfFdd9Sb6ikoRgW3bQyyqzlp3QItLvKENxDptBJBt/YAWNvqEX3y4AaaJ3M aa2ThbbAfh26X/9Aii4yINDugWjmMoHf10T+XfL4fh+sGVQSZzz8vavJ8GIz0uqlw/Earn+ystgs rMyy93HndAnjIvbsJoH+mGta7ATLnJC2WwXxq0c5pke3EsdHNkVCqTmrpDf8wT1ubS9tOYfZ+lnH A1kr71CroLniWlgH2x5rpE18IJzQ1mAIQy+N2xVfH9An3H+MeGkzJicED034P/WTepo262oGMUhk WVYzAAJtEA+Ryewgia2g94xiGFcjM3EUQHDDuL5N8cMyJAumXMHSMlYUfLIka9OzKP66W+j0+MoE za5OGIWUOCY8riwxYKUiEeF8zG8364dQOWiCa0s+Q2DqpO2RDIamMD9WGY6mtfGjs6WByMjFvubT aJpglLXxmpXqQWWYnIOoPLaNwqJ7USMecvE8Rz0vsV1Ne6Vsqx8Id1p+5J3HwnMQBXfpfMagaPGo CmBVDR0m6c1IA77tabDU68MJDu4DoG1ZAo/0MnWTJcCNSxh8F29iY6PF4Nq4psbBcpg49j1S2rJb IIGz5bHAoxi5dQUaj3smCsYJAuHzWGGDb76T62gx/Dy/x6yT1ydaoCSv4+RXoJ0CUYNPgzQdq5eN kar9LTDyB+KwPNE2iaXVYipQPosVOpaPhdPDcwx0DFDwWUKGsZVkWy5b5ljyaHEtHIVBfCSJG0jW 00ubHeEwp2j7JNQhaT7BxEkjxB7aWkTh41U0CwvHf2BvY6ltudD+Kjfh1IdxPTgK8mUlKYM9AR/z msH0DMw5qFTrq+/5x9Y+MdsgNoIUG4sXxVHs0Q9zldgocXwfKFKifEYFgrUP1jhaNwvbh2lvA1DN JV8oPN+PMu8DkSN4af0Z8DlfqeUQ0sTpeHwRzRzXcSHty7iYa8tNEOc9KLNtRiIoQ9AoiM8GtdH1 TKynxHw0qoXOHG2u9lnsCWHbI/bWXtm0PNsi2Hdr3ZkVsJUIXmdVEWKgB8Hm2wUE2zEFaekKgcW8 WUK2xY499QGmJodojsEi6DV/SFtWCAUjRFP9D12wfraOwetsq+injVKC5RszFImCtl0nO9BoXIvj bPP6LuL55We59JIDvaCbXeap5TReBW35o3XoUZkIJXgkAbY6bZIEjD6ybaMVNTXgr83CliSW3MQx aWNP7ZWC0Rs/XjfbU9PHgFiwAZqJPoq/sAVOkjY+YnfvEupr81EwMXlk8cTzGi9Cd4ucKn6WbWGr yLOtVwxkAj5iL/RK664/jEf+IO8kRAreRhMwbi8JSfsIW2+cbX3sOa7YpIkYXcS96u4NysEsbM7J suO7ZM+7m1U0PoBZmDZvm380TpqLuLiUmUrPsMIAACAASURBVKA5ripoGfmDg/KShw02H3vvzj3E gCI7FYy4ForpNIHofjNpmzF2QopAzAyXtm9RGF15gpOptBLS4JdZT7YAXcDb0tgS+Yni4nXNJ+71 WnCzBmoQcxkarC/lmso2i2CcvYiPVDRWRxu/LA6Gxccy8aliXKMoHGHrKDtX6mpqo888TH/aNQ3b LLzvZKNHg39t8+NzDI29jnA0Rhhf52OsULv5+k1HMHk0VvcvQvjCug3t4Vh++FaYhqYmflMHHwdE vi0t5pr3baHYNe9ThXAA5ooVKzQaP0ocDKEQ2gH5cQGB3FRX26TnYJz4a1M4fhU6FDZt0dBYJ034 8CFDO9sFweYTiQDfSBJh3wn4obb4/DUyfgjVHvaZnk12uIxIw4olgIHvD6D+nMVoAV3YZltVy+8M IYAkQqF07rKNoE+aF9P7AsHDhxp53eq3UV1dHT7sami2FV+9bvPz8IC4VnzA1QbeB/Funyee+WVt G4Jtb/FIOAzEXTjMr3Db2Gz/GK3Enia/svAaGnz8IBrxw3ZnaG6OwWptAd6QrbaVvk32E8AcPgLB UvLjlWBMTUtaDcRAYYEbRGK8EH80xMWwD+PObW2GxolLXhMfFieWtpqb+Y0J1sGcLYAQvmKeXTC0 0MFyRVD3TrSJLxtYQtMuqByeo8mFVNUaSk6/2eUXjIVMO9tBzjja2QYxuMS/bR/LrmHQOsvUgfJF gE0WOYrOIFh7zXp0AqbWB/GZh3/NejFtXTPoCufG5pCE23nlB9KeAsezBIU8FqtTwi1oW34IhP94 oeAtDJyrq+t9OCJNreEoXVAmpAvMgzEs7VJOdpLm8bBu6XI9RwL8Q7qgPLIhG/6zcQmzjfyr9QAM i3BEsLwfAv8RPaRzthLxtSZCGG0SYRv5IUi34bCpjy1OK74WS/ljecCmiTvHtRXSY/WUH6KOCndU trmpEf2YaQvmzFzYn3XgxsrNMPlHmwgv4mCa+MxT8a8N3i5NDexzEQhMg38BGMhOQ1ukDcMsQ28t lDMZQlCm2j6Fdbc4ipBfkaGlkZYW1AnZBsggQw6Uq2Fp74i1JbnKtkfI5/OaGtNHaz+pTZWd6mNl VLC9+GFwS5sdKjSNbA8WtAMVIPYU/f4LXpNnlG8CLwKXQRDR60b0WRoYEQ3cTn7lNWUpTnW4Z5WC cFjGuAd4Hwy2iUPoH3Xfqy9XmttAnwqIOlqLNIJdCZsfOqVg0GyDgLK4tjRg259JyOfEA0WUbesY j7TrM77LJrSROFG2zrChgQ5fd2G+wTwJi/K/vgkfcMd1NuDjyuDfqM5KYLgP+f0bbxksf5u7nvza Enai/zJ9aKPf97dCh9QuAeAZi+0TIi797KJyWT/u5D+MnpiCtGn/yAd4BoCdzU2AkStNIdAXA+WC D4NaToj9KgMETUvIyADzIPCrSn/gHpetoCNV6EBpxA91fer0LCf5yPKSlQlMTX4L8hyfpQtB3Yvx CMumX74cfY0fqIOtyZCdFEmRo22w2GuLveRgc3StD42Cc56uCcOFQH6hvPPWu3Lg/gdIfl6eHpdc fKlU9R8oK1ZU+3jHhz6pUScJXctg4Ct74GVOfr7UVa+Ur6Z/IX/+85/l+BNOloN+eojMmb90jZm/ FpWWasnu/MtfZL/99sMXlFHa3AI56KCfyqOPPi7l5cUgnHYllNLSYjA1SR5fwMGXmbMJhYWFUeXy 22+/lcsvv1zyUa8cmClVVQ2USZMek6IiLLAC7RyLUiBVVZUjTaxTSZUP0+Tip7mlWSorKqW4uFhq a2u1bPX1UJwQjjvuOBkxYoQ88sgjqIPpNIuK8qAIxKCa1mG7xw4Ug6ypgV+ib2+FgoyOvHJQf/Ga 6uWmm26Qovwc6T9gkJQUFEsxaGFw/wFSUlohRx55lLSxo0gWEkiBNGDzUUVBFQI+BX0BxxEwU0lJ qUx64CH5y51/lWEj15H83EIZABp76aWXZNGiRcBbDuKYr9xT6PKeeM8USF+f//e/0reqCm1QIrlo Ex79+vVTGMQtYT322GPaZsQ3BUcbBFBxUWb4zJ8dgS1bC5TQ448/XgYOHCiVlZWy9dZby1/+co+U lhpYtRg4FxcXqOIOdkofDIqkAe3Ny1zGRyIP7T79yxlywE8mSFFesdLzccceJe9OfUPxzLhGT+dV +kB6YsgDXF4TF3ZQxcHgpEmTZOzYsVJRUSE77LCD3HHHHWLpLiv+8Htftj/QSmLmFQ6R2oZGqatv khdffFFuu/oqOeyg/eWKq2+S5bURKQD9ronQUFujJP/ww5Nk7733lrJi0AAQechPD5f//Od55Uua vzU1YfCADPPzWD6j9KWSaRrB/6mthgxEkjD488kpU+THP/4x2qRIKosL5fDDD5UXX3lTysvMR4hL y4rAt7nAX6PplIBr5YxoM1nnLrEcWjBoLYRMsnYY/FI8twWwr1y0aKVsscWPZPxe+8h77/0Xg06R 0pIYzVLOxYXAreVHThIVFRVptCLwYG5BoaxYsFB223VX8Dt4Du9IE2xr8krfvn3lT3/6k8bPhv8Y sZOFhVwpLkE+7GPQ+UYHZhBSJSXlcv+/7pMTTzwR8qZASsDXpOtV9b5iqrmt3s8tt94C+V6pvEiZ zzqQ9/v06a99wKhRo2TatPfJVhqKi4sgB6hAUJE2dBqXc8JAhwoaeT4HcKdOnSrbbrMN5EuhbLLJ JnLAAQfIM/95WRVeNjEnBplPUVGBpilUvKMl0rR/HuSXafuIlFeW6/zJvfdOlk033kzLT7685vc3 Kgy2aWFeIcgxB5Nu7ZKHNouCjqtE7IZyyyqybONVq1Zpey9ZskR+/vOfK22wH/vpT38qCxYsUpmr LBwDkeKKpcHgHwoY6aQA7RpubwONNquu0I6BwbcLvkX/+6hcccXvFVcvvfiW8iPh68RhFhM0lFtG 2ccgFm3GwL7X0iYHfrf/4Q5ZF+1cWFgM/s6XE04+WebMmaNxAyyhGozyDOhd+QMvM+GvpbFR873p 99fJusOHaz+z/qjR8sszz5LFixcrnPJS028RJuFRJLKMyUKwPHxfVFAEBRf9Mnixs7VFCkGfLRhE TX3heVlv/VFy4qlnypwlzVKCPoX6W6OZXwPNILEq1FqTZFlFn1n+Z/tT3peXl2t/wOfkzTz0++Sd wYOHyMyZc/CMfAQ9nbMBaQPyRl9fXIaPvYOXcgEfI2fJxzkCOUbaW7p0qVxx5e9k/fU3ULlcjHdn nXWWLF22kmIiY0BTmYDIdjDGPn/5ggWy7157od+FTMvN1z6/ALhcf/31pRB5lJaWy7777pcWvqrD LEOwHMr/tiVFGiCjQpChf73rL7LnnntKEWhs9Oj15fzzLpCamgZNyuS58OxhU0UnoaKFt22URP5j cLNqxUqVn7lo+7v/9U/Zbfc9oR/lSBXwd+M1V6ksIYTGZr/xIb/a0TZsHd07bXGEexMY25SmDYOx EvSJK6GDsyNjm7z77vty4IEHK7+su+66ct5550V1TqsbEA77hUwhAv5nKIAMqIMeQz2TA+ivv/5a /vGPf8hRRx0lZ5xxhnzzzWzlC/Iz9a92zBIE0Z4pn1Tvk3NZqthJn4PSgSzbRFE7Sca1xKF4QAyl GEU7BjZMFpEZM2bLscefDIX5SLn2uptk3rw58re7/y6HHHqYPPnUE3GVNE1iq827FAiO5tsp82bN kaOPOVY+/OQzGTBoiGyyxVYyH4K6H5Rnzkaww/H7Npa4+wGM1YqR+y/OPEdeeOEF+d0V18hf//pX WbJ0pbzxxhty2WWXydy5c+XiSy9S2BRubMQWCKtSKBTZhEYIUXZkX331lRx77LFy6KGHykcffaSM ++UXM+XK310t9XWNctbZp8jy5XUQRFXoWDworEZxic+DeIsP+fnEAAdz8LUC5iivKIWS2wIloI88 88wzUlfXIMuWrZAWMBCVQxvaIaTYYWgzEOeB5rC3rC+FYW4B0lHD5bR8HhgZtDBv7myZcMJJcs7E yyAt26UMClAhFMx5s2ZJGQYXfaoqTVYWmM3YP7MmfJU6IAZWNPMgqP8MxfziSy+XXffYS+6/7wHJ LywCngZKaWG+DBo0KArCdpacwWMnybZKG1BBdlZM99hjk2WjjTYSba/KKlWQFi5cKKeeeqrikopE WVkJYOZgQTx71rODpwUQ2ueff752QDfffLOMG7etvPLyG3LzTbdiMFYqp/3sWOTdDCW0XIUPZ78L MbCODwntjxWFSih8nONqhqAuDDfJ9C++lCNPvVAOOfZ4ufyKS6S9uUamPvmw/OaiX8t1/3xBNt98 EGakm6VfJeuQAT+IERXofkGoiBC/Tz31lFx55ZV6cCD4ySefyHXXXae0TpxRGc0YAIuBv6Q1ztbz jrOSCxcul60220IHGHtsPUa+WbBE+m0+Xvr1NWVuj4SlAArh6odOtEWpnHTcMfLG1Gly6s9OR/lv UEX27bffQbufpvennX4i2r9UOxzyTEEBFDDQpBHhhmksHQdYSIvVd8AACUFJu+O22+XNt6bK0ROO kH/e/VeZPn26PP/6m/LLX02U2//8V9l9522U/YpRNSomRsFLaOskFWVZdKaR7Qhc6gAXkz0chN92 6x8kD4rNZ198DrqtAFwDgGUNo/2KoDgEeT4JeNBlsb/Kgdqi7jmQAVxN6Q/+uBnyfo/99pF6yM8B qCfpgrOFG264oYKiss3BSLrAdVIqNgXgQSoRDJ2YTdeBAa6p4J540inyJtrjjLPPkYcxCN14s810 INe33wDttzJTsIJN+tO/f3/ZcsvN5e67/6GznhXlfaHY1Oggh/Ka8p8ygYGWCAWFecCjGWjpQ9vw tgdNuC8C/himvfmG/PrCiTLhiCPk+t//HjzeR/7xwMNyw003S0nlABm/y9YQsjHqySi3FCoGXRig FeSFpKllhVRiMu6GG26SBx58TG7/483Sd0CZzJ49R+6992GZ+dVyuePPt0lVv05p62yFIgcZ48PI dKLiTH7nmQNk4od83tzcKK++9jIm+6rkmaefkz322EMmP/qYbLvtVpBjbdKn0tS9a0aka0PbhRiQ k+ebQUP5BRyQl0Dha5Zbb71drr3meiizlTJu6x/JzBkzoMiBFjH/187VYqQp8QcemcpPurTKHAe9 xC1pbv78+eiLD9fBM+Uyy19TVysPPfIwJjcOl0k4b7rJptEpReKLOqEvslRecbKCwTZ7Ik7Jyyce f4JUYXLzb3fepRNn386bL08++aScffbZcuvf/iZDhg5RKcxV7SIANAM9KNQcVKTpv5SPsWpTCrx0 1i+R3LI+gjE4uukcufH63wNmjqxYVSf9BmKAgsCBM/R3f3oKZeZEIyZz0gUOcImrMg5yEDjxN3To ULn66qsxYbaTLF60FLw/EDxRKLPQ72+44frQNapVB6FszRTaSb/QczrA8/n5xZAt2K0DnQTTE5gc fU0uvvhi8FyxnHLKaXLYkUcgHgbCQPKQIQOjOE+XBy2GOOnNhqOS7mHiIAeTVIPXWUeTEf4pkPus p5145urHLbfcIiNHjkwHOv6dJQD7VAkBk819KmTS/Q/KbTffIhdcMFF22nE3DAqXy7XX/l71ir/8 8x7IyCqlMQuCtEoaS6QlC9pSG6gaPFEqFZQxq6rlRsiSB9CnnH3+L2XLm0ZIa22d3Hr7bTJ7yWL5 zU23ydC+FboC2tHULOXQzQLz5wa0X2bDmywNBrf+JDHlJMN7730kxx93MiYC95P33v1Avpk1A3rz f+RXv/oV6nStDMckAQPlNnXeTCEPbdJUX4vy9JUqyBby+QknnCAffvQJ2ngIJgC3wKB8pk7e5iqv xbASu8qUS5r3YLbVDp1exOvwwv7RjnPE6wQ0HvYi0o47PujowDmMoxk3jTjqvVBztXfJJZd5xx13 GvpUvPKjTv9qlrfpZlt7z7/8Gqz+kJTJcYQ7I14o0uExJx5h/BI0D3PRjjPzaIsd7W3eqy/+x5s/ b45Gef3t97wBI8d485Y3eoilcJl89UIEycLe0kVzvHFbb+7dessNXktTsx4N9S1apttv+5O37TY7 eN8uWOK1YZ21obFZy2HrkilfCB+NAuXbw+jcW7lypd7D3Ako7YQVnOf96x+PeiOHj/Xqa1F3FgkI aWwgDsy1Joj+MII9gMVIK+6RDkd9QzXwHcJ1u9fYWO+tWlXt7b77nt799z/oHXLwEd4D9z+sMMOI 0sFiEb4FhWubHemAr22UcAhvNB7aqwnlDy1Hdgu9a397tnfexZeAEjxvFd6z+MydbU1gHWE8DMCP ZmBeazyW3LYj6dHkiqc+DYTqV3mPPfyAV1lS6D391L8h/5BPEynH85oZDWcG4hYDH3OT9S/yA01+ 8sG73uhR63iffPwhUka8SEfYw6yxxzZ65ZVXvHHjxnlz532rtMz8eBh6zi4jCGQPAtp77bXXPMxw efPmzdOEEO4K7L5/TvaGDx3jNTUYfNXXtXmtLcjBZhaXjUUoyw4ssDEjaG/EIR69+oXewTuP8265 6S6PlFGHaOS2hgVfeOeeeqI34fSrvRo8Z/lrVnyLX2IyfYDS4fEgPmzASqq3/fbbe88995wHs0p9 TFrHoMrbfPPNtY5sk/SB9TWN2ICICj1cCyJa5rU11nozZs/zPv96lrd82SIUuNr77cRfeCdPvMpb hrhElaGX9Dmkf9vu1dUs8rbdaox3yw2/A8CwFyFDAnZTQ6t3/30Pe1ttub23cOFKxVcISGtoNbRH rLVGQvrcNhPPscACtnuRtiYDt6XOa6pZDNiQKzzawDV4/9OjT/GOO/tirTuxVdPQos1OfIdDaEG2 sR6Ap/xh2o7tZ/ILe+EWtCjlJmUNo+H0yotvervveoD3+JQXvBEjNvLmzDN1YLnbEIdnwojSmF94 nvjcHjAzU14whcILJFzy9Wxv0yHreJ++8Y4thNJG5vZG+oTANgxBxodDaH3WM0z8kKbDXnPNCu+0 Y4/z9thlZ+/jDz/xmlsM7omnVYhSjyprHRJgZn8b8e686w7vsMMP9Jqa61BFAPRDC4TLhRMv9s49 5wKtI7otj89swKQC+jtgiwjTg+0dPFAXv+1CzQ3exF+e7R171GF4xPqhBp2tXmuoxdv9oCO8Uy64 Itr+K+uaFBzzoRyyMBR2svZn3h7SROZ5s7+Z5m296Y7e689/gnTAjfYN7d4HH37qbbTR3t6Ux95A 8zXhqGUzKu40OUGkCLb/4mvL/48//rgH5dL76qsv0R+uwpt2r7p6hYfBiHfTjbd5NdWgedJh8FAc EQoDX7AE7cBpI8puro0Ea/Zqaxd7c+ZM9z779CMvDGJdsbTO22C9zb1n//2KB1LRurF+nR2EkzlQ /tpgr7F67mGCFLyxDs5vKc7rm1u0VDXoRw44/DBv4uWXeY3oKMmRtoSkN+o0YE89bLXs2eajAPEw BH2BR2czCs7EBBTu9OZPn+mNHrmO99gLL3iUfZTfoAzzut3UqxXlsXBi7U+djUe7/rV2ECGEXe01 V89RmT/xt7/zzj3lcO/Be//kjT/pfG8eY4BWSePMiwcKAdg2R32Q9sfiDZPM3pgxYzxMBkIuIF/U sa622WtuAo4tEnhGoH6TPkS81kb0HZRdrAfP2h+0e7O+meFhYsP7zW8u8WbMnKWoa4E+saK20aM6 QjQSnUiAdLwjzgzegsXgdUNTo+p0mopxO1q86oVzvX333Nmb9MCD3uIly8ArpvjYJgI9r93bfIut vKefeS6uSolw9aXN1p4pA3x9jO1C3XLjset6kx96wGtYBTmN1y31rV71kjqvf//h3nNvve2Rg9j3 1YXZqojCjBiiGSKR1pFvrb5OWdjurWpi3xv2lnz8nrft6OHeGx9/7FWrXEKatlZvwdfTvfXWG+Pd 95+XPe2lW9CnoB8nR5AOFIc2P9z7FIizT1esw7IF+pz8f/VV13lnnnGe6q1aPrzBxKn2+ZisNzIR zxgy9wesV8RrqqsB/aA0nR0qD96Y+pqHFSiF8dBDD6n+Vd/QBN0PeiloikczOmNio6fBn/9IM8LK +Ir7kziWI6iu4HKsHSY3KXLWiOdOLrt1YGVjlUye8rhMOPZEwaSnNMBUkvPHYzceI1uM20YenTwF q0RmnpbjWc4ccGaBIaP5iw7HkR+mF8fvs7cusUNoyTKYBRaVwFysrDSrGQjNLM1PK0bKQzBqvuKK K3R1qARLunpgqZL7SE4++WSdgeFsJGfhOKtCc55czBQlzswny4arG1y54JmzUVwyBiHqGY2vqzvb brsdZveK9Lm19S4vL+KqdsagsxXAKWflaMLHkT8Dl9lvvfVW2QYmI+PHj9c6VNOcCAETiZht8Y3i 9UniTzwdsPwaOJNHky5OBWDmq7GhHua03AkCCwI8KgRcXtMUhYGzOiagHUk7CeYtfGdn80y8hF/M MtI2/pprrpE//OEPstNOOwGPqFtZAepj8rN7FDhjb1d6EqCkvW1DW2y97bby5ZdfytbjxmlcrpwQ FtsKgx416xw1ah3k2YGVvbCuEjFiYMI4ZR52xpOzt7Nnz8by/WgZNWqUxrdmGjRPKMZM0rJlywC7 AzOiRdmt3iiUHFmFdORgYn0lZpu++ORTOe3Un8POGW2tTelJxbChcthhh8lLL78uM+dqQsxMmlkl c5f6lzRGnLAONnBljuUlfXGlk7zAFQcMNnUmj6aqpPe0gQXGARmqUsFQnaGVotIyGbP+KKGJAOFT 3nRiPyRZQpPxZw0ECG25Erx/5plnAlonZJoxC4vATnyXXXaDWQFXb5eBr0BwCDSFYQhh31Q+V3Ay BJpvqXkK+KasTxWnz5ECdcSKbh1m8tkm3y5cJG14zCqVV5TwrZpJRvGtK/98mix06kyzvvGXYlrR 8FxJY50233wL7LdpURlENqZVDa0QU0FLzIGmVeQFmlqEYFLJMHTdUZj1LjEmur6ZDnklKA8p42L8 nwg1/p6r5naFgDJW516BDPLe22+/LXf/7e+yGVadaBqERVlZVl2HFRTD//GQun935hlnqtlpGeiN vMrZdgYojPL666/LPvvsozKKtvfMn4HXLK8pMzEZxGb8fQSmaGEc7D/2339/WG4A+fgPY+a9qLAE Kx1HyLxvF0hto9mfUtmnTNpgX6t9g119SNP+zdxXAVzRRPD555+TgTCn3mabrWFt0Ip2zlPTm223 2VJ+vO/+8uEHH0tjayNKa/Y/NEDWZAqUUUrDiMgyEUe0nvjJT34iG2+8sVSUV8AcMKQrjZdc8hu5 6667JLjPMxN89rXEeQtWoEyA6RFmozn7v+mmm2K1KFf7TpaBq18gR+AO+34hh1nnTIFlNjTlQ0e7 MXB2fNiwYfLAAw+oDKutrVcZx9arRN/JWXCabbNsTA9VT9PZH4LJInuY15r+PgeyMEz+QbtzNWQQ VnIoOykzDcUZyMy/HX0qQzarkAV5MPduIe46pRR4e/WtdyDjX5Wrr/odeL1dqrECRZ5hKIHexFq0 AjwtaOLpljFSB+KAuODBvoDtU0KTWwT2vVyBYmiAEmj7ZH2Q4acYZVJTQh+ZEcDnvuS/YWWOJu7c 7jB27BiFUojOrC+2NrDfralrobVfVkH7c7QDQwv4JQRB2B9t/+Krr8qx2N4wdOjgaFtSFj3//PPa 5rvCTLmngXveadKOSUWpwEptG/iS5enfv4+2/+LFS9HeRkfGOEZXhagnM0TNmM1twi8r76llAZdC P3jvbRmOPn479L8FoK8O7oPCiv7IMRuo/vLxZ1/IkpWQFVzxxUGxTe5RqvbzM/TAJxax2OcGWhwC 00zG5v6n66+/QQ4/7CjV9errsGq3qlG3IVA3e+utt5T3Lb9ZmY7EKUMn2rsM7cw+hv0Hz7vtvrtg kK59Fq2LuDLIvoS0R+sfc9A0N54nU2aS5kVmCZImsUEhQdgjEJllw5Hjr1FjaIkHOLDMbMxsIljK r4a9bTsU0B0g9AWDGjAnzjSt22ufH2Pz8iq1tbbVtIMmc7aNpN0lfmL3phTMBx0ZzN8YaKpABFOZ GjJ4GK0H1abfxF393xIIyyYQ+MGHHKJmKBYS8yqASQEVwflY6h88eDAUaiMkqBwwULnIFDj4IFFY ZZmKht1Xwv0UtL77L/bg8D0JtH//UtQVjN5CU4NM0NFyaB8SrC0LB1F0zkETgQ8//FB+/etfY1l1 qA7OjFmQgcklee0TbOP4WSW2Ah/b8moUbihkhw7ToTA2R2KWQdmNYHx/CNpO3PxbwqXzYPDzslny TGFB/rXPNDobl/bZ6KwnweaakpLKR3+YCTEsWlQD+33uLaKtuGEBMisFEwPxQbxbRtaHKX5of00m LsV5GeytaYfLDo7tzwHP5MnYT4COnIGdcTH2rlRUGHOGunoIpAyBnSDLxvIQ51QEuGeLikgBGp97 fzmwpcJGW+yKCijlQEZhIfYpWIRmyKMfBBzbLRQJyaqV1TIAJgE0QaMFKCxBAQ74hEAdM3o9mPAM hM18h9SsMvvjMoDW12xjBqvQsw7cI8DBEjs5BuKawo6mXOPHj5dX0Tl1J7D8hvZQYCicaACliVIo rWqmBkQRZ8XgJdIK+cZ0O93JpWvcKpT3wEMPRh6wrUYb9INiw1AJkz3SPeulNvKgLcuPLGcBTOOM 3GTsxIAYLCRCOTpNlZdsaNABiJnI0ndVMIt4CHs8uIcMlinY/KuPdcM35YQxmcYzH5Z52/XX0L3B Xgcck3DCgbb8Rx11EHiLHQ15uASDP4M3QiDIjjQaCN8Hs6WphQ6I4USiAQNKKgWqKAMpVsGmnGMn x86OtB6UN8yzazAdNE2LrHy0cepgCvj4lMfUNHzYsBEwmTSytg37OwYPqNI9fC2+gwGbZnXOnHga MXyEJqU5M8tO3p82bZq2/V7YJ8FmKy42g2WaBBXCbJgBKyB6TvdDvBEXI0aMULt+TQcc2fpOe+cd GTVqFPiem78NJCqKxKPliLiGSMiM6jrN1AAAIABJREFUyoeJB7NHKBfr0DQJDVcKU+PmlkYMqAZC jgiUnHHy6aef64bwds9MbJVh712mQJnHdqQMYD2Im6lTp6o81gEn8FeE9x0wpyUdcgKCdQOrYtIh SEHBnEirMQqjOSzpvQOTZWE4RIrATLwASh7NOKkkUYYSNicGmIxmzUWQw4kbz4M52GvK3iAdssw2 cHKGSjL33PSBSWUJBKYd/FGuMV1QCbQltvtGUtXOwtcz8uuLNsAoWgpp0gSZ0gYcUSmkGe9wDETY axEWS2amIzWlmpwF0GQeJvxiBl/MHm4MKjGhffllV8ill18hVcOHYQ/6CsiQfClBBnnAA3UFBlrj Ky8HcJEANnpreZvtQ/nPtqCJO83RyQsMJSX5KhuXYttDZWUp8GbyIT1mDGjXdnbkfmA/ycm5f/3r XzoBzAlr6kXETzPafyUmTxj6VpViAI2LRNfg+jb+x/ASuhXwdinatQh0jOURzZeOHVQPQhKaz2PV DHtf/yMTJkxQ/o+HlOIuKSEYeUx9lXRUBzM17odjn0La5f52TtrSbK0AI0LGLoBcsWVhTqq/EHZS +IzhB+CwA30mtsEJVk/1YT54CmYUEmmslx133FHemvau9B/oywrwbBOcvcQHliDx4GRbnk6QkK/J fyNHrguT560xeW4Gzn1hFkiZsC0moadCLrC+lKHUZ4J8F59X7I7yhYEwaK5K/uRYg23G/oRwiAfS nh2wMz6qjLJlQV+MnCYYSk0TIfMrgkgDxn9FoaYIzrUtihnn2mopxgwUVAysCpl25lvgQSow2/pf jHpDaCzjFQa8zD8wcndCkW9HWQTCo5JD5p09b67UYfUDNLJGAhuPgZ2EesbCPYUAV6CoRO+yyy4y atQo7RS4wZt7bxjY+WYKJAIGO4rmNQmMR319MwTFozJx4oWwXb9B1ltvMOJx0zY6wNJMoydTZsIz ge2xSi/nzp0r9913nyofXImioKPgI/O2thrlrQRSNVVTBPmV9G0FIihZZ6KVDiAcySy0f6/DeHLu gmps9JsnS5bVIj73CSSUPwjUFhnnrtSAiMyUbQIF78P3P1Bb4SFQQFaiQ5iJ5RPWibKfOizrQCak oLeKPjvw4KA1kF3SS7tqNwS23RRoDOywP/vsM531HI8BAUMhlti4AsWDkx9VfczgQV+m+GGHQFgs zx577KHCgI4WaC/O8P77H0PhvVYuuugiGT16kKxc2YQ2MsDoWCR18NtfFS0/PkaVG262sbaJ7fgw BwDlHHQKBZQDt/nzv5WFsFvv16+P7jNKDT/2xgo5PuE1BRr5grNEFJIUejxzNpU0RkWL8UjjGQMm Trj3hdSiJALYnB6jfb7VT4k/Dqq4WkQvU76eqfIkI/wMEdSbKMpaADty7rUj3TU3NGHVJqQzkdzs T963/Mgxh1VyYNio0BM5MZhlBwefoEfCbefqMDoC3n/5/vtyBfbXfPPNN3LCiSdJKXnel2dWRlpv VEF4ya6j7QPc0eHG+4B90YW/0aiUl2wf0iEDi8Pyku+sQww+TxUo46wCgkYmY2inNnzoMBmCAXMj FMEZsFvnYTs60gJlKvPOFGxdYb+BQikFaBLus+FKx8EHH6xKz7y583W/Leu6Cl64OG9SnChjMmWW 5D3lIgfi9MTXgT6OtEt64yz07pgJZZ2o7LAvYOAsPgM7dstjSrh8HSu+xuFPc1297uk4Cvs3Jj1w vzx8/wPwltcojZh8ufueuzFrO032xX4CtkdQHmejfEQz0YS5sil4/58P3IfywkMq0MlVNa40sC24 B5Z7FPv17YcZ6iKpgwZEtsoUWH/KU9tHMj77F5aPuOPeNToa4QQeVyW45+3TTz9VHaC8nLVKH+gE RQuLOuQDRiH2tnLViaETg45W7NdgPzAQEz8cBKghDF8C16hWVsEOVskHbFvWiYFKGWWPpVNOKLD9 F2MibRIm7o7HKhT3zbBuzDtVbdIVI+rlDXlF0Ed14iCvXIS9j1tuuaWurNpKED7pm/1MtiEqYyEb ua920803k58cuA8JVFfY6DWUUrgNsrgJq3wkUWKXinEcwaXIUCdy8I75EG/kV7Yz6YF45Z6YuXMX Qq50aNsTDCdPm7HSkm37sB2MVDL9LumHK4SUvQyUkYsXLwM9F2FCAHuT8aypGXuZ9G36H6ATe/Fo wYAuhH2KP3CiJU0B+uQKDKhQJdStUydG6bSC8pMD6/79jS6QNgci1B6MaK95hqRdd71Rctopp8pl l1yqugxXhRbMWyhnn3kWJmY31z0+lg21XVAWu7BC/koeYhSnk4hg9i2xwvX5Z/9VvC3EHjSGHOhJ ecAj6Y04RdcJXgL20G59KjApEgXDCx5aaJxjgStQReDJqqp+cB7xri5cNEB+US2nakvZyAUFrkbT sQz7GdIMaSPaL8XAdbmydSRvNqN/JH1xZZn6EtOTX8mTfM9A3YttRZ22a2m7gM/4wOI+Y8R0ESwh WmDajyU8VAGqzxDLf9cEJmGF+mIzui/zqKdBaKONOPMBJMB2PG5xyahKsdIkbTbfFbqyemcuOmkz 68BUORjAVcHb0OBBfSlXexzC8CxXidmnZriALcdgsKAIHQIVZLTXRx99jI1/v5JzzjsPMyvc2M+B YQVMo4xiSIbM1IhWONP8gJ0OZ7iIlzfffBPKeqWcctpJst1220B5Xlfx2rdfsTQ2Gfh0JJE62NZC RwBiZWDnyM7o2WefhWAok5/97GcgPrP6RQLMQSMVYSaVUFvbfNi2nRWC+eGj6IGLsJodIT5WnfL6 QKjkoJEhwBoaW+ShBx+Q7cdtIVuvv47sgA58o7EbwFnBJVDWl2FWxOZBmmF5TZnNfIvJg08oJnho UXT9Gk9xpiD5ZuZsDNSq5Fo42uDs6sYbbShDBvSXk084TRbOX6zmCRE0DGfhCsl0gNMORcgOpvQB H2pRrKDg6oZPPFDgK/tilYDpfIU/zOVUBOx/wszKdrqZkQzL9mcbchWqrRlmnIgTBa0p7E8snyLM KnF2CJbNuvmWqwO3336HbAO49Fy06+47QziE4cXqIG33gYPKsXJn4GTV/iiP4pXChslgFnQ+BuQT f3WuPDHlZS0fB4iT//WgHH38CWhMeGrKN58DKC4DvfhtwqSpgu1EKdB4cHaWq2a8pgDkzBHpvC+U J8oJa4JgbRwV9QCeeNYG53I1AilYu4t8jCLg2SkHQpv6cYRuS4n4IuClvErKQb+sMQM/Dmhhmifd /81HR9rBwQWRh3agK+2yPuXy6eefyfWY1OCG3D7kSd/ciYp7B2ZEWdb8HC1xEgwikhIz4gC+Akd9 CrA63I5ZvF+ff4Fsv/NecuONN8lPsLK64XrrAJemCCEoIsWQQQx0FWuCPZs7bWf/jYfOJIc0AJnJ WeEnHp8C72iny8h1hmqMMngQpVlYJwQawTEfG+JcptuH/pk58mBHaBQcpOWEEWRAZT9s9p03R846 71zMrg+QPffcCx3oppgAGgNnDPdCgTJmPpk3EWNVj2XCn/EKaTym0a08EIUZ21pV9A899DDZYOxG sgk66Q1Gj5aH7r9PltY0a9sHqpNQg+xuOStPmUzPW8QhlcQFCxapQ6GDDvqJzqiXqXdErkpTOTSy uQmzu+WQsRossniOUoNpJZptNmGwtBcGSSecdDKO02Xo8BGYDR6u3sQO2u/Hst/47SEjsFpJwkYe 1r24eghXeApYswrmwGv9zAca1kP63XbbR35+ysly8inH6GAJeyng1Gme3HbbbXLxJb/CJGc+6ooB CRwO0alBNoFtz4EiZQD7kPnz5+tKs1VqOPCkoxGa8XFVkvJxwIB+WH0CvWXROFz5N30DS2MpGwnx nwtaq4DJVk31csibZZA1UK7QTNimqMTJmfxMgTLKBsoqlo80bQdRxOwAKMoRLAHTAVIB4kyZ/LjM +HoWJu5OB4/H3GoxLuePefA6vlVsLvHnIji6iKj3Wmx5qK/GgGkj2XHXHeFQ5jV4lTxeBmAC0gzn DDzmZ+FGrX5sXxUH2uCqyHc09dGb02Tq1Dflsgt/hUEn5Bm84tIUtBJWM8RSLupdCCcTDLpwpMIA MGLo0XepfoJ4o4c0rtDQmcpuu+6MibRR8pOfHihz5s4CrYR18pQroOzyCT55FiB06Cr6mRKUTTzI UkSkl9CZ33wFL28HYhLjZZhxb6TeXUeNHCqbYJDw7LOvKn5IlwpXG8LSjT3HasGugxNRtMophSMd yuN8eA1k4ULQX6mcEkSBb8lCqx3WdRAmiGK9eAAeLjVL+yjuxj70z9Rjof/SWyX7y7333Rf0lSPr j11PXnv9FfnFL06XYXCGwR6wxScC1sl6eebKqAoElNEEg0lDkYZO4MtZLSfGbLa5/PjAg+Sg/faX upXLNPpnH3wov/31b+SGG2+UdeGQgeaLqlQBKbCal2IUj8WPD8Rh7DB9EF2WR3RwVoz26cOJYyTk ZBxlI+U8J085mW5XcMlr0cF9fAbxd4hHwcqJkzIoPtQlqIfRCyMHUwoDK012sqoAPJ+Ltiorg0dg QDIYiQfZnTvWdLUDCxBDlU8YwRIhApVY2mIWUtBBzdHv7uQWw4sTPMaAICuwd6NmaYvkkx/Qt7SD JiugM7RjBqQAsxx0c0tJyrw0PxCujpr1ntdUhHigJOQ4VU3ITOzQSEB5aCAIOLiNJpxKmIXlYA9W Xc0y3d9hERCcIUMiVeQ4S5g+YFYYCiVzp6LR3ooZYhSIpmf/fuoZuP8+Qe78y99lzz3Gqy5ImUNT mwLY+7LcdjYyXR5W+WQcjtQ5eGLYbrvtMNPxLpaL/419D0Uy4ahD5cvpXymSytiTIq/CIvwQaXEh 2GK4ZqEiOMCs9DDzCWZtH3rwQbkU3mWABT1ysbaLbacY+MHcDkkYvaAkR5o4BUH4BImzvQzmALmD zgYNS0mE9uSl5GAQ6VXKzrsfICcec4Q8dPcfsCRci060VZ589GH5DCaJF198mQ6wEFtxqmf+qDCg 0II9Kw+MgvOATB20c6mS9hHoJTs74b6+vlUWL1kut/3hjzAXrZWPPvgA1lDt8tG7cGeb2wkF5Gey bFWNrkhQLWhC4ygtAScqJNlIGgweDD64fsABBOMyNsYU0F4oIDjbSGTkYsaRStSzz/5HTjj+JM27 jHSHtxwMcQBYAXphsJCjWUWfEDYUSXgszIdJDr0Wfv31dKw2/V5OOfVnMunhyfLRfz/FHsJHZPiI QXLkhEPAa1hdQRtqRopuIkazCfwEWwczw+BDTiXnoW0jdGdbUikHHHmkXHLxL+SMk38q/bCKNajv MJn05Aty1c23QnFql43XrYS5H+qSQzomvPTB8hZxpKtBiE7hxtWmNihOtNkvLYeSjudwQwNFrURW wZtVLmeh8IzPk52Zd0jMsksxIvCQXPBHbjkyQOcKl8ZFueR77Npoz5P6MJDRVid5fISoELFQEvye B/eJISsBjkT5UA4ZOlC/YtRjEsw2TzjtFLn6xuvlxwftoVRCM0LSKGm1GKaWPOehXBxCsYnsQTgm AK+UZxhkqalLLnka5ogYBF7w60tl6rS35P4HH5Zpr78s55x2ooTrmqDWQonGALFNNRzwKF1mKQwf lgIm7/DrazxjpUFnkSgrPfW4SbPagw85UIpLMRhAGzeDLzm/kpNrFFolccBpbKJZBOGa0tozb/E0 cNgIiMqZcVS4Ht8aO+WcM+RnGEAtwszwgm9hkorMLr3kcrn+uhvloUmPaAO1cbWbDZX2wFQG0oY6 sUcEuZKupK1RWuuWSyNWb3554UVy8IRjZDZcWi9fsUyemTJJJmN1/c677lbFk7TVk9AJuWgHeuz0 Obv52adf4FmVbLDBhnGgOWnPyRNSXv/+nHQBghU98Rgz/ZhpM5oc0sPUlClPyF1/u0duue0WeBR8 V5557hn50x1/luef/LdcceHvpAQ4ysfRsKpFyrnXCtfGEyFhc0BtBtW4QJa2/UEDtNvhnqwCmDfn lMkFE8+QUesPkB9hUi4/D6veu+8NxfYbePu7TLbeZkMpLuwPCNkNnpgXg52M4qCD+4bYr9Kkh/ji qhEDeY0euOilcMWK5ThzJhkviB/FUeCMSwZqBQ2YbaUFCydDSHVgQQRyFVuWvA2PkkB5nz5QyIkg hBzA7kB0DrrNE32c9McOlDjgtdKa1zT9DtEcnZNmUODywcuN9S3y20t/h0mIZ+TPf/o7Vr2qtBTM g+MwLjjblmaajJkzNeQY3BLg3C79h/eXRybfJ++8/ZJc/tsLscJ1jPzhT/co31srnfoGmpCaqkQ4 kcD+Mod0RsT4L8xr/GLw39KAAVGLXH/Ln+SsM8+TjYfDjLoU/WcI/VhRheSG6xSz1HLqoCNgfkYw H4RGxQXkv6kRTmmCHYTCAZZOYp588snqca22ZhUmV1vlTQwGdt1lB1i8HC4zZn6lKkkzJiFZWnvE txOeAt/knxwKUsZCfx/CyqkUeDDTW6RbEO7714PYn/hnyM9mWLjMllNPO17O+MW58sEH3+geSG0X LXe0VfTOkpw9c7Bl+i3EA1HmqFyFlUwZ+hk0Khz94Ixvg8HM/f7775cdd9kVE0JjsV/QaAh+CRW2 tjmXQTljAdrUsmv2qIO2FeuFnH25TRq/7oYb4TV6ALYDQN5Pext7K1+SQw4/SM4+72z5z8vvKlyq qmxhONXFYIL0D8jQNUy7x2pK2PzL0z810Ib8RHn6D5RrbrldRkIu7QKvooWwRtlm593RvyJ/eMwc AVO70TDh87CC3oKJbYoN5sKix6iaT3iQp83RrhvoyJeYYMDEXm4eZHUYvIT0GPPoGb8qIzh4ok7A QHmQcQ80I6Jq3PfGgUaIKy+450SM9cJKOLQ4og7SSt0IIcT6IsABhp579APiXrMh6vkDYH3vHFhp wQ0PeAcL0WcIPOfAp8fnX3zo9eu3jjd3XpO3aDE8UmGnJY8mOHeZ9PAz3q577O81wHNRG2pKbx/m oIe3DvwZLzL0BsKD0DU7/gCGRo5miws8o4e8x598wttg0429+cuXaDr6DUTjIoEJEJgelhHtbYYz M4BXl0Z4x+qkt6w26GxNHtzzettstb33zrSPvTq4e6JTk5Wrmj06lWOKVa0t8M4T8lrgOUbLnCEX DJzUC5uNBkKLei4DYcBaqd2DG0gPMxUaBUSTZR0wLIK3OMzioGngPbC+xvvtpRfpXA7om7yrnIcB HzimwCsu74NnBd5f7rnfa/Hrkk35LU6DeGZB8a0O/LbBKwo9pMCzC72GISxauNwbPmw976MPppu2 ZCbRjNhW8LZjvbzQvRUf6WMSCiLyGp4o6lfWeJuN3ci78tLLY3HwPtIa8trglWXcNj/ynpo61VuB 6PQoQ09GlpZIEuqlSWHzxhITvdi0RY+6Bvqkg3dBeICpra1BO5FKPe+Rhx9T74sLvoX3xVbzjM+J C1MYUDG8H/COR6yKzNDWr8V4SIPXtfZwM9r4l97FF1/qLVu+StO0oUhMB9fPHvZ4eTDBwJ0JUFLs ZfqzzZjef1hHeDJqqV0OJ1/wZtfR6E3//EO0x1zAiHhTnnzKG7Pp1l4z0sCJpbZArGYZsiETBMIf //hHb9999/UwgNK60LtmQws8SyLOQYcc7E169BG9tvhJdSZYFj1KA2y4MOhIvZXRCxUPemlr8i6+ 9Dfehb+9XL0+glvVcxHhki5Nu+AGgTzFI3MAvkI1AE8Kgney9kbv+huv8zbaYgvv6ZdeVfw0oTiW phQif+BFy4M3vo5GyozMudgYUESV17EiGC3fe+9+5O2w/S7w9viajabnrnWIQxLi+PRMz1WtTd48 eFvadsvNlPdhtunBvbsHxyReQb5VzQu8guI+3sw5Rm7G1Sku5/ibIB3SgyhmAjUC64CV+qg3z/q6 FnhQghfGJ5/zRgwf7S1dUm1wQ/ykPeh9q13bktJDvRZ21Hpfvf64NxDWddiYrO1gPW6Stl999VVv 0EbbebPgVipLLomvVPSOOIX3zqZqlV8kQtbp8MOO9s46E973LMpt+TUdH1r+pqcq3qcP9FgJV+ge rA7iIsLBoffow0/DW+KBkJVfx/IjSOTZ1ooL5h0X+JJHoP2jXmsBELjsBP/MnjXT+/LLz7158B5K ECeeerp33q8uUg+MxFl9m/Es1wU83gWDbX/bB5CG4UDCu/POOz0MRBAVnibV82vE+wae0+AMyZsJ r2nMtAHexjTzLpmY8rMELAuPJnhfDJHniVvWJwK/ZGEIKXgsXDpvtrflxht7zz3zH+RpvG/ZdMrm XeADjB/Y15rAtm2BnADN0ruhxR/7LCgtS79d6P38Z2d6Eyac6M1dsFLLtAwuTJGdXhPbqmZY9FPR oV6EvCmDWIS4YgTkMevTVrvECzcsBRB434ys8pqXz/Kef/ZJb4ud9vVmQ6VaCVD0xMZ6KTytGOH7 +FCa01JE5Sowj1qEvSefftTDUMiDVZWHYb2HqW6voqiI9k/YtAv+L6vwtj78yGg/uaoBObH81JPi Co3MEwL5nPIVJrXRN9RPoOSql0jjRQ9eXutr4YXxYO+ss85RkK3wjMDS8ojDj+aHvLWvQju316KZ 4dnXj7hg/mfeby8/y5tw5OHeksU1HppM4cE/m9cUavAu/M0N3tm/vFb1l6ZwdvpXtOBdLiLaV0bg IZWePxct/Nbbcqtx3uQnn9F2IHfzYJuweAZVLLvfJsp3eKN1SX5+5YXnvM03Hut9/D49lpo4mKjX 64m/udQbf8Sp6lWW2FUdhmSFa9W1NL7Ni2d9g7c2BMoSAq9oudq9xd/OVf4nf1KfOebY470rr70e /XNIYVveIbQMzW8zAu+0eR/Dwx+2bYC/Z8LDM8cBHrxvQs4jPPHEE2j/Q/Xa6t/Ue9MHeJoFfdGL sBk8gFKUb1gvyAS8mwr9bvT663nLa4zOxDI3I04tdUDwSLblT1UOM4Ds0RCsO4kxq4HZbgaOgvk9 gPXXH43vznyKpUh+oA+jQwwiMVkvb73xuuy6044w6SvQ0S7f8aBOn4ORo579ZzglDxgFdMCGW0eo iGG940GY63KhgUfTCszymKkrnRXjKJjPsgktsOcsxAi3takRs3+r9LsDNIG7++67dSN2nz7YrIqB b9++9BaEmXDOQmFYwg8S0gNONoGrUJwF4Uwezf4448n9QwwcYdOkgLbjtPtnYFzWgSPxTEH3bbBN MLVcArMMevX6+uvPYVv/mnzxxSfYazNTPzZLL1YXXHCBvDFtmhx3zDG6/MrVxUyBq2acaWR5bNuD sNXbn5pCYAacm69pJ86lb87gDh06SEaPHi1T33gtOkORPB+UmzPO+O9ywEsAPwq45dZbyRB4l7Hv w1hpycUKYDVWnohHekjr8FchSA8MBEeUENfJg42JuVjflIUz31yC5j675ctXChQENVMYhryD+7mI Cxt0ttzeJD3DJASzXfoRYpSFe5DWW2893VfV0ECnEfh8A7wk0fkCTTwtDVtTmNTlj2WmE3m4pTdJ OsNgKAFt5QB3XDnmPqXhI0aoid29996L7xBNULMpWKRi9UijZ/yB8ImavFi+ov0+N8FyozKxyaMc S/DVK1fI57C35v6YUBv2f/nvUp3ZWJxIgtVlLJCXdXYJqbjCikBcW7qzJjSEaYMtF+8pHywu7fuU Z0yj5aBNl6FtLrzwQoGLZp393Hef8TBHwEdQfXPahsYQaA38SZ6h3Rl4NA/mOZmCbUPyEWfkyDM0 f2J9WMbtt99GcagbvgFMV6t8oJnpy48Ivhu14Vj9dsncObPVVn3q1KnqyIN7IUdgz8Kj8ChG8xQ6 lGmoMyvz1lQ4XR3I03b/FB2EqFk2ys060ITHskNlJZxUwERs7NgN8Iz7pNpA25z1zxA47YrA5taW 1mWLXKyg0fECvg0CnqzFygDz4fsSmBBzFYRlqsGMeE8DPyip8hnyizTEvYk8+NFenfA05JcimyAF Jo/CcpIG+H0s4oyBm+QZyP8TJvwEZnZz1QSGiyEMSvo46wqhPkn2E8ubjpYiMJsEQWlEfih0ffA9 9yXQe+g777wnn3/+uZx22mmoI6IA13RSk02wfEVaZR9A+UePYqQl1od7rKxzAuZBpxukk5UrayGf zWx06nygT+AlplP1g7DWEVInEUFZRk8xKCb7SuKQ/GP3IjKKOp9LDVzfsI/gihn7WaZn+XksXbbU pMTK8gyU+xA4kWL/dtvtt2B1kat0kGdYxaUZJVmegaSpbcMfe+B5rCU0WvyPr4cU4btpBbDY0SUZ LDeVDhikdPc5LEYaYOJJWrD5EIA1WTLA+DJZe8HxCPY1jd9jT/nk42nYj/SmvDn1FZn7zdcy/asv 5Fz095vh4+bPTntHv0NECCxrRYVvI86l6QyBbUx5Sv2EgTKYbUEzbsonOmEKg8a5l4hmd+zj6NGw AEscrHqyUsdliTJQJtowct1R6rSJPMh2h5hVWgqjgyiGeTq/n/b19C+hh8HSAZ6LexooT3JB1/Qy ik9yqA5Dh1UMLHvG8mtEYNVfcUo8f7tosQwdMVLG/Wg7jdOEPX35cOjDeOSV996ZpnRMDFAfs0YB pNdYYKvFl8TQCuwQEA8z13HbWYZB3pP/Sffkyfnz5+uHqCnLmQehqWyLZZDyiv0WA3mHK8x0hsM2 pr7CQF6hbGB/M3r0aM3T6kjUYzMF7kMjodRDnwNBKV/RqRvN+Eh73BpAeusHs/FaWCS0QIcuBO5K sSyddR+fphDExXcXom1GqWuyInJs4xGJO+28Hb4WPsmUAfFJR0uW1MIF7St4twOYAykDpaQyZgIf xl5Es+LLwA3Na6iotAKRDMyfjUpb4cZm84wMyOcU9hapFIaxvDRp0h96ZaFQI9PzC9dk3H/+859w ab05FNs+IJYaKDk7yssvv4k8jNe8MjR6O5fXswgsjy0HOyBLVCQK2ylQeeKmfHrj4iCLgTaldpCV Mhva2CJgFK+EF4at+qhRo2Sc59dQAAAgAElEQVSDjTZSl9+Y9dQP3+26687aOXBT5rhx41TwwQu8 3aKSEjxf2EETr6nYs8xcUuXBsnLwRCHORuMAkKYR7733gbaFFURM2zXE2r7rOzwBM5Hhjz32WP2w Md31YurQ4BI0xI6Rez7WHbmOlKITtNDwqYBoR6SCmbQUoKf4vGjm1KEHacoOYNketFnmoBNkpX0l JuGi7Wjbk5MANt94uLzz3wAAv7BOsqfiR4+LlBPGVTkEEMxE2EFxIEic8prtzjwsrXSFHXti6aWk vFJN5uhJTnsu0AaXwbkvjAM4uhdmnS655GIdPGNyR2DObEsZA5jkinxly8Jrlo20ysEZZqV0Eznp gpvJ6f2Rihu9wPEL5lkFoIo4iQa0u5oSwDRQEYe7XJqPAjc8Ep3vkEZt+QiDHXu2g48Q2p28j+/Z qVcszKRpJ4FmVxoeP3489iu8j023RdgLB8UK5eSHt9X0h5llCFQ4GFhuG8hHVJBY7ilTnlRFavTo 0fo6GM/GT3eu9yddGGd3dMjrAM42MA/efvsfQQbsoK5yF0Fh3xGemDbbbAOY9DVjUGIUjwrddJMO unlnzY4trdmJHdaNG8YZGhsxc4ZAD1ak85Ejh2u99GGaH3oRI2/Y5rfyZvDQ4XLwoYepWWI/eESk 8x4GbgL/AKa8w/Hx0WFDB2ZFv2my14kfyugQFREUhHtTaa65wQYbQP6kS5ma84OpKPM5CKTsJf8x cBM+zV24b+gxmItROaVHOPaVYK+oMhTsN4MwE6/Z9+lEGs5UBBnI81TCFixYpHugKPc32WRDrSP5 h0cLXeZmCCw/ZSNlMQP5nxvsuQ+GvF+K/YoMxN3TTz+tvM8Pgw4c2Bc0HlQCNVrSH/JqBwayVnLn 0lSUZlYIHBzmYCDFMrCeDNyPSLM+iMsY4eib1D9WPrCclFVDh2BSDuH5Z56RnXfbVU466SS5669/ VsWwtDRHnn36VRk/fn/EhYkp2sTSp8nB12HYQPEvzGsqFPY55FYrvLtRMYqoaS7qqnts82TRwsXY C7kj9kLjI9cAZSfDCMTIL9IYAFlYSu3xdFeBfU2VMDfddIutZBN4Qtsc7qQHYvKKH7xdb9RoTGQN lh233Ew2Gr2OesllyQ0WMYEGM8xMgTxuBzhUyNlHRXGpiXO1j/lm5kx1YMNBlA5aw/AiHF/UrlkR J9hTmMPPQVDUc3YadVxv9BhVzD/44D3uGsCAHPvHMWG9smalzJ7zDQZq+yttd+potCvY7jxp83Wn POzjwzeu1HEM9bxmTJwFJ5ijTUDgvFHdK1MFDa+T76mrMJRDb+GerAb0AeShvcfvIdhyqyDZ3dl8 lNapTPOJfaj3ZtsLKEz1nFxOAHJiAAcHU+R/6kkUqqT1Sy+9VD/FQHnG+Ygw2oWBsiabYNuefM+2 5wemH3nkER0okY+op1J3pSzgxAoHWqQP1tfSSbp81AMj+KgPJy3IaChzOQfOkDcsPwfqPDc2NsHz Yh/9aDQHUW0wW7Z7/9PBz/QuSzRkApPkvW00/xUrQSUnD3b8HdiDRBeC9ORy+uk/02/OnHX2BYrc uvpVUAqmYAQ8GqPefZIAJlHQfp/qZ+bQAiafMesbFdxl2LxG98kULvw+CJFLBhy1zroqMNgRamfi C1reWwJInVMufOhPk/PP/xVGvZ789oqrVNn54IOPoYAWwNa7Qb2LUIkg0dkyt6BBi9HQmQI7Maal cn7PPfeoR5kdMCtEt48sK8w7tIOjckJPfOywGNjp2vqkzwNeezizhQ0a/OZEITZv2kDGbYCnvy+/ mq6j+blz5+pXnUfCFWVdLWzWh2X2MkP8kVHIDMEB3WuvvQY3ozfLj/fbW3ZGJ1BWVonNvrVY9XpS 7vjDn8C0+0HJXt8WJbszCSwQuIeGnTW9YZ133nn6PYMf/ehH6gXqyiuvlD322ANebDbXbsWmzCcM yggIi3RfcaegZuAAkGnzy4y7YW6Af+mll5SemBcDSB/KLpVyvVVapDMT6+LfPE3xi8QtENKl6ORO P/10OeaYE+B1caIccNDBOptWs2Kp/P3vf1UcH3300VF6JY1TySKNpwvcr9cEJYPflekHpYWOQj78 8AOdoecMzqxZc7D34u9wW14nDz4yxXyrC/UoLvYrkw64/84qLuxAKSAZ2EGzPueeey6cIdwIGthZ Z/Bg2qfOS6hEZxuI1xy0l+5s5ZlFw8B2OXDD2a5O4N6DUxoOLsDSENafgA8REfbro4cPk6EDB0Tx FuT5bPhnBb4rZ5y4jMF+hLt0AmUIDNHnzpkPxS0fs5/LVXkL1oWfPmDfHcFye16GQSInmbjicPXV V6tSQFqmAs2Oh96lJj/6hNK1dZVPZzUMLDs7Lau4BvMPXvfpP0BvuUGYk0E1GPz3hwJF2vlqxtfg lflC75L0zkd+GTV6BGbyWlQmsSsuoeaWIbAsPKxsohyjvOIgeYMxG+tgkHTBwSdX8LjSmQuw1vV3 OvA5cFdN5TLakVF2Y6NmKRTcY084RY445SxpgKJ/zNFHyczpNfLN9E/l5tv/KNf+8d7/Y+89ADTN qgLtWzl0V8fJ0wwwJJUggyJiWEmioAQlqbCCKyIuqIu4RPlBBAlDkgySg7qrIhIE1gUXhZmBYXJO Pd0z0z3TsXIO7z7Pue/96q2vqjpM4uf/ud1fvemGc0+6556b0pY8oHOk7I/6zQ7lhhhJlPE64+yn X/3VXz2mzt9RMyeCcmyn0BEtHXT+7Mwqm5ewS63rbZ761CfjvT09cGaedm48wuDIu3Dm0hfZxKHb LXAJ1199NTts7okO2X7Wp1zGCPGHP/wx1kP9VIxOKla9zO/kQGLyRt/V51pF4iP8Ket45SnhVifL r66teM5znsP64YF07jnfiV0T3//+D0dO09CsHPtxhKzhQCWZf1h3CwvT2UnGsM/h/QeSO6L1shnC AWRFHNp+nXjKaWwsMg38g+le97pn2r7l6F7urLM0Oe18jdc6dSm9gQ19PvCe9wZtHFG/8IKLYl1V R3d/nNt16217MaKVQ7izKSYqLEN9yQ9r/72c0fi/+IvXp8c/9nHpET/9cHaP7Eq7du2MkYHXvP5N 6VP//LW0fbPWEG0QZbjxkrKTcZ5hzqNPTQCWy3LN7KBrZoTJUSrsAPE0ie5wndoN116XvnfplRwB ciKbL53AZhIuyMe7z3qWfmyMowWNZoO6V/3/x3/8xzESoUPA2Ufz0zMY0Nemr/7r/w476YlPfCK6 OI8sxmjHUXDUBe+yNgJdaxWUwY708Ef8bNiSnmPnrJn7/8h9E8cZ45z7PGuILkgvfvGL0+Z6E4EA 7g786ad+bmRx2WWXxsj9S1768hg968G5VGP/DuSeol20bbSttH23I3Pve987vfWtb01/83f/kP7+ S/8aq4Ata7BmM9fa5s7Havprf/q2XMXYnt3ugjgT+vmmm28JHr/k8itiE6QXvOC/hu2k7pYerq8y rWugZujIb6jPNeTVmkHZsa3S/ne06dnPfnbIvyNRdpYNnqHqBl/Pe97zIp584vOxtL89zJRZQod1 IucaWrZ53+Fohw1Dm+OMUXdEVPY59Docc53oCXHzQJy0R2GtNeuz6iUVu3ODkwrbJhaCiFgjkmdn cgKya14WmMvL/FujfvFLX62e859/p9o4tLXatHlr9fzf+31OL94f30p2q6+uH3EOb2v6ay62RGQa pJNnd111bfVzP/XTVV9Xt+qhzP2r+oY20GPorkBo9drXvpZRTGd25oDXJNYalOf1r5Y+Vb3rbX9e bRvqi/UDmwYHKKeTH3l3MI849VU77nFm9ZWvfr0aHmcONSnKnFjXcgnusYZdu3bF3PFHP/rRFQpS PmadQn+FAVqh9OKkdwShlR1et9b9mjcW7kR66DPuHGXmyM5NjVcTnA4/OTFcsetPRf+g6u5lpWbM mdTq764+9bd/H3gvc5PXzLvxUnwW/JarsP3zP/9T9etPe1LkbTnW5yGc4P1v3/iPyjURqxgg8pSw 4h2445fnu66KW/iAK9Msq7Pf9OZqQ19/5VL+k7efUP3l6/8ikjCLm9UrVTXMXF8xF/zkOioCO7nU MFhmKZc1ApS7UP+cqb3/wN76+yJzeg9Xz3/+C6rff8GL8tqcAocZ1sE59GXev59X4rGUY/1mqqlx 5wizDnB6vBofH4XOu6rffu7vgqse5GVbxRlD1Rvf+MaYY+zcYdeYHJXuNRxxKfA5dxhe+OsPvLc6 +YTNwcuDg53VLz7uF6pPf+bjrEt03WJV3bRnf+BoDCYWV747UqDhbH3GgGrdeyNf/MPn/rE66ZST gwce/OMPqd5y9lsrdkGMfFugEXe9e6fil4/sfgiZpBl8PDZcXXP5hVU/+p5GomLL6szDzOvvHNyI 1cVq44EN1eVXX9Nal4PyDTwKm4GOf75Z9+989Vdvf0M1RBu+Zag39EtXT2fVM4BsumK9p7/aesoZ 1d/8/T/F+kfrsMBCyPkpZY4H5C5gXzd/lxnIoVWFw6F65StfWTE615L7BzzgAdX73vsh1guxBoDA 1r9x9c9q2KNAvpRrcDqP8HI9pz7PsV9E9g5X7333eyo8wZTVWZ1wIvSJLQp6qnO+c2GWEXJaybeW un5gVLa1DoKpmxW7SVaPeMQjIv++3g1VV2dfyMzX0JPjY3ltBcZgi7aFxquv4jCvawlqzSPFM67f c63IRLX3lj3Vf3/ln2V6UJfHPfbRFYe3x3oBteMyd64P+/pfWAMxnduxMXTml7/8xYpDratv/p9v B9yr4I+MxL+QNvTX+gWs+MLIWcXmQUF/deWDHvSQ6v3v+2g1Opz5SVVe8NNaP7QiBx8K/esra3Fd +zA5crB6/WtfVW0dGgw+vu997s16nmdWOINor/NagX2HRgJfBfpCnlVFrPGCjgeO7WVsywMcclrt 2HFatDG//MuPjzUSJam4Gxut24DysnXNsNM5CUxOspZ2eGKEqmfczk6NVq979csrTtqohpDHof6e vLaPdX3qza7eoepn/tMTqquuuyXQlf+0Ml9xo04wTE/LLcWOYQ3FyIHq13/tSbQnrBnq6ak2DW6I dt/8B4dOqHoHt1c77vPA6tDEUqW4t2RFEM1S2fdnnvHzdX72XeaR+Wrk4L7qbz/18eqPf//3KlxP sVbplE0bq9966pOriy+6oBoDT7ZfQmf7NcXaIXZPjMCGRWRKBHV75MmFb34WHumXKUL7f5h1nKwX m7ztpuqXf/6RoTdt8zs2bkKPDVQ//+vPqvaTjRpmdAy6sA3v7DDrWOqyeL1mKPpLPNr2M0pTceRG rIWRh7XJ7nnGadXrXvuailkUkcfumzJdhK38VhYDIFEn7EfW7izQNlq9qdHJavTwraDV9TxV9a3/ OK965E//PLLfVfX2d1V/8vKXVldDc+s9iR4emcht2pqAH9NL4ZirJoYPVJ/++Eeqn3nkI6rrb7gx YGajhVgnWGw965HrYBppAlPEj+cVdF/9zGYl1Qfe/17aMHhroC9w9qxnPr266eY9QXNp77pky3K/ gJFR6h+hLquV/zLdC1yWvTQ7Wb38T/4oZMS28pSTt1fP/e3nxFpRZgsE3MLu0l3rMQpDi8NZs49y 1v+j3JdQ7JKvf/3r1TOe8YyWHmP0NtbEyR90tkr0qt1eaH1o3QjAYnVg780AJz4XWb+1q/rxhzwo cCR/4UCOdt9+BY425HJD9d9e9jLWwy0A/x1fA8VyIv3jd10we71oLLLHOcDuP3gL3QLa3qXee139 ztvXU6qXwrjFS+387zL9Yy0IBbz0pu1N6mOx9x2hXHlwfcIp99iRXxPRNNPsNtXLCJE7/dlztSzL t7wydFhgj4Rr/mFnj4lhtkd2TjA72jBnf4iebwfbXDqcataGaaapdNPzdaQ5ntlZSS+Lc7YD5vx6 zb8wVeBGvLT3yAt+yrVkoKfvaCMPERccue6lk3U7zkPu5WRwh287mILi+RrdTIWwR6+3LoajYwg4 lzIx4ZzyHuYR6/NZP4hD8Vpw6oha0B7vPItyGZLmQDuST+MBGfAkZTAyh/d0Ds/Yxo15tKKVexQk 9RpUD1EBi3rQSqDMQju9aJ7N5JQUR5SslzT2rIB55kEvQQdZZY7h/35pxP3SPDvGgBO3wsy7uVBe q2zYxTh1Wcv064wpipuZE+3BfV1sMd46/8q4DfByaqey8TK8ZlzMtFVGqV8uxK2x+1kflDk8w+sX 1wmcxKiRI4WO7ulpcbSn1D2nPvJfNlbJO11SI0dMlFEUUeDHqQLdePj3sSvWSSedGtNRusCLoLrN 8MaN+n5rsNcpRto7CilM0l7ZlqflB+E1OKWrjE4ap4yalJHLdbKO105bKaRfZP1cF7srSkQ6g0yt G07b8JpKsUreRQDdf8zJcGJY2IcZQdrGvHjhkdf9lVHno+ORnbdGDrBVMiPZ7mTGNBEwB59x0CGj UG6pq7d+A1sBS1rWulKmP55YB7XE7o1Oz8x0J8IRgnhUbopuNGrgBx0SgSyLHhVu1+KtDNa4Gern YGZx1s08cqb96lV27gxTTA4xr1yv4Z69t+G9y4ctm8MsHt++eqcnKRhs28y6ce8UHr3hhdZ+kv4G 6wKoQT9syVgfsXkzo+EEz4EZZGSn0DZervlHmoFb6NuBkmK8G9ihMIeqcuYCmfel2/Ydap29V/SA k8PG0GHbNrIOa818j+WlOERX4YHujfUUnaxHO4xM5lG9UrdWToGonEaezJgTg/7WD3pwlY8yklva ARZ40566BiSnddTJdgUVgKx5HhAFrksc4SAgQAvQo7s135ADZ1l7OAP/bt2+LbzHHi/gyHqPyp6A Xym87G7gWNZcxId1/givfFBkvLRXvnN3UWVPXSg/ODVV+S8yuHaWGXYxSH8B3lKioANTgGcZERzE K90btKfyRJolT3f8Fc+qXFPv2895jCexyxz3y7qXh7agPhI+4TQIn/XxMPS5aJsH0ujBQ2kzIzQG 87aMCfaVjgOTSaaIlnJcfxk0UXEJnKPjpEJr1Km5NINTvShPY2KWg43lgW7qtkR72UG7PI+sqs8M NRvE/mfiw3UgHiicA/nICxRZcOD7mVo/hcy4AJ22v3JaHDILZdII972MNgrt1Az1Ru57YexuDRwF J4Z+zGn94JR21+mW0NTxkxOMSjpKRT3d0l7aiyKD+mzQBfEEQV8OQmOoccgdezjgExPRGRtz7BDc zfQ0mxjzc7fMkbEJzl5kZ0SS+d51UG49vzJv8z3WwHlCY6PMDnGUzRkfnG9E+y9UmBAx5a3kZBkU SSy+FtpHwSLRL2uH0lY226US8zBTxz1Cxw2mOe0kcxBt4Dy2bcFbievXwAMvytVS88aUjA7C17Yb /TEbybYKOwD4lMOxCeq1kQNv68wmJmfSRkbwDLlO9Yd1LkVfNdtX5aiMTBd9UGwF49m2Ndu6tbMW l3xxe8vajjLeMOeZbt2KDq4J6y7J2toFfo/V6YXPDccCf0Rc589d3oESGTaeiwyri8hsHEEc/jnw HEKDkLt3fTFiCiJzowvhIawdiPZQGMH3hQVrPdeKukhnpQuFOg3BBli4I0M6TcnpdXEGBWW35+xw pmUXQ66V2aobSQLx6ByG8WYjagcx6Ok2pxo8zGFmOkI/W4MaRjFYh9jq2LCAwuhrKbh4te6fggOv 4rQ0pgW/5Rr5Ymz5fS2ctRfgFsBlqprbXsb8cVjNtT25g8v2paMjNH7ZKJg+DuPJsorweN9UnBle +V+Tk0YEac3w0iCgBDyk00Xk27bVU9BWEEm8Z3HIugglqEasg0aSodS/fBulMxUGIt88dE3FpyFV gqpsHuFyLjWeHuhIw1bypWNhsLEz+NcSFxBOca0hk5UCedbza2XZoqztgDLyFAopZ5kNP0aQshJY s36UBgzSR/yY/4YwBOAjTh/ezPk8TsGwI1v4o3Q6ilIS1iMGhYgw75a84FyFWfrJ+DKpC7xLQ+1q LWXUDtQMfN3v0A5p3Q9hBeg5u1V/m/CU6QLygD/LxDsV03s0qsq0j1WZrPWihn/lJ6nDD2WwpJGJ I4Dd0eL4AEqLbefVNVSKQ0GPDf6V+Zcny5HXqAcdAPxhKOo+pg54zxTlRuM8iw4YYMqT+mkWWFac QXMEBIof8VUaG0suchQyBLHGxqboYHNOC62o/CbfZd7Lutc0mWPzXf4r7HUIHEJfyumpD3qdmMC5 gWFjfvKrUeTrbsooHSicl8jpEYCvs1fnhuEHnZvGVNENpYwCjuVYl9ADdAiONUR+YaECLTowIwL5 wlEnzuRh4/Qh28Ns6rGJdWlq5aPXYD0IxCFONDocOn+sZx9TijwyYTuLlpWPVrO1opCcLudq/Y6t jsp/OH/INBtWGIjkqzyKX1m6GURB6V833+f7TH83ipFPDbmjkadcZRoU43sl/XP6DPWKapUPbVen vbmuxVCcJcG7tW4tuqvJJ8ZtxvG5PciT1sK2yjZYmc7mMG/56JEVoQZolxfQXTpRenCSTdBpGGDK NeTCeQSNzOgoFdEBrI4q9fDIjR74apZz2WJKLvLOrqqhy2g+wp5rZiuG5fNwPwVTYAOB+w56oM14 RFsZ6Fi4LiUceUUxRwxyBGbbL4oO8K2C3TEL6oYxMm01FGv+IoJlGcRb6czpVHRdNp5DfuDSTpS9 Y3QZLp40SkdmqO7I6Jtgr5coo8JJ0dFDOgteJxTa+lnZ07bTMC584Psmf/hcjOsj4sWI1MJjQaxH Z70hxDSbkph/Z2ODLtuU6KSRAvMlgqxnupr188vj/iufLYXcdNFZ89wlDwRWt4vfWTohfXoYCDUF al7L6eJD0LR8jTdr/im6MusY+Fm5RZ9SRKsOHklSzqMSN9HBBxeWLi6FyVDuLZWpCqSBgEUJA4/8 4JlXhtJum8YObX/NB+FEgceOBX/KsUGbusDvs3nLH7ZtxW4pdkAp13jrB9tdj0aB66m7mzkxphTl KIDizKBunEP+haMbW0l2naHXOcg01COwbqQ92p87pwMldo8KSSFfO0i+P1IGhbnKdWV6UzZDeweq +a3A2ExzVLBXZND+IOzNegGjHiNDybguTCW3Vljn9VpR75p3K5DRrEvzXgqpNVeHOw7/ynKWVU1d lvCtKqSRpuB7NWhHf0O+tAetUIqRguU+WNMYrQ5UK3rchEcp7gp/1tcmXv3eytAH4fdn3JKO21bI 9bOzlj2TrQ/crBW/+f0475tw1nVs5+kcZe1yV1TrOIu+S6IHv4C/ALrGcQNIjeiM3Vy6tWp8Pk6Q zKk9t9xYmVFd+oo8V+mn2194zrfQ76j5NOEs0Hldm6458+XvpZjl9/nuqMW2J7iTnwtcy55dCmgZ mtS5FSHPERYLvipw3zH6W5l2vLbhs1mY0SM007TFL1GO9Vrq14xfKtd8t+Z9E472CCvhWqsYUxxz Ue3ZH9Oz8K2Eoz3ZSrjUl4ZGvWwffFmu3hqlDi15PGpFGnlG2vJcw7dG/mtBv1xeSe9ViNoBaORb w7riUieJIxzrDyWHfMZb/bLZPhKhVff6pqTJsW0N6x5GyBCdQtr9AqlxdDL6y6MofsEuWJmJX++k QP4NvK6ZaeBBOGoonVRpCJh8l/HYqnd8XP5zx0Gvy21leQz6v9XOmqimcyv98d0067VclyZMy/Uv b01TMJOxVb40y14JV7OcZqzlMptv7677AnepTbPcuwf+ta3iJhxHuy+Y9XpUbK6sVM66IKFkdNRM VkBk7BUpmy9WxLwrHtaqT1s5x1edtsR382Moq0KP9rLXYtL2OHf0eQ183sX4a2a/Rul3tEJHT1+Y 15g1MMuvlpVx/tSAsERqVuDopR05Rov+uZxSRHuiO7PI9rzvtOcAsoGvyDg/N9/esbo0c1oNefvX KMs/6yF2dRY/fHMEDIjGllZqTYvJU2L8lp0PGoXLMcvdHRt5Wg+odooHEOtFvnPeFwbOFT7OPIV3 PX1/nFndqdGbMJX7NXDbVubyNLhG3IKftrh3x2MDiihuffm/nUCSrEnBXF7BV1sN24vgOTpz7XwT 8Uoeq6dot9eprZTjfrR4w0rwSvl+qO8bHamSJtKZML7Z8VuZyzJvN6EueTffmdOdEVbmufKphq4d xDtY7OrsSv1WZyw85av3q9OuTvPDN0fGwB3vQB0x/0IuIzXYqUhAULBJ1rZ4Pioc64WaA1YxwqoX KzM4yueVkY/61AbfOpmv8/qoud/lEY4RsFXRVtDwjkDZhr9jyqqRZhVgx5RBK1Ijp7UVSiv/HLP1 GDk0+buV5Z1wk8tq5u6bVtkF93dCSauzWO60tZdv3IChWX4LqNU5HdObZl7HlKAtUnv58dyk6sr4 7dFXfr09T6vLOmoZR41we+C4q9JkLlgN8up631UQHCnfZfapPed5klT40YU5pkxpNsQ8p+XRxzwS QOfqGKfQrA/D7cHD7UmzPgTxZTWBjpKgfD42WG539qWY23VtaiAzaMAq4QFqNVyNOM0yGxEbt80Y d+CeMhuZNm7XzjMiCKf1Wwfe8v6omZnDWjJa59uWPh6XhSbDV+Myy0KRIz+5zAIZao/vp7Z8fXV7 Q8HCiiyjzJr+foiPa+CqwB6FNwE1rc81boodGR0y35PXirSRwe34sxqmFfVYM8eVaZpQrxl9nZfL 5dR4WhFvZRnlk29Xx147bknjdbms5tsfnPtV8N8ptF9feu8EzKwmU2Ta5Bbvg7ElYPnVRfu+MH39 atWlmdeqjz98cUwYCBo0Yx5JmNpouoorm/n8YNxbhfI7fojbePa4MxCfbTit81jrbbB7O8+3Px83 DI0EIKJkt1b5Qe4SoSRrfy7vf3j9/zgG1ufd70vFHYGKUag8CUkzsMWaZXSq+S4m7zaNxe8L1D8s VCK1CNVEx1oaaK13zTS34z6U2u1I10pypPayFWmdm2b7cZz51HB7Kb91Cln9+ngSFPqU6+rcbveb drLHc+tlg9ZrvPOrvwbOCLcAACAASURBVOWlEY34KyBqJa7fKvPNifsrIt/tD+3QHQ8Atzdt4brj 5LjjAe3/N3Hv4hGoY8Tj0TpKR8qmcFGtUErU8ro8t31eVtqrPpQUx3Y9ajntBnJ7Xe9g+ccG5fqx lhVQjnNUcJoV9v6oCdYv+8hf2hXiXSXud1c5R6qtMBxv/Ugj7tv56UjFHOe3NcmrB88PrY/HC/dx AnHU6IV+GQ7BaoZV7FkilKkhx433Zu5HUCOryinpVsK5Cr4S7W66FjBLcevDU/BcYnr9ftM+G1HC zPLhGrDsj9dMynXxffm2TK+4i44V31prpuos7pTLcpk5u7sKV+3lFOCPrbxjp3/Jt728YyunpL7T r6UCbYxbXpfylj834Fd3Ln8oUY/rWspZlY0fQlfW+GmLEJ9LSS041sdlKack8drKstkGtF42Y65z b9w1Ms6wFTx5Ba5mvOMpY52i77TXwJVtmAzv8hozSyh1YFpvrlT9jvfN+twBYEo2q1FSyi6Zr6Rt SVe+3rHryrzXyms1fMuxmrAcKV5OceR6Led699w1YbfEo8LfTOD9URMcuR5Hx/yR0x/f1ybwx5fy h7Hvdgzcvaxxt1dvvQJ/kHj0LoJVFXkXZb0e1n/4/gcSA3JKe4N691VkFZ+67R3Bv+WXX/iU4VwJ 7cqniPvDPz84GMjk/j7Ce4Q2sjhovJb7NkgD/DtQhzXTHzE/+b3xM275tW7b6lS+l2ujDr66o+HO k8D2nNrqsQLQOwPyFRn+gDw0aN/igx8Q0P9fCuZdPAIlwdZh5OPl4TvYU7y78F+qtbw7W1vJRZk2 vUZtUb6fj8vwfz+huJvKLpUtxcljhT41364VpUS/q6+l7O8n6wvDmuWLp5bn9K7GxNHzL7hqj1ne r6rDuhVrz+F2Prf4qD19aejX0Yvt0e+WZ2HJcK3GV4G3HZC7GoHt5R3fs1CXurSnzO/Xq1d77B+E Z+vSzk+lfu3vj1yfgrNV8lLzx5FT39lf14fmjpcEfqKSx4efo5db8N4es7xfpzyruhrpDR4u6XO+ PuWc6vya6Rv3BYNFvnMRJa91YGmCrh5bWh1vOd9m5Dv7vpSyBmLWKSpGo0i2nKKuaysrnxvvliOu k+Nd+7qG5HYV0qRKqV57RsvVa9S51N/IbaPvJZ/ldCXHOwJpyeOuv64Lf/lwJ4NwF3egJHGDzFKl VKRQqDyXipX35XmtazON8ddI4yujtX/KSdnutPlhhSGYGaVsd1ymhvhsiGRrZRxfm38a9fZ1pGkw YTGwVpTdTL82/CtjHO3J8trgOFoSvi/vZmTkNdI3cVfya+GkUccVdcvzjtu3Q29C2MJt5FmXu1ZZ fs+EBNhGeSVd+RbPjT8r8iKdz8YtsJerSer7EsVX64eCo3IlJgkji2aeKzIwrrAX+Btp63grwOVd dMoDIOPW8ev65/OpOAVFnJfAN05JiJgdZX0IClOQ3KtsRf4rHtq+lfya10LbVvn1gYR1OXFwrWVE /T33LcOVp1hY5waczXyP877ku16ytmrligmT5TdpE+94HQkaNCnvTdL6VuDPdW5GMVqEJh180Uqb P0v3DFuebOZ2wYZMl5y/+ZaSWtt0NzY9iHLJJOcTyRt/Sh0ar1bcls1CjkYHvxcomte1S7WINfHB +zVTlMgNPjIPwwonVMFnxCuwN/MEzjoPy1nmb9/nkv1rbfKTd+I8b2/OTS6vVY76yjj8gLFMdY60 wlyXlePwvCqY9hhCq/45bnksKTOsPDU/1C8DjIh4pLIKzUqOy9dmlstvj+OuhSvT1PhqvVPm5fGm iVF4soa3DQAfC7Stegc4nhppXqSrs1iss5DOK3AT8Y/lTwNnKwtbJztlvUBXroWXmuU18m2+brtv K7Lt61qPK/NtPZlRMEKNGPFfMud91r9QpzaUOV2NBPXaP9/V75dLNHGDZs38liPVd1kOs07P9PdA a0PZeEK5KdjKYPnkr1GGCdYKJliHR9peE9H8aqzkguoc29/Vz34t+R9Vluus2i6B9rZ3+bGmxZrf 8stSdDNKA7J4XXJpL8d4K6q4xnMz35bQ+LJV1/ZcV6ZY9RR8UCBa9fWYXpQSvTZDe12Wv1HeEfgv t/3C1I655RyOeEfB7bAYf014CvCtDDMubmfJrVxW3lhI/RsZmeBhOXvPZVvEuFpC2iqI6I9zGDO0 QOxBoxPTs2mGgzs922CR71MLk4g6ByB2LHBY3lxa9PRrA3ktcOq6ZXGeWCkyDrLLzLIUh955uKUf ZzmV2iv/Q3SBIk0sjPPsqfX5JHa/edo6J4txN58OT07XSw3n08ToQWOmGSItctCquUxNejCjeXMi OM/5R0oOvZvmwDFDPaMkDqDMVPEwUnPyW4Zmft64wMfPg748aMwv4su33k9y8J/X2jaNl7OcFO/L eF/H8yA/T11e9LS7Ok8PMC73Rp6Z4rTxOpGnTRs8zd0wO8fBeN7wODdjOugnA/Ob4cDAeY+8JkKd nJPJOQiNWHPz/K1fLnAY38IiZQBHhPoTuRNlLs1Cwml+UpKY/OPUae6nKdvDLmuwW5Wf45BIs6qz z3jzgbA0P53mF2b4Zg6L4Gyew+OW61cSLZBHufdQUjO3a7FcmADx88C3GhcSLw4TpKzDhw4FXsRN oWkNAnF8yeG/nNAnTT0E0G+zHJIc9CPRPAc9Ts9mnuBTpFlaMBanr3NquK3czOxUzX+gTjSA6oU5 4TEB8lLNcaDxYR40TCiL91UcULeUhscO8GYmsBmFC5O4JK6lBiVkKHj7wMRIAkNpXP4hhEwF0ZUl DnbknVLrgYwhvRTktRxOPI2MGmOWE+qNPAcNNG7mzN8AD47t2xdgC8Y0J80LhzBwWHzcB54t3wgG 8llQLiwcHHrAtaFcA0YRX3/3qtzZOGfK56zACvwADyBTS/B9NniEC5zVB2GGfJHOtKFrxC0xFGsP wLQui/Dq7BwHCxOCjY1ANp4zmUucRf7H46C+qamJKGeGg4jLgYEeABuwUobXSWUuQj5I0Fs/zc+M k6nfoAuEssSMRXheXuZBbEex6qWKp2C4DLOHQs548DNxJqYm0S3GXkAH1TkRd7HBd1m/zBOfwznD qxwUjkPGwzgFKV79efCwdF4MJW28/C7qxn3mEvheulFOFXBBb8obp77WYxaEepU31DHCqYxMT0+S TlhzbReUWWo5NTNZx89f5jioc35+kkTEEwlkMK+8EEsxlf2jo8S9MrM4L1Y5B5Sfx0eGiWbnqbM3 dLD6xXfZdCNWR19CtYZOUiNEqV4ElALnF6YoLz/KqnPQwMPRc0V8I1DgXzzDb+LXwxs9cPrIQV0v naiLZdW/LNngEP0d5YG3ECu+L0lsYJul3TH+LMyRQaVNgXenOcAz04TPwCH/m2ABHe11Fv6U9w0e KmkaD8sVh8b350HjgUFoZF0KP4+NKcOZ5oX+0VbyNsguIOBC/aveUlSVIyiar8iDzwEHB9BGG2q5 VCWFHjR+lmGhnrOsRai0wGGw0My0SGSOQV6Ttx0C6/A+v9FJeD2TvQUvr8Et6aiDn/wtt7sdUW/r E+0NeYurzL/iNEM6BR9niAPtcR9ygzxoc8SoDHp/bga4BJ6funF6SvlqvYr7BdLMgmthKO1+8I3I IkR+dR3iBX8y7jmkOfQL9FbfAZCdFUnrVfhE4ag07hA/0EBbxw98j8PRLYLfYaIYNwTHDJZmoRcY 7CSypKX8jCsPF1WCeoDLN3zk/xywz8g/EUnekFI5TI6NBFDV5AS8C6y+5kqF4WPaBm7lZ1/lu3kO 0h2Op/Y/8qB0i3L4sySjklK8mX6KdmeCA1itooe5Gi+qQ4+aY10juxloknWhFUPnwnPWYTr4vw8Z 5YBo0nm4csK2zDCZIz8L4TcyIs/n+3JRFufhP+kpnxiUIYOHzCr7vp1TH3BViq1/uarPikwpI6bV 5jI3IdVela72cZQr35lf5EUCrxXt6yI2cigGATJCCd7XP22XoiuXP2f4tEcWQcAs/DeN3bHSfuVd 034lv2jzpTsQaSMY5qmLoeiU9nvBsC3wGnY/dwswcLGLgDzq41V9lKUOXNl2kkh9FfRQRlT2/I/z susqi798Ti5tFGlKuzWHDe+zQVjLYbrSu/yCk3gmi4BhBgZS8k2lSSzLhX1mhPLjVj0h7jL1jc9h xq8j8O32ByhdkWlHJxvGqnRVMECxYcMAyJVMeCmEDIA9MThOyg5gUUe8W6DRm5ycTf393amH0+c7 OSlcAGcXpjnFuQ/nYU7RRWRPMs5YkJRmyBMyM4FFvgTDxGcKM15vL6eS6w0BAbPTntrcFQLX2WV+ MNeiBliVuuitdXUjUORvnA6Nf+HsHbAE9NJY6qcuCykLXW8uJHV5WjcRejkNWjJMosgts4vTyf1J 7FmMkJ4e6mMHJAwZSoYZuilHodYw7O3xtHcy8j/wKlQ95D1Lp6QLWKdpsHvMl6rIR3Mo6W7LhumE 13fTpNHANV0XdMgO13zqt2WJhEWMGZVKf/8gz/GK07o7wAk0IkonibqBOxQW3NnN6c16pzydvotv nnrdDRyG8YlxYPK07y7SUSfqKqwGqE9a7jVa6OR21idxAzlYZzSkk5OgqUsoFgzCURqIfvLq5eTw HsssDAvPzGBke7p3FyhSYMSdCmQOA6yb5w7rSxI7YaFg+d7TTf7gWwWU8YBA0BnspJIdwNUtvYBZ Q1ve8scL4LW+XONnTeAw7j3Ne8PGDSHY8tWC+OIqPPKvHO3/SAGReoDXoLKQFlbH+D3BJ9SD9Ao2 KOC9eDWxPAE+OzlZ3MaRN2YjHmU3cSxY/f0of2RsHgkXL6YHK6m3D9hJNQlvLM31UxaPQYMQcR7I a2qUTDFI+jaC+440AF+KQ+ukUlfReGK3IZRO/c2KWoong/f29ub68aKTulbUsRv4/Vd1QIsg0nzq 27CRZ04CF+benOfYPBXhuS96JBCX+vq8wHPwUV22FZWW5h/wECfrAHHQkcbGx+Ok+WmMhl5OWY9G BfjEpxl2g/Mu0oo38bqABTxJw97XPxDy2Q1/GKYxSHs5iVy+N4jKSAOuxWknhkUndfI7LIp8WWc+ deAwIW5P72DgLtM7KzjLFQb1nIRX/3ULSwe6iLTiVRk3vZ08y092EOD9JXSQJkk/v0SntBP8LBIR 0YrQg6MgWlb0a9AZ+RL35i/Eyquy7kjjPHVWRyyB267QL8Qgrw5o0tQvyv8cOip0JZUX7zoYrJM8 Kv4LzBp/4i7khzouom8XUXJR/8AZsKIIuoCrl9PehSl4ixvtoaVoeOBzEKGesuxQoHbaiNDRDb6p s0aq2Az2hQahS1QYVeajLph2jt5SB3oE1ZRUL6K9E5g7a9pGx5nOTieWyOjoKHIzgJz1Zr6QPuQv TJPoly7lQHkR09JnARlEv3R0oWf50NXRGzb+QiftHHn2oIw6rRzth/baPLpXvaJ+ke6dNf+JgMOH x9LAgF05AtVdDvKy+h09PzqBXqUjRwfYNmUJOulkpEY5P+5MGiPL3HQrT1zV+7kt45Fye0LPgyYN PGVKuQVvnVE58C5+iDevhUAZXSAuZIy8lCt//f39QW9pLV19Z5APpOXExETwhXpA3AilUeSzji46 /MhUTyc0pIiqS22PsVfJ+/IW+OvgO3W2DTCxZAVxpMchgY6uKHOJ/My3p2b8aD/Ah+2FHNAxR9u+ AX0MzTTMN9rOc1U/Ca88bBA+n62L8Icu4X2JY32yvPpOAz0+pvHxMfi3F0Md+YQuJYgJo2Q7JOPF b7aLc5TdBezyddCBz6Pj2hfgmbpLn9ADwGFZYIxf1qsykZ1R24rZcHpl/WGHXBizfgngWvDyOkL4 OMBDB7Tv7UB70KnprNAglD+H/WQ9ojcDfy5SFUvts+NjhwIaQrTgrSVoYxtgeQt0SqZwgABxqy4W FnIif0pcYJeXbIvk+155chpDHF6fhbbq5H7/SFtgtb0RY5MT1HMJewKYu7sHyCO3j3yinYWHiDs4 MJj5IrAtiPK7qdFVwNmlnVDbIcIQnQ2EQVgM4rsH3s72SE4nT4hfbTHlSpz7xVv1ZYVzvoO2V9si 26/z2K8bsv7uNj6BBIKRZVwbMtepouwu6YTtajtvGMe51iHPA5xtSNY41BkYAJmQU3eTdwUyZtBn s/C/9o92rLwo/Mq4HTaVoXwr9N3KtJnwbfLw4dQ7iD1nnrJII2T90pWmaC97aCenJtUvyjQ0Nj5X 24Ne2wwSL9uvyspK+1VekO7W328WZtsvvbq1nQnKmXpBp0S0HciFMqiNK2/ZP7AO4iU6XVZBmHln HZUbO+i9ISOUyPdFbFz111LYqKXtAmck0/a2fJlamluGdFZe5GODV3/CZrtW9JhxDaELyGCRdkva 8CZgkk1s922/ZZI6O2sdZZouS5Nf72gQKeYCs8hAXTBFNuhQgkBi4cpAAaIUJzD+o74wa1ZU83Qa FmyQAAvSxlXDP/fAMNTxzFUxuqLFvswxff3EpgPWCXEX5Lo6RFzqumGjHRuJjRCGR6OTztlAKHuN 8HmMBVFqT3sORgOsYFaz6ZJSfBRl/oR5Tq8BD4Bq1Ah5ZEODUEVkWSiDwd5aCMWFCrYnjD8T9Pf1 p75Q0BBfTwhGv2FwMEyoYEKf+6lb0It78+5DGAw9AyrAjNd+DLE+jJYSFuy9EexMGPRyqOj7aCAN 4XnhGiN0XKOj6QeC8cKAphJLMF4fAtrBO41cGdFQvA4yOWoU5kUhE7A/eLZsDXfS1426wjcNXaZh XEFT6XWqDIm9bcMW/lJ34ujNi56/iIZe/Rt7w3th3nZ6qyUMQ9+jrOB4Xop9c6HR1tjVKFcR8mlB PjEffn0b6ZzQeVCJTGIECH8vca33NFaYBqcllPg535zWDr183a1UkZdXaW8ZQXvLoF4qDgVTg02l UXA/RcNiZy1GUYgqHjX8NfgKzxjHIN9k5QlvAVJUj/caB7nhkgcWWjygpzs8WGFc9qaNA1vgHxII E53l8ORxG+oCA9WmDCwFhYwyE15rywKv0DgUHMxWFI0KqfwGI+Nl2pM8+ERFGoCi+IWNP34K+AM1 8MwEHW7bcmUQKga+IhLwa9iJN2EoBpqwFF4znnAVpTgwMBBJN27cGFf/qOYW5C0NAeCJH8y4CCzm b2NoMM/iMSz56UkLPAEWyWXDqI+dVp0BgqvY9FEsbTfeR2tFRQhFEStv0VhQ5sTEVJShLPTRsRXH 0tUgLgueHalcksgipS1Ib0M0nnGlrMIQ4GYDde9R+AgzeGRDvqMB4AWNYh+6RSbN8n00/YKerRVM k7c0pn1fGiQbx2KElnr7zeAolHGtX3GkTNUjnNFhA9Y+jB4dNAbTm0bD09AhD/BvdHw02Ie2Dhoi D/yTvxyFkA6VI901rKaryRrs57N6S5kSf9HxQxC2bN7ipyhTuS+jQ9Jkw4Ze3sdn9BE3eoKoUg+O itIZk9yKl1qml85BqCrelXQ94EU9Yv0t0/wdtVN2t27dBC8AP7xg/PxdHlyeTdE3NBQA6Ngqetjj S/XaSmGrK2i2OeJgYnQ86NqDPjOIZz3xeaRwpX6ZE5EEnWAGeT7TCGOEjhTZRQj9UleoyQNFBkOu ianMNeXOzoaZLDj8B/1s0wzCPG+lrQe4MFg3/0WgAZhDLsoghrpQhyt2YgQ75yCSvEkLXEpi+Hub +oXsjW454xiJ6gX50foV/hR+3/l8JP0iwEUftPQLTiBDKXsRhvQnmvxJk+LpLjzvqK0OScMA7Xgf HQsfW+lIpKNTvRRMETGJO6DRp57JnXxfF1p5L/6zfqnQLzMtntIUcCJA5hsysGFSJLmdhOYhNz0Z UVIhKEGUxRiVpPOOPaEpn/UiI3bgTqN+48ZB8JaJIahTDtPWQbiKvgh+pm0Lgtff1WZB5YwG6JNt Bj9vxA7rqW0Qy5Q3YhSJb9ovhd/E0UytG0xXnJ3Bu7kHQoc7w5QdQugX0osjg/Q2jU42g22x72yb taHUEdIwaA7tS8cn26/d0T5HOtt8Qs2GcY0X/FHn6xSPThmokr9sxydw1m3auIWOQB/+SvULo4/C QZ3QyABHve3Ahrss251d2CI98G8HuF+ChtbT4GyafjqD1kpIlrArnGEUep14G7Zuj5FW6ZAHL2j/ xKv6MuSuMw0ObaYCncim+sWcsK1x6MmTuUsW1Aqc8DHwIy+KSu1XBzdKE1Xobjx1OZgLnhLamRhJ A9fowx4ae+XGYMfVoAPNktSjg+iJXtJn5yJ8ryOR0NfbTyr5FaYjdPEsT4f+QWf0D+R4cqbqwWDd DdIy6BlP2WYq/KQO0AYo7VfRwzb4dM+otJmhG8FvF06yyJ8/FfS3zfdFtAPYlqHrTcNL9VTGXl3o 8V/MiJ8Y96plTFCxXHb5FWn37pvlm2BW38sXRRHlPjiQ8b8QSKMgPPVmCdEX6Oz0wFxd0YtHyQWz kwnewNTpVLmJ9LV//U5yBDmTS3y7asknYWF6E710h3QNKug+OCMb7Iz2qB1AQYdGMXd6C6NHT1LJ HuTCg3vJOeemnTfs5o11oNMHk0g28BlTz3y/fft2Ly0lYMNph7AQTSYw7QhD1BpP2WgGb9YVAbdT 8y9f/l+hmM2n2SHSa2hvuLcXWEmygNE3q1scfNtgq6RVDAq1054sR+Yuocn4F3zvwnTLLbfEJz0Z KgCNe0eVVDqOuBSYbdhaAkmKwqwnbD8h0s8y/IuYo/hrxgY2WWH37l3pm+deTAcqooF34R5EmAbp uCBkgNYLLXvs9BiF8p3WkTsWfAQnTnlYsCElMn+NRHouMpGFoJivOO+7addNe6KzhuqHhiggooRy MDJZHTiwP64i1s6nxmef1nCU3E1DhzEKPZuNQNyTVp7YddPudNXVV0Wx5u3P93yOYEMqPP0oQAXY jkZRGqNjo+FRU4FLE2lTpsKZ2DQG01144YVp374DwJarZxXlH4PGrIIrnex0FwPBq89TTDedmavS 6BidfwCbj1Y1OzTMQbSl3qV0+Nab0kWXXZ35mlfZm6QzEn5GUOVRjRENzSbPWE55Np51EWYVkx4t 8dWD8rezIoNedcEF6aabbrXUCBtrIzFoI/bqhg4tGt/NSxg0zkojaCNXOup1NnGxTMONN96YvvPd 7wQdQlbJowvZD0MNGOyo6gwweG8wb382ngadNb3QRlxTBeLxM23om3mMkNH0r//rwgQZA6/aJ9aX cZHgNdd5aXwqzwblRuOjFyYvOk3ZMH+D9bGhNWzdspVB2sx3e3bvTt+58Jp4L1+VzmovOJV+ti+d 8oq83whO2+qnsZIHlH+NN6fa5k4i9JDPqWwnI/l2WP7lX766jn5hahqwSQNpYcNT6lRoIG9Ik0L/ Aob5Fn0hn+/ffzBddPElkY9xSuPovR1b85Z/5JVe6jSJUWPQuNZ4lWT21Ws7KfAddBQxdTCPL3/5 P+JJPEu7YqgrK2FMA0sJyo3wK/+h7zAu7NjyCh4J0jKTSW+xjEAqh7Xg84u/89208+aDoevhrPin 3peCelQ1TDSGJxk9kq7iwfyVF3lMuNTZwigP5O/Uu8ZzoefXvvAV8J07O/N1h0McGSIf0vY6ksVV 3ojRO76Njo2jXzBYaDfX0i/i1yBNLwr9sg8cZH7PdM6GSugX4khbcdTUL6aX7uZfeMJnw6ZNmwIm nZdqRo2fL3/5e9AYFGJA0vphJIkP9bkGLdOMw2GB3GEMMViZ5mzH2kKvuluHoDgALtsyJJd68o7n ay+4CP1ycyvVUNEvFBS8Vct90RXHpV9qvrlxF/rl/O9EGVLekac8+hQgRDuss7iC/sH/wKrc5xkf 0lp+19DknrSAHTwt7Zw5EsYIDHLB9y5Oe/bQRhmIv1DrfGcjqHNX6peOtHEI47PmKZPQ5wpbRWsl ZNUR7c4FOu/bMUD5iJ205+Yb07kXXh9tlw6WLmcI0NPq6h7kqnOjL2Sm8Jz5GqanHXXOhnTpeEzi hAw9gEypS0u7AFDpmosuSrcdyPJcAwUfZDks/aF5dQjtoPnY8VQuDcqvHXDlKZyMwk5YoV/Ia/8B 9MulDf1S2x7GlW+LfpFXBhh5tg02yANZv9hG055Cj1ZY8QAswHDZZVeF/Woc5dgoXkuwAxEjfIFV +BnaO3qmbJcwwgh0D3pisF/j3cQQmEtGySz535DOu+jS6ErZtqhbHKGhtMiiF75ZxDkxM6VtxggK eVmvUBEm4Lu2i/xn50+8abNlupNHrUO+9MUvL+uXmr+qJXiQoPPNsJ79OjjoLDDr7ogMdie/4eHh sDUjIX9sTm/Cpjz/wgvilfJadIgvxL1BPWx50lTY5qPTpe0JTzH3M/AMWAvUVTqKLhGmXSh2HMX+ 8pf+D+nQL6oH3ipvliVcyorpfI42gEhFZ5lTCdIoBiLED79B7Ss+Wkfldtfu69O/n3dhEkXqNB2p cqk/UEEwnTJNexnPd+SPQ9IMzTtVxh7dHL3r4eFD6Q1veEP6xje+ETkLp3KCfqYBF70ocQQ+M4ot zVIaZ551IBCIXE/i0GIfw4NmXxrHIBWjEInh6qXZ0bR3703pFa98Tbph1wG8AVlhBTNRwgy9d4fO t27fhKFKowDXOfpkfla6h/nv3fTEnZPprEaZV0bQiqoQ7kWmn8UgF6NS733XX6Vvf/Pf/RrKQ0CN K+tZnoZBMYyKQslDycBRNzbZ2MQjusVRgsEQNhVWrCsin2uuuS696lWvTpdffnWLmcTbdEw/ZMQs pmkREVw5PNuHd0CIbbDVx3qOhMUpgdHQ8PXwsGtmaKRo3GXaQwcPpje/+c3pnHPOQfHHp/ijYA5t HIp00YmRiwh6MhTIIgClbnYEFIZuBUOFjQrAfouOnOtsvvq1r6T3fewzaRhSzYLHMM7RqI4tiv+M bBiTDp+dJ7u0eSqjpRJgjT4aWD0ydvIW9ApQb6fkhNvStQP796W/etvZ6bxzL2AaoP5JyuKPvoQY 6g/jczGdePI2aO541wAAIABJREFUcMZcY6ZMFYNa/qfYkAP+RggYeSlNBNH1ZDPU83/Dw29+61tZ ZzQWc6/9Zsc74vDHhiA86aQzj9IBMFMNDD1SGljizjqq5GLUq+YLvUoK/wc/+MH0hS98AX6hfPK1 4ertVWll7775WZbBcgy5k90J7bbSkPZyZaQFCa86NOid/wvdzUzRnxlOX/zS59K73vk+PI/ycVZC Y2MTkZ+8I+waIxpUBnFR3vtsuSqewgfhJSR7O9mO3ogUZeedb39HOu+883ASLCtPaTNJ3XJnFYig odNRHRFURmxIVXbeqwCFI5RcDUeRL+OJB3XLe9/73pjOVtbwCaOyKG+2h6xfsiGjktXotNGLoAcq a8bMm/DqLGsk9966O73yFa9NN+4agX/8RMcxDEMUc6wHzB3nTUObAjfCrhdalKvvdHroSPFn0AtW 6hgv/IPSty4f+tCH0li2S2PEt4xK1ktfcnQyruCVaIB4M4DxMCMcBGXUn53yPryNtTKLKWZ+D/3y yj9bQ79kh0nBtXGlrw2QobyXN/zJD/7kDZ1BdoRsvH22cfziF78YdZFeGpCGWSoxjYK2g1L0oDIw Ax03bMZDWgfzJxm4BC1MaZmKefB8VM8Q5At10k033YSufFW68sq9YawbXwNFuEooHmJ5IWSvYdgY 144txcVAdhQo0fg5fS7S0hH8q7Pfnr713fPSMHxszk5vFtuu5evoUUY0hvFuDm5YYTjFVMrCT8Qy a9sw5cc6iKsSrrn0qtD7N990C7yjzGZe0fAyyOszyEkIF+nzlDbjLKFfNqJfptAv2eGxln6xbiv1 S+ZP24xeZl8cWb9ouKRos8Rh6dgX+Gdj7ZoYcS3FeLr0sovTq+Cxq6/K61vU/aJBJ1MY6U6llEbY C35YgF/CYUkcO/3TCJn6O4JVRE4NjmJkDc8D+HjHO2r9gsOgtE3ym7JVDFhlUYPKUe2j6RcJ1NIv tEmTTOEs+kU5bI6iZDou0882ys6Q679kU9AUzkjrTdPVCrE+LBpd01Ib6uaMiLe/7R04af6N0RE7 qfJJ1l3yCTmEHNqOOKUv6xfi8UXnonLlLJg51wLBoX2DQ8gMxi22UQTLnx1JX//ml9P7P/zXaVj9 4jtkdpxlD6aaIQN1piFkWBrglDU4MlZmKUh/5VMdVtqHcDZR6RjxAPdvectb0le+8pVEvysH6jAb ax2zDPjSESinFZ9wQnbCDvTnDlapdzF4pas6Qv1iOQEbea3QL3Ux6llnD5mm6BfpZru7eVO7flHG XIe57CQym2LU60C2g/CG2n41b3W5tMn0yaOQddFcoIGzPULhMp2eui3SSVFjbdvG6LeoFdEqQ9sl 7BCtlGrycDr33P9I73zfB9I+mmvfKklGj84WvN0VHXI6zXT4+lVW8ZXvdhqySgx62rHQMRvOWfkm gIXQGPlXXnoF+uXP0s037YWWjo5nWpcZDE6JPJL9Olu3L8JkW+Bv69at2Jw6EakJdVqg/G+fe056 2zvenkZxxE8y4jZlmw5fjYyypg14nLrrNLmYwo3OtBfQh/5x6MLRZ2GNDMFC6GVs/ymmwcY7HFXT 0yPol4vQL69Bv+yhZNvXPJ3e/IXLNqvZBqj3is5SvksHy7S5LUGv2uCAM/sHwYOLs+lrX/0y9uvH 0yh8bOdpkcWajhlKo8wEuh1oB6FyIYOfbldYrBf1hr4HB85/337C1nTVVVfQa3YeuQyRDcKMGBv6 5aJisRiIHhraEJ7zeZRu8eKMjdmjhEgSUWoFIyqdeCkwLheo7BV0ODYObcMw4zPlq8BkERdhG8/h Uxfgu2jXBsPvlsEFJqD3TkLnv47hAczT+8jDIUa9kGbEt2uuuppRrtFI0z84EK9F5iKEa3rxeYVy yR4Ih24NGzf2U4c8NC4Ro2cdX1C0ePtVSgZHoK644gppSR7Z0BPWAToSNnYK/dQ0c9AR1vBg0dDP qNxj+DFnKCPZ+JewbSudB4JMpCKSya655ppoaGI0l/ydcpTXZ9E2oXCKcRZrnzQ6yLPAbHqDSsqy Ylobi1FdDSyNXatkZ+XQoQPpyp03pUXe9YW3DFrxKSDzDx0ikB5CGHN6ubdTNT3u9Ce/5bj7yQe1 wBxhN+oAn8E3XC2MRmX39TvpeCskeeSpHnTiu8/8AxYVm56OPujilM4xpsAYgk/AdQXT2Flyykz5 4J0eZpWhjda111+XNm/elDbURmURUum5Eb4NT68Zmo6reLTjpJLYiLdPA8v3JQxAjzKVQaUvXq+6 6qp0kA6utG9E5VtuYOzWiXNDNjQdEWBjCRfd+lr0gJ9pNiboHQA/jNzZiXf9Wnwc7EKZHUzXXXtj HtEIXIpGRuCgp8G6FiNPZaMCsjEpwfKte27c4dMaHzZwpZgOcHbZZZeF4YKoZER7obxB6hY10KgF tl68WxuGNkaDLB7k09I4W6Z1M4g7vxtKIy5P7t27N3DX07RUiGMd5GMbFBdfG+yQSS8NtSJzdh6X 4Df5w0ZNgc8dQWDDMNITpn4ZYpqps0Mxk6Ii1sGFxF6bHk5hV/6lh2Kt00Nvsc6NPCq0bIySNE/L A4fWU/rXqsBPWZlz1W8SOFMRgvsOeEUa5Klb0KCe/iB6XDOYIyf4fDS841FXMljAw3HFFVeuoV9w JFGwONN4Ea8+i3N5QJytFYyjM6gE42sky8PWRVwETxDBqUwDTIsrwbjKQH89B28GI9d1AzZHirY/ DatBprXl6bWkRCi7QIbeVdNfedmlwa/izPglyLPCbdCjLd/In/KsxnRr8wNwcuBA5u282JoX4FCq OrLQj7zvvmFnGnH6qXzM56LrndLHY8DkDIfMCeJ4IfSpaxSlRy2uLTwEXxJHWNQN5EiaxXTl1VfD KwPgrLu1ZtDstXVsF3UA5kx4gd53A5OJSRyOlLxxwyD6ZdmpYbqmfhGQlfpF/Bkrh5Z+AdiV+gXP N7JjG+X7MlIgf5TOdehBO0MsChtw9AAeuvyqy7kGduCjfvAdfR7oKM50KLrZSm4NutVttNO2NdJp gGc1kZuPBPLq9iZomJW/XqVl/ULDKC8YhKVMLxSOyA/Z8p286PN6+kWE+N2gYbhhAFsEgFv6pR5F 8bvlhfFFFWwyXGNikGfEkeuMW1OGaZvtwM9jp8RmTuE9JBHM3Injs4/R4507d8Gvsxj6WV5iNkeg L3canHZmED51S9Yv2kjQFblS/F0nGJtHEG9wC86TrtzuadinDZ3p8Cjt8VXXhJxIA//P4V4HyyGz 0tf6ikP5IfQL0/a0WwIeASCoC6y7MmbHXtsj634yRJ61X5Qx+l05ALPr2A02FdPT1n05DA+PRuff jqDrx1pBwQHP8nEJ4t28VuiX+qN6trXWkHfGdTTIdtdgWywfi0PrZmfAzqH8EJ0/4gT9SacD2dEY dZg4MW91DJ/qX6a/dpY2hs7dsBXh7jGmtGq/Of3R8QR1luvv+UTzwtWXODX5wxr7lA4e2pduYJbW UF1No8F+0VZWxsWGHDt0kPRO/8OSocwxHCauj7c9LdgsMiDfx/RQgQBef+r9K6+4inqgX6iLvxLU L/K7oTge2u1X6W9nU5IUuhtfJ7ptn+vYXEs1gS163XXXJe1jl4qoI+QNp1CXMnIn0lrm4EYvMwy4 GM/mgf5Q2C8s+Agn4iC2cwTqKn0XsTUvv+Jq6ljLKjZ6gUlaycfqLHnUoN4TJ7Zr0leYtHVMY9xu 9Yv0IL6jxDHwgM04DF2uQi4X4OOYb4LcmmPkKiMo+DgtxEmGJIq7fX8K8SbYbUuPt0Gg9TCoSKgX lXJueu7JN0vRqOgDc3MYnDYMeqfNT0N4agIP2xAVhr7RgAgqIxALscMUmXZQFsy7ZdtJGGNuEAEB eDXOHGGr6siM1z4YwJGoJedpSzt+SzAVDh1gmkuHYAJfO+/d+aUR7A2qXcQYSvHeO85AqWYulzjG F3HdwDrC/MEyMnCYxrQ0HgqRCDbcdtttcVV4mwaJnqWYAkW8XuZ73u9+DwgiR2T+iLs5pmbZF3OX NpWCi8MLnjVgJbrtjYaBjCizKtx6g4sn3vcGheSe97xnjIws4FmxIk45KnPXrZsdLUNR3BW0LFNB ZDqNPRt/jZQxRhpZGACeaChIk+u7kLZv3Zy2nXx6THWJzPigSWOcEGyvMiF5xwvxRDYDTn9CgWuc GrZtP5E00hIvCf9iuofzh/2hVLYjnIt6J6Ql2enBN+US5cny1lqj99DIfu5UOhr6CkAGg0di+R6l qleEqyS3LHHnt174Ql4230lw6nc9LF7dVEPPegmls6HiVjkbykiCNHBOtl61EmKnKGC14dUYPemk k8on6J7pLz8p8OJcb5qjitbB0ROV3ZYt20Jp4+iJeuU1giRGVlyYntciCO0cjo0t6dRTd+QyqJB6 pvCriscgj6psisLR21TCIXYjNPgtFJYZGOQvEWTnl7DjtNNaw+JEDmWrNBplzCk7duzgxYOHnF7r nP65aOBMKy5s7NqDOkU8WK58qlFkpygafwTENVAG8WzHNzyX1EVlHjgPnNX6hQZUr/1mOo8aMj0a qNG9p7OdtwrkWQ/tAl7Ek8BJqAF2a5tNY+gXS+qqFzJzG8GdyoqR6X32irK7Hka6fCbNCo7tfOj1 iyl8pN7MKIyNtuWUNRSFf1BrmNkE5RLcqBTk4zx1yw9uVpDxpSevTFfexBTBDnSBnjKDsn+/+91v Wb9AjNAvOJPEp7BZprJW6mGDYzq/K+/CbZAGGkoGO6nycQknn3wyONvWysO1NiXoWDCfkEFelrU5 6rFidI6N1TqY73aqeqClYT5GYeI2+G/HPe8V9FecVSMaCsJpoync6kG1QO6oZJ7VmNZAlOdNd+KJ W0O3hvGg8sIonKWdCKcUjpVtm9AvtEvuLObUqlmmyqqxpEkEnGtbqatlWLb4KVM4/W4Z8oFBo81y /InfmGodaXrT6afcAxlgdIuqa9SM19P5TB87YEUOOBTCmbGUBuk0Deq1hROnprPcymPt+iWMw/X0 C3SR11r6hcLkQ9uwrF801rOM+azhaijOFuVOHRPrxkIiMu7vd+YDwlgLYSeKax83sczLdlz5HaAN 07EzOT6MCkd3KqPwnR0Cpy9K/T49huArCMuzMi0ti7PwNPSLsBmodugP9ZZBvlQ/iWdhPi79gn63 DPV/s+5ujlL7Q0OWtS20O1V7g3RwZ2IaYsaH+NGfMzUzQZ2Jp2FGByxGBwNaq0V+TmUEh3lGyoZc VbLQTipBnsphCeN8hHZROeMem8PRP9ueAwfHojyN2KXQ4cyC6NFmyKMhYD1t2jqYtp1wIg0WTxo+ wDGA05HiwDmopt0rcu/ok7zk+hdtGGXLdVfyr/pBXS1uHXXX9tDOKFOklf1TTjklg6yQqLNjdCbL gps7GMZGsuNiK3aCnX87gvK6BvkQNpEPjgTZGVC/KCslrNIv9ei+37XDmvqltL3qg2X9wrq9OtjO FF0k30Tng29N+9WokkF2N4gbeVX9Yqc4Nkep+T+3nUQi7tRE3tE41u2YFlzBCCgPjRTqwyYrruUe pE23dtpHU+A6fD/Ed1mJRuom1lFqG9uuW6YOkx4GD+QMTB/swqwvO13+Al1sV93EbVG88N+Nf04/ vdYv0ER6jo+bmmz5OUJ0NPvV79KndEhMKz9rj9hKziDHGxHyHfc8A/zY5uCQQDjkQeXW9teNIMxE HbmozUQd3aTFmTMGcWx/ZgCbJpaGAGjN7vEdTuV7d7rffe7PNXeMraD6XDta/lW/yKOWUdpjaVLe 2W75sx6hL4RJuqB0g77xZzFtA+fb4GMtu1l2YrWTJ41aeh/YdbxrwuYWsQbx+C96UjS4F5jHuwfh Z3oAU/RmnH4B0q6//vp0ySV5vmrfQH8M/WkoODXJoKJ7zatent78prdFp2kJjljCvYcPMG3ZdEL6 9Gc+mZ74xMcE0dWPExB7984rQ0G4C9KlV92GcE8xtHdtum3vYNq8RS/QSHrQj52RBiGMBhCkTJ/+ xMfSq1/1OqbkaEgrxIwMbNyE4T2T/viVL0kv+e9/mjYNbs4dhanDaQ/rnQ5PMs0DAk/fdn0Q5vpr r03fO/8SMIcyoVO2+bQzwujZSiPr2Qq7du1KT3nKU9Kll15p1VAMQzESISPd5z73Sf/nm9/AeD05 BFkP3KHDB9Kte/elwZ5N6eCBw2nn7l2h/M8991waRZQjiklBfeADHwgzsmAwvCkL6VOf/GR66Z++ JA0fpKGAem7FsMQKt00w8B//tz9ML3rRi9JJJ54QHn4Z+IorHdXCQMJg1MDXCL4aj+f5p50fwjmH Mh/YOJAecN/7hWIU9kuh2TOe9rR0w84bfIzpfQ7Nqgce/vCHp3/658+nU049jZLB5eLhtG/ntenA 4iSdruE0MHcda6xuSocY/zz3u7emkZ5DCD7b0594Zjr1lK0pBu6B6+DNt6Tdt+5JP/sz0LfWTi4i nHJEE774o5e9JL3hTW+gDEuh47k4lfbctDsN4q2aYpvsTQwJjA6PpD233JquufYA0xamUC5ddBBP xiE6E6MjNoS33Lw7PeYxj0k33nArcMCpbN/U1zOIYl9M9znzzHT+Rf+BJ5zGgqlZ0zRKBw4cCCPC NVjyp7hSuX77O+dF4yH/qpDvea8zUx906dP4BjGf/cxn0ov/6A9DcMV7M7zi1a9OL/vTPw1vDLow pm6MQou9+/ZiCPWkW+lg79+/nznRu5leeUHwDm0a8rI57bjHyQg7U1BRoLfeujc98pE/k/buuQ2Z KDKk8ulJD/7xR6d//sI/0HlRHhV9t/IfT9ftvI06H0onVruoy+WkXYIXb02nbIC/lsbSCSduTve4 x+ktg0TF8wamL5x99tlRBRWNDYrBxvFjH/tYevzjHx8KyzJm6NAdPsS6PjTMCLgboHGwkb388stZ 1/WQ1FeNpjGmxNzrrJ9Jm9ksJoxw8HbxhRel337e7+BNviTwacNnI6eyftCDHhRTNe51r3tFufKv HXoNIhs987gWebz55ptj7Zijh30YZeLr1BNPonHPC8AdhXrta1+b3vSms8MAsGO95NwHyt/E6Ozf fOqT6Vee8DiZgsYNukCT668/zEgHjXfXDemKq3anCUZFL7lsZ7oFuRna6pSnvvSjP/pjKGGmrkB4 G5Hrb7g2PflJT8VreQ11QO6pw+DAxmjMzzrrrPR3f/d36X73vzfKW7pkh8qevTenPnf6Y7rNzp07 o36XXrozbZo5mDb1VeGA6BrYlLrQU2ppYfvLP39Nes+HP57G6eRV9U5m8t4JGC4feN/70tOe9mSq BuMQ5tHF559/fnTKxdvOXTdn/XLOd9AvjNIwqt+NgfSQH7s/fN7VMjA+qX556UtDTwStyEuD387H S16CruRnpzob0kus29sHXfaH02MSL6Q8LC9/97vfTRo7yo58sw3abIS+QucU77e/7a3pzX/5VjRx DrVTkSnX907ved8H0m8845ei4VO4JuHJnVffEp3WGfT7pVdeGTrZtmVm8h504CaR9960Y8dp0Xkz xz1796QbbrgB2X9stB/iSYdD3tSjM730T/57euOb/hJPp+oGKMDXHqYGHkbnHz54KN0T40Vnke3a NdfdlA6MHA4n2tD97h90X2I01brYeXzFq17J1Nh3hxHgZhC5o6xXtT+mS1v/U049MYwQabF//23h EOtgkeiuq2+KxvgC1g2O4SnvxDNewRf3Rx9vwGAIzzqw/+1nPpX+6A9fhJHJLASeNZ4icPOKV78m veylf4IxjkOOb45QjR4+FI47jQcdeMv65Tx0DgYIxpjycs/T0ePqF2Ts1ltvRb88MkZeiszXpaSH PvSh6fOf/3w44HxnR2sb0+OvYD3KNNPEOnsX04UX3BD0vujCS9LBsQEcNptolyfSL/zCg9Ff4hlk g73PfvYz6VUvfxW4pbNWF4C2TT04RH73RX+Q/vzVf5ZOYt0IiiScVfsYOZ9gV7nxfcNp20ze6Sv0 y+VXpA10eGbRCQ9+8IOjMyLPahRfxHqc5z73uTFapb5eW7+cEaW7AF/9cgBvf4xU0Ntr6hdx4+6L 8r36xU6ywWk/X/rCP6Xn/c5zcaQy08XKUM+oFPcvf9Ur0ute9zrSZpkc4wiJg/v2w/8HMCjROR39 gUfXc15wwZXAzcgko3lnnomTc7PrQXOnNvTLk5+MfrkOOe1Dv2AoYk+5c+GDzvop9Mv/TA88c0fC 1gOLC9D71rT75l3R3nUu3pB23nhtGh6dTJdceihtn70qbWQUYsPJP45zaTBtHUC3A562wetf/3qm kn8k+Ffu1vg1nHGPM9Jb3vqm9Bu/8cxoE8WHHapvn/NtYMSJxxSzeXjaETvx9t0Lr0hDrM/bsgUe uM8Z0VHfhj6ENOkaZPc3fvNp6bIrduU2DPvI4AjU6TtOTed965x08qkn1eteEjbS3qDLIkw/zuhl u36ZRR5OPfkUHBnoF6ewE9Qvb3v7W9Nfol9aIVcFp8nJ6X3oymc8/WmhXzrzlpq1/cr0SEbmlN9i v15wwSXIJ859PAE6hk44YVvWIwyXTEyOph9/yP3TvttwYNX59/cNxUyAnzjrESEvp5+MI4t6L9Am LM6NM/34WsqYZPlvxTreG+gAH07nX3GAKX3j6YxtQ2kTgwI/eq/TFBaUCzyCvfNK9MvZ7/5QOFd6 +jfGrsLscBC765137texq07gR8cV/hnePxKyri1uuO7anQH/Bd+7KEavtLE8Q+1+9z2TTjQzInBC Oz9oPfvVPB74Yw9M//T5f8QBd59oe313/Q3X4wxlHRvTxQ+gaxyx23/wQPq3f/+3iLMdu1j76SGk VQeJH4+Defc73pne85734IjMHdnQ+3w75YSHpne8603pN3/rp2M02wVI+LCZrrcT/XIIvXgoXXjR leiXKdZzXox+6U/bT6TsvfvRL4+OOlqe4TPYYq94xSuCpj6rD6Sh9sULX/jC9JrXvCacRYvY2PLx AezcQ9WGNDLODKDZvbX9OprOPf+y9KM97HRIZ3Ya+E7avjGdCC1V5LItF/StOd/uYJ+M+aeTI+lx j/9l5nReTGF4Dxg1MVMV5obBTTEn+ES86xozz3/+86MDpefDTvbuG67GGzVGGroCDPnjp8OgZoi1 fwhvxIbwMg5txmuI9/7Sy89Pv/bkX8RzTUdN3qKQhXR66txwKoMgEGTuYNq4vS9989++mB764B9F mWDI0qEbPgxToXwnnFPJW3vlmrjMbkynnHkahhHEZkxVtTgOg7/8T16WPvWPXw49uDFiYcNsOTkd CDc/08E2b0hvee8H0+88+zmRhvEvztAYD+Nbb40otSOp4aEBqlJ/6FkPInfbBD043emcc7+VfuWJ T6Je7A6HwOor3YQHUI+AU0X0Um3cPBSG6OYtG9NmlMMCncZhGmA7X7Mw7yKdzSXWcc1jTLvwViWi 0bIh5k456jeTHvWoR8W0vbGRvH7G+hsG2IVwmu2S3eLyLW97S/qjF78YCPBsILTCeAhjWANVQ0n4 3ZJVV5eG1AknnZiGgLXbk2voQH3mg3+dXviqD2LojCTGHNMMRSwO3hcFAIFnd5HrbHr87/5RehtG +YOG8DjMk45PEyiNa67eRRl5CopnTdih68fLsv30kxCQ7QGrPLtEB+oJv/AL6eJvXxI4V1UqgvvT NobRmErEQkv3gH7PB96ZnvucZ6QBhImBdOiCgU9jPwZ9Kozn7i6MazvpCKi25oMeet+Y6seX8Ja5 FuUv/uIvwPPhNFCPcDjFSIlx+pRrUB77hCek//E//yFtphETtgqcHUA5HESRaDw7JdDtN6W9QqsR +ZNnPYyYChwKHnie/1/+S/qnL/xzCKLGRbS9GEO9PRvwuClXS3TKPp2e8cxfBz9+pZEHv/togOU1 repMm06M3cl02o4H0wCxwDyxbXMfI5A0YH/7uS+l3/nDV8J0E2mIMmgv04Gxk0lKN3b+NnAxk574 K7+YPvrRv45RNo0MPa82UhpT3qt85AeDnh75S0+1ysrppAsTo+m3fvM56Ytf+zoQVWk7vD3GSNQ4 nGDoSpNpEw3DK97y7vTC5z8v9TvlIbRDb/ru+d+LdqIoPhtmy3NkydG4MkVMOfr4xz+eXvCCF0Se 5Y+NWt6WmTd0op769F9P73rb22nwdzCSlLc534kRLf718LsGrgN5sSPVh0NiCzK1lR0a9SJXGOGX XnJ1+tVf/e10YHh3WmAhNvYRSuJMnDEnpflOpiTPj8Nqp7I+4t/Tgx9y35AkNcko53Pt35eNrwre ivpAy2xodKWzznpwJnAN+NlnvyW95v95NbLPmjLe2a1a6IGHGXFN+25g7eVSesrTfy196OOfSb0Y a/JY38ShNH54f7pteCKNMuS61MV29Rj7s/UIxE8+7GGhVz0fr4dR4W9/81vp137t17IxgOHBhIVa v0zU+oXpXxhpVzGvfPOWrGfFsw4Wf/KCesy6aEyrAzQgpIsGqUEv+Kc/9Sno8sKonwaky/3dOa8b ZltAVnhIz3r2s9M73n52Ohm9gcjxahG5xxGGZTHBxic6lBa68diytfHgwOlpMwvgt29lBIQdxCqm bezeeXP6iQc9MubbT8/jKaacDUP3QN8oB+hj6tvHlL9vfON/p5/4iZ+I/PXW65F0WpFyokGo95Eq RoN+ysmnocdOQPYZZXYa2tRYesJjH5O++j2cZITTeKXGHKUdwsOUujB6+3HavPGjH0u/9Z+fmbYB g3TSW6rhLf3FWS/b2+vhtIdjefe///3RmeywldVudKge9aj/BA8ywg0sTKxOmwa2pUPM8ZfdupyO B8EvuejidOa97kEnGz5CHwwfwrHDbwL9Mk/CTuTMEcYNg1vDqPjJsx4i2Fm/DB9Mz/+d5+FQyW2Y +Uob9YwzHUKeAehTn/10+o2nPwP8SJU868AOcZl9IN5sQ6S9el/aywMGO5fDIwfSWbSzE7jO3RBi HjUx1PvicDnWAAAgAElEQVQjaYK1XFW6DYckayppmz/3uc+ln/+5HwkHFbY2eJlJl118Gbzlugg8 zsjmHPjqoYxN0OREjLqtznGifZ6cGk7P+M+/kb6CfpFMO9iIaAQv/rjT6gSbDtRW9NEb3/jG9Ad/ 8AfBq/KsesROvPchj0RdrV9wThBcqP+xj38yveD34WMDuDI4Qhy7X/oAfE/FqagBqMNpAeNDB8Se m5hGjjHoGUNOS7aNUf87o0Wc3fue9yYxjhL+7j94a/rNZz4rffvb58YMGOnRQ3u0VNHek0aHr8sM PvrRD2NIPgs5lXKOEqBfcErYuSsyGfwFTHhz01kP/TH3CCIwGtF5kDVib0+vfPW7Y2tw/DxsLc6n ztPxyJ0KEN8LHvnlp/9u+ujHPpJOoDnswunl9N/sYB3NU55gQkeaxJ2diR974I+g/7NTyE797ptu TC/8gxelf/3Xr7NnxUIaBFTHQua3nULzjhxwpttGZPJdn/jr9LgnPTltHxxyokrq75qm43ANDp0D OO9ODWeAcuIumJu3DNFBPTlt4irOdIB94hOfSL/3+/81t4/WI7Qh+MRwX1K/oKSf/VvPTm9/B/rl ZPQnQf1y9TVXBuziTLqLL/l4w4bN0RHesnkbnTQyxJCcpiP0uMc/Afv1fPBPBx1GVl/q/JaGTs1z pPnP//zP0XXar6zVxE6RPpdd9l3Kc0ousxtIs8i8L69bN58QsrJ5k9qbYhiR/NvPfBQH93+DR8ED rw8D1mIv8jQEXWjbHRR41KN+Lv3bVz9PCpQDTgOHYfajX/Zgj3jsQnfvJuC2Q8JMAdrlH3nAPXBw 53bacr7zre+Sx6Oos6ihIITEwYIxOh5yk7vxVTjmL2bzinvd+6SYAirl1rNfpc2ZOJq1LWGF0G3i 953vent6+atfFaNdAJO6sXPsJEYhlDNEB+phtElf+eKXsh0BVlzzd/C2fcFntjWdHEmxyO7Ai0u9 aUP3vdJJp2xOJ52s1mWK6MgGbNDp9JCHPAR9sh96O2KufjmT6YLql1s5zoAOIPT83Oc+n372Z382 9K9tk/qtDNxog/ksD9iR0wGuI0TbptNOBDbM32Dz/dc/ezPrt3CSUvo08r8whJ0EjdPMId6k9EvP /5P05je+NT10Ox8ZTEgDrK1TTyCQdyBAornxanzkVvKYqmZmRpi6OcX9YoWXunrHO94Fb/HIr77E dWZ2qRqfmq9QnHyco42crOanxjlmg2VnvJqfiSzMJn4symMH61kepqqxg9dz3c9vb3XjdRdXO+71 s9X/+vd9FdtkVyabnMNXz363swujlEWepLEMDpSsFmfIvM5TQNgmuDpEudPEGDMmhyBUCxNVBTxz I+RGuTB+9eSfelj1vnd/qBIC67Fv+EA1wnWYn1HyX5aazc1gX8/j0OJV4zc/F5H4PldhnPAgEPMV IzbU2zKr6tKLroa/+6pbbj4Q6XlFHYCcqN7n7EwHvpao05JQUy++zPLauiwXmfNf4rvl0NBxXazG x0aqZz79WdV7/uq94ILY/J+cmmnlz1aU1QKn4jLcCr6pGdvZtTLlHoMk6mA5whS4Xby5qqZvqQ6N cPxjvNtbvekv/7R6+DNeXN3Cs7jAI1oJgTUPIrFTAgBUU+OHuZJKcOsfG4gEXwTqeT3Nh8NzI+Q9 VY0c3E11RnkJ5q+8uHrRk55Svf+Df1vdMpnpdxtoESvywdjsGKB7J/3hzemxim1BczkUuWQB1n96 qpqYHa9ml+YogyOI+c3z17oY5Y1nv6V66jOfHpiU/uVnziNT5k0QIfwQUmY8kgeuSbAYecxxj6cm oljW1ATAipOx8YoOCDgdhXYT1c/93M9UH/nIx+Lbwf05zviYpRgyPYP2QMJIBuXkL/6dmOQdz2ym UE0jgxnTw9XIyN7qEBPZp8XD9Peqd7/txdUv/vrvVXt5RAQrRKJi96/ICEWJ/C7fW48SrJffm+/y N+IsQcfDB6rZcXALwkauu7Z69hOeUH3yk/8Y+BPRrL0K+YJy1fQCcjiX62ceyoT5l2A5/kooZaJw Kxr48rp65zvfWT3qMY/O7MRbZXcG5WFOUKEaHTnInfmQHzppZnqSDbOQF0BW72ReNTJx5oFnDg0g rLcV2HZX1914TnXmjsdU//H1QzU/zIV+kQcmkDcgj7KiDGgiXUqA7PAb0GSAAs/L9VqEZtIJ/lk8 WH32k++vfvE3n19dehD54+3s1DB8ORG8pl6Sp6tF4qLTqpmxqEvIPK+NT4MSxaA+q5HDxLFMyp+B JvNT6ADuL734CvRLz7J+IY76RfFrD+K8SZP25+X46H9wirLglZposfrrj3yseuKTn1KNTqEreCsK Jigo4GSrJToZEXcOHYsABGwSZWEJPbwwVU3zStVk/Ky/lDFygjUnD5OG+8uvuJi6bK7YlCT0i/Xd s8c2KAcON+YGvp8Zr/OQD0ACP6YowXPkThr+Rznqp4p2bPa2XaSyHvPV1HWXVr/31F+p3vrxz1Q7 JSuRp0cnW3ys3mTbWz6Yt7KB1gAXhZXFK4fu5ipyf+gQur7m6wMH9uV0wgCovYzbXnnZzkh7kOFF a2mR5iyM8SeAJaOFWYpFhohhO0dzh37hHdFa+oWvU2PDkAX6w0defz70y4fNrcLrHfUeURe1hbVk 3XdNfihJ5hfQ+bPysZJ9W7X7Ztuw06tLLhiDnpkvD6L0aU6ibhO28aGPJ6rpCT5Qjyx/cxWjotU4 tJFyvM2Vt/GDt4bH9lXDc8rzTDV2zY3Vs3/pqdWHP/s/og0WR3TmTBFBfeKvhCPrF2itcQEepd3h kUPgMbcBZ//VO6uff+yjQ8aNMY1wzdoe1mHkMHXxUf2xBK/PTtBcqpfhu1n0zaL0yXmNTI6CD2mE /pi0FZSniQ/+fu6Rj6ne++5PFPasxkaRj7qYrPsyj4lrfxkxyudChok38srsBHWeE3vaRvur8Uk1 h3i4sfrkZ99W/adn/2F1ISgM22jqUHUYJGcpIUpwmuXAVdgvTBsNvs31y3xsLAMdEv5mmNRRHJaa cXB4X/X0X3p09fp3vq/an1EK0maqwxMjLX6e0EgL6mIzjmufZfmThzlMlVy58WWdv3At0l5kPZBx +aGPfqz6pac+pRoGRvlE3ppB/xnULUW/zNLGSI9ct0xf7TPlP2Q0yqEkaDU+kuVxZnq8YgfbgOHx v/jE6h1vf3fcK8vBw+RmMtsP23TthiVoiWXFT0sFHuFbreJyNYBvbpw8Q9dB85FdvN9bLQ1fWn34 Q2+qHvu8F1bnYQYJgVJ0cATkmWaEtm4eei9KpSlgnqKNp53nyZ8qDLEPu0+ew7kStpsAHt6nbBGJ 3/yUwxF9Lf0yOrpYaQaXfDIafFrbftV2Vc0xRTrsA9vhnDn2AjgWw+PI6Ps+8ZHqSc98WnVgAnuG d3v37wsdEzTlORBnYf4E3h+I1UbTRrLpDHUaVjU8TDybZZqEXFx1EP1iG7a9uuTC3B6Lf0YbiZAD zutyW+E0RRZFgrBLk+mwX1sRvFH2aU8reHRkWDz77mD15je+rPqpZz0v26/QdmLqtlqqJCOAwvdB Ixgw+vTRxbqdf/RQbMQDNDExSe+URXl0r2/De21PUE/1FCdzl0D7wbMjMC7i04OuC8nhMEZpXGxI b1FPnSP9YCr38OwN4mWK3W4Ad2gr62LME2/X2DibTMxOpjN2nOSmbOEBcwRMZ4xzefU62omMQ3YZ au5krm30Gu058nOa1CbGMX3En0VeZKp7gJGWDrwMs0x7wx3H2peZGHVxyiRNSdrOuhP9CqZxfrTj baAe8F00rpebD42A4yOCHj09eCj1mN6nR7+b4fRZPMpO73n4T/5EjPoYmexER/T6xYX10TNiXTp0 UdaFOGqE44u4uVDhcx63P2lhkA4GvSlOIXFNDw0i+GL6Xqz/IH/i630JLz001YNXyojEPOuRso5R X/7Gji549HG3pa0sgnUHOT1EJ558Kl4oRxUdceMNCJDRMl2gnRWD0I5+iesgQBTCJ7wjDpka9Axa K+eQ40dMm/XQ63ZkdC/tOCMhpAz3spgdh4wp3JjQ+P4GdU9Eqaw3wWXtWoqyA5yv65lOrNXB641X tocX04zqzTE0L04NriE6ibnjeubiJHa8sdZDvFreRr0dTKNwRyWDOAuPJ3Ureehpke4G8Rd45V75 ENfOA3aE5MQTTwwPoyTbvt255tLLRZD4Jckj6ImX0nwDnwISwS07yb+uuOkrx+iRlc14ct29x9HN 1LeJYf4d0IjpTqB9eMRtd4WDtX8UZhnhOSdPedl6YPBFCcKcy8yjKsYN3iLeAjgZ2ML0V13LFLP5 jDPwtB6MUdVJB3wJTnOTM/z1QUu3rB8Dp8EQRmgEy5HHzN9y/Bl8V/hYr6Lx5ONhToyXr/J2yXnt mnIir5dgXaSBeXAb1wKPPBLnuTD67f3mbUzvxOPq7kLjYyzYRb/s2LGNkb+xoEGfo4Ek9jR4aeF6 Q73H5i1MawUX4Up7v4tT6+SUXL3baPrw8iuXp27X6w6fwBtuweuBuS6hccpWKIT4yBaseM+U+RI8 K67oi81M49JzO8eIfd8GRkjxAs+ypsZyH/6TD1/WLyQG5NCB0tvv8oF4F1+FTy2j+azeEP5Sj4AB /oh36BB52TzEtzCFePPdYDkFR8Ypaw785hb0yrkoNB1qLnSr3+IFl8FNCDrphO10+Ozccy9hulJe ZH/aaUxhIViHwsdOoStyGB/547Ro2x3LKLsjBkzk2Qs/Can0HNhxWrr1APqFdmlLJktMK1Lu/WW9 Cb/V/CmO5IG6qsFnbiASOIBWjqaKO4N8a3BKyznnfCudcdoO0qlV8bBy9p0wGFMcuLZVekYwcxpH 20unpvMQeF9Pv3h+nwulV+oXRom3b0WfLcV6ipZ+oQxp0pT1XGjWa76Xxo7qiWPrEpswoTuz8umM 3REf9uCHwhtM2abplC9ZiseUUerBmgzX8BrEST8zU1joEc8yotMr3bglvvuHNW0UFvplM2fZDDLt 2jAE3ZUVR8amRRBBvSBvCZO4EE51tu/ag7SWTtbVeP4MvmvpF2ZGGE86lU1iXM+Ued9Rx3zQas4b mDFRndUSB2/DB05r0/aQPv7kR3EmhdUDBnpUAaN84RRSfHGBxiG2KS9B+IVPGnUxZVd8lzzzNcec ZgGwdgcFB96c/aJ+UQ8uTLpJB+uAD+xPO7bnVG6Jz0Bn0GUOPaYOK7gyH2kBOiIoI4WPfaFelQdc b6eOcuMYp9iSKN7H+jTVoKYHtBhiSrNBFlZnlLBCP8PWyqWy6pon+V258t4QepZnd0NcoV/4pj4v uso6NPVLoa15SF95w3JkC7P2u3Ib9ittinpVvlhpv7ITMWX4cz2jxw2oP+TlfkabxahLDKS3cPot ltXIegoyoWewbp+NOwA+GF3tYISqj81KRg4eSKciI0YX5Zs3gzzS9fAtjJRAgfoYvg25z9kqKqj2 ECbr4Iha0S9bT6xHiQ+Nol++jX1c6xcKGRoyL/QLohM6Vtr7D6SIo3b7VZYSX9qX8nGRHUoOe3Ga 6fkeU6MdNcMGF1s25FFdZSfaRvDp3gLaL/QCTQaxqak/GwdxQnr5rcBEtycIhBgxbZsoIgdr+6ab 9qSH/fhZ8BHHtjB7Q/y7BtwRUnkypgoSUzw480e8GITZEaeW7JF/yBVT+KIhZT3zZmaV4QwwNqNg p7G5tOvHmYXADA9lW9qYW/AUo8QGwI538XC7/9DoqQw8r0nSOgdfYspoCvIgzFPjA+byOSuQvA0n CynBqQaC+lLGEVcqDKfm1PJDJZxCxQcjo0i6VL4YyAPMBz3M1ApmUqVTGHFD7iNaB2PjAw5zYsy7 OUCnByDCNeYtkehMM7xpgczl5a+7MFl+TH2TkpTVjfLvGyIdw9Zbtm0FBnaII5LM4pbt4+MsrCNt jw2a/8hfgpl/lIFeVvnYaTQ4J1UlaiiEtBEw9IEjN09wHulmpu39X/bOA1Cvokr883pNeUkgCaEE AojSERRQAVcR7NgVXUWs2JUV2+rq2nZt2HtXFkVFpag0KSIsglTpLQHS6+st793/73fuN9/78gg1 /nUDmeS+75a5c2fOnDlzzplzzpgsI7ff74gEEuZ64B0VFEYQP02TKvOIw6A6EHTw1OlQJ0/rZ9Ls QuZTMzO/7e7Zq1gaNkUEkjgTzDrVlfXWERkRPu6JmLYx2svfhsDuJpZbXXaFwWmBAILYTjAz6GcZ D+gr30FA4bkY0oTPj6vTMnhuUms/OLiCkIeESiY+LYo2097wsyL/cBBfiJ8zs33EyFaw7cFu1Zp6 KB+7+ahts47iX2zE7JUSE9clgXbDSweRTpuaECmY2P/gFEwXqhDfjmsHpgFEUGeBZ+XkJhHPyX4r /QCpAzATRgqxMmEeCqUZthLAHLnONugoa5Joaz8uXkjcTJV5lmyl8GL/54nC544R4ez3+GoVBzrw 5atrwMQq9rmhndQpmK069sSgn1j58HUIafkh8VKiIIExSYws0+Q3nfTyddzkjzjgs2plKcr+A9h8 dzCeWZ7j0lDVOdmnfrUJYjsV4c4kNvn9zJDnb5X4XpqRREb+2H6fa+In4yEudyEwSNiiXMaGMBbm OVy8uOw7udySFtn/0hewhhf75fDAUM1vJAgKHk2YCrUx2UlfNH2cuzWmE+yb4rcMYKKzq990jPlN k98wmIHKDpRe1f6yLVnBUU7iJQG2jnUwJMLKiR/oRV1yZC/LRL8Su7JXYe1NkkOFReJghL0ehNA7 1k0G0Ii6VPDL9jgx3njjDRunL8A1wzv6lTLESemV+G//iNsZv+2H3A7bkGHsuz6zLfrSOT/KqGfY y3BlBkdc1+E5TKQsP0ZwVB/8ohs48gQ45tgHDuPQUyoa39ZXceedd8a/qlQO+ab1tNyoJ2MwFE4V +mI7xDH730Q1KSd6sxw74i+9Owx9cd9BJo7Uz4Ta3007eOLecirghDsL8Q72wAPLynX3u6HokiYH 4yPdL2m8bbJuaEJ9JWjEDKLVLliwU/hEyXhZJ1HS74XJKSc6SefAPqUdHt9zbnAO49DkqxqSeBJ9 CRNKytqQvoi11KXS9vumLxsGbfEd+85+z/3svTElfG0qqbUCiHNYyYT71DFR/uozyBUMMJuZE4yD 0rzEDIu+p99qU9RQDlEFWyUNY8opQwYA4/tBX0CS/gxPPpTxReWU9EFc9Lg/+hJKtco3nDOk3TL9 mb5MxxQpJ4UoGfCyTzRJoh3SFuoftISMOpeL78Jc+u+YVPDRdMoAL43wSaJOHXPbTJRzBt/SNK69 w3pWKxInk8eksJygLypSVWaKqkCMwBGRGon4Wo/JKP3RqIlk20zmZbco0WcT8OFnp3m3FAuREAGo 5BOEU22yLll48r7KUse0SUZaXDd6r7jv3ooOWufFnCc+AAyG5K34DmgD3YYhsBGV5FgxAl/mX7xt PWy3ykVpi4d9Ikwz3lXpC/mtY5W+0O+19CWb49UKiH4j6AsACHyhfPFPvDb5ffveedA2yq86luUX jMjnHlImeRbbxhvU38N5mH/2LaBkaAYDHr3C9SjzIi+B9uC0HYH/Y/c6lE2YQdsXcsUUGccwc7f0 x4HuXoPO4B4aeY45t9hmytAdwKiWJgMLict5c3LH1vSZ06AvO7J31nLaB31hSAlr2+/cIY11/hLv bbfwsHs8cv97bhLvxGmT/WCfrCUYSCeCnibGKzHNk7at456YpFAkvbV8+Z94R/jwzxTBQZhfVExb li85jTbAq9fjGxiVtL6yzAITKE2banTE6+Ap3YZCqJUKXU4CJ/3N/K3n4oVzmOO/NtlW8aRB+gKt j70I+b4KN5aOEaTGUhf93MUnOjDV061C7LCPFLKdBAyhLhz5v4kJgrGWDcNamBwNxa0WRp8WEVKG 3WQsecO15jSIFtxw1w5eQ4hLVPIkIfI1skLVBMHlUcwZEhgBzzIqRXiT5gxLqOrTvG22xkb+lpis 7TiTDA3LtHQSHYN9cU4+l4+uc7UGhzsZT+/Vk5egKCUwwMz1EIIB2uKUOgyBa4ITXEOEmLaYBKBV IMUM/CYy0czl+xtAFTH5rJqb0n9FBU1pT5wnVJl1J4FxRw1Jx9Q2vrMVASCslHAAT2NA+jzKdQTE oqE954pKyRhlbbQDwbaLvDmpIZKRMDmB77LLLoFsftukU2RObqYrU+9gVHtpirDBnHsvT1A5vxUV wTu6iIRI1wQsEWoHEZ5ZmwF2eSCKxP2BhKAL/iUQLQkX9fRQAGlGnRJh0S3EbuawBl626VcQGkiI ALbU7kTXx4Cdv8uuOEKywmI/gxsOKYMJNNPJMubiYgM24grQedXONjTAPBjJhnENzBE26H/3NMoa EiPGxGokA7sfJl0nYL4cdZJAzoBR6MF3YwLKfLiSghDRJvvBw0lUApE3Ktbp3L2PTIZMdSCqjVNj M3fu3OjnHIksR1czr31a26+lRkjlgM8ktDDvDjFhNw5hAD8cV+W+D0ASXzvttBfsvH0ysqrdG1oc 8DJrbsRN8SJr8G2L47i23z2vvW4EZw0Vbv9BKVMP/l1bo83Q70y5JIeqlkYi70VEHkw7QAJu8N+J 0m94SNQs2+/WJgm3xNiUmXkZYo9BBUDbXEnBZFXOLVO8lbbU0hcnExnILNR0KsxRl4BffBrhAXwa Jw7/NvNmpTsJyS9+29+wOQhXXIyjWKBvc02j3/0WjIrlO+6FsUk6YFJx4SFRFy+i87iWTs7BCXjN urFQ4rQjIDpBd1RWh+PlSX9U4LnanhlhJ3brUEYcJMITUdoMEz3OaoAp6Atq5/umLxv2qxOe9EJc sF8s2yMmHglTJbmKIoydPMVP/WRkpNUAOu9ZPx3E9etTay2O2f6gg/RrRCK0/Cokc8nCuoRuxrdM O+1365En9F4sEUzC1hQ4Sl1CkObXCdx2BD7kDiOfaCbqxJYC0gHa0U64X7+7etmSNH/XndMUrxkv mOTGXGRXGjxGdsbquaVErqfwCdxCWM0gchsLaYYCkSkze7muBocRPsPBjDkmy/4KpjjeqPyxon5Q yiZdU5EY9IUyeaZCT5yppS+uPrlx6b3pS0l/1hCEJ6eAGe3Pyf7PMMvw95nnPjPJVOm3XK4kNaSt Zs2GHrtZeblaNIrfKlVEOIjsjC+DkUzhYLzZHuZv+z/PNWWuDf82Qo9kVFug4TJjA9AV/TCDvjBg 89YSwlX8kPH112sP8eSB6IvM3Ab0hcpl+tJHhL3J+0DlGgadhElxo2ppbdk34AD4Ju7ZP86/JX7k rQy8KuGnT4g8yBATpeStltErzyFKlaSwJOyjPeBcCHOVYdisAAU+DuMHPNqLuAJv5NiI+YLr7tXD ad7srQm6NAat70gtzDdGAexsA/4Svo0kwBZ0CxBGkq45prMCIFZgYDjjWryhLSo0HANVTg/GtRUe pbQ/KcsRP4P759KxYgS+zL+YI3iPGjyUvtiOoC/UdgP6Qv6Sx3L/OOgLNMi+z/QlKzBDSHCwT0rW 1eRqpYyxK1/COONL5l9VDuZx61guFQAq7F3hdizqy1f6WUaRgEPeVRhWJg34HW7KcDB2i/V8d9Sw 9J1pt53mp1WLV4VyWUMSR6CRo2l0vFwXeIUVDU/EmxJm8hc8JrlNikJ7wJXrXM8BcIEXoA3SF6yc Inp1DX2p4A45opz8R9B75P6fuBZ/y73WzGufzHAzeM5bwX8VzzvvtCB4Je8Zct0NanMK/lG6IYD4 r/Jc/rUR66XAU5vrATxZ6+IcQFO1WC+IQB/N0Jc50Bf8pToBFMkoovZX5l8cMypXPUwKwM5hjpmN Jtqgcq4DvyjJkamOxRm3CGnjziCrt+7ohXkpEVhZiayAysis8lshS/CR/G5ZwkP9KyNAgcOYv8Uy M8yKqVZ74bWMc5kUXJSl1ZGAFAgE1sCBah6MH5ERSu2tZg02UAQQfUxuKtgCIta5+sF7yhMqwHwa DBCMjRt05YTZK/Xi/QoyO7hhNXm1NA/D4J4ORLjBId2OrxtjciH/CBp74dVKxBSMP9NoewlkHeXU 5jQwscoDOqGOox1ztcPOFAEEqWQyLrmj2WI7kd5MEja1Bs2Ynkm02xlEA0x+Mk1DwNAB0AYzNIST qqaOwiWQON6lvSCJcNFkyQfCzDa5CqhQ6OSmvgJrzShL4qEApVZVZnXtah0iywmsB01UMwywmzNi MBrvNooVJM3S1P7Ex6kEJqmcl33gqpFBJdx/Zz0hHpuaFULqaRfwapeZQdNItKRWmGodR0UJUJC7 wC3EKK4JJmBxw5StI7H6fJoVfRqqeCtBn7lRaKNEFqEXaPDcg4y0dxzhg1mAhSVDt5cMdgsRpaKW ZBnBBDMCVJRNquYx5GfZV5SVE4AU9tFm74mX/JPI6iQ+a+asyCnxbIsQwoCDO+upX4MVpy90IjZ/ YDh1FA/EPZN5TWZVUJOg2Ed19eV000fYU8fMDAKa8FkGsZOd4fntF03qvC1TQLmBawrkEpEyvHTg AABrZDBgNs4ZK6REbBoA3i6JTxmHoMJgLRoqgwnI0zTznZIIRdWivpnYOKloYio+ibOZMAs3D691 /rdv3VurrYO92KTqhDTFGSONsneS/dcMAkQ4WZw9Te3Si+hDkYIyaJs4LNzKPinr4jc9JICOEyc1 k0TceyaqH0oOf4UypdH2YfDOscwIh9GOXcxpP9WN/AZ54GN0L/jEd8dwaG9mkqqzEiQjMTbhkd1o vcTKsZLOiFQOMUTqitBifcpJRWZX2lemUotnE02Osa4uwq1zbmCYEr4+9ABnx9UgEnK5viT6WHOk BhhPfDlR3HTG5n22rWMY7S9jRqfxAhwfg6BZpnilJridCSwgAH3QhKoVBk5mohVtuita7ZhBmU84 1NIXSEbgES8HvIW5fWG/5/6wr71vCvrC84n+t922RYjjo75iTThYz507B4FJ00VXw4BkMHllP5X5 eeLVDA0AACAASURBVEfiHQf4RUCT9Si7xseICOd3gHdDPVo+xogKkKE1o+zNBGNeDwPGxGdeuhca xCVfjtC+1LOssyWUK1C2RZhnptV6huKL/pbUaaUNqGDQpR+8p/IhkqHoCdHcvJUxZ3hHk036BNiD GiSEFfZca0C549cs32/HSrePyUNXBO5KB6lyTQJTaVeYIqPxrJfR4LnlyFt1s0owDcZIGNeBdFJ0 98sLglmiadB8eyQzUrn4oC/SFfPZ2RIJUr/7xzB2Zswot2Tog0kwFP44zIG01bpLr/ymv16XsLQY xzp1qeCF5XktTmh26RhqaMEqo4++GpsRAlPPSA8bgGKdAHq78oi/D3CW/lsfVvKYJhpDsQCgQEJq EcFURnjcCL502h0iZxObcfatTc1sacImFyA7+Ean9c9g/iWLotoIc7LMvSnm3mi88BcOJcD8ze0x n3W3T6UlBsPRhcBuda5sBCFknExSAZP8hyt+7hsnffG2pr+hhGFFetz5gzzxPb4lWvtlx0CsWHHh fkRTCJCE3xXzDBp6ymqqmCb6Def/KJtzA7QooEnvHHNueBqJ7wJ62sn3KXMNQau6pqFIhdLXyQDV lXQkNMISIYHEWFnF61ofTytAeII4GTK7hRX24BXs33J4U/9SYWbdTQPAWvo7vas0iS5xxAAKdQQP GWSOYisIgxXA0/QSkbVhm/mBm5390BEiVa53jFFOI+HWtBBplN6prabnBllpaQaWgJXGOCc6bwE4 fnHEjj7Kii97wCquIGLxMM+2IfKeGy93wAvijxLjn8eVZPkeZbIPnTOte9B/b9NBzr0NQQAxy6Sf hHMjgWxM98W/lrCnwrRlQnVif6DgrwCxHp7LJI8zAn/Qgc18CU/wnBVJ8zYiWJt/QHM+xppUhyKj v6gGBea5CMGO6Ckx9qAB8U3hZfPA7yFwyQjXckcbpAqSxNxZEWQMmGO+ta56ElhC95MIUsMcfV/8 q8UECakpHl+yoF/WyT7URN+5RQG2C6FKwTXGm3SaOS9oCef2Q+08Ym1yEoW0BGqgrX6vpNeeMO4c A/DLKonq4cvbO1DUItx0IkgNyY+haMw8Qh7j0m7Hj7A2+Ztpm9dRJ4p3r1rdO5jx6SsU/8gB4lov 7XKjeqPZam1SGR48cZQzt8BLWeYmRuFj3LBqUWqZqU0liUea6LnfgxpwfwspO8jqvgj2vv0/AHWd ojleJcnDeJ+m8tdDQJa5Nctzwgk7YGHiQRbdPfptLABW0JQ4BYJ6EZMz+UwUlMvHyAaAgAQQnHaj sgE8F7fUCrbCaDajoRmO+7zTtzy1ck2Q5WCgwvKJ3h4aRYBgRSqQPqhUbr8TEUVy0PeRDDtq22PH 5bgz0b5oh0Qj8pZl+LraepGtXKq0SysJ2No+Q5t7M7ep+rxSvp1sknlVWySxF8laW8uJBr8/mAOI CsWYM79vN6nFBjGqqwdlg8xUNsj6laX7Hku5q/sidj63Cb/eA8JJ7FtSL7urd8r0kAhCyu7nmnXi l8PEWhYFgeEJoh1sPpOEGcVUP2CqVIpuh6DJTDP9WgUnBhDbEDLdfWvYg4AIMfwr4UK/0zcBfPNa ngVzbr8ofAaBpt4+7oO5VCuaPxYCKgJ4zAkwoDJfRnvDCTx8B8gIo0DIdLSsRncMgcebJgsk1cLH 61gVcZLiaMV0Q4LpLDjC4G0gCk25QSfRFFlWV7PI2IxJRWVCS6tAENoeluxHvFcCB2dZ4OLk4nM0 oZgGxKkTQwN+PEDW3miVY0GF0l+PbbzXFEXkYb4vbEuhJDMcEj9xJTSs5DUFscgIXd7iLxPCOMwT wgOsVOpetTpNV9iDWR9jwl/Xj79gB/UAj4dCk8Z3KTeq7ioyTRnFz01tlJPXfSVNQ9SiOx5yPuus yQKlRXONSORZB1otfzP+T5RZwsuP1/ZPQJcq2t/eb4Rho1bxvuHhNbXAyjP8xtTZoBogHwxEvXQj l+k7+bz8Zd4I2pdXn6LbyCUcnYDGmLTatc/rX41ty0xiJ3akbt5pIeLW7JlEBQSe/VwbMSn6b5z+ U4BCmAh6BfefsUEzIb8aK/oBDZ9UkgPcJANeqaNPg74wgRoquzblScYJRjwwWWdTvo6L+GO7HUPd bCg9DU29fgtoyVmBkZ46VmUgpQeW5ErsGEwiHrgx6ZX02XpRTj2h42mp1MBSxQZYTIY6bbPN7mpo IQ3QDHCoHnNKkyvgyGjxTJ9F661gn2mtY0+cqRWg4kXqJ2gyuRkdRYmlhpiIUKaxcZhBmOrutURT m057/DYjh7WFVCfS1dMfVtKInsBpY+X7RmZAgkkUe8BlTdxUoLlCHhMY+dz01MhtFi2043P8RtO8 kQ8fcGS6zRX0hT/CHsEp6Iv14lqNerTduZD+L5kMvsFc4Kqt/dAewLOU+0/ihf0/GQeGeqEdmNTU NzPHyQbST1Z1vFHOXROnkvF2nnDcaO6jQUQr/Wfzo6HQKpVroZjnlrcJJEoFwQT2eywQvlkDIAol NHiM+UuGjU+tApfmQJvrauhCLY2ghKBtwiDTDe9NpBJ/+2EoO4KhhL6g8PLuMMypJuQmGb9h5hvb 3hEMVtyMZwCROlZ6yx/hym9Zctk3kLfKyCMrMNdsXGuTGJPQF81cXeGp6Nqi3DVrVlUjHpYfKumK 5ZtoMpvhUgRV9LN4IsV9NFcxJkbq2NDWunaTEeGzB0TSdbxj7eI0haioMFK0kfklfD8toVI+v9Gk srT4G98CPxUESwbV1tmfaudhwtV2QMcBXhrAfFx0nCI5ptfWM2dD4aNPRctSTBbL8fPVjAzluCl/ 3ek5BOcqBJ1ve/ENnBaCk/SlgfnZGvjOevxL2+U3hLlzKvNAlb7wfCLlL1R+4zvyr0StjQ1by3oo bIaZPwNevtVNsUMBU3ns1G3y+/pMd7q8WinLH3Gl/Oc5gkRJJOJeCIcAN8YQvKn+dW2s1iPKQ1Uq /A+FiGuBs8Auhjbl5h5ybMS4sAI5yV/DZ5sGgr5onUTOXFleVpkYPufksUyToy7oS1xNwCfIPfXI aK3vl1FNFe7LceS3cgVKc22Vraaq4MK5K+LZfSHnjkwb+ePXhVt9nq8q5esCYOTQ7Cbhq7Xjq9It UaLzlDyMdG7yytPG+Bf7S75pDZGajWsgRjlfdThf8bAHH+ip+t1WkpZzYr1WS5m/2GQBSkCqUSeg BswHTGCFseE7odWIlZ9A7rI/FV6IdIOkKSpANEdEVAhzBRIloMsOKsMwOp4oG+5lhFk/tDJo7WSm JcQoBKsdbTttmAPJyUlEbKHTRQiJQPQN2o8weQJ0frJO9SLD22ciKXGq46Sb2J+ufHQwW4ZdaRsa ddJob1/FREH7a5AKJkhNloRFHyWTGk7r0BjM8IR2JCOXMHOgN8bKDww0E1x/N+Vib+1eBwo8GZ0l kiZNnGM8WEnObZSrRuNywGTO+UVCGQg1ZhIil0dlsFpcJWLQ2j9qSTWXU+Olg0VG8jEQvlkmwvJz 4juxZwUfj9UZig1GifY5mNy0zXC0zfRh/4B7SklW2eAR5Gufoj5doQpNODOixIQcPC3riyEPd5gA 4xocUNjWD6XsifiREbOJvuOADn8LOIYw9/MuGgvD+jaximWI306cGInKGn1ggA4VvYFqvK8mXDwr HbbtA+ECAlljl+kp3xU7gBaw4kGZRCDu6XPkJGKSCXElstoXwqkCuLyKFXXmnoPXftAxVuKZV6XK icI902De2nUyVwyUCDEhKgeQyq52xVStjtUQX81VmeiwLwICMESYshE2vm4Ee3rfpe+J/AQ/w47g XDZbKNf92iwD9WHwbRZhrE1ZQPE846iESBzNy+M+M4nXJtsRK8R8W03SGBOb5pOxAsWkNtQwhdVN 2qo06GRNLezLIEf0V3DwrOJG5WiXDY2+rZSvUOU3hClfim8aTnYaGzhGEjDcJjIWeGgLvQQXPbEv qvjpXg+UlZegfWweUmjKYNLUSrp66HBob2G8I5Q2NXfySz+ID6QqfZBxdlkVHyn3FHJSsW+kf6Z6 8DCE/LjiD3XUrCjDUQbPurmqTg0oa5AgMiPslzYLU1UYHO5C2SiToCZ8ZpR6wZ8SoZ/+E5lDyKDv QWrrJAPTGivumAKhATSct7gmExB4R7Xq0LD14r9gaFnr0ua+HJVE5CPOSua4ZI7KB75rXb03+b7P cgqaxIXaxzZwyyd9KEo0Bd0ADr4ArEN/UXYX1+SW/tKOVKcApVBIuyrFw55xB23gGjbYnDYT5qAn tbPXn8LlWIEgQP8A/hgXmvAomJj0K4nvU3QIKdyzzhXUIr+w5x4Hwzjoi33Bl7nBX+h5XXDwVNTv SEMY9n0ExpneBn0Jv64BFgOlBZZVNsjy7VvLj5UJnlik3xlAW18V6mA2YyXShiqZCUR+7M+VbJg6 bcr01M3vDH6jRQ45DwsycdO8+Za6Eoso6QuYA76XiQfQ/KAvmlRGPiwFauiY78pIldSZ8Uq5UbI4 xAftr5LhIyMpGDrq7Spc6MPNHwebTLMX0lRWnlmQJhQ1K3RYb4yNulLO/MBcZzZXePQltC0EJWXl 2ruMCRo0RiMs3zY3AuPQJGmFQXPY3pgxQGdD4wg/l3oIQuUc0EhdNKk01QpPmY7Fg8of58VMv4Im 8J54YfuctaQvnZm+5HfAWcdT2cNlU2FfApaShnBb4KF7qUUm2mXfmGyCK6TipmPI+aL8Hpmi94Cx ND8Xzl2VuK6muYqcV9010bJtfiDqUskv6nh3gFD60yUSVmDEPb04c1ozgbtE+k3dCOzOC+3SLnkc cETBzclR87M8VscrMGlQ+UyRAzAg+q/Z36Vy0fFHsTDUzpVq7vt717CPJrSceXmwpTP6udWKkYa0 f6X/o8p8ug6VHqHMuIWJMXOTioVK98V70T8AOM8vmTGUvrTG3KXCvEJfKF9Mr4C72rcZnrlvrUeZ SsA57Dzsg3qUisG/Al9XIUdZMVJhapKPC4V/5QO+Ir0kGl4w6M5LwZOqhKjkccz4z+SoUnR0pcc5 n1kGnC83LCeIIjCAp8BiSl+18NUGGJp+RqI8YSMulaVZZ2gL813QqQoNE3l8PgjexP5unEsHDMYV b1pIZX60Rmvx6Zw6bWpay3zQhdBDtLtYSBA/N8a/uhhSmQKjWvbPhvDNtKb0sdd/zNTNWHKz5fBv 4tq+8EVhANZFsmrCuCWsE2hb5IMGsCru6qDfCdeLEntKgQaFfLeCzZT2oMvj9IX5slWKPEs+z/Ou 3864ELSM79gOVwA1zbbtzYwHfaE1cbVF/bhodOKmY1KAjOBRPJBOlIKxUJc+Rssi38P4IyhKcIyj SQliq4mFg0p7/qkgVhgOkgfJPhL7q1iBEvU1rdgwWa0yZTBn3CyRPz+lkPygeuvBnJTll2VXv10h FuX75TMB5VmpjyoB5/N4p/bbExUuX89/q4WXN8wmMgVhoJRyZcil1wqlcZaAUCNPRir3dVCBJPFF owOhG0WF1NihZhikh9urx37Uh5aQoVO+PgG7sjT+2sZJycHpu6X+r2ybU0WUkduVfyv1Kpn+2oIq 5Zov8tR8ewO4yvwJxwoexFX55VyzDb4bz/mTv5uv8298r+Zb+b6QyHWu3qucbFBW7buVd3xebcfk lx/69QMXZR2YVUgjTHLNTBB2iITF+ThkD+mpXE5gYy5RiGWoccozMCLuaRJbTbwHGYqcdeCeaQwc sxSJxAbg8OFDTJajBsfvl+VxJ5h86+CkUtbFfFjKBh2X5XQncn3/mmXkwd9gfrPZrRSb2XwIfxkD boifvl+2znqDn97wsAEcZdvNkYUtv5vhUOJdec093zNF43nHVR0mI4x44lZzUWpyR+pK4tnsc56M MP4ssRHmWnYuoWnNxFQSKgOiOWQaY42CFUGZLOe4YfwbwqY9Si8FBFca3SQzmJaQ8OVzynFRwrFs bW27Y9qxDwOmZds2aAq1KpPvTk4ZFpPv//+5zvWaXHqAvPamGT3sQxRVTqGZPmT8HBuoCMjeYEPu wdElCE1EkVuPwoF3dRfIDFht0eV5Ccd735+4U1vXEsYVWMn4RY9zTabMFEcbos61cH6Y8LWcXAHG qt9w9vSWJUaT+TWNweyqaIuBQIYxTs03gS+R7V5/2BYCRaCjjrIrflgKmr0IO1NYmYhC+C5uM1FW o5ps8QyuSQZ9FCVTq+8raXLdgzRZz3UnyD2m+TKMuW5b9XDYmmkOYBvW3sYzV6ZRgkSjKnSgrFxJ f8rzKJLTDGurU5l/lAICNtalfEcFgXtx6TPlPDmEMDYFhtN+i6y50PjNfcL7JLKTyvM4rTS8IjZX npdP/JvfLt/jRu0H8nl+mH8nXo8zs93HI55Yl/yVyP6Q/+RqOIv2Eo3UAFSh1ArGX9NZvgC/pflm CytsxjHobAXWjLUCK406+AeVRAoQsRCNMrIHX5kO5qEGmFi1BgMw4kb5m6kkCF7IxkkBh9nXSNNM x+wwZvxTWCUYgSdpatE3HDpJwzUPLVQw2zIqqwlhHfTUwDEK1eHgIm7cJ5DuDaPc5gyseLX2ZqWs 2lvmrX6i9kH1ZlmajybdKh/U/o1MGY823n8Tn9iw/hsrO+fd2DM/m5/nKkS+2pv396LPzFvNU9Yn 8wriILNQLvr/+2+uSm31/Wi1eveqAfXdgIe8V4ZNvjG5Lha40frkyle/WOIAWLxpaRSNhlrx0FxF X/glhCcdvRw5IUBxr6YCJcErifrkr09U/gE6diLj5CLu97p8bVLZG5RVPvOWk1Mmchtk2eAiMt3v H7VHoUmA0YoVDnK7yiQCV8HiidqQSQitP1d0FbBswstwmE0EJZJ1ClYhZU1qS9TEe2UHx+XG/lTa 8AC5Nvbmxu9VYVJTn+o9XylRbYNbtLWEcU2RG2aoeTDpNPLVfKv28YMqY9K7+Z38W1vewzx/0EXB CRq6urSrgaRVgOJi4INLMh2V9mzw0Rr4VpiYe8H7wX3gPnOhv4ln5TQJNvn9ENZAWIc935UMKAPK m7HXGNpK1KOx8ouAx2Qf2lWYolEYJO2RLUM/R7XIDQZCiC9khUZcRNkxePh8yUA7gMxpC2v71vOy BE4mpXw/6wx9bL0RdKpwlKX1czCU/AYWV4RU3w52j7yalTXDkCg0mQS3YGjBLItNL6LdbUTDimdU WLNewxd3VKKSbkiIy/pbhYn+4l6lD6MQ/lSrmG/Eb/nuBrf+wRcbr9dGKmFGuy3SxFvVM5416CfD 7zirDvUtw6zSNbHpKvb2MO2x0ppf3+jvA8Oi+q14Xxjngmp6hHvV2z6OiwcuO5d0v7+WVYWBOUuc tHSP0CYjzITwpBZXxOSBTOoof9qxkijfmVyf8rqAKTbJTOcVOq9DePLEb1OkP/Fl/3hRQTw3aw5N js5M+BS4shf5yNOAIGbW0ONRL6sWCkEHgZ8tl7Mojzcm4W6UQRZHtSDI7Q7lSFzzxwcoLjS1V0vs CoRJcUsNckfW1sfdB/qTv2g+a71h8k5ZjxLu+bya9d6vlAVUM25Ynlf384ink/vr3u8/0B35KE2B NaHWBFEYayZpOOYOzOTthgGlW37ZsxT2QtHH7+qTB+QBpK5VIwPcwzpB0aiNlaSghhLVKM/+5Tl5 x/DnHMAvt5mwpG2GJiWnHEsz1i2utTQZcIW5rNA+mFUco1ZWwZaBQaVcpQ/zpPCFuj843PtZLoaP V5K4lc/9vfc7tU83pgCu1pGM+XyDIqOACv5s8MB79/7eRJZ7P9ugLlxM5J38pLze6PON3pz0fs6T f+NxWZ8qr7CRuk8q5e96mauSfx+4cOr74DM/cHEbyfGgi79XxhKWD9zDG/lo7S2XH11WNqnhMnRq Dl3sAH3EJwG7saPScJcUY3kUrtjofXBTaG8Msw28gJXaa5dR1dyHCRP3Y6j6h0PLIPe6YSaNGzJp DWjhdFRkVzjubWwIx+2N/8l1rTydQADPJq6qL0/KHxqB2lWOasYtJw8bAnI3JAWGzLggZxCcQffb zSWJKDlN4JHL3yaV5y4ydUZkOduLKYQhXFk6b/Uer2s6oSOpeBiOtTBsGy/VEispVufyxcR3853y 9z5wuwbfJ6P5hu/XXEVGymMM5K9pyuHYznVduZLxyoXMRewjAzPSBnPhCnSYOMPQuMdX3tKhpvQt p1UIlGMiX9aHn4PsebkXkYuXWK08IlPGIxun4DSIX0NITDK1IJ0h8vsIHmAEswdKzj0mTXJzcosR L9ewT8y9knN5ZT73mSZ3BlyJyBAOYu8xsa8jyMyo+5TF3n/2RVm+UbJMjmtXIB52qtRDB3IVLBHy GsZcHkM5srHSrly+MKuFWzmLlsJZeT+P1vzGxG9+1xz3mStnqv2dKOKfdIYLhGZ4pKZG/W3sg0bw QkUNvBjmTe2sCHW0Klxh+tXs/ko0wGUk4OcikDxGKOoUlIPeOsZGUy/R79hrJPiPDJMGTLIMelUm t1DA7Ba+RZDolqHZsNqsJs2aa7peocRaVke0K5PiVGXeK8vb1L8b9l5tN3k+kTbMN3G/PMvvTb5f YkaGxL2fbrnz6ITAJmOEfko6izkWDMdq6FSDSgz0oJsuaekjGrISh9pjcmO1x9Rsr7RhRsej6Z0k h5f0S9JGP4IKQFAq82NJxBsghqxIuRQ+k71umDEgTsafL7VIEV7cF/4u6eGgge88nPf+LhV+xBRi mGHt0Y2U1lJRqTPv4Zitr7Ravs0sTRKu3TtDLDWqoMl9YJxK2XqcSb/UUBoRLAQt4BBhreHuYjKO Nx7s1OVXPMTJ6lRdud4Insag5X6FWfTN0lzXe1yQKj8bnseYqy1PJk07albQCMxiymFU9YOZht8R LAV3WYkLX0lOKVjl0gCRF7ek+4EATB8L7ml91iPgY2q4mc7WKeAR/mLlgsT9FLCZPBLRanCuFu8U uNsIoBLL0iV6wfCCV0ReG6343d1fK7M/VF59cp72nrLQDPaJiUS5td8sx1DlEdJK1Q8BP1GNLFvA 9eldXVhEuCJVvumqeVaWxAI0Sxul43ftWKk9v79aTzxznjNYTBM2Zvqf2g557/U0ZNDVlYeU8vet s0epBPHu5CcbLbZs6sSjydcTT/5hZy36kUJ/XIlSoOk3EmI0Rr8y4EPfsiAFrmBSSR+Fb0wFj6xk 8G2lXEymUiGrt84UttUA2OF/qS+55QyxXYCvjuC3o9LITaZbjNrHPTeiF1cjA1YFBjVQ52v5Wjav R7jS3DssbIRbFqI43bRU23sPpaSH+95D+caWvI90CMRQ25RGxg7yqDActPIWwzgpr2Wn8Ne97nXp tFPP2pSi/8+/KzGRVas9vJeP3ABNECJKCg8Mq+yhQ2Y3e1rEio4Ztbmv2C+UdFltDtHLoEnQozg3 j+FMh4f9IgCXCPF18+eD00rKBKLye+8Mkc/b5vD3QaeHlPlBl/qozOgeNO6d9OpXvzqde9Y5rOAy yVUUD2vX4I29uaUqbpSYpabbSdSAKt5pjxUomDKDKDCji8lNRE8Yq1UGwN2pdDA6lrhZpmzqU7m0 sOq3vCcXkDkBr/Oo9Lwm1b5X874jqfwWN2s08OXdih+ZxfhMDq76rnt8seJE0tfAlJlKtebWyfDR +kcZrEXfpwiJzfsdhJnfku4LAvYf0MPN05gDY/h/jqtsgLr+9Zq/pqc97Tnpnnsiy+b9R9peSbZY HMw4H2Mjh+8neBEcMjwuG5r24cxCaswmcnF1/380lXXfJudpBRGFnT73zxKPORyJ+bsTuK2Sr1wd DocoBFiNxMzr/OUQW7WqO/xoWnFGU1li0uqifF72YbRokmIlMlb+lGbrlZZX6lP7XEf92OdKnxrg 5earzputmMdOTvn1/Dv5+QSEy9Y65VYPM9f0R7ybC+I3Hvmbj3sX/g+/41YFBokySIEBCDoJ8Sxa qNRpqQS1gt0I2jMRvKhsi6t52fU0TC7Z7LeaXE1iMhJKU4zUwkkrjvv2qNuOiAcGNTCKqgefNLht FGykzXpMbzW4Ed9kU+qg9evJ71FNtTS/evMff2Ld8/HAXxcitccDv7ElxyMXAmLCJiU3mcuRNiyo BduKLrQXS5YsiQ3vNqnwzeDlCs2o0l3JQyYRPosVJ6hI7GcgJ2niQR3UZVrXjDAPD+KlugatjfQl shlKjih1OcrUAOE2FajUHGqWoWnD3zuJDBKSamM29oHIsLEHW+49LAjAEUydMSM2hnQDUk06XYEy dRludrNK9yYnrrw6ieqHbohQ/fcCyXE8duPHHp1ZSG4JMMDzQULEa5rq+HCH+zyxlWiXR1YtUCbf y3WYGGuBzw7GycmqwA4aeqKK+yE85TJ8gXOYtYz2pQa1dGr33ihmLlMMg09Z06ez1QHD2FTu6WbU L5lQdjKHmTGktmY1rkwJk4hHUWbf8nejEECLXaJH+NvEfkn0xNZbz0mrVq5h4+mNvrRZ3hQ9PRRB PDK+hVaS62bDciKAu5dSI6auxnR4MMnoZSajuxkq2yTjbKjfToNIRCpXUcMELKN+tQLgslo8TSFg gmGbWU3uDYbYoTFr1jRvl9Ws1MnIt47fUb4T46emrMoHY7zl8/v7VXhqRuCbQkQsI1cqvMR2Fnxz uLJicn/vb/yZjcwHpxn4GaZeT0r5Vv6d9PifdmkU0BxJdhTiY1TOfqK6ul+SdE2aKzKFPIT53rp1 bMNAI+wSV/PGEUbHtGoRHNwUBD1EmwxGA3zr714V+BgNBOZGBc7Gy+qRDJsfzq1kMJqfsIxtOfjt JVqayTL9npGXXYPyCEWUtNYHm5AoydIeUsrvPNT3HtJHtmR+VEDAYbNJyY309IFygEqYDfkdm7DC IdTaXW/SR/6PvyyB8MgDs7a6mh/kSXDNylXlejYZ77n9jnghlDAaI6s2ojckSjJX7EjIe+yehOLR 1M5k18ceMUGMeO4eJZFCo1OpQQ1FyHWZ/Fu+VMlfXgQNuzci5Dz5t5K58pPL3fDulquHDAE5G1AD PwAAIABJREFUbAaPTtH6QDVhEuMKlBH4Btj9+v96ClS9VyUr2FQzOXpah3+TwsP6ASZxGtjChsSu SIHpMTG3ECSlDS2nWlVhoibTQVKKK/f6yIY3NkBIcdYb/k5OMnXlfZkx9e4eynXlTDzRomiFmnMO mVqvNXLRCDcnN4q1lKWLV8b7KjgUomQiXWmWR9DFUe2/wrFMamFkP+6pod2SMgSqHVC54XUFRnaZ IbxIa7rXYpI0yubEM1HSxa3N+0/ZzBgDYmWMk0ktGnES0EQUM9/efvamw/fJSI7OFQ+U3LPksssu S/vuu2/63Oe+gOkjm7jDOHey940huHMy1Et1nFFuWS1rxOEkValYP3t+TTEAEvdWr8CCgrTozkUx ftx8tLsbE91KXlfXIzmGNpI2ercy3nJ2hadIVEjGX4Ggp5dNgal7S2V1rhyZ+Y38W6l7vowxawvL VlbAXjbUi3yj9pfz2kfVompO8vOH+1tT1MM4nWjjCObDbtrazOZ+HR3N+D110SfNBIWgWKLu9fcR wZeJZRob4rqx+iArkCPDQAOh1GiJWrmIDb1EDZ1a2Zuzf81qNuk1rPN4Wr4SfyjRgE7ThG9Yu0BS hNau9Jnm172rwImwjNGUuR3BndXIyDnxh3XEiYu/w5lQyPCfKC7DJv+WTzb+5Zyn9neiJM9y+ZN/ N8y15erRBoGN0rCHAgQ1Uu6nohZKwizTIDM4Z86c0Ho9lLI2x7wOuTwoPTfl6zgHFm7W6s3YLZ2l 9sV33pmOet7zWWLHFh2i1sS9tvop/LZiXz4Lu2Lsy+u7eDYtHfKUp6e/Xb88Ss27lEdYfyawMYMO xEfiMdQt16C8fd/koHwevhvlafx13tug8jXPak9r21d7f8v5w4CAzAkTWhc+BT3szZATyj/8tpGk NoskGfEQg/j1x5mWpFlPaXIqM8zu9d3r0otfdBQM3Bz2WOpkU+WO1InT87wdFqSTTv5VvNM2hRUd xkRDhUGqlFr9QmSqIqEnFbyv3jOHXHflxgb3N8xfspDUNd8mAl95z/c9SGGzU57mu/HFKHc8rVq+ NH3ty19Lt968BJpXavetUy+rxuo3DAjiHhsqlD7wwfczttvT7Flz0ldO/Fa1imXpW/5uCAEArJDJ MTaAMA0tncF+UL3QU83EZpTbzG34ymZ6Jc4FOll/TsrRk9LVV12VFuy4U5rGPj9dM6YGnWjDmV+B aOni5THU7q/JCu1GztMixDnZDcAVolR4alZbJlegDAYAdsfYnSgx78XofcBPdDc3kVyf/nTBBWmv vfamjLb0gucflZYtW81Yr2fjSRzTqL8rIVGWRU0qc9LlxMc2cvbZz3wubb/DfMgJW62jNJwxc2ba as7s9P73v39S7gwxb1NRgZmPSTl5GhTDx2Wq3Jm4Ebcd9htPuQR//7lJ3suk+V5HhxYL69NJJ/0w bbfN9rEiFOZ2mNztuec+6cILruA53YESS6VRM3tsocmCMNP/Kn541kHQCaFz07XXpgOf+MTUWtfO 4mND2vvxT0j/e8Xi6Mpmyhtz41zyZfxyDlt8x6J08MFPTlMwBWyhPm34Kq7BPL1/oMKn+Ibzwn0I 1Dx+SMnuyj2Qfx9MAf93eu/B1HZLnv/LEKilOg+rnjoT5s2pogAYQk3M1hKlR+3Xoz2pTe+UIYTA uDGedvwKUm5e+pUvfiVd9Zer05WXX51+9j/fC8XNL397WvrfK69M1157QfriFz8aTPUMTLxMjZhx sEclocy5gPZphhHL5y5XQE2G9cGoTAJqwXPylmRWwhGb4EamCZLTs64/NIhhquFL1LWanDW5NkKg qfTrKJ8+bAuK8vUtf4UAY8VJSBObHHwg9+HmAKAHYobEmmYYK1dh3E+mGabtq1/+Urr+6vPSS150 RHrhK16ezgbfT//9H9LTjjgyGLtq+417XsW7cjWqChPxP7Sg2uHjG8LjCXws0qo1K8qsfNdn7oEy NOigsEZEx+seijPjPgQLojaeR254Ohy2dSqGHFcyGewD1d8XzINu1NxlHJFdLpTrcfL/4he/widn CQxmI1rfclVKxlX52B3NTe6b8opXvCRdfsX56TG77JqmTy2d+FfhM2rK5laaPaqEenSnmvZz2lCJ 7qZoYcAOj9Af1ZCqzRJelfr7E6f+ob2OK9NOO+2UzjvvvHTBGeelGa3T0ne+/710/oUXpF/8/JQ0 a8bMyNMHbuZUq4TxXvgSQlve/e53Y/q4dZB2haj1+OQZiMEPjRF8YHBgLbkNzADec0/oj2I/qdDf xCpQTDnIW/pdjeMbc9BBB6Xfn3VW+ux/fyYEMQNIRXG869xTsCu5TempmFCI27V1Kwg+JRPeTWhs mXlXhtZDJGIvtUrj3bT0FUe/Kv3+d2elL5x4YprGJp0XXnhRuvjiP6d3vvNdFUUHHyFpKh+pAshQ LrqsXBMKeIRBW45YV1HKNo4POmdyoUl8ZdJ0ZS4HxHCICwtXkI1eaNU8etnoWDHEVDsn5qmzDPYU jylrInqgd3Ke8inzdkUR6rjPVjvLl6s0feCkX1O1/207kHzxC49Kfzz33HTJxZekj370vQi6C9I+ ++yTzjnv3Gr7tXTApY5EA/m++9eXrnWlufLsbeams3//u3TFJWemX//iJ2kQU7+CoFd+oruvFx6G wCbQ5+xX1Yfyb96OO0AHf5Euv/zydPJPTg4+RwGqk20rBsuPsZoFf1hRrq3VB5ykMsSU4SAMMhy8 nwNwSRMzDsn7iG+upFmnWiHNd0Jp7clG0hAMVICq8myI9gQOgAdGRjYtXbq08rT86XZ3aJL4owue Pa/F1Zb06IbAFiOSTex/JdCSjE5oDSv0P0p2x/nYIR6qGRHGuNtIoA3tL/bcc8+0516PgzuAuWoa SvO32z7tvNOOaddd58aK1J0L74FaF0x8MmQjae3qNWnKzOkRWMKIX636XsiZyqUxURjxb6B/kKhN RPejZ9fBuLXjk+bqoBTDENH67ju1DeO7UU8EnbH1RFRimX4Q5rINZ36TDN2srWYmI8QZscloSnUQ PaMeGXJ69do+NKGdsYeEhKi2vVHAlj+PXghU1baMDBBDBsT9SLK5UTOM8LbzZsN1dKTtt5uXltTN SI/ZfZc0jbwapYZGB/OkONGWNVZVx8Fbp14wF8bL6HUthPLXRGh0tBfFBIqaChKuWd3DqtZYMJdD wwOptWkaz3lMPRph8tZ2r0CQ6SA63jQ2ZeUzoPzanu40G+bUSbSJDSELvqWYZKjkcb5Vj1a2ua01 re2DaeqcnlbDDGyLMFhHPUf7u9OM6bwLwzhaiTRo53fDYE2bMiOtW7M+bTULOxqa5Jjbd5+9OcdM M9rCO3Bys2bNCnxR4aTCRcFLpiLvqB4PH5V/MmWd3Hg6u4pnk59tnte2NHDfE4lqJU3FL3IqwvZI Z3fabt62abvtt0+P22OPBEaC26XQ3QkzK94410ydOjW/GooZLw4++GAEsZ1Zgdo6nvUzRxgBVnNT gxu5n1Mb1zgfEtDFMNbOFUSAxcZU53+ZVP2OTJoTtk9pRYBtSQsW7BI4/ZH/+HCaSUQ/BYNBBlUr CoQx+kchpIX9gtYjCDWxeiR+u3o4ONgfwpz1dRwaWEAFUic+j+6NpkBi4CXNYLfddk7amhWn2++8 I81mBW172j+F8WYI98qQjwATUzq0VaMC1HsQE+G2znIljALDFLiBca1i13fW9AyldkwYTaVfHd9D y1LPiv8Ic3MzZY1KHBylNJuqoPhhnyMimixefDcrn/SJSlGSjHooSONKplrGHpFQ2lVJCgDtlQir y5evxDd8q/ArM896hFcVqr7jXKsQ4TF79uxQqDywErqewBH0OU3vY8W7k32ajOy7z367U/2G9N// /eH0hmOPS9vM2yV9+r8/l97xnuPS9Bn0FXXTuyA0S/T9shUDqWvr9rRy3cq0DYJq11ZbsQluS5q7 88w09dbF0MTm1Ng2JQ0Bi2nh86mgUaTbb7stLdh5t9RJP44gYO72OPgZ+nA9eKVVRa6/+7eZFKQ7 Aw/6WVGdEcKRdE5618L31q1bhy/p9BCUhJtlKExus8024MVoFb/FHTuzFQsHh0w7Qlo/5p3NmOc0 w+TYJyp9VU7WAweTrJKBK1uI6NgHrW4Fh4aHerH06EjrCNsur9QcUQ1TmjtnbuCk9wbQvrlJ8Z13 3U09tgUPEJ0pp575RDhmPIyPbPnzqILAxCh/VDX779tYgejhQJo8mPSBikEMF7ceW55xtOWr161l kiIqkpqvcmzz0wThH4ZI4AcjYYNYt7d3oiUaSGvWjqS9996HwbsgzH+mdc1J//uXv8CE8r4TBqt9 H3rf+9JUCFvnFCYhBKNjjnkDk818JqWp6agXvSQtYvCfcMIJQSSmd01P8+bNSx/72MfCtENFnRpE IyoZsnQWxPN6lvA/9KEPQFBaYSQbYAJnpU9/+tNhqjF1aqefLVcLqOqWtAUCG4NATC4MiIkx4VTH XYQRnJ+Y3+tgklqTliRuJ9M9wGqS3Bv3QeyySLkyJuPY+JEJ9fe/+106+uijY2JtZKLef//90le+ +pXI63CagZmTTNo0AnC0tU1ngt0aM6jF6RennJkOPPDJPJ+Xttp6Znruc18OM7Qu8clYCepftoTZ dTytXtOT/g0zu3k7zobBbMUnqzO9+FnPSeecflr65c9/lmZ2tKadYRJuuvWuqNPPTzkZBmY242th etlLXsZkjVkiTGNX11YIZ43pbWjK77mbwBg0IyZ9dfmav3BjmNWuZcuWhTmSKwUyEK44nHzyySE8 xQpzCYVH2V/7vnJMIM8kGDyypq4QWmwheJJRPxos4jB3aKKlT+AoSrAW5hSZX/E9M6jiloeWDaZF ixalHXbYIRh5g9PMnz8/fe1r3wi63YHvoQyrgpRy6Jmn/SbNmjoLJUVXOuJZL0xLVwzjL/W5tDWM fiPM54477phO+MDn1REgPHWkERQOwzDLHZ1Ngb/z52+fbrv1ztDjnXzyz5h/mtNWW21N3VrTNttt m37D2Inw2dTLVXZXwmznehjiXrX/3mfuUkFiUpBoJlCGSQVME/5vbrCtcBImYxVhrt+VHZ4bYCL8 Jn0BoUTG+a+XXJo+8dGPpl0ZTy2s/CqY7bLLY9J7/u2DwIlw+KDPilU9qWf1inTgPnulDmCkSb3C 2q9+eSp1b8KKpoTl61//etrUEHPnrrvskm658SYrz36XfdGen558SvqXw4/kG/hw4nR05LOfk773 wx+ldfhqicWtCE/+nn/Rn9PcbeaxzcvU1DltejrqqKNCeLrnnnvSN7/5zfQ46IrKk7e85S0hWOS+ tVkbT/Uoaiqrj/g5dUCbEubBxRhMRf1QuuFvl6Vbb1mYDj7wqenJT3lCGlnfm6644lpW0qC3yIex hVQTgCDE+SyEp4suv4F+fn8EAmuiLU844PHp19/9Zrr5+msRMhDS8HdXoLQtgwa1onOs71EvfEEI KQo7++69d/rS507kUcEqznJ8rwYRwFlRor+/+JWvpun0vyaB0xD0f/C9H0Zfi6tvfvObEZa3DWXS D3/4wxCULE+BS+HpD3/4Q3rmM58ZK6rSSgXpb37z2yi/2FQbchpwRqOQBddrr7kmveZVr0TwBRfh XXznNa85Jn3kPz6Wtp67A/2EiThtUXgaph+nz5yRVq1emV537DEIxx2BL3OJUvOqV70qffHELyNA zURJsFUITw5R/fBAqS3pUQ6BR9Ys9E/oTMdQPvy8AM1AjfHFnzyo9elwAthh5wXpuLe+Je2y664Q IV6Ap1ITvd7ZQAdzE74Y28zdDiHnI2hzhtK552C2ccrP01SIwUkn/YSJjQkmJC0mUTRiJ/zbe8Mu /p3veGe6+ZZb0rve9Z505u9/n971nvdgDnhteh4+V31E5zmZMs448/T09a9+LV2OEPbKV/5rWrhw JYITmnC0iC0435zNe895znNCE3b2Wb9LV197dRD4y8j/nOc9L119zY0wj7arrOqWv1sgUMaxqyCE yBHIXwMXZrgxmI4y9BwIj3ncIPjo9o8OAWWmznaCNVQUCnBLMGrrGBjkpbibrr8+/ehHP0rHHXdc evrTn57OPvvsdP4FF6a3v/Nt6de//nV66mEvZrLVtAZmgDFy2WWXpu9898sx6b3u2DelX8IUvfm4 N6Zbbr0i/c///BRzu3vS5z57IhMhNrGkDibHFbfeml72iqPT5VddjfnsielPF/8hXXXFNWmP3fdK x73h9elTn/5k2v3wZ6RTzzgzzZk7jzFapKceemi6/LKz01RWsD75yU+n22+5PZ3J+LrxxqvSJZdc nN79ruNhDNqDuWyAaxsd0cl+PJQd5593fjrsKYeEpvOvf/1r8nj2s5+dPvCBD6S/MNY0+X10Jdkg D1P+La/ib/hOgAzV35pnm/mpTJlHNVUuXJkQz9QsjDMWjGCW80XQJsaJKQsQruK4mqPwdOaZZ6Y7 7rgjBPLHP/7xIaDDR0bSn1ZByrlpn333Sn+++Ez8896YlixfkQ4+5NB09XXXpp/+9KfpSkLGH3/C e9N3fvDj9D8/O4d3x1mNZf8fhIJB5gxXT4YwHV+wYMcQzg5lPKiAO5BVr2v/dkM6/bQz0guOen58 c/VaTLao/BADdR3MamMT+w0hOGWTLn2zNCN3XrGeBsrIKWODm/p616NcJWP6hFlvZVVjBIVE37o1 qX3qlPT5z38+LUZp+DlMDG+4/m/pIkz/VBheeuml6V9hpO9Z0pNmzpqapm41K/32t79OJzOnTsEf 8yc/+Ul60UteSNCEtShBOsOq778++an00pe8PD3ryGem8889L83fYfuwztB/88Mf/nD60pe+lJ7/ /OenM2Hyz7/oIhj116RvfOMbIQhpWuZqhcEvDj3kSemiiy+OoB5ve9vbWPlrYm7+W/ryl7+MaeKF 6ec//3kcF1HGr371qxCicvvv67cVfyNhMUzwh8KQlYyN5jbM6xrG0oXnn512321PVh7nsaozJb3g Bc9Np576GwRKVmEgLQqRMc4QHE8948L0rGc9l8iWczEZ/QP1uSDa9sPvfD194ITjgceq1MPyk+jj 0Ua//eWSP6fHH7B/ms0752pmeuGf0nFveWs67YzT00tf/vLADVfSWhDskYHTG1//xnTOueenKzHZ PhI62o+i6/LL/hKCpIqj733ve+lb3/pWKJSuQQCSV1KIFMYvpzyFrEsuuST6UJh949vfSa97wxsD tmt7StM7lXKaEEpDd9xxx3TWH85Mv0PpdsEFF6Qn4tOlYqAZgXrJ8p5SWWd7QLbFCHGvOvqVsfJ1 6i9+mW666Qb64Bdpv/32D7zZbv4O4c8lrE0GyMjn5Z0tfx+VEABJNyGNFePFSLF+fJhgLJVixgeL sZH+4ohDnl9cdPZl3B/lGCmK9Twn/AsRqDgGyO67m3+yDbXH5BZB5Asmt+ptbLXjhYG+/vLFEhzF wqtuLHadt2Nx/U2LAkIAsVg/3FcM8iY5i/7+3mLd2tXFEc97cfHvn/xCgDPg2c/Tof7i+ssuK3bY enZxwR8vjPoMUC69UnzxG9+DCnUUx77l7cWdixfzHnuHF9ZnpFi08I7iwCceWrz1uBOib0YGx4uV S1YVu+y4U3Hmb39D/ey7UQKmlf3b2zdUfPxTny1efexbi2uuXxj1fCT0IcD4JyUHxFAxPtxbHP7U w4qLzruwHCfihI88AsCeeBPciV+v//nJqjmsPcpEvXBcqAz0qPoQ1bbm+N4VCA88WsOxhBt3Fh94 96uKl737PcUdPF/BwZOiD1Rjw0YK5a314OlgL/kHilN/flLxlIOeUNy96K5i9Upy+nGOsaKnWLlq aXHIwS8qTvvV5XFvzbrFPFxdXPu3y1BDbFW88y2fKXrWkpeqDQzz7aK3+OH3f1nsvf+zipVcLeul Xt1DxfuPPrZ46SuOKa5fdg+90k3x3QwiPkI1LjnjNN00ij1e8oLiTt7p8/sWSM3vvOHSYs/5+xcX /f76YmCdD6xGX7Guf20BcxfDaNBBDN0rirt5b3FxyL4HFzvO2rW45MJLC1YNfMgY7y8wny0OPPDA 4gc/+EGB9jXuP6L/CEJABpUMujQa9Gk04Bfw8rnkKpDIkxXFVddeWjx29xcUS5fxns831ySqOKT5 XReYTGNGaOggh3S3bDTXtPumJcXB2+xSnPWni8lbGXPVto8Ww8PiijfGYq7gJFLGqec976iCFagC P57yAd/s6ekrunt7uAb/hm4uvv21/ygau7Yp/uf3lxYruL+eyvWP9AX4n3P0vxUf/q/vFiO9yxk+ 4jBVZOCfefofih23275YvnRFsfie5cXuj9un+M+P/1dxx6JlQRekDavW9Rb9fNfmln98OTq0GKED +5GUzOdhnv6BkQJ/xbjw2uOM359b7Lr73sXiVT1RH1trS0Z4OIrz1MrlUBCRwXKZO5fdcVv8FutH ijHHEfkci+ddfEWx814HFrcvHyx6gf1IP+0fZJzzzhtf++rife9lLiQN8H3r09M/Ulxy6eXFLjs/ trjsz5eU5Q+Qf/1A8duf/aTYZZddiptuu7PoHy7z+04fRO/Ou5cU+x5wYPGTk0+Jclau7Ym6DlMH jxO/8vXigIMOLg4//Ijiq1/9KttmAW1C6dUmTNhqLzd6XsKHUB9j1Gm8vxgfooyx0WJw3R3FM5/2 +OJnP/hpBVlGiosuPr/YbsHexXW3rQ6eYm0v9GjNHcXaRTcUezz52cXHv/fLYtX6HvgG4UFLulcU K6/8TfH0fecXdV37FX+4saTR3bR1+cIbi913nF18/ZtfKQaAsfVYtwZazWs3X3tLsdv83YvWpqnF 3/52W9D0Phptj/dA28Wbww99anH0i19a7LXHnuT5W5XWTaZ5Z5xxRrH//vsXd9xxBwuL40EjBUR3 d3chTA/6l2cWPzzl9CqJuGfZyuLUU08tDn/6vxR333lb9Bcmnb4S/fCbM88q5j92n2JF31jwR/jh kWeo+M7Xv1wcftiTI784hF8rMLXGRXH6Gb8r9nvCQcXq7j7aUrYjcIdntntLevRCIHQQj0rJ8e/U 6KyRyb+Ti1W7oS1vNq0YwoxvBHvrNuys9VcyQbtxRDefmx2yJI22qhhi01wiHKlzNGkWNG3ajPTv //7v6Re/OgXTu7VpwI0QteXAZvq3mGEceeSR6dDDDglNoE6v2m43tfCctfqPf/zjaVuWwvuwD3cf h77+HqIb7RDOxWoqb7v1Hha06tJpp50WNvOHH344y/SleQDECi2a2saW9KQnPSndcMMNmDrMjXpt +fPohoAE5F5EJFYIyjUEV5QcG2q6GzUXCRU4OM0qjHtCqb30fbV5Lj6Jrmq3LXVw1eowX+rFJ+8s HNZf/OIXh+nejJldOI0XqQe8HGUszcT84g1veBPa45PS6tX4503rSr2DPZjctKbZ7Bn0rne+G40h jsaYk7S5MShjavbWc9PSJcvx5xthNag9rVt0Z5gH/ud/fiJtN3te6h5aS51c/SJy4PI16aBnPCP9 23vfwR4pg2k147TqgoM5XhcrwNvOQyvNKkFbpz4c+DHgaN+JCS7Vi+RCgts7jI72s8g8nHbaYX76 1Kc+hTP+gaGplT5obz9z5sxYKdAMUfOYR1eS1nk8UBJjxKpHTqq22oEwWbUN3rjvn0FLDAKkjUKY ugKCZUtKZ3f9SGBjMM8q/V6FjP4k4pQ+JZ47F7XFRtY+ZcUXPyFXgHoJDe/Ac3xK9w88+MBYIV26 YnFYIZh3LuZVd929ODVheqv57UAvgYf4vmaDln/jjTemw556SHrta1/LHPU+TKxmx8KZi2fTp3XG d4cI+qI/sH08xCqZ564+NVOGyQASmuxpPmf0TrM6bgaHyy0eNF/UrNXrDCKGZwS2cNXLNMQ4Gmbs zN5hW654mVXv8D3mhWwxcffdd8d8PMwKVxMrHHDL5BtOL33Zy1ihOTUtwfSsubX8fjv+XDDx6cCD npCeQOCM+DA0pHvxknTOWWenT7M65Yq3Plmj2KmNMNe24mNj4KePYkJoUAVTFytA1tVVH+EmT3DT Tbekd2Mhcuyxx4YpW15xXo0/TvaFipfv50/sLQdM9Emz4OER5+z16aorrwM3VqY99twVMMQaf9pt tz1Ybdyb1Zg/Bv5MwVcaBGDF6Ry+N5Je+aoXpdYGTKulxFYS3Jm1+27pRS94PjRrlLLL5us75CqZ pnWveMUrUg8rkOLvtOn44hEtc9fH7ZLedNybwwxZc0wWOymuNNCcopkh1env6Sd66YqA946sFGVa l39tslYCrsq9/e1vjxXVTCN9pq+fMP3Xf/1XVv5+Dx0fwJpgMM2ZPcvHwaM456yHN3J1Uj8q+0bT P1ci161jA2gGUg5W4cqtkSpvhrcRcTUZz5ZDrqK99KUvxezQCIVl0qVL3NySHt0QcCbakjYFAlLy jR01ZToQm9k13WxuDlrPkrnn7RIwUgOCSzNOrijQsCVmwQhb3jq922Eiy6lFPq4e4rQ+7bLbzuGE qp2we0MNw0QuWbw4nfi5zwdh0Iepn71C2lolADqWDqT9IfxOsOizYklcIxAdj3uYOHfeaReW0vsp vzHCLa9cuTKIVhvmCVsxKbnbu4QygklQp2c+89npiv/933QbzqMRDTBasOXPFggAgWxaVQMM5+GJ BNbruKFkjxmPzNAq9hphi5FUGmCUOceIbnQOTIvmbGvvWYx5X3269OI/45P3oTQF85xWgjrItHjM mDErmIdjXntMumvR3SF8WIqbhjo5DrJRrxGUjMI3hfEi7g+yia++GJqHtHc2p34cxm+9+Za01cxZ mObNTWtRMkzDJC+MhWDiOmcRBZNIe/pu1DNzTsNMxGiYo9oM8o1p+HtcimmJgS0c2DJCA5gnlvWI H77FGOa+AS/qcEJeuHAh45n34VVkfEv/KCP29VSZ0vLNR+NfqaPHxjiUR+6UZYs3mlpoRjcwAAAg AElEQVRaUgNmR+JI0GEyMYVEEl9NRtnT1EmByWQgIAUbfUgcBzLsXpvWrFmHfw+b4VbGpnND/8pl YUa7dNkK5obIluaiZJiKDy26OMYY84PmgpWXcsQ0lnXStZj7aVYrg/vYxz4WZhVTPVIoGfiGgpB7 RLViO9ZAG7733e+GD67mf41IFAaI0c/W+r3//R+Iuvm+dXYOa2bzYINQxJYfjCHDpWey0keQF31t Dj7oSekCzMhamV9bGNu3XHddes9b34rwRsAHmHYDCcyevW2YrA9DXwwW0NlellKnTyblPgXl4+P2 eGz69re/zUbYKjBTuvXWhekrX/lK+vCH/j31QqtCKkSSmAat0JzvJS99GSaLW9M3+EsiWLXTxubW zjS9a0Z6/nOei0/l2rTwriWxz9IQMAis5o/vGNzjsMMOCzqU2+uvShTNEx/YB8pAH8Ci3lLl6DGB bgTY9evTNVfdQvj7x6Xd9yOoQ5OSD8/qOtOTn3xw+tOlF6Qlyya2zLgMs8bDURDhLpTWEChn1Oij qrXsuL6edNihT0mN7VOAmbXjNvhw7jnnpIOfeCD0GLN/FD0K9Pa3QUfsnPnz50NjCRBiZlILNnyO XAwL0gjBqObN3Sa9BJ/RBTvvXMVZ84m3WajRB+pcogm+4x3vCLxXKFUQU3jy14173/LWt2PufHma 2UWwLHDEfhMHNddbsGBBOuSQQ9KrXvlK3B5Owgfwa+mOhXelx+7+OPCPrWIAmdvumI563nOCz9HU 9cn0y9EIhgrAnyGM/lIi8r3whS9EgNT/0H0DEdRR4ImbW9KjGwKZP990KDBoygRWqXYy7JWoJlM1 aX+iGJyBho98DJQYqFWRxA3CxRnK2NCf7hbe3twOUakADvWUdux1GEzHHQkRSbJjONlxYpS1EiJ5 lEH8oRPek9755renV7/0RWmHnbZP73nDm9Jx7/631AZhiQ08/RhpGI1LIwKZYZZHWPlaj2asFaox iHa+BUZwKpr6hsbVaSpRjZp4JoGUsVPb8pF//xBOlSvQSiLMMVuPQZw9CgStTgjjtC6cjv9+2FNW +NH4tyJ0GMijOoQyHO7jRqV7I9e9suR3/wG/fru2LtVP8iDfd4NHGZH6gmh27DcS8fKZ/LgIZqOT 8dAF/+I05js9yBRdbeAiTssr1+GkDaOyfPmy8JP67Gc/n54Io6Tmz4lZTXXf0CoYvq7Ut7aDlaCZ MbHCXhLVkmiVg8sYD+K1wSrK2o34XnNnuvuev1gFhJjxtNW0JsZWM8FaliKE3Z7mo0HtHVmZZjI+ UyMfG4NOwSjedMvtMIFE76OobeS5xuE064bTwMp1ae48hKsGGUwXhIdTF075g6w0tdB4ha3QwqoO sSyONqJGTSEYyygrzU2Ma2mEwlNmgGVGFaxkFB4dSXrn4ZwAzKvnnJpiDoGhM2GYWeaLq837T6V7 bVGQU5QF0dZgeMfTOPS+3hjTCN2D0nHmEPM5VhRKxhkZrhz1sgogYynjXQ/OzELoN0y4YceboPUG L1q7FgGA1DWjFKTUYxiFrAOhq6VtO1ZQ6tMMcNJVEnsASy3KG+F9BLe69VRB+FNhVPdd7GPmwoY4 Om/udulHP/0J74+HAPSBD30wfGVlUE2j+G51MKZtqvsWvfxlr0oH7HcAgQwYL4yPJoQZhSWFMZUi +uuYxH3Huis31shw65inBWZ4x7lwaieCVYHAhM9KM/67FJT+il+NqzoKdafj/9KI0mL6zNlpMRHw rrruhvS5E7+E0vHutMO83SiDyJs66PBfzHvHO98WTPmrXvNqlCnbErnuM/hMHcs8uzPlk4GVKiS6 NLB8MVYZ6xEGv5N22u1xWIegcKG++p8556ugCYGTV+ZvTwQ5YNkK822/2ZzVq1byV9iMwhM0x9i3 //KYV3iSH6hdkYkXNvhjje3vwJxoQBPBEbrXrEyf/8JX0t0oVpvqO+ObLa1TQsgZxZ+6nhXED57w YfgAglkQ0KEBOjc6RBRESmvrnAEciDJhRRugyp0EyFny17S+b0WaSQb1XzSD1aZZhLtn1Q1caCeK n/OXbF8L3wft8C/rSkuXLQZUjcBkJE0hwqHymLDW4qaXwA2tWOGYhIFKZpUDCk3+SkPdCsf2f/CD HwxByHsK++K4cJ45e05agcVBOxJ/D8EkuqYioFP7+fPnh7/s5ZdfFj6pN992a7oeH9pxCP6HP/If RCjcP/3oJz9ltYrVfpTXkfj+7353RrqQQB+3L7wztqRwRWp0dDGBJ/4jPeUph6bv/+iH+Ihtje8u +AzNzp0pqEyVksqLDf46mjaetAuvTdUyLFSaF/yB52Wu/K38TjV/vrHl9x8KgcrI25Rv2oU13RqT G/cktkFwQZAQosgWvV2LMCJW7fWm1OOf9O4DYHDWLJutHWYxp05WeAJsypnMnoMjLoMXMFwIWyqA 6BmdT51Y17M5Z/1UVrCYiKagfXvagful3ebPwnHzd2nOXXuni25YlE74JM6RCETCWLf8lWjltpo7 hw0YG9M1f7ks9ohqJPJPb18/YUinEn6VkKdo5K+6/rrUxbL3rLksffPuQU8+KJ126i/STkRWWrDr Au5ZIMJdP0vhECp72qg3KH+ifmWfcnNLeugQcFwA0DqZHs7rnZ1MIssGqRwjeZSRu/rUs3tlrz79 /3/iXii5XoXMH8lW5HvjIHMzqkmde9MwogeMYITzYtKGF0ojaMKJ7xQaWne6d4i4GtUD09gLLVmL o/q8BbsSeOUxBKZsS3vssUcI+2NqiMFtJ9UWGDCimweqCgwnWEYbzKMCjqs8PQj+0zHhc0+2mTzj aQd7CTUMw3SiGKCyex6wW9rlsduy8nVqevWO74ER2Cr1oVadUgczMT6Yrr36b+mHP/11OvjotxKB LIovAT/CKtZ0NicdWJX6hlcEObO8EUKWNcO4qYDFzxtzWATIepglyh2HCdbEb7xuiFDsEyTYKHwy TTKTnsuIZbMeGSuvM6MRjdjs/wCcegkgnVaKD5UWiUcVBkVEkjurF+gG/MjP+PXZ5pwqzbYZrJGU goH3JPoKTTbb/a6g1S3g2DjhwxtgNus0S0NY6GcAKYib1pN/DWZJvh4vYuqnDs5xt+zuRWkuzKLR xQaxUGiGYRdHfd5W1YJNY3sMtgbAQHCsHyGFCHsFqypip/Ub6VuStp7BSgPmc00oEZykFNSasJZo xZphz732QWiYmr7+9a+nY445JvD0BS94jvJMCE+OdRafQnnYTv699n18zB9q8S3fVNa9PPev+8eZ VqxYxZYAhJjmsp7tOipyGeMcWEAjVsGob7tNGXZ6DKXhN77z/fSa170xvfUtb08trD5ZB5UlCx6z S2pmJWWgD6ERk0XLQcVY+XC52nXokw5iq4E9089POSk98zkvTBdcfGn67W9OSzQ7VugaXGUe7k8t CG5POuRABNq+9KQDn1jSt6ht+ccAHwoPJgWLOgTHcQRUV8YNfd7FSrr3WonmIA3ThMzk2FeAiBUW AfYAqY55Q3MzjOKQa/ugF/XpbzfdrCST/njhFcinmG3C7A8MdcdGzHcuWphO/tlv0mmn/IrAU2+h zxvTgU89In3i819NreP/AUAQyG0jnTEO3a5vnJluWbIOPdLqNLdlONWxsN4wpSXtse8B6fvf/24Z +Gp9PwJFBwI7+zSh+Jk+fWq66torQ5gaHu5FeNqelSe2UCFoSC/WLvhXpfauKakfQuoefrU0Ttpt +6V/CqUHHHBAmDjvtddeITS5aikdlK/SHWLBfCIqKpRRPl0cOPRdVjgVtN74xtenpx52OJ1fYpZB tAwq8rSnPS2d94cz0pvfcCxvyKemdNIpPwuYv/xlr2Q/wmdwv8Q9fz/zmc+kI494Vrr4wosQ/l+c pqIMGBp0g2pnv4mU35jA43JfqWYUGDgAp7rQKDBf0t91tA9Ipl6EsVaES98FFKyqlYeYGdJqpfgR 3DqasAbyewSfjC1kfEcMmfheJTM/zhdZGPdXYT4L4xnHJnJvOXu4EMh9/nDf571chF1rp4PGMoZB FqEcUkePnOJZ7Tv5waP0V3UNIwAnYAgJoWghhhJc7XMNG+vgaGNp2rSevGuXLYVxrE/vf++70je+ +dX0pW9+N73smDeknR47P+bcXkz2BPhWc7AJh6vs716DrfDU9Mn//HhouaYgBPWhEnd5feHCu9K3 0KC9+rWvjoB+qwjhbKjQO++8M+HETjkYMak+pz6t2r7za2jX67EThgZkumTVtqSHCwHHg5MgsJ1I XEyiiqWmSvOBcuxskH3ixX/wWTnmJ6YRNeKBJtV6tMKohPDEk0GE9zLROMxMmUfTTDS1GqtqTeME 4l63stTDaKMb8SEahqEYQNP82mNfT2S8L7LxJv4apAa4qVEmBfezGUDDuXZdTzrr7PPimRvmjo+5 WqtPAgqD6bCngM3JeZzVn6HBcUz/ujDD6E/LFvdzn9eY0I8/4R3pfe97f/oCYXgvvPQGmMyGtPTm 69Jvf/QtGLJjYeg6iNa0LGEtMpHwGVi8cEnaaecdMIu5M+47+fttaeOq1cvTVVdfhWa3GeFJFa6C EeOcyXRt96roZyc3mQLfy1pY78kklMIg2WRWecfnOTkxbv5pMsbUtMjmRRPJEwo5EMQUcwi/k8ZI PNuM/tg0cV0IyMxjLFBOp8EQc247IbQtMJJLWFXoZY6YiZKsE+FJfyL3vhlAweD706Z3EUXVjXIp REUMgkbYZHM+h/2f1mJ+tmLFimAsA6TAzlURzUpH9cUFL2XMOmDouxCe+hCiTAw9cNP7mKHX47do 9FfYtgHmFTQ+MVfM33En5oV1Ifw/8Yn7pRPZ9PaLXzgx3Xj9rcEQqtwQbaNqfFydnKnC10Y33ldX 2p6tt56F8qMnlH4KHOY1kp8mgba1FUGlCQnJMbK2G2UJ7yxdvhphqVx2Vq/Ty0rzokVL2RPpddCZ kbT1rJnMhyh3lMoYp4aIlwZLq1559MvDF9hIeS97+SvS3O22Q2gs+yrMEmGIG/CHeeazjiDS57fT 3XctjDr1IzxYN48R+srfc84+O9rZYh3hjgdYOZnOnkJEUog8jmfHtYoR6+2Ytx2mrHyNi/v5I0M8 xj6RzQhPQ6zS/ZjVlWdjPnjAE/bBlG3vtPvuu6e99t4jPWbXHYl+97T03Gcemc7Fb6i/F9gh9O62 x94I2XemH337m6kV3FJItsx6TFKuvPrm9PXv/Ij7o6l7+W1pBsKTtfuXZxyRCNgQcFIZ7D19WhWe NLv7+S9+FvyKPnc+GxpCWEL4N+R8A3zOLawK6daQhSe/Jw0UHpnmuYr31Kc+NUzvbr/99hCkMl3U NLWV+vVjcvi/f/4z3xhPK8FvhVFXp/TRWrVKHNW3fCxw33q6uuqq7PbbzI4VWhCIOaWbiKsXp79e eXWENRfUrn7lpGXAnDmsuDInrYP/sT1tCE99feUYifHEPcehKa4rNxWeTNGnaBHGEeLqvMfq5dms jp7yy1+l2+5YHu8C+hgn8QKTkv58o4P9KOzYm4y5wT3Wfvjjn6VTf3N6fCN/L/Lfx5877rgDQff7 4RNmFuGX55DaNt7H61tuPwAEHljF8QAFbHm8aRBYgUDUvbaHUOHXoKlui1DGa3p607xtt0+zZmsG 4KAqmaYmBlEXDo0jMJFPPOxpaBQ+nv70pz+l937wI6F9gS7E5qJEHgqzu16IwBQmVgNJnH/RhZgn vItwrC+OCfU6QjW7u/ve+x2ELfJLohHuoaOj+0c/+tH0jre9Jd1116Igvk/E1vn2Oxela2+4Mf3s F6emRYuXpv/GnOoVL33epjV+y9tVCMTEXL165Jzo5Gz4bpmUtimaDhVpxcJ70rJ7FsUeJrfdfXX6 /R/+HHuAKB6aVYf5a66+MjSVs9Gc97Hnhv5Q3tubfUY+8YlPpP333Setgmlz77SLL7k0nLU1e9l2 u5PB2ccSKvfqpLO4ZhB/uvjCwOM99nhcAPaiP10QE4rBHlatWpHWLulLh+03Lx3wzGenW26+Pr3h +I+kT//Xicz6vWmnqYMskoyn9378v9PSkfb0yz/fFOaGfJb7TuJtYTtvAJevfv1raSV+ha945dFM inek0888I8LudlPPc846Czv9Gel2fK0KtNOa6Gnvf93VV6d5O2wfTueLMbm56qqrwuH/lltuSdfh xzF//vzwhciMRjDIQhFmS8Yg34+GbbZ/ZEnuL4EUITTxmzUN9zILv7/3N5NnGQyZI6Pa7mm0BFy6 9m/XBeN5+V+vwHSqQPs+kuZsMy/22DE4invptO+yIBhImdYhmC6ZzjALhyEXX2Q6b7755nTXkmUw r+3p0Ccd4HAMhnPRTbdEIAhxkqhz7As0J+28YDtGbWK7gIui/CmUaxjwA/ffL5j7O2GC1Wqff/4f MW2aE0GG+rFUWLBgJxjpaWyl8c4Yq3573333rQgrZV8olMnMtaN9v7+kGZUBMBwLChSGqHYPQ4XB WTNmYmmBfxHaRsObOxZmMT+6WnHKL3+TvvCFL7GC8QRWYZrT2ef9McKFv/m4t8aWHGf+7oz0IsKr DxMQQZ8qBZg6BBDpxROe8IQ0Bx+l8y+6LH39mz9gBWWihjQFFLSD6tPTn/aMdP6fr4pw5c/Ah0iT Qfd1M+iS/WEobf2cdt1116ARCgYG23C16WrGvXCxPX5b2qUAYd0VNFxBMfns/tIwwk4LAS8UwZes uCf98bzz058RKN5w7HvxTbs57cLKPW5Kqb2pHQG5Dxp6XZR/6623plNOOSUd8MTHpcfvv1esHL76 1a8Ofx8DRWlKZx7Dist/uBokTTLttttu4R/tvpCvxL/IoFIH4Wdt6HzDj7unlXjnO7ZPs2T9qG27 Ao7PbO+aNWvYl+qKgIN9Z4AH/ZyEk0KLJo2aYkrHjzjiiHTMMcewf99zA48NluL2Fb/97W+j7N/8 5jex+bCCinh/0kknBY11temwww6LNhgs6/TTTw/42y/i0yAriG7mvDX4/tnPfpF+uSb2Gdxn7/2i jvfcsyzgZFCfJz/5ycClk/4dAGfwoUPR8GCEGAUgeTtFLBUWpssvvgTh/OVpXf94Ov5DH0nvfuc7 0pxZhM1H8RYmpfS7/nwAB4TTVHIkfQnT0w9+6EOpEfP2uvqfphe/6Mgo6/7+2D+XXXZZ9Jlt33nn nUM4tH89tqRNhACDeBOSocgJi20Y80oIVWNFjg2tL4447IjionMuKmNHci8elzE34wLTHt4tw0Ru QgU271eBxxte+aoChXYxpb61QC9dtDV2MGJaiuOP/3DR3Ud4WmAn2DAJ4IQwEITcLIbWFkNr7ile 9qKjivd+/AsR/nmFt4VswBi4Gjqe48QvfK54znOfX9x46x3Fu977gaKlYyqOFQ3FnnvuWXzt698k TC2hSfvHikGz835vN2FMCe163eWXFce8/CXFnOlTis6WBuqWisMOObT49nd+UFz1t5ui53qHiM23 effAP7f2As+xQdjeIw/9l+LP555fjhPC8gZgfe5R+fHU7LVH5bFZ/glJfHQMgzyV8T+5jl4TTano XbuKvEPFwPKFxUsOP7BAlCrUH2NSE6GTsT9FHQ7u17cVde1dRX3btGLW3O2KRYuXRZhimIpo30k/ /XFxxDOeHuvcrKwWrNoUROArvvWt75RjhFx33LGw2HHHBUVDQxNjqb7AAb048shnEfq2t1i06O5i r732ifuJMZcaZxTv+9hniIW8uhhdcj11HCnuWLqmIOp58acrrisWXv0nnhEimVDq//n5rxSPf+E7 iquJfNxtdWjcWB8hkvuHi8E13cWn/vPjfHdHnRjjeOVrX1N843vfKa67+cbcjcUJ7zk+xhIK7aKr taNAi1oYqhemosDWv0DrSt2wnmpsLGA8CoK6EHra8OdlQmgivC50l5C+Hpt3MkyzuONcUOK1YBW/ o2U+9oaEbdwwzcQtL1YVV11zNWHMX7jZhzGvbXO1Jz3J7abtN/zlSsZJXQE7XUzvLHFD/GKvI8YK S0CNLdgSOWc0Fe85/r3x8uhQb/G5T3ysaGNRw/emtpX0G/msxPu6xmK7nXYr/nLlNcXoYF9x4bm/ C5ycvfWsguAK4G5j8T+/+G2E+f7Oj39WYEKL6yv3GUuOufPOPrO45dqrCuSOooG8uz1mj6K3ZxAr JfupKD5BGPPp02YVjQ2ML+a0ffbev/jLZVfGMzT4kS/ykv2BEsw4ZVjvVBDEpYDxjnMYbnVOxbyt too22s7zzzorvgHBKL7/3R8Uj9/viUVbK/MdsHnX8R8sbrj5LubBJcBtCvRlZnHY4c+uhksvw5/L x7CBwbqVxcuPfkXx7x/7ZKCeQbBz2HRDobPfEofbKxCevXtNYR0JWhD1sn4e+BEXv/zlLwuiv/FC mfDDgSbFOmOBKVq1HbbN+whuBQJIzv6gxnd/n0AviuUrby++/q1PFNvu0En76PemdsrvLG69eWnR 013yZ0uXLSy2mTezQIArpnTM5fnU4oT3fijeJ/JfgVBXPO95z4v6C1+UNwWCSNyH2Y76IoxU6yXN Ov/884u3vvWt1XYhKBeseBTs9VT4jrBAuCyWLl1a/PjHP44yMgxyv/qLwFi86U1vKhBAoz7+yTQO IbogOnCEM0egjPr7DsElCvbLKm666abqOwhlBcFUCoSt4rOf/WyBMFitG9H0ClYVC8sz3XPPXfwd KdauW1a87e1vKl76shcUX/3aF4tnPfsZUU9MMItp07po39uL664lhju4LQsWxInzNeCytCrTrEy3 HMJlIjMvOMZiSw7mlvVsbeFcsmLRLcWLj3pusfNj9y6++aNTqmU4LmKrG2h84CTzKxv9xjf/eN5F xY6E0z/k8OcWNy5cXsAelnQyf67mV9g5TxAAJeaU448/vvrUfsvzafXmlpOHBQGl/01IWwSoTQBe if1Q5NG1MAcMBnydigE3GHCgcqxc01+MOI74iONpiM1kelZDkBmAv/rJt4sD99+3uHlpT+wL4jYz qyGmDo4YeCMwXQy+H3z/u8URMI9reiiLPJhDFavXuJNImRz8ktdlK9cVmP+VH5Mpdg8EvD3HEKbG hhjAVgDpDBt6hC52/6JSvmvdtqSHCYHoWN5Fen2wApSv/J8ToJgYyplFerBh/YZFlEjg+QCSxyg4 1ocwtd69RgZC4F/VOxw4KB6KU+61sYb9QqrtBPVM7mnj0dvLu3CZ7otmIqBEHHFR+YPfRNwjtHjt bfYbGa4KWu6VRkjyot8qrmUyHVXIY8Li0t1x4v4g97w/1FN89Xs/LR7/guOKRTyTodqgsZSzbs1a 6tZbrfcQG57YHndJ8RNOWpiBcOJBkexjMgazlxMmFYWHiRWq+LW9tYJS7Xlk2Kz/AIegShN4I7wy I1IVJEKAgmEdd7cwBaj/x96bwGt6VAXedfe990530gmbrAPIDCCLIh+gIDs4o46Kzrh8jPLT+Sku 6CcDbp+ODoIw7FHU4QOHEUVmFNlDQvaku5P0knR3upN0upP0evd9e7///9RT733v7Xu7O30DBuzT /dzneZ+nllPnnDp1qupU1c7a057xhtpDqMIwaL5FaVDqimUutSQeJIsvuWaH0OwShHeeHag8+LMM P44TUXkd57yynEZFU3Q3ByCRMMTjzKJoE0jEMCb9EOcpmY4dgAiD3ON2Fvrd7x7DNEzCpn2S84I8 D0ndH+fmzE1Gu5AH6QhAogOcATTtmWn89wg3z3GasILx++gRD+zK4cr5ToZhh1henh2YlYkAzFzU 7r9fg7cBSHNy1I4MZfYiTMlnhpHH0qEzawcITenIQ4OFtDE4GfopcOPspNGB0FFf/eI/1ZhlqR08 7Hlw1GviWt+lhUGj3BPQbU7DdqZeV8XV+snMmqHqZxuJux0UodRfwzQOjPithPEspPM2cAMhY6sv BmpHH7qT+3htzAP1JImIE+bYsQfhn1ptOvDzaKRhz6zjf+lQlMEZAtVxK/gyM+nrAN+FnVH99rmU 2VelXJajPPves5vMoxEKfxvf+WxYodChMX/fm7Z5lnDWi5K2OlQcC+52Yks6BW9muEiFwSgG/yc5 hzHrIfmm9HtxTlQQj0cBOimz3ksniseQKeWqXL7zyjAXNlvUvWgjsc9G0O/WSa7J0aHakWP9IWNV 0jmaCXg2Gh2vCQ8wNEPeSbqJSdrG4dxG1eWxyq3xZtkLPXyPd0P9s22UUGhR/3Dx4WFT4Ozzw3Tz L8I3lgIuKHSth461LUzFd/W4BTJnXbBOYz2LLZjNDt9XOMtUfWfqY9p1Ahe/T3E+wg/9+x9Jl27t 4xwGHQoYTyJuOws1jeRUuYCCibUVPushop+059YI+sC6fmSaLTk3bVqLCwbT6pxBYWqnTxyPMM3k Oe2CLCJTKUmLbWRZtDlKvFHcNS7CI0cB17wtC4yHNX4qldZ74/tl434zXsZ4HRlVeIpXwVGXCtck TbDmqRV3t9h9xF0V3I2OxQmug1iDG49OKHpneXdZwlq3Hq7SofHjCTcUXEG8etkEZQi3Hs9FE3RN cu2CdWWSRfKex7R588Z4F4u2Y12gazlYL0IgFzP7jCt+YhQ99rVIpMnWmOxGNRnrD80bl3UGr/Gz f+hYuDnt3H5rupxdmHTGKHSfcX90oTbPOpR14advXIEGjG3aT1GOpjQ+MR5+8LHgWz9FEuhgFyrx KeA2zmWraddDGd/yljURJU3fqw8a45Y0vuXuy/quLtAk5h4s1KJwfq/CFEZ8yxV8AeEziuCL6mqB /xwES/0ZZTOALP/Kl3VijPfzbJrgWsLmSv49Kyp2Lon4/NFXjo0oPA9H8FiLaRY2bdqYd7rrZp2J tXUId6o23MbU7xPsEsTGq6wvjChpHcdteB6S39wOXJeiZj7O0y54FpuwlrOewvWIZ4N4jlNntUFK o6tQkWU9k5idiLhn+6P7mKBL2xWsRVL2dXUr7VsHNJnHvUlwU4ECrdRx15QMDUHYONYAACAASURB VI3hDjbBEQP5y6Vb14ZXlL/UFcqRu+mpizpph5u4v+9974vzrB73mG3BBtWbgCdvFRe6QgPpNoIe KuUQJzoM4Rpm/SxrmOSVrmlC6EN0jC5rJZ5lKnXaMLpFGvd86ve4a5QpwyAub+x3mrZtfQy/m7Nr JGhKZ938PMuoE7czMCAvjzPxWAeFhDO+2Apf10PdBb0sR8lbWtNRia3VIzB/LI/6ybJ6vpLPlkd7 wnLIK9OwHJZR/Sw9dMkzfd3zBNMp8kAHKFz64gN/3CxCKDR0a3fBPAXTFjfTFHw2baHo0JK2x09Y Hi9xFdSrlsvjYTrcfhjQ3XwKGXK3ZL95tIyuewUm2X5delrFJif5AxRdX8IsvuedBZUtd5gUOijX BBtpzHC8RgebqVy6ZX3ImOtyldM60Ea0gKtufNZdNx6xeLqbrunLwjzCzoPnA5ZBF0rpLb/KhiWF FueTxsUwy1Pg7PxfPs7Ft48gBWZiqz3YQMUcG84H19pYuTWti29Ze4oScpFpU7qd9RF37LyNtRYf Stu5M8UeB+qW891UhyoJd7lRAdzKeU3H2LrVs530Td5/4J60fcftKDQrJLvy6AOL1drJNs+Ciy43 oKj02d2IwtWYRMPRsORV86ZtXBuSHozePg7WvQirpACk1zZc1HnK7Dgj4cbXj5qKW6yLgi2/C57i iB3AbkxsK26DxRkgTMrQ6iA3bJE7zUIiF1O30PnQHJml4dIAdNt9O1Y+m5YLsAXXFRToqgYd/N3L QbjKpg0M43TRQfK9dSA3mtnv3M6Uh+sKLng2bdHPbVszG1GMJNxI0l/9xcfSLdv3pl27dqU9O3aw tuBk+vVf+430fz77mfS2X/7F3NkjngvZNTpNyAXkgvkx9hnPHay92Mw5VTbM3V3d4fvvInJhZJBF yhiHbiYhnq49ETRANBJs7DQeNTwK+K2Az4b59gNpl+lXL1uQQGmSY9544TEZ1c/88tvsr2XzYle0 FtZPaOy4DkJZEdrb2tndjveMNjgQYIdH+Y8OTtXpCPPOw30ADUzBulKeQ+4rmVrr2hOeFbfurhwn xLgSvzHqqoa3YPswg1HnAbVrWOfizq5+8cwjD8ONUOA+gcFpGdwJTkPf322OjvDOzk1l70aaK/0p xrb1QJnXKNaoLsbfNHXQzpxGKi679WROsnOfsHZtD0Z2V+z4R9UMw3eKjTcsm22YgymmvZ21Otd/ /br0vz716XQ1a77+1VOfnu4+eG9IomuL+R/lYlw/0i0dqL51bPtdFUSjXsNfHF3jKJ52JEpnoNRx 67WH5QrqC397lU5C4XFJN2e4/F87tcLaNRuRDSnfysBm7mQMD4+7SzwdAesOm+4wsOS9010YKb+h J9k8w/y2sklCwUnaWhbpYsfIchScfGcHSR1lJ8SOmWB5tSdKWYxTOjt2oiynnSShdHpMu8iiNCqd TMOYjuAAcAHj2xkTjFc6oNK4pOl78xIfQdtHUHYKPU3TcJZDGIoOHXKF/HjWWFdnT3SezMuNLIRZ CNbDzouwNto07yMc3FsgU7j8Wrir3wUPG86dKHZFpOPURnsgTDC4aNwu/G2V0zoorHxhfQxeuh31 svrdzhtqAZ7ntqweZ5mHUgbbCuktv5h5qvNzmSgXXz0cClAhVgEXXfhWQbyYlnWanUrijHH8drZW Nwdncb30+PGOMqq96EXfXaOxrLHuNXzW4XPtLb/6X2LyfrwKV5vVjWG6xjadsU4EJRM+7ewBzb2t 9ox//ZzayVO4H5Dh+NhIpD08zhoO3DPMZ2pSt4q52vS4LjNMLFfX7IwTxiKZ8XHK2njGuQgXSAGJ xzUP7V/xkpfVrv3q1zJxXchWfavfG7Jo/NTw+p/hEXkIV0/kRP8ChVcRqRAseOp2UN7pWhNCHYKd 48zO4Gcyp0QZeY71FLqYsrYSmdPljcaP3xkaXTV8U1w4rB80nBGIxnHR3R80svHOPzQquPfNhtvF KEmH+8RYf+2ePbfUPvi+99Z+4LVvZB1BT625o6dGkxZrFN/8Uz9Ru3H77TUdS7xODFg/eGjglfn7 agrfoWloIRZeuluxhW584+eiOBwqGa/KH/Eq5aDRC9eT8ruEKfdSzvL7W/JeuadIt0wrXFfC6ZEX sl2vGt2QcBurzekGhQvfrptrT3sm6yrw6KtYzvtvPbDMpdzlOUpRfnCfrtyqJ8ayu5ufZqgrytcE 7p/SjCXHOR3ehYuodWcS1z9oNo0Lduhw3p08eTxXU+KM4NNmWhI51mgEsYnPy/Ay5Yv1wvS9OHw2 h0feZ6Z1QcLlzzaC37rQCuXu89SUsfm8UHXjt3+WutXWP5zlwTrbCMo+Rj2vbKsoqyhwnTpxMj/z 03XDU5XuGZ9YWGc3xrtSLqP1D56uvebVr6x1t7dFu9rNukQ28GZN2W+E+OkeryufNTWXlLLZHqr7 yL+43vFj0XPRW+oscV1ajzP+pAnRS9jGOl2+m+7KQPnlR3BLfDJOjeGld6Gf/GXmLRckFyaCqj+F 7NoWj6EjfSo46fLV6Palfirhy3vvvi9xjF/SbkyrsWw+N/42nFBw9rm4NPtcaOWz+ZifUN6Xe3mv 7vedeZR2oOA4z4ieNMPxsjY2rothpl8JJ28yfyILbCb4qExLOy5vplD9rN95FTA1IW+MUF1ELraV 7tsTVN4SP+pPPSHCmxHX3BQus7p6800X9DHWTBtnwW03slr0p1GmlD9/C400bXxeFPnij/OmABvK MKRwwcBoK+MYrpnO+/wz/c+0okn+NIfPsbgwvfhlL86pO4TjJbDTDWPR+TF2so/Hf3l/lqN8RaOl nwrpYnS2GuFmsW+cmWNYx+hjnF53hBhbkpxwhjBSuqRnOnlsJ9PfFaeN0Lgldbw3YmRewjEq0hBh Aa+Glxcfz48CFSFHGRH78R//8di1yXMvHHGK2ReGufIZH1VyjzpiI0PKYpQD+RA/d0trwLPR88qJ gzNB9xk+NAYsgSKdBbkrr72XpBqyavx8Xs+m4RyOObRy0G+Uhdkxxio9HSTqSf19Uxu7n3H+B+8F 515zfYuf+Q/IFLxy7Vr4VkoR+JZAfl5NARaS/9Z9qmgRs7CUogZH1EHMq9BMQLVqwJ+eRGrqkaoz 6Y49B9PPveWP0t9++u/TNgbAHQ3+VoQiBpZqRfloLNgK8lXiGjTqWH2HQusmXxfRZ6n+PlNSl8Or oLE4fd825l5CfRPvBdmlWS4q80K9XBpMC8bdPz2wPmjVkJ6kU/ykkK9N0n3XIulKLmMabUleBPsm gZgV/smHRl6U96LS8L6U758NZ/F5NEEjnRrxaqBZ4+slz4WcS17Xfy4m85K8ELDGZi/C1hNcErbw kED1IOSyOP16thcfvkkUWHUHalYXA/xtZuLgOKZEbfSAa6+6Nj33uc9l6+JqWlJOF25f7EAFjeJP Y23wRUWjFV4ToKpYBsBtQYcOHzXmomO0TAeq6HqCRPILHSjTYkrLD0DOulTccs/fFpTw0ga4fL94 vyAK6MKJBehZFm5hq1sEo2Wc78JZXZV/96J0Sx1a9PKf6YeCYwdKg61uqC1ueBobCLFc1ImyLI3y Gr8bChiPJb1yN5Us894bQvvzYYHoWzdMo4WDQaNu2VGisfLbcu+zI1RDfSNcIxhPWKn2rAbfnPK3 2d+KYAsdKA6ZhHq5A9Wa5vBGiqOHZnGX6dY9bCLNzLelz31+d3rNq78XgxY+fQsT1eIrK0W6zyhK EcSK7Uvlq8Tz80LcpdJXRa5yKWmcGT6nVr6XWOV+Rvh6nS8h/hnu50Y2kFop2DxDJZY6OlDV4cUR wcJyzXnFC2nKuklCBx1cwynkyPn5m/5XnIoGwwIohQwEGwdSbfFBtHwXz+hkGz+GgXzzLxTOXlfO RZRGki4XNlhxxgfyXKnu1BNcilclbyVBw5XnM9K/+OKbRYFVd6DKDBQzjdlvVSUk75cy19/l3cUO 1AJ/6xWmgT4LX1d+qiqQalJyhyHhU/HRNiYLXZ1hWrYDFYarYaqKafiHDauJ+7Az+/aM0Mh/J4Mr a3ACH3PXDZ0TSp06Z8BvQIDAvUHRi4sNg7AEr8Zi5gBVkJhNbUjDhr4x7goNTUkvB22MX1I/9926 YUwxbmqoD2d7X+qSJklBs+By7hwXhyjxF7/9F/ZLBkCIhQ6UB5DagWK9wTyDO/Sb6NNydtZkaupl befsMGt+1jAPxcY7QNZ78fgt+edcsqOMnC3MRRm6cLbrBcMWHJEAx9nmhlRie4VSKB2o3BnJr5oY qKTTURRBFe7CsVhNTCuPiFiBlnSEPHi6jiTaatnvFrTqXPF0ER4+Bc5WN8+W2qJ6+4gkcrbcLn77 RlHA6r8qwMko4pdFf/5wcbUwdXGXtqDDWf9IvnKdNeCSj8Sx3hn1TB1+pkF55hsjm8KyX3h/PrCa uOeT/r+MMO6wI+CTDFOzNo3O02q8a78ZpCtyW+4XkmfERYLtyMdVJRIdMd+dK9ELl0GTtu4E4J6X BxPyCPPC+wovQhpec+OR6DyZ54W2m8b99gX5KWUydew86U/Z5K5n9LLcCGR8Ki8Qr9aJf/uSok6F b+siProKV0SvUisOseT5aF9cuK75xhWy1BdyKLhHZv4ow6u5Lp35/dFYnm8cpR5NKddZVbHmgnBb TdwLyvBipKUUWDJssfTzuX+7w1QrWy6ySK2+y0kn22FPs811x8Vd2s5NwDNCLFVqdVPujJDlRdiY UZmMuzh+4y+fNf4yEKFUwJjOL+9zfuVTebtgxzameG7cSvyL9xUoAGG72M5asNPk4IODEXl3twWq rxD7UfB6iQwskiXR83u1xiBkM/9e6LosiU9oZc+JuEYZXEqJpb+JcgFQ8Cp5Ve45pLSQ/mL88hpB 60B5n2exSublbfm99H6x9iylCL+D4b6XOv7wzlUxgY0aUzM7k7KvIlR358K8gvZ8JmiJ9C0FjfKx HOJnyleJsfhLY90xnQV5LqkaL8epk798intJt7xcPv0z0y3hvzn3c5ez4LG0PNKkrMVeXLYSI9+N 52VnxHALLSg//pmh4LYS/qUuLYdmiet9pfjLxfuX/k56FTh/ujXGevixS4yL90cbBc5fAlbAvMw8 uW6jcT8Kt5y8COemgCpuaSNw7liL4wQTw3BdPqXlKm/Ogy+LFqWcT86NYUx55dQbQ158XpkC1qGy vXXZnnfl0Eu+LM/yJYG+cT+L/Jb7mTkVGWm8Gyr/Np5OKI13v/r7mwML8uvTQr4L+C16p4usM4Nl I5dVILk4v1Uk9O0cFSK5672MmR2fRGo4Z4Zzjdzl93y2wf52Js3qy6YEXoQVKVBV/OxSaqhHcY0V 13ItKpAvl+Oz75Z7vyjyxR9npcAjRb8LSafiXyWjZ0Xz4sdvGAVWPQOVXfhYNUBrZgeqjEh5jsBF OH8KLOxKuDROqVy5r7u0vvg2aL4qg85UC+eW5r/S7wuJs1JaF9+zNXGwwF33YvYJksxydkM5R+LR SCEloEhnwa+MyOSZmvK2hCz3/L6sNSpvy73E8l7Sa3x35vNSLM4Mca43OuqsBKZer2cRyDd5JNon 8b5Ye4Iwj8AfKepVgYSXwIADDVPTY5x91M6rOOU4f/g2/FsVuV6yhytf9Yj/wh4K3Rbo1SBLi2hR aq7roBrqcEmgCusOw1kevS+kWn1+FNyWKV+g6vsl30rZ6sUoLx4FxXjUo7CElhW+hZQrUXL5WHWV llOp88ufK7dDOXCVYsTJby7+/eejwLm4dQ7MOJwtDvbLG0g0xzoCosDcLg4Fm+XE89A5RcpMrWED ibqwLCN9digWX+dA5Tw/m1VJNysYBHJR/gqoeZclmAu/68HqD+eZ6YrB8paoGpuSaIFMsmXplRMp 4c6YOKqvHykszaktTaV8zblpBJYUTX/ha85tub8lTMG2+l2nSaZX0Lb+znR0gZgNuvo6X3kJb/lt qCUB4tWyfyLthryisfA3UBJces9fq7+Ncas4fol0qyCrvJ1fUhmPtRxI6RqoOQ7OEzwWYFHnyRnG mGXM3+uoBRtKXeFtY5mhSZndyduN599y4vxwq+ey7INZF2kwH6GJjrxXjYXWlIA3JSdDFvcX3vG/ iXVOvi2SVO68Cihpl9/L3U3djli5lguz+J2pNl5+XZqTFFpM56hvsS6r8MF4xsx1Nz/Hq7P+KTll 2hnXjsBsVTsKtXLelq3OP/GJjS4W8MplX5qd35deS8N8Y38XvJbez8jVAEKd8eLdAS/duRVK+b76 NjM+nZrae1InlzuHtTe3cWgrj2eFBVqtFKwRx7rOCrwaZIDfJVykE98babxS6ud+X4pYJwFRIvkq avleJLYxXA5SvizOq8Qr98Vf/bV8vDPDrfxmMS4VveqEUgcsZVChWZVmPWz+7c+6vNe/5Th5gJFn f/LNcEtTz6mc71/L7/CvOsjn+JnJUojGPQ8Jq8fUXa2EXFxqo60EFmFlsCCrA3Usx9pmHM9Aq/BX vFvyboK5yJWAlfzPjuV5YRi8ghvoffniJY+8vNV56vtg4PlyruAYEeNPlWxJPu4LX5c+Ed8I54KS qOFWDF/oWclKpLnwfAb5+X4m9hEp/tTD+1D4Un9ZhfP3clf1eWVcCVDKUe4RJ2OU7V+DnA3Dkskj dy+oeG+8Vs7hPPm3cgLn/NKIR3leNpIfF4G0O9uw66LAK//wNOfpSYwAjAtO68oBK4Fo7aDyIgDT M7zn3fTMdHLbc2FmdobTsOfoZIGZyFVRXUslY/03MTMR99HJ0bhPE8ddn6emCeydQ1lsRI3uFaP4 xpvgZPTqqO2ZKVKqarBh3AjXtNnPiSfxzhn7jYPM+O276TSAu0iu5jPYLWydy/cJgxqQ+GOjU/Eo vv7mQDY/BHCIYHkEx1xeX3A4W/U+x5mdmwa3hbDZBTIvWTWbIU4S914uzuckDfHLyVi3pqaqk98h MF6UfCJ+vTNl2WdC9atGOYEx6uPUBGWfkUk0DPN+WTilPNdmeWmE3MC4w6K04WDCCFvuc+zxKioc Uphx4kdWoTNsIJIXehtgctpyT7GD1lgaxhCyxHalJnni3PA0Pj/FwvDqhB0TNG8DlWfuhc+85Xv1 IQz16TRFunJ2esY0KLMd98CfW5Evoswhh/Jrdha6h1rPfOBgyIiXI+V3HIBXl6GQJUI07ukwhnwE kK7fDS9wQF+gzZGUgYLSLLZeHPpnkPgxOe5GK+Y1lyaQb5/b2jo4Ob6Zk8JpGtvYQdFIMHluXmKY km6ys9XvfIq8ZfH91Pw4IUjPODk4nbCpNArf/GklmB7uT0Mzo2wEzcno1UYvylzBq9EFVzrplsvh g1EmDkg0lfpp8vHDHKkbnpo0ZJ3zpUI4NBbULVT1Q43dOWvqCEIHuA0wQe2Y+Cbegn55nkHOS9tR 9AqHNua41V/z40xMkkF+eVadTYVV3QxN80Y2zuJlyClbXUtna3JaXjUnedlMYlRHfitHxoWm1Fff tYAnH5Af7nRip+EXpxpGsp7XNTY6RCrQgmdxnq5wN07ueAUb6+UxbO54keC8ec2ko0PUAZ5MdWZ6 gqjqv/k4dypKoF6aYrMReGooyz48pktboJZGx92IxF/5mhgfZT0d9QKdWd4V/hrXS/3SCMrugo7K X5QD3xfwe5EX301Pib+6IcvHBPVYDManrGNkT0ZTs3P5GRnMOPBFV8gYEDB67khORdk64EcLW5Ur K9SXVsK21lJbD4ZioNHN+3ZoRFcL1VXUBoeF1vHKuph6LvPIeYZ0JycXl5VzNYMG3BTDND2fw8bL 0C9mhnyQPUWJMBOzlJHwWb9YlzNtOXwz8uFPwDjyxGGl8ezEsqDcCdJSfAIvaeZ7LnWIGMkXX01W EZVayTSNzvZue6lMmZ7hRNU4Xgt8QW7kfZV4eS7fOTQ952MkQ1lnAXlT6r010TJEPmYEcJhpfuCv cfw+eJp3kY51aS7qiHpL+eVo0sSRtbQPtpXok0qPcXh0Ro1sPQPPHyZhs85xrkHVQN36CaNNd3Ci nxBEQJ/VhiaUjKgvQd7IMHd1is7gcwVFo1Djohz5d26jXVHXQt037nwaHkG/IFNxmi53tzCfopxI H3RuJYx345M37ZgVuqZtI/LcIv0oe341hl0U5UI2p7mkb13+iTCH7hYyXvFY169FpryPVJsMKbMm GDYFd3/OgNO0SDdB02aowbu4fOdpdTMMOMy2pgcHqNsSJwRamls28TOChLEOY5+VNoo3o6PYH0Ez 8jIzIOuC3IZOUfdt56aVNevAxHiaIJjSHcnSZoxNjwevpkAtqhU8nJnJssmBzWkSXWnKPi8sA1GX 5jrVqF8Mp52gtI6Bq3f1S9CW58b4oV+qcnG6NF9poyv7a3QM+SE/0yOFNBPtLxZJseH84GXZuTsR oIgtQLGX8nffS5+wkZBX22H/TaEvlPtsa+TYc+hjOaNdIt/VjGPoAWlfdrCdpL4IZmkZObI5aOiz MMUOvTVonQPkt8XenaXOeIl8o12jTrQeZXxoW8AtMKsG5VayX20+1K2NMpp1PbEreqkzhMa2Ygz8 xL9c1vDJqMuZrNPoNzGvSBx4jdNmLdi3fqFODpyuJ6IsFr0tP2zqzTo23yK0/BcKn61rQ6Ff4nV8 b2zL7IsYYxQ5lhbm6G9xnqBtLchrdwtTtCE+TVbts/TM2iA+X+AfakVHx4K7nsaDMDoKAlZYoIVN Jsy4uCb5TgK2NLMguLUpzSEvnPAcCOsKaEdLaMeg5EzrZCdNYra1MpIC01rsIACcN0oaxMXgHMYY KATs6upyB++AtjbGl8BDG2CSzkwosfiCgGO4T1eGpK+mDaQRTgvV2V2ViVbbiTXxH6dsI5UR19EF blA7BB/czFuFInR0sOCZCKdODvIMIjzLcPM2nOvDbNxbWxjREjm+jdE4udOUSmualmRsYjb1runG IMTQGUFpkFdrexPuKy6mJkqluE1fxpNEam7hWxS8JWg4SiempQX6ztEZpJK2NBOSgB2d7Ww4RgNp RY1tszGBaZg0UBVGK4J8aOIbp6yH60xrKw0Iv/0WHU1ER0G109JZ4TQ0SGcmDNd5NhBhm2HLbPEo t/9aWttTT7e8RBhRkDRdaRIetDKa3IkMaaSPDtAgK0KyGHS1I6Sz+VpZhDkMkHk7MKRvF6+VdGeQ i2LkB44ovTn4LX2n6OyODEILOifNyI5lEacCbW0yGCVlw16978AFNcLwe3RchS8OWUnaEHR1ZfkY g1/S0vBCkUF3dNOIz00zZUATRQe/yrYTGc0wn7o6XeQhK3KF6YDP8tufpczSz6/mFesO+dEJH92V TFBJhwkGjXL1mY8ZrDY7ZCj3REenva8zdbT1xtlhZeyk8FSa+SxPbbD9bT7WvbY2+FOVL9fFzFPz tW7bjW6v6IGWBLGF7ddjLaQF4b/i5qYzAfO8oFXlKPlcLtOiKM5oTyEHPgvWr8Irz8jyt0ow1zvz RycQTpmUtMqC9/ZWZigI6yye97LGLPQLAwGKUlt7B/jMZ/1CJIIG/5oic2QYBUPy1JOE/PiNSEB7 J/oFPgjm39GucaXiXlz/HbiZmSFhEQLEWxk1rAbb1JidHoV9Pq1f2xEd2xk6G22kJzSju8QTVSBh QBBkqM/qClHp6enEuGdQyefuPgYoZtLJEycwBObYkKQrdcoTC0DLk/VL0xn6xcZRfiu38rmswSuG lPTyfQG/W3+EoaGBoJ2Gh3Jh49xCXRY6OjIfLGwreltoQt/LNy87/tJlRv0rQTARlDmho7OVdFrQ gTSo0xh7LbNpwk75rAGpu8iOKkdVbBtgOuJZ8DIdGzf16xSNXRt0U37tRA0ODoeseHah2UHuuMLA kGHyCprOTFnns2wiUnQG0C9TNKCgYLw59Olc8Fvvi6wXpYcGQDdtRyfl19CtyF8vm7QUV3luezg7 lg0h5Uk5Z1gx9Y9AV3AfxVCyPbCJkJ7iVhNhwCQmNNDFh9/ycZF+UadocXB11vWLhctpRfNRlcV3 5m39F7fQL7yTZv6Wnl6FvtZpw6t/1q3vpcmkfaGNGR0diXqLHRQ4tdoW0XjaVgrDo9AeOQ4dAira X71r1kLMeWQQelOmZnCYRsHW6DDSoBFd2aGOdmUbwAaxCd1pSbzGoJF4F91V5Fb8spxV+oawlsV3 1sHMA6sV31XoQJf1ifZsCoNkIgamkLYWcSceA7HeyykhtqFCE3V0jjTH4KM8ETQjDN3V2ZYmaIcs gzIIkvynDYkOtO0hEch6hjAaafKws9KdBf+sg3N9K4Zh2BSkrxyKVm4Z1KUMNDtgm4tDu4dsiQi/ 165vyx2bWd61wXigtaWTqofOp45It3b0TotyRzxFp5fNjULnEb+0rXWa0ptvp/Ll9pRy2DkhXWWV JyKQAPLd2Q5NQcImSFkVoTZsPsF604atJIo+N1NZxAfh4g11mAKK03xlA2ritmDjGF4Z8m7wFmkL GH+G0Q71/bz6kmTs3EH2gGLwZ/sQPWq7Du/b4JOg58Rs1ckaK/YraTiYaRLSpAwqFJ2ox4gTCOJv W9ze1p5G0OvT2Dft6MlxdM6cnQXsSLX5OHXEjnMbtLKZUcM00w41QydLLXRSX0x3aCjvzqtsK8WD I0OhXzpoB5uUE3GlzJKr6E7bu9ZKENvAxc6WEPUYBjhp0U+noh2lNsK30hlayX5V1Wt3m6TyN16l J3+KvCurJY9CF+V2HoINDtFwAsqotJFn2jLq5ootmAzq6ybarN6wbx2cGR8ewR6bSWvWr8/6hbox OsoGWwjY+DhtHpFZChs4yE/Bdsw2ttgoyrSePdLGb9JA/Eo7bBszTUcy7HXiDw0PwV/bY+ouOrwq FvEyptnGy7axpZhDGbT8DhAxLvCPyqMZ4XFENmdoRWhO+/YdAPn18JdtZzF2WzFSFWQVpJlLslYo YIWhHFSkLAimoaK2wk0gfJ1tXRFHo0BDrZXAzS0oISrKAEbxvv2H0+atjlRuzQAAIABJREFUm2i0 aJhgikRrgVAaYTJ4GsWkYMNPcOAF+VsRecIWaYWgNnTTDJpPpTUc+tvUZAOFY00tV6o2BH/3rdvT IMM3Wy/ZkLptjFCCNYhqP64NXE1RxaPQNPHSRrSVZxtSy2ORvWuoy8R2Wn87ggqebo+TjIg4+/D1 a69LT3nKk0iHygiuFIX3NnjQgwo1gQXaobFPek2E8awgidckLmBtx1OhncWQMq8OKqZgnuInbe64 fTcClAWrFeU0Tt7yRsEqxpHhBcP39vaGAIqrV2lELauNgu2b+asdOzt9N5/uPrQ/HbrvRNpy2dY0 ibB30vhZcSbsNNfaQ3HM04GsQev25kpxkFcHNGi3YTJ7kjQOaId8SJNJDCo7BAp0E+HvObA/HR8c SBs2bQ06ttMJQ5pCoTYbjsu0LKcN3gz00ZCURq0o4hBF8jAv+bPwgrxp1DVIxjHw7rnv3rRly9Yo 5ywGzAQzam3wUJrLS2Ea5dKCLAjBA+RV+tuJasOYV26lnXHcaY8D2DJ+YQo3pe3bb4Pe82ndurUR huLBM407DEHKYTxhDmWgLMygdDRMT506FcZycxNyTMe7nXzsR9OaRv2ZbevkHfLUNJH6jx1N+x46 Cb02p154PhMjzNlwLjwXR+XA33aefVYB2bEuyrGEnYc+iopykjA0QDc1E+6hA3enkSZGPuHnuq5c 5olp5B57Xt7NQb8WOxY0gk2UTYVqHqarXAWdYI6NtkacCs/3uX7ZULVGZ//ew/el7jXrkQ/SLjIL j6175mN4wbudpSzDGtoYPWQvb7towNUXGnOgETRtoX5PMUqqsb3/zpPwfn3qpjgq7Fk7/oR35NS6 Ll00hKxfmT7US+qpekGUlNtpDCTLp6yIyzTll3et7eDHCO3hw0fToVOzafPGNamHSLPIudpOfaY2 Um15vG/UCJBo7+gCfzpD1N1uGltlY4IRv0541cPAhQ2uI/WhoKgAkxh3bcjB16/9OvrlyYFT0S/t JC6P5WHhsfHlhY2l98LvEqa8C8OcsI6qiqtw5MgD6d7Dh9PWrVuoB7lKaYRNUg/a0THSxTZBnk0z a9vexYwSPJttYoaFzlczl+MYVFn0gbKAfFCWto7u6FAmdMY8decrX92Znva0bWHQani2tTOTiGGf G0/1KjocvKLRDp1IfaScuVOQa5P4lUa4AxprbLXS3qjUmpkZPHD3gXT8NJ3bzWupP80Yg7oXZkOp rl+0CslLWTBtZVN81EMO3jkY5iBhDpNncO0MTdEBayJuK5Xiqi98KV12xRWRtkZgJ/wFNdo+Bi4q PTOLvDWLF+8t/6zyRLtgJ0oDx51wo97w3Y5ik/VJ+Vexgd+OHTugxyz6ZT2/MdqhqbI5jz5TFkNm iKsh5WWdM72BgdxJjrRJR95LY+9hVNOpbaPD28zsR3t7d/raV/alJzzhEgZt1HuuWSPRGnWXKV7l U/l3JqsdebR/NYFBqS5th3bq+9D55NMWA4EyiI4Fs4MtMCrM2Im5dOTuQ2mEtGvQcT1pShONu6K3 NPItQ/ltvV9ev0zEwJftgvLbXLWl5jWMwXUf+mXDxg1BL99F5w7hzO04mSpG5NOMnEoTeSYE2blP Ue87qOMUJ4KOU0fb0bvaSs56qX8O7L8H/d1DvZU2edBynrbDNlz8lWlplvVLrmMTeHxEh4yCm/Y0 PGya18ZCF1B/5pC5Zgz0cAFH1xw5/GA6eHoybdnUmzqxnSB6msbuaEZnazmYfjP0Vga81FOgGAZr V1du35Rv8cu8V/eMROfV9in0AG3BwTvvTBPta1Nvd0fqEDGU6iTtkHUaEgVz55jtyR2eNnQ49RUe KsMqixiAkVKWC/2t94BtqoNu0l/6hn45gn7Zgn7ht7wHhWhTxVvDXH3sgISD4+0Y1/OkM0f6yqx0 nEIoW5CfDg166KMuisSsK6TYBD32Y7+uw36dww6wkxgM9CtpZDrxw9/UIdNSN0aHjHddXT2Brw1K e2sn+pu6SRraiQ46UDRgPu07cFe6/8TpdMnmLZH8GDZo6ATx51+XAw+ilElCW5X1yxz2GxqURiHb NOZvkuI1iby0Ijfax6bRSpwvfuGL6YrL0S981+7poPOl/d2hbQB9tauli3Kw1H7Vw0kdHBmQhzKp HGi/Zn2bBxMfOvZQOnz//bSTPcj9NO0SnTzyUycKtnny0zqkLSS+Fm2C+tRJG2yJBW08OMoYbA/6 jgEmytFGGrA/5PJrV92Afnkcs0C0Cci4niqmJF/Mq65fqI8+23FSZv0mPoL3rM/oPMMMSicFUje0 6kBXH7z7YDp4+IG09bItlfrE5iLcBHlpf8pH6aRcGHcVgBK2pQOUseYYWZhPA/2D6ff/399N7373 u8mIkYxeR7JKNj6o7CEOFUMYprdpJybS4DO6H+NuJvV09YGsDTQ1BOGesccdhgQVi3GNibGh9NrX /2C6bcfBaKynmInSsJAxGszm6WgmSaDsyYt0zd21FzaEY1QwO3eOnq9dp2892fCuhmFig9qElTUz OJTe+yfvpmH4ahhdhtGwcOTHtuFk/2kEJsZcohKJe+nRWrFVEoK4NI7uh1Hd4iiWDGlJ999/NL3l 538h7bvrIMJmCVQM8ygx3IhIpx0DQTpalhGGw+cZxXLETGE2dBgRYaBQQWjobdys0NJY/BzNEe/3 ve996dprr2UkJI+Wd7vlPAJvA2Oj6VVAg0pQOL0MI5Re/MkTxyAYjRVKkSQCDxBLX/7il9J7PnBl Ok3Ro2ML0rOYgK0tPXkQHYSb5L1KjfSaKKczBgV0MXRa3koziEJw4lnmaSyGcIDHKHm//W2/mXbs 3MWoLcYTFcrUpklLlywVpkal9BqmkzXD1L8jvmsYkVDB5Vk0MkBeHPGwbCprjY4JO98qWCrd+z/4 gfT7v//7dCYGGClhy37kvYfR/QIjw1Z4+INiKR3MUOKRDgY6sxWCIzFFwVqhW7gyNKVTp0+ld73r XenLX/5y0NH3oILxQocxWh4VjbNZVHOUj/RXEQubNm0K+SEGfHdmkZeQa2p0kIa5G8nKUBs/nT79 t59Kf/iHf8xIVsVH6qC4FLmsgiJvCBywcePGepl6UIwqniIHllV6zSEjZhl85G59+Z3f/u30T//4 ORRSSkcfOBr0hTwBcjJmoimDeJYZYJVdAdM2nzKypNIuys9vGmCf+MQn0i/8wi+APzwrEbkXGfXV nB07YJgRNwdUMv5ZhBzk6JOPpBcjwuKCzIlTlAaDfmx8KL3+deiXnUfj9SSj1QTn2cEGGggaHekS RnpVN4ytQSEJnYX3tQaqRpe4i4PlsZN9/IEHrEzp85//fPqjP/qjdGo4Mo9GXx6P0RFDrBVh/vCX SjbroAlgI9zXS+MVvxztplEk+jw+LTEq6si6vUTAme37adze8pbl9EueuVcOHCwRP2ei1QPO+Ilz Ab9ZXhsfDQYbp6HBwWyoEWiSOvaVr3wl9P7g0GjgKH4UP3ip/Cprxa1C42ZWvsDrNhp2L7Oj2gUM MeIqhOtYVdAahL0TQ+3HfuzH0i23HED/Wb78UboKyq95lffKRO7cxufQ+RoGxh0ZVYsD8KMj6ioI MLrez0ye+uXW23fG6K9Gl80l0dKwo/zomWndPMjbcmtMFLDOhquJSfFdGSh1qsi0Ya0/e2+7I/3c f3pLGIalrvvNeiMMV/qltfJqcMAhOuy0tRofznIIdvaX1S/kP8Agy4J+yXVCo2iAulryVNfLa+th 1i+ZCesZAS60K3W0lFWjZB79b6d2llmbffvuRMbegqxhCFJHsk7CxYyOxBguy+pVXZB7+2hrZRlX l8/wXxhFb0/Cu/jld9ujqg2KAPyZpi7/Nvrlc59DvyBYRx98MGhbeG84ZVmc5XtpwwrufrecjfpF 3V1kxW+jTKEV/WJ4+e7It6DsF7CeKUQarbYhiqGXLu4jo252gmGNnBQorpsavM4ki6N18hOf+CT1 gvar1HXyKzNRoV8oT12vkX4nPCe7sA1MvQ0c2luyLtONr6XLDmNKx9Qv7fPpc1/83+kP//iP0okh 6zLUxThtbetGjpnJp03TxrL82gHaQ4Is6WNAeWAgz4IoJ9oP1nlhTd+atGH9hqCjv2foaKvDPvOZ z+B67BsAJJzpGGdWT3yFRvqtWZMPw9ZeUo/bbkr/GBgmrO2E+kVbSZhk0KGuX6gXyolcadQvDmSq 7wX1i7Oj8trOpPQmeeiX205nHOrtsAVWIQBD/f3R5mu/aj/6yZkJeRuDDpRL/ad7pdck59JZn/p6 +8L20ivAukW3lwFk9BuY6orowKFMnqVdSXPj6dZbbkz/9b+9Oz00lJeLNNEhamcQWphmEMSwzeii GWa+xycy3f3WSkdx3ikYIOsXDPyKwAueLXxDVnfddlv6uZ+r9EuDjXX0CLYbcPoc9qvlbIQih94t rzCI6+tnPvvZ9KfYlkLRcbrE6gWlftQm1RayHjpDqD0q/9Rf0mtwINuaXRgNDgxFpxcPlXld/YFZ ZCj0y8//53T/4RNRbt8rO8qtOsm6Hnj10W+QWUAfz/JfsB3RLva338O9H4GYAz9nxm0ztF+/9OV/ Sn/6wQ+n0+N2/ukscSm+NWTZVB1Ata7qzptTNvULBqbHhvBTNHOMXEdV161bE8hefvnl9Yojf3Vn Ke5fiDSCjyAjIGvovNjh0ahxitTy2vsWuRojXDXixWyVRjcKeHp0AMNriMp1CsKPpu948hMj9xYa FUd4MuQpNqYq4mczo8oal440T9LwMY6b+rrWhDBiFqV+pq0lUpPuOVQ0B2o6VXIQ7b6Dh9IalA4/ Q4FomIqj4Tdu2FjvdCjEvreSRoeN72vX5o6ZHRwZp5FSGOronoh3MFNlA/jggw+hpByp1dXGEahm jBh7/FGEGFGdnZ1KfSieZjpUGn7KiUxVwakIBY0zhbhHRVlGFsh77bp1adeuXVHZujG+3KhAl8uM d57eLBWyCKLfwoAh3TD8EHyVnO83X7KZt8wmgCeDXygNZ8QYZYF3B44cT3NVH0HBPoUiCVWtmKCM umh8u6CtResAR+ngbJgjrR2sd1CRyLneXulnJKiNrMyN4bcDE3sv3ZpOPfQglTF/xarI/KNDKT0d GbKDKf/XbOhLbeECAv/0+yE5jd5IFgLG1D+KwlwE/bol7AwjgZdu28aU/Fhau0FDAgXPd69BOsb6 X8uLAGhSKq0dVhsbFUbpXDuVLD8Ewzlzq7J3tHEdfHmwMgTkp31Y5Wg97jGlQTMt+TvCiK0KQzcL wdmOaBT5S1JhRKdWaEjjxy8uAcp3M3oIjx584FRa14chCN2UK9PXEFLRyFfT1sDV0PUqDV7pZIm7 8utVo/FtAa9mFLM00X2z7ZIt6fA999YNl8u3XQ4WGCVjNBwEEiPDUqEDbRs505Re5t/YiS9K0XfK m6AC1qjQuPduvXKNjSPyEzRSBV/Dmp5gp9nOsGWo65fK8FSR1xjtddau5hoNoowxuDDFeqPBoZPo l/H0pCdfHrgykIoMOHqHgkc7mae+3kLBkVfEZYQT2jrgIQo+y9fgO+WwrMIWZEuwTCdPMjO4pgk3 gsptA16rA6nmejqyVIoGBoOilXILjm47rhSjt/zOcmMj74gy9YdBgpqzI+Cpy0folweOkfdS/UIn WwSBQvs1a9aEseHvoqsiAH+kqbpBOisz6hRBuSnlU5bXre0N/GL9K9+1P5VfdYh1QbCRbIUvzsjK O8FyFFjb58Yq46nPPKDjJB1SjQJ5r5GscS+oR21XCu/F27zUfUK5K0+2MXoG6AYlb9b0QlMDyThe jGq4gMPGS7elUw8eY9Yc2eNzG40HTQi6QsOMP63whtm+Gr1W3Y+VRRvnUi8dHbUs3q3L4iRIT42S QQxDYZaZ5KGhYeouiQMjdsqAx1BvhGJkBgGkDdc0LleuF9D1V+NDWLuW2csl+iXckZC3xfoFvWZb RDrrme2u65eqHmogZ/2SB4ZKZ1eeC5bDsgri0M4MxQSDNc6AjbEO70FkbHBgCJqo/K1U2OvQS9yU j0wHKGo50BfSXV0o9MKXTmRxwjLBJ4iH3u6KjrVeIw4itTPzcO+9DfrlsstCJuVtwdG0pLP52Q56 X0m/KHsaUnX9AoPFdUG/zIQblq61XkXGzCPnV80qYHs48yft7Az0RbsVofwD5Bk/Z2vHoZNllhbd 1NOebvQTbajyEiGhid/UVUVX2PkSR/N0hF/R7u110A79YTxmlHiC3uAwgV0BbL18G4RghqV9Oh07 dRoZcXAE452MwAa930XHQjdgBqOhg3XKuiE4wICYUseykey7QhOfBfkRMgdebcjEgQMHQrZhWwYe ZmmrbWtVMdaD5uqjZSkuamO0+9ZL2zYHU+IQeVLQW2RF/UK7a/+1rl9I2zpvZ1h9L6hfnL2wbPJZ KDT2ea3uo9b5qi76TvzMU5tH+zUaK+hb5MMw8kY5UG/qDeXMqrNnI6yFFbro4Gykbgk9ulHDo3Ya 3xZtU+zXVtZ0hlsynaL70DEda/GyIGx7h3zJ0MEMThirtEl6SfQhx5N4K4R7JUGacfO3DtmZkq65 XvmBdln9MpDtnKxfcMl3QR8wwnIQ4TFXXBb3jRs21+NaRtNSpor96swor7my3i/tgW2p610dqupk INL1RHvu3BuzqbpqW45W5KkXHalc2c6KgTpUeXD2xtLa5rospZeBfKoG+Tj4zaAsBqWTM+200xMj 48hpDf2CjfzA8WiTOztzeSxEkcsF/eJbbaPcobJOCtre2jq+z7YNQgledq6djcw6eTY6dQeOHE01 8h8ZU09jY/AXJ5ooh4XTc2x2Kk8AmPaFAxTpo8OkglBSNOpPnT5BRWK0FDetqm2Oe25UdHtRXDK4 hmbQhWIYx/YmVbz6GZ9k/ZBJopep6hQU0NiyMO0Yxh3ruhEsBJKC9A8wI8EAoDMWtkN5cSQqgul/ 3Yw0omN9gnJLUr00wJLf0Zd5WhJZqxFdZwmjRnOMCM3rx4s7RRvaynVXfu/FaLCkNqqjMMK1N6Vy lbuVtFM/fvJSGI8fP01bkEf2ZHLpkGgATFUjPh24ckSnpycrrGLUTGk9ATZ04apBOnCRN+CnxewT eaiEytoxhdPGXH/XRnCUrKRrYfTtbYfmCqBgHEdprCQ2nDb0hm8c3bOMliEaDyV+BoNjshqVWm86 8haKMnsYAx7gpiFoHmITNMWoUKmcwmicxJiMRcX87qYitlJh5MsYRqgjAjQZaWBsgA5Lf6w5aKGy BVER/EvWb0yjI3kxqaNQJBG8cQG2fuzG9u2pkyeqL5Y/a3d0YDQQNlLG09aUXj53U+mDx5TVhtlv Gsq+K7B2DVPMvB/Fd1+FJa2KsZEbokzT4kapci8jxDYSjnyVkU9pKe+t3LYvsTGIiAClQbOxEuSP 6ff2dpNnjud73bmtK3aW5tgowtEHO9uTFlQ6tBi2HWVF55s3S0QjBgZUKqa9YcOG4Ll8VyaERhlQ IYUc0IjQigbh9fPOvbc8c2V57DAJKveenmwgDKEEJ9ARyl8NQyn81Sm/+SpXlq+Acmg6vlMO5YUg rcVLfA3TAfP1++6yriJ0um6psFWMpj/oQAVgGRx95FM6eWogxEi3Hfmo3Ia7Cjj39KxJazAINLIx w5PqaWSc9JAxy+TkjkULlx8rO1DqCmhEHg4WyUfdZQU7usqH5bAu1Bs8kJH/ll2+hIKn8RYcySYZ ykde6j5bsuAn7xioipFX6stoZXTnmefp1I/rpSBO4QNvGtCmi0a5p65fMp2loaChJp29Sscz6nh8 zd/le6n7Szf0yIYj8gWNvRx4lzS6CBZwYMfGS1AXFWOqE3rIf8Giyx/jOwMlzgGkVYxXGzr5X3TZ li0bec75WB5pKDizq9tUGcTQ8M8jlspP5ovhhlm7NDPAJgV04lwPoTGkjr2EwbEhRlBtfmNgDjqq UdxMKM9W2klyDclU8NN8rZeC/DeP06ezUeW3UpeU2S0MNLhofNu2yym7bqqmzCsbjAom0f2uDXIm dZ5rDDyhDuHtRFpG2kz1ISCtl+oXXXn8sFi/4LsBjUoudf1S8UX+Z/2CgUqepbNbZh6MW2Q37ri4 t6rPwUX6Wl+VNWFsXJnPOWm46XWSXZ4ZeECft9Mu2LSXWYAZGm+poAGKRaMAxwylac1ieBbaODMe +sUPQNYv6GPoqlwWmVYmvSz/SvrFEXv1ROgXlSig10bRL67h6WZ2N9peKpz1O9oMZKCsVcy0sSOF SxS8EY6fOB6j73beXf+iLdQLfZw9tJ3TOHRm2o6DV2HI8HB2fZQPpqd8CVm/5M64Oswy23mOTbj4 Pj02wzpBZI0db9pZzjCN7o9Ecd2eralvs32jDTWJTIccI9h2CmN2gPfq9CKH6j7Vu3Ds2Cnyp8CA +BQ5LriF3UN8+e+gShVNBRZ46yPAY+hb05iEzsZdu5Z1mwwgOJOeZ6GyDiidnR4M3gKhXzBy6/oF sZI0S/VLiauuLPrFDtmCfqEdpyihX6rOZG81CGRedrpOM2Mrvb0MK4T3D/dCH98pZ9nfSV2SlzcY 3uvokZNWibBlY9MZRyyj0YXy6O6Ei/gIAw9rNmwK61Z+eA0Nu84em0rbyhEy0p1FL2lPdyuL6BdR coxhAgNezxhBWdHLQtC+2LRlczxv23YFNGK9vvoFmtVi07D4xMwQaSPrwT9elbt0LfarbdjAwCD1 I7fNxXa1Y+TAkR0nbap1uLqKg4OlE8wUarv5XbBtCVkhfzfbKuuy/DZfLSpUym3PzGdiMutM+otB w6z351IPAwZd2JXaMMIYHdBic1kHDad8COoBdYQ6ofDeOmMZs44iHPxltMHGOWjjQBOMQVqZedIN E0Huo2On/5StlnQJ3aL9TVmsIwutm7leAExUjf2ePXek227bnvbu3ZvuuOOOQNrnm27akb7+9RvT NdfcQA9Pf95sBCpkGhXvfOc70qXMJthrlQCt+Iy2cL30xd+f/vEfvhIYNdsz0pKgx3v9lz6f9tx0 Xbrr5uvSnl23MY18Sbrq6uvT7j0PpL13Hku33rqTgiIY+E1PsZuWIwSf+uQn0tOe8qTwvXTDAkdo +3rW4V/elX7rHe9kijmvJRinQkxhbB25+2A6fPCedPdd+9Jd11/POFozee1O1153S9q1e1f6/Je+ wHT4UOqFQc6MOZJxGL//Zz7zmeStP3QnRugllImYCNcb3vAGRs0O16lbjIirr7463XPPfem2W3dD t7tCEG+88UZcU+5I+/fvj3sXa0jsUNjBFP72039DL5+F3E2d4b7lWo928nj84x+f3vGOd6QT0Vmg EWJ0SYPz4KGDaefOnenmm25KV111Fes5tqT77rsv3XzDLWnPbvhz483xW8EqDZR5v/GNbwxjSsHX TUzl6LNlPHToUBiBIIHUN6VjRw+nq6+9mXx2pZ3XXZ3uuG0HTO5KX7zuSLr66hvTju3b05FTjIKA f/gbayQghPvvuitt23pp+MtmNwQ7by0xgvS7v/87jP7mzs0aDVpGxQ8fvjcdxW/4MFPft332M2no dH86frI/XX/zobRzD3ndcBuGLj6zdnjDoJpPRx64N73qta/ASM4dxcsYsWxl3ZUuWM961rNZ2Fzh xeiQMnii/1T62jVfSzffcnO68eab0t677gw63MZU+K69e9JNO7an2/bsjrIoL710pBwV/8IXvpAe +9jHBo1sRKRZK7zpYJT4l375l8Kod7TO0c5RKvvNN9yQ7qR+HDx4EBpdHYpAuh84cDgdPXo0XX/9 remBB06EES3f5eftd9yenv/854eMKWca4vKkGVl42UvfgBvQGPRjFseFwmCoUjl46EDavf+OtP3a LxN/O7O2o+mmW04yHX5v2r17X+Rl+hoZKkBl4M1vfnOka9qF7z5/13d9V/riF78YdVuDY5z0CZju pZ4cPXx/Onzvfel6pvJVkrqM3X77XemGW26ibu5h4aqdOcSCARIV+l28e/Z3PTfo48iQSk6jwXy+ +7u/O9ZsqOhsOAXXY91yyy0xyrl7927KeiTk+5prrkk3b9+Rdt5+e7oTFyLBNMrI7Tvf+U70y6XQ qOgXZhzA/SUveUn6HG6G0ilEhQ63GwN87UvXpe0335xuve1G8L496rEyvGfPrrR3/950C/rFDrWu de4aJ1927NyRnve855EvRkpV/8XdTRzk1969+1HazFhQRo0PZ0ycCb6Vuv4A/Lc+HT9+HPnN5XKE /bbbb0M/MdOVq30aw63knW97G7pmTS4LuqWNNQytTe3pid/xpPQ3f/P3UXYXv+qiqoI/dPDedM8h 9Mv2naGX5VnWL7vx8b8beu4G/446jU3g05/+dDQw0lAZNo7Pj3nMY8J1ys6Letr6qIFxP3rvBnTk Aw88ELzRva4fXK+66muU6x508v50K+v7dGmyAZMu3n/xF38RQxme02BuxiAOwws99rjHPS596Us3 BE90E3ItyP3Q48AedDH64g50mXVGWVUerrkGPca3G2+8Kcpvg+kl2P7I+85OXRNdR5L5Y6fg937v 9yi3BkqeoWzj3UPoxf2Mot+6/dZ0w2f/Txo8hX45fTJdv+POtOuOvenGa69nt0ndaO3M0ZCFYTid fvd3fzfoYR52EmyvxE9dI85ChVLUrxuo+3sZrb3+uuug09U0azPIw560e9eBdPeBQ2nf3YfSKdzg O+k59+Hipqtf0S+uH+jr602bNm8MOdbt8Jd++VfDQFqqX/ZR/kNn6JeDlX65KT2Ax0PeUdVBLvQL dSjrl9wxVL8U/n/f931fzJJbV0snSgP4Vur3/v13pe233UxbfxPh26It27ljP7Kn/N0fsthNXSgz gX/91/9fesJ3PDbaY7ejj3XN0E4D5jd/67fSQDULqxGs7O07sC/0ie3WNegX61DoF9rkm5CBPegS 5VK8rGMaUb577nPRLzyfTb84wCLU9cvd6MsG/fL1676ebr4VfYBs06AvAAAgAElEQVSO2bu3Ub9k Y/V//fUn0nOe++xoX2JAkvxtk5/y1CelP33vu0l58e52d6DDb7uN9vjG69Dx18eAwpEjR+E/fL/r MPbLrbQFuSOnDpMvO3bemp73/OdG+2QbZSdNfdKDjIV+ufOe6Ixa9nk2PxkePhH65cabbkz3H6KN uXdfOnbiZPrqDfelw0ePpHuwRXbecQhDNHckLL919m3oF+u1cpzXI+oS3pa+53u+J/3TP/2TwYIf yrZw9913h56yzu9FpuXLvn370k3bd6c7b98T7VsxyidYuwYr0yHq14tf/OKQE3Wy7Ys2mc/q/b3w rbih6aGhfrn+hkq/wJsV9QsDDeoV49rGFv1i2psq/WK5sn75UtYvlLXYr3fCc3XLUvv1+utvQMZ3 pquvvi4GQ8pAuOUfHOpPj3/i42j/8UjCprzkkktC1tyc48d/9E0MZOmebN3X6GWt12B/2vH1q9J9 u3ak3bdcz8DcyXSSzslnv7or3bjraLpj34PUzQep3wzCoBchDI3MePq93/1t9L6eS+gX0mnFXbOj c03auu3ydGelXyhaBtrvG6+/Ke2jzbnxOm2+r1EvKv2yG5sW3bJv3xHWTuN5woyXdfJs9qtt2Jve 9CZsryPBe3WC4Jon2717Dt+Xrrr2a+n2XXdAhxZssRtDP6vjDt1zKNz3+uhsOYDswN473v729PjH Pi7WHrnJzKZNGyhmE3X/Celv/1Z737WUeAfQtmCeQ3vaKuyi7TtvQL9cD99we6ZsO3fuxnY+GJf4 iJftkvDJT36SdVJPCHxtC9QhXqFffvM3o/01XGzIQ/lPUv++/vUbWAq0M9123TXpdvoxIJG+cNMd 6a4De9JXrvpyuvPuB8Esd1RjoJj21f4wa9kbhrxM9WGBSTJKP9KfXvWa16XrrttBRciZuA7FkSi3 L3ZmZNPmzdHQ/OzP/iy4OetDARhxuvfeu9LxYw/iDnYphuUkI+nuokFPFt/HZz3rmbh34ZJCRbcr f/eeHemlL3k+CsamCyOGazJt4wc9xxZ+zZxOXeta07XXfC49+zufDstsIDX0xtg84U5GgNZhpHVE j3oDxsEgU64br9icLrv0CvyBJ9MmFEPT4LH0ph/58fTZL19LzOa0hlwcy5ls7YlNEJpa6WjAp/d8 9GMhWBsQ6uGBE3TkNkVHpY2Og4pP4qpoNApV7i/63heEkZxH9ObTXfv2puc/74VMT7qNZ6ZHazV6 7kLfQdbtrNu4PimIT37y46EjPX2M41FGTe4+uJ/OW2c6yehmz5oNjESgnPi+ZevmMHTkwQwzezZ+ L3jBC0LRjaCUM6elHPWZDsUMI2OOErzr3f8t1pPEB/6oiGwMN8MzDVg7YipyRcXyPOMZz6jKAiHm B9JH3vWe9Bt//D9jy0n2ZEoTZDHX+2QqP5272kPMAgynF/7IT6ePfuQj6Rl9MHOYEXJcfAbprNx7 z4PRiMeIG3lMYTC5Q+PGbZck3b+m8bHvoKJNjA+k177sZWnPzUwTg+NaLscpjqX11B5+TdLodNTS B6/87+k//sQPu4ErwEwJsmejtGHdRmSLHeYY4dlyyWWkh5sPSueZ/+ZJKD+buQxXXnlleutb3xob LHSg3IUpyq9rZw2FLrzkFa9In/n7/536aIGiylKZnE3bd2B/0Oz0QD9GdlM0RtJSPnzn058RI9Wd yJ9uhD/zUz+V/u6zGL3wau26LmZJ2FgChNpQxnaYNTje//73pZ/52Z9EAfIN3rsI/2o6DMpaczO7 6NCBycbsJSx6hi/P3EoYd7BzBqOVtSjvT7/2X36fwrGbDW+0q48PMTLVvgV6PcibkfS61706/d3f fTr4WhpsDRWNfPltx8pGTuNEObajoFESysqRGFycfuClL0tfQmm3U871jpwBxxOZQdfWdvChkL/z B/89/fJb38IXXFCYIeud70x37sG4pAPuKJZlcebLkSPTf85znhNyqFwofx//+MeDLzECFDlQDI1/ fcGRF1vEV77yFemv/vxjLMrdhLqgXoG/nZFjx47RuG3FiB+lbtLBRjk6k/Ts73wmLkM44zmri9zu 330gfe/3viENjDyQargMhI6aQRGnPtxUD2HM4zbVd0k0ps961pNkHcs/7LA3YwzdiN5CHhj8kedO 8Yu7vH/6059Kp9aGISv4d73rj9Nvvf03nRRMqJM0S/ZTrSxWt2c2M4D78Hz6/le9Iv3NZz+XZmgU mLxLndDs2L13p4f66bSyWD/hSugIdDdyKa+e++xnkx95UvlttHfegq586UtjBsbRQF12sn6p0ZCo X4bRL+vSzddfk578lCfEyJy4Sn8NIxskjcrSUdI40qXFjpQ6wZHIDRvWRZ3+1V99K7MNeBsw2wTZ Q6Z7122ou8b8MOuV/vzPPoq7DzUXo9hRxjtYW9SGcdOOK9wghsVU03hav+lS1s+m9OSn/qu0AXej Wo1ZCwbD7mBg5rUv/7fpWD87DNKMobowkpRodZl1ciZwueEGN+F5CnxiIxGMj5OnTiZlWXzbyCd3 3kgBXmzdclm64rGXxbpGxqjwAzyZXv6Kl6ev3L4XPqR0BbyxFg10MNrZSScGN/UOGqI/+qv/kX78 J34oOVbZopKnXt53+L507KETwW/1v7RyZzXl4YlPfGK4QVmnNb40AF/0ou/G+Bqm/LioUA9mkFMH YWbh+xwDf+su3Zyu+spX0zOf9mSrULi99J88zoYDd0U7eoop0Ro0dAe7mWldNtvQL09d0C+skf2Z //gf0t9/9h+IncKdsp81aQqsm4lID3dJVb+8+ad/Kuq2Bob4Xn311VEPNTysk9ZF5ULd8MIXvrAu J6a7fcdN6VUvf2kaYA3Huk10Qk4hz/OPhUNifYL8ZknrcdH5e+5zHhtrWFpxKXM3tB3I55o161jf AZ2wE6aox5PQYS0j59+xbVvq1LRgwDR1t6T/6/tenL6OMehEVx/NPI50aQiczMaBsjbi/cEf/EH6 lV/5FdGKTok4awx714hfXr+4IUQb7cJI+h8f/0T65V95a7i0R8UmnRbKHh0A5AUlga58XegX5T7P /KDLWEqwZ+/ucFfyuI4O6mY37nsnIIYd6Cc8Xv2RXX1O9R9PP/rDP4KuuIH4VGNGsGen4T9lb0H3 z9HWOdP1oQ+9P/3kf3gT/KA+gbuybCci6xc3Kcn6pVkLE2P96U9ncJj13y3t4nkqvec9705v+80/ RY6ZNUeWZ6kvc01X8MeKc0/I0/e+6kdpw/5n6qJ+dbe5cQhyTF05dYo1R9DE5RVRb3h2lP8FL3we +bsBg5t1tKUjRw/TNr05feXLX408nBPQHpvdeGl4lLTjat/DAMBv/NffS//5rb/uMjmrCvIxwsDU Tty+NlMH6PTgPqNNhMnMEoDT6UUv/B7kw5kC3O+QR22GX/m1X4VHzH5DD0wWErLJ35DGaY+sqz+C fvnYlegXZgs0il2Lv5tOqry3LLZb5rNRm48BxKc89ampj86/NpX6ZXx4IL36Na9P19GG6b2j3TbK Omxn5qwXruHpZvDzve99b/q/3/xT6CVEG1mcwPNm390uiWADLGZFjrFBU18vGzT1rE1DLC153vP+ NXU841tjnfgnP/5n2Fm/EvHdjJh9g9Jcx0b0C5UHd9jUPJde98rvT5/6yyvhCQoIt04Hzh9Evxw5 cQr9yuRCWx/56rnhJG1bevKTtmEP9PEb2eH3vj0H0C8vwmNnmI6JG0TAM+jZ3oLHCq2A8rSRQfSv fuVr6enPuCJq6sBZ7FdlTvdy+e/Mp22qExTvfd970lt//dez4QQtIDaFgcml8iBPr3zNa9Ln/+Ef o+6V9VL37D8Q7ZW6eArvpaHJYezWx6XJob70mMdtgUfDsBR7Z/7SdNeu+6KzbXu8bvM867VsLy+t 9Mtx8pxJmzdsRL98KT2b9k+9q97SZtHms+0KXVfVY8vuoGAZ6A6bkbJc+Sd/kv6fd32YQd4TYSeN U57ZtZfSrEDkKWxV+P2Sn/yF9NEPfSA9uQu+aOPMoxssNwRZBbDJ+NQw8Ue5OMGhNlmbm51gi/rR 2ite8Yrahz70ETac4TVXdavfZ/Nr/k5HvBoLnQJKwDl+eRkQzUrF4BqvzQ/fT2LH+Hakdvfum2rr 1j+rdtd9tdoEnyeI2z8GTqQ1Mz9CJK+MF5Ulp2ea1WVWJj3GZQkCg1meponjD1EbHar94Au/q/Zn H/pYvJpgv9EpEjg+N1sbKnHiS0mYl0IpR7nnt9Vfw5oBGyFG2Wq1vbvurm3auK22Z/fdeB/lYg+P sXkuoQqt5utIGclyTUc2C99LtiV985ipsciR+1yNhqL2+te+ofaRD320NjVK4ZbFjaDnDaQLH2oj B+t41qburf3pe36r9vw3/WrtEOlYFvM+wd+TPooSu33UZrnmuQrZyp3wRuHsg9oEH71G4NA0HJqb Ok2RofoIqZ16sPbvnvO82sf+4rO1ExDgFOkOkIa8HIB/SAA4SaNykZeZm7h5STTu/lReZvnReGXK 1Wrvfv/7am/44X9XG5mdAZeMl7iZ2hh+OgEm4lVBTjNnYTaN/Ilw9fAiMlkbHjlZe9WrfqD2sY/9 ZW14COkyWcKQZQWG84cC6d3fCyCNZ8gEFxjAMNCpNsA1Xhsk9wmle/KW2if/8u217331T9b6+TJF nGkLshqwTk1BX6yJoTHupFk7PVj70Re+uPaRK/86eCFtldvMz8zTKXE0rPh6Pwug9Ng3IF8Gw3CP 0O9///trr3vD62vD07O1UdKQKl4mh1tA9au8LTQLAkUYeRIwzzfrx7yyPF2bHORt4HRvbc++r9Y2 9T2vdu/dmYfWfPWLZVHOvC/kZdo5fR5yGhmZKr14W/0p+EGzuVO1j3zgj2sv/rc/WTtK+JCVmVF4 aW61mtpVuavNSWdk3zpDPoazVN4jDvdAu+RZoTM3yVee9+7aj365tLZn16GsXwg3PMafiETkC4Iq Ew41wSiuTSALH73yz2uvecMba0PjU3WeNOKZs6nKX9fJ/h6nHNbaTNdcJtOVN9SJEb74Etm58aZr a1sue1rtjj0PZP1yRhmq9BdhUOFqEkJVdJOcU4Ynoe3Y6cBgShoPHqu99vnPrr3vrz9dO0qYWRqY eRoY+fFQQUX863mcmX7QVtxWwo/3e2+9s/a4zU+q3XrT7iiLPO+fzLyXFhE10iB9ZdULGrB5Q9BL /DOtGsLK8BKW+9hQf+3VoV/+rMamFLkpJd4UO+2sDqgL4+oaNcqx2vad19Yu3/L82h3byYOkEYGc l+jwO+cGrRvshYwntOWtZbd2K+FB1mki0k7M86Z/ytaDLwNjtTe+6OW19//Fx9FtOZjBLwzIF2U7 P4d8eYduI2PD0HOu9qcffH/t1W98fW10ehLbwvYh07mejwjHlfmR9a6617IsbkuKDrQcuXSj7Pw/ SDM4Unv5y15T+/MrP6UKjXo6SWVX7+Myl1+Q1oKMmVe5sg6QZl4RDJ1Rqz3IdSxwyDgdrH3go2+v fdcP/XztXpKMtm52uDbMs7Q2tfzXfLwqiLLxXO7lfdwzTpaTIz4IQyqnj9Ve95Lvrn34E38TdSSQ wkdshjBFV0rDXH7tsszzQtd6Nj4EHqWc8iXrF86Uqn34z/689soffGNtAP81y22oc8l/rjML5TOL Emd2UvzhS6kvNKRTtGU/8PJX1z78wSsXyl9HkMh1EDd4iYUib23nIph/SnYiSWZzI2gObUv0fW0e jTKxv/bhD/1e7Vmv+/e1gwRRxyjPExYINs6PQiPs3dqc+i/XCtMX70IZRcSsFjIj05Jvdd+1/c7a tq2Pr916495cB3k/RJHpUEY6Ob4ploiRYE7Yj+WqXuebYcVlBrtoKtqnP/7Ae2uv+qE3xu+qyLXp 0I9VxJJOycY7NJduwQtQyMG1W7TvI4tadC8MgAW5/barapdv/Te1O3b0R5zxGSXLgBcI1hfqYG0A e7IkM/lA7b3v/i+1F/zkf6odIll5C8VqD/H3eGRDwBnkRZx4tH+8CshrOWJIgFR0t3DnOHvw9lp1 yzg/OAsa9PL0qwzguQkXiThwjFEbz3CwN3zyxDAj8HlUoK87j/LaG633hmOkcgkm9h4Bb+Ze/fTV AviSnUTCvYkRWfqeDBTk3V+6mLZYNs5C7PN6YmArwFEee8yOtjvCcZoDCt3BbjE00qnxeXGopb9g dbyyd66rkCMzLv5dPVSU63Y0mBEodw9k1KaPxd/20ll+UIdC53jhELkv4i5Vz4Scci4jzkrwSNcc Rjmc9bA4DAH14MriGREM5DGSzegEwY1RzqJxxGEB/JLTi3eR/8LXpU+Ft8qwstzJVK9rpFwl5Uix 390C9JEAR2Mc+Rf6mKEraOcNIs4zh0XloZxV1WYOhAT4jaDpruPor+7sLl1iwGr1ID8A/fpd1+Ko jSP8joYtz9lFXDhn/jHaitwqu4IjgoIjofLX39WreH9hfxQo0iehwlLf6DfuzN+pE+PwR3935qIq /TKF+3HG6MJyrMditMxRfsvJf2Qsz0bESFo90IU/5Nk1fevxt1e/sIA96xdHVYuUX3j6+t0XPjhi K+91Ue5mvR1NwarB7WLlS7O7qSJeg8yKhbsfjCp6bbWZeA4LAhZXoCzizOTp+qXu52tslNPkFAig 9568d73EasEyOCNnXoODrHWgjN2u/zkDyPECm+vF+qUn+GXyxZX8jKwexotYU4O3yTiuY7b7ynE+ MBf9SFO9GBoFQgp6nQOgv9DTDt7O+DHSfi79co4UF30WX9eMnF2/nG89WSlcKefCPeutvPOd5aFY AdLMwXxlonG9zSKkV6JbuPnbJpV8jOXZkdAOd2MHzuPsGtoyve8bubE4/fP/5XbV0WBRR52VVp6d PIzEizI9/+TOCLlIv+C9UdcvzIYwybFqKOvvTMj6rC5zS/3zt1+ldeF7I90r1BpNhJBfmGA9xvNH D601fbgwEtSixOUf+N8EDnU+qgMDyp3vhivZVl8j3SXvXFWovdeLW+DgoGvxbKuXiVvSeBh3sWln prJkOYQ7or+1MQqI5iIogePlQnnqiZT3huPS2WJynE1zWAPeybKL2EylSt8dHlcHZGA+zMZ7d7bK 3dCy/Uo7VtVJ+aAVZdA6VD8aSlD/9LAeYgcdlJyNcituErFFMZVJQZRx5wYx8VqMSrQVdYxt0LgU JKYxw4fDxXAYhS3MUa/lgFA2IYpUhlyAR1pugZ7TVDyr9EtW5R4hsjFs7vXsquDxwo0eYNipfqby AP0odYgx/COhgNx1znz0ae7HpU0/WsjHFtLs8HSG9IlBQc7n84PCB6djvUrH1l3vVgUySV8oD0Kj zuiaiRTg0sG6IhrUzVbUCpSEkAaDWMCiFOJ3CZXv5ZXhJ1hJ6A5MGq+xkNUep64L0M0F3rMsAnSm 1bCuRzSuh1DmJflySf4XGeBRKBlUj4ZqvAwiGEz/fJW20MGzpz/pJuC32CBgWR5F8PP640YgZW1A cU+LU+6J7S5L5wUN5cmU0ACzRLghxUACz0z9exgkpImOpm1bZZtEuAv+Q0ITuJWOwwS3fsdKj7v1 v9BU9HwuaHoPOA/a2bmwUXZARGO2+DnrVqgslw5VSfLh3HP2uIUEdsoIirKyXW2cdX9oYQ2l2/mu WYM7B/88lsCy9FFfHxHAeLNcloMN4ej8K1+zsSbBfC4YKmLP4lYkaES7zqGuXzblHQKDKReciXaA a1azW5HJaJQXY3Talc6rBN1j3Io4lC3iVTpPGr4a7KuFcVrJ6PibkG0W3I1tk3GbHcatZpZNZqr9 HdjIwe943NQFePUtgHp/hgX/umn1ImdWIdQY7m4LRoioLUBjTToPCaFMugcKC/olj2x5UOrqgPyp KJ34Bnd39AU/dL1yUFO5YjB/mUpvjsTjbKi4zoUAuLuZyCS7c3mEg/rF9qzol3NFP9d3N/KxoQ39 ostbRavz1y+WpapsoRnMUb40XstgQdtpnXegqReXP6pn0KqsfzKG3zI0ptX4XH1edFNCSzw/6Nam VGMnoV/ifC38BwcGdK3O7DHUhYKbEKi/8J+Lu3wJafNP6RVeaOLEU7/YPlrfhUdcv4ij+HO56UR0 qODL+dmv8BDKLtgagWIQtYiEnVbrQjMu+dG4sG4VX0R2QGBzI7Zinxxl10uqujVRrrn5DCTkgaFa dA+Vlx+F5zwCSlu8qapXvAyDOZ5ygOqxi3ztdIR+6cU1k+RMP8yCKsxqbu7EKT69uDj2cYmXtFMu dIcUQHMRThGhVJmIYYACllfJrABcXdfW3cmeBbhSe/5UPqtVEkmonEcJ/rDu4gCejiyYVPRdyNsj OOYh0CXRP8u1xL9iFmA8gfsqcs9ptLBeye3vmmC05zVplJ9mYb+7f8RWijnYWf6KAlcRAJAK4eNt EcJGeoZAhVDREcAP1nVBJ44frQuVfvamqFC7i1GU0kVLQlVw0w2m0ipLmEyiCJH/GM6LhMaOP5Q2 sqbCQ1Vxa6eiYW4R2TgKfJUkTxcGnu9h54Pp8PDPPImv+9iYeINjRrIh4YpWBbnzyN0dokqjcIKz TVzb4CzU+AijxPgMrwqiQ0vVxw/bPpF0mZtwtyQWoLOFs+sZMopuWh/krP7wqyJcFNHncvmCq/Ck D99iZ6DwEsfP3M4zNEDZjTFjt3HrJemybfgPA1LGeCZjXGes2po1ckvChCgyxtsFyB1oQwneC5X9 rf/05ZdtY0awn/NB2GqbdzbghlvYMt+QFwbOqnkWg+t/yoj6mjX6GuMjfSrvRnNeKZdiBvbU/Kg8 +ZDUoAhrvtzRsW9NJzscZjJWkzrnlfyKgci3E0PMbUClzdQDD4RhIN2qDSTrUQuKhVf1D2d5CGVM h0JjQsPcTpONqDO1XjGSe5b45/wEUi7MzrUZzESOkdwmFtqsXbuR9XE1Nio5GrKtCu3Feb2UY8o1 GqsFFLUjtxohD53OQ14avGWQY7XJuxMbftWkP4t+2cjI6tn0y8PPzbV/+IYEf5whkEeuabARKmcU PfxUF2LEbANG1LSzHAyOaeA4W2tdkf+rBWfK3OgnFkKiX9QbuJKk05zjsnHLJemKSy+LtWoy3fln xUNdpgyU2b0LxgE5G2dHMhQa60wGwrgZZgv9CaaH3UCkbNG8kL65L70Wvi77hK5y1m6xfmH9B4FP uahglZC3R8bARcbc2MV1P27nLbQ5zbEI7HAW/KsWYVmdvChStFmdtDHCeKN+sRCrBDvPIWPqF9oW t1h2S/1F+sXG7ZxguYRyz7/y31LmkJochjVP+dDSCdqYftYqalzYP2TtKMGK3ouX9T8lnfqL4GP8 coA5QKvP9tKwJDTOGp8Rz4GcTcc4FNr1WI6irWNwTq23Woi2UPqwXs71Jeoy25eAqjO6mjzUL+7e qf539qyuX+h8uL33aiE6TDaEXA5ceaaX56Zt27Yt2v5zpy+di0ZoCA1JbIId/JUNzmiH7cIMje3x 3HxrrL2/hPV0Q6fYFVG28MWNHRzk1JOnyTWj0Qmx+5vXyRcJMMmYheJ+NrCDY8DQL5BrGLsvDq+l Op2pX86W0vLf+ro9amUUmrnTdBtiMIxnjmvoWHtVDd7VYwbS9V/Vgy+B+jepED2XeEfTEndnY4/c /xD6hUO6OWJEcBOlVYOD8chpkJnE5rFf5xjc2djLjB1HmMhb9lcMW1+2BBi4oE1DtAo1ROnsYluB WMwZyqNSiP1M521Y71LbDGHPlR9ZrHIVb1SgFVIFoUw7fznj453LriLT2z5O0tFopleq/BtWGY2C uQiRURZdSmLHB14XyELtLzspuE/wzxFo1Zesa5qnQQOnOQ+m890c50to4KzdksNQyezNs1yNkQMW 2POcTyyy/EJ1F91GqMqWX4ltYJxncDTg+O5J1O67L46DbGe6Zs1CB6eknqduiWv6hBP3KqWG3FSU vs3gaECcucVPF7+6W5DxPX9krVvQL8KtxDqfOzRkO85QIBySS98SO4QKS4KnJ/KomiUweeYP+ItB 7+/AHUEFCTmgspf24hSXz0bi6sc308WL7taVOcVLRZaaNdk/lIYZsl27aXMEl0ZGMyvvIQ/+XgoR qLwUr4xbeZPvWeJ8VhEoS4ZqBHxgmc1pSKx6tBhLwy7iX0kEA2p6mrNUSNsDk3t74QWRma1m1KUK FGkWHE3ZF6ZWUswOrtm0gxMG8XJxPRWDzakjZGftOFFb0wNjbIXKaKHbY7SX5Ax+QQBe7F6nxj/J SH43ctyj8HLNwTP2EGH8kxEj0nZcMtCCMnFilyubhah0+fFcfzUqnGZ3NkUwPdtq0w/5qe66LSxw j5cBhV75ixSNNzTKxo/RcB70smjmHC032Bhjv+rOZnaiI6B7VZhJU5MuSh6k6BbSbnFaeLOQvslV hY3H+BOZlJ8lDvnMo6TZFZLtYNgKgZFIZm3mOcelZ+0mFmWjY3gnpTo5GyNWUDsoQOeulLAkW3Jf pB/MLvRlprWHmTrAlPXLVMyqFboZ9OGD5RBcnIwmCo8DZI4tezvYYCX0QYVgwTPnV5Vf3R/6n99s LsBpMpDNM7YyP5uhiFvIDrJZzrq1W4PRE9Cmq5dF0xgg0ewQNtIuGYhOnSfxo/pTKFTdER7p0D88 GR297iY6wybYjGxJxNpoGmEnvOG0iYXNbGNNKsaUR/K2nc0eolcdLa+Zn5m+QeuwLH7E8aBIC0zr PEbHqY1dFJXrfjYR2sxmH9IreOrLAqQl7kYrUHJf4H/+6llQdqLHxsbxVHGpP8eIMLLdTv0UVsd/ EpBUcyz6brUmdqWTD3Ww0QV0YjRtDtluZ/MlIeOnLqhaWviXATyjPHI709cvHdE8862ZzWBAsp+t jXuaOIaglj1LJjEAzdHUS0o8PkwoFPTuuW5Zv7izoe2qoAFsp7qwT3rZ/JTfESg4QfjqpawqKefv ftIELmZwDlFDqTQ5G1GBVdUlEO1uHhDQmEp5xwejAy5ilwxbrb0AABBVSURBVExmy8bm/OWXdFWO HWR2ZFb9jEwPaCQBa9jMYJaNL9rXs9kD5aKWEj+XPwJU5S555Hf8rcqWfxvedgfbA1zi1B9mOeYY DJhad0lwuI/dKm1g3CDHfOSRtGPjdv6Gpsvx+SWU0tXldwkF1S+MXEbIMbwdOunoioXpitoZ8SvX cj5lKBYyISVfKXGT273r+qhnS4ApsnlM/3Bav4H2eCmcQQcD5NQWZCZHKjjZSZ+bnaSdJw/t5ciC Tg3eDCPNfQyWsYMcUcTAC/MVl0vPKppIfdjQBV9LaZqBglkK/vAy0ErgN8KM2UYzAGgNPI3ttHGD m3dcOP/Nrn9wBBuSjbwAjw/poPOkVae3xkpQvuRyZdo5+G4UHFd54F0NSlR9AwcAm9jUSek5eZzN 3nBtclNuZ6O6PFvrgoF8kFt1aWplCQIy0+JuJ2BxepJjUTq5grfYaZlp2K/im3WY/C48vkAUiB6j dybjDkzsSoNy9mwcO0+NZ20sZCAC5areShuh3Hk0hH/zqhNZkj/PoxjyXvYoUwxB173oYhG7tEAI q1hsi8qTB8UGVOmWRkcXPI2sgoeVtjA1wpOmX72m6FE3u9aG5zF6pzFdzbOGajeZW/ILB1KlYzBv pQLc594TrO11O9K+IoRgkXMlYCuG44NCXVzEPCPBztMYh7Cyfi93ns4W+ZzfwIHdwGrVSIDFKAcz srEctFO9Z74xRgmtMA75reIvBmD8rsIYNkB++YH7BtYgddHBsAPoSLGj3XE6PbOenZs3pks2aWQQ mO15bAjkR/Rp1Oym03jxM4OJe4mf92WAeMqEh/nZeXLXMk8Vb+S3fuqrBTtP7lLpGggBe4cOI/RB +Mqhd+fOo5SFkPXyWhMy+GqmXwOcLZCZLWLDpgyrRz9NVLMAPbjxdHjuQ4yoUw5kQQ+epbAoy2W+ Lw2f1zLmt4526rZlHbQj5cDAovSWRj7H7ywFIMFosBBtLiO5rqvTJOnpWhsTE54igLdo8N78Wgnj wdyeebdqqFxTxCWOnaOR7WUGR3An04cHpKIxEDJd3aHZfIWnu1Qt6JfVNDwLWKlTPKdI3rhbleBZ fgM0rI1jCwsxHv7TOrYhVhk7A9VFPSn5kO2qYS0zsm6bi/8GjHX7XM7vYhbIwYc+Zuy2bmSLYnJh YwGomj0Woi1XWILWq0Sh4r8Hmnsm0wj1R85trIySVaYenSfd7MuZOm5p7ICUy7zcWn7VYPUJ44Jd +0iPjVsDpqbH6Dw1aktLZYUPDZ0DRf1vDJNfN/4t+qWvExdB9Uulb/QGeQTYj72yUMd0EQz9Agem GYD1ENizGYKNeJ7zOay0Una1SHbhM94oB0Tb5jvzUDpPGs/FdXxR2kGzRW+CqnVqaHhG51R6A57+ yU7I8QjNWpi16VjTR7k4qHecXexC2uLzBf0pblrOQLVUa97ZkHPBLfaCUl2IpH5Rz4d+4ZgJwc6T ywTOLjkLaZz1yU5Z1bl0Bkp3YY/nsPM01XBW3PJpFH6qS8/ERn0hF+JMLtsYO3F2MBw0wRTXw2ET nSc7TRPoHDsR2qIhBwwS9q3HK4V0s63UkL4yUC4ezwau62IrBNz3p6Lz5GHFYmXn6ZGA9egpMZti 1NfOUxyGXLXK8m05KKhnCa3KVW/IbYu9AN9xZTf9FkQM/XIJHk+883yqR8IDiGmzNG8bSVbWt7E4 U5Gt3ek8TVEvo56i3+Swl7iLQN6jlwmc+L2KPyrneTsqGPP6wnegnPUfFhT6c0KhZsasCh7FCSQz oqoH2I4SasJwtigqHMHBFjv2a1l8zzYebFzgDIjtoVsKOwMVP5f8MXJ1Vd8XEYI0C1odztDwcRhj poP9bp3iZ8szZnKITyCCrgrYfgdjEEbRGOuatH49Rhv5dXbiesG5WSvCsuU6M3Rx3/NL6ZT1MD3p aL6bcKwOHM1hi3FPlgTs83WxoYS+qU34wq/vlVcZWlDYztSJNtISSqFwQR5HChKzEL66k0zw2nVB 88hYE2vg2pypQSHNoxRcsjrLSGcTRi+7qMEPRlSI61kci9LKaNT/FrmKF0vybAgUnXHR6sH1sQcD x2dlxTw0elYLroEqvu6OsjkhrGFo1eljbd+5QcpZAHHhuZQlYxnnFYlz21osG9YNOt9X1nA8rE0q SGM56KLRdIaOPcHyZ+s+ldIOYGP/sjQO9XomnucBGjTSxG2UY8H3/9/euXBHbQNRmJCGbCAQyv// k4XwKIHQ+81oZPkRshvT9nDO1dm1pZE0M7qSZb0siXct5WNggLTtMzkiSYMSJHNCIUqRXEJLCquO 1fa08lcSP39msw8q7zy3ap9sxYa5KjPSoTo7DGeTMGR0rfJ2umnlgQKq/0/rF7a23mlYn069jyF/ GJ3HVF2Trj1XPanie6869+Wb/GaHOo1+RxO7h3k8a4y1fGDal/eLphsvtZYf80X1MiujmGxitvxO 20zHs4/nWLhxP9Uo/3+og1uDMXxHcKdZgzvVC9rkac514Zx7PuDSg3hOGZOhzs/6RR1BJeS1vr3Z a/5iW/34cDC3fy5+bHWtoa5yzu8M/B2ZlqhfhA/HWYSJ+oW0MJO93/CNDYU26heNANJhYliUD9Rz G+hjapj24KLOkekKzWm8yHBIa2vDq2GYGxlAH9/duLfMJI7nXn8IE1F5o5FM1cVoeEVzDL8PPPc6 2kKz0bGkT66nmltGljCt88SgGVt0s+nLvdozew31Sw0AR/3SGP6q+oX26w8qExmWTl+oPLBCA3NS +zVi1IUB+vxrgagYqW2sxlHMUGkCgGGYrxqM5z3/Nwe56t359lrpbEXts9qaLCO+0yqHlqtxJ+sy yEgtmct7hmGZMd9YngdzDi1W/aLniTqGA56jzCyjnuBmdo1OLsdpoFvdYVH5hn3UuOzQVybqhnqy tbRZ+wJEY0j0A0dKYCSIQ2yrD5DE06/kB12gjxxyLA05Y+tSB81/1eSCTmB49ucrtfcAXX+t5Feu oTlOnqb0GJ788Dv5cq7RxufqwdDDZSQSQ6PjvUYLL2JTAQhBnl26YPzKv+4tJE4+f8Rk47IFEOlb DW+LdCtZMYKjEaQ66CvX3CgiUVo0+GDSSTXZtZjoTH2LXlG+01FSVf1KH+PxGmIGhBfRQWcSNDwj vC7DXdZRbjGLMHVJ2WfKtAMvMlXiLE2ikmB50Bd1GN6+zY/ySsvIzOJV97nUYt6p2m097OjNIjhm VDAX6gzGSeoDn/A48fJd00lXr1Q5SEyUQ2HH2lTtxRppCp3FkxfT2J1uqZ/BFKLRp/6y5rSqHky+ Pem6KjY/5QmzEZeafudMlXhgx0YHWTfw6vzDMlyi1dzCDmSscTCfllVxBgZlDEPHCV1oJDxkKs+4 lz3U72nImDEoIGRqpuWg3g2N+U/6ZmltFpEjQHLntT/nn3Qa5XHSPUtFxJIlUZRwyjAfsO82wo61 /Ac9NxwsGwVBiqhYt/yu1E84RKZsJeUBZRiB4rmujiYDDbXyGO5VrmBJxyPLXMnlPtpTSFFrBBXM q+hQVim+Fe/9rV6GKt+stL26ohKXJAhU9mGW9wySGdLsGXC4Ng34PlNlF/mCLGaMrzRAkA25TFtw p4zGTFnK4loQJiU7YSkAn/zTKDhoyRv6LuuXdzqLbZ/REkOmTBu+b65vNFqc5fZah31r6+qmRUpJ PUuiXJOawaPSNIUjgN4Aasw+V32lndI1wflJz7kat8oLfDsP7DNTXLiP9hYoIgsW4c5Yy0sdthsv Lujhp9kIfX9J54rH/IXKN4cWz+p8lhVF4Af4NxnJr8nttxZHYc60DIVO6EfNPmlvXO34eRkb1pxP FV7GKn6dR6aspId3hYnyQraLoIKbMy10cjT7RKNnMZs+sDzJevPutd776ippEPVC+UQ5Bm4GTFiY zQLzST+Uawp2PScS4XiWw6sH1ZOgcn/QYeGce6ZRsgjwQgfsVDNLUZ5ommbiT/3CtxsYvoGSoNCj qyEKoauOkPWnptLMvewZuShwziVw3wBNTnZJ5T1Dw53Nc6YZqM5hJRMfOKUUuUaFS7LIwBZ4MdjN LrmzWrP4113eI58UgJDB5PvmWjuY3Wo2KHqAmhWAQ9THsjxXewaDG3py7yHwGugtHV1Whs5ByrTf 6HwldnrGxSY+vAMInr6L+K38hy/2MHWf4tB+PdMqEJa60inPYJpN1TdWf7RdN5Ooa9etU2aW0Rs7 f56A2JRGdmZkaNud6zlh90o6yNesruGtJb9a3cRh6JxllTMvE0Yj/5nghxwtAnKoXz5pB1a+Uz1o QOVCgx45BgQmhUvdRaoEwHtTcMajrFZnllUhyKJ+YeXTaIpz3dd+vL/yOQi/kH//7EbfhtOvuFM7 /EL5wS61GOqX2QR3UE+/MEhF3U+7gYFgxCLnntmzFLVgWilIUHYepLvgfbSzFdTKOBRdZNJshiD4 Tp2ao8VsBExMUn4XSUOoO9KPXia2ea+zBdvQd0PUESQkVIasg+8X83P+a4k7KF3ZxC84zXDNzjXf OEyGEZapGxtZkBk0Ben5MpHCFvIGWd1beC55lN+M1xi3xcG/p6MiPf1+HKvS4+FykBpUOFzLsIx2 Jb06rOHUrCavNEKfxfo0dZz0MiFsb6hEwD2X1KvLab3MHxpSxSdepmEbdZZP73wo0CxfTtMl0z3F mbNCg1HuFG5lK0bBINMUcYtOhO5XfI/kvRJWBPioQSPG2a2tfEn+iC5J8XKJZWPITLml2jrNCjIz e/WcMXvUUXotA871bL4VuC2Hy9G99Is0F5MqLxEuyzBemzwrTkevE1aWEo9HYtywYggycJZbgWIF VoTRhUhNX9lkduBbCrSElDP5DukbPYawj6Z/VgcX13/j3vAa8ol3eC7vK3mUZkzDq9I0pKeX9+6X cXBGMJajycIycGi/rh5DrzQlutx1b2qW89F713kzZKV00/Mo4qgnNUiYccMsAjQlwAsT7ZmoR3BV ua07tCeYUCTzn/cLhhF7DM9NpTRVwMV/bAcQcstUzMmvsZ0Isj2cL4r/aPlHRhnp3vAqylPuk45z /bf0rLBbfsgu/9Ijwo3En0XEj7A9TOqTbWvyiedzZ96XYkfcS5VRfaJ19VY8jsm/VaSTCEtdiLyp TynfuWe5+Z86UF0LW4yAETACRsAIGAEjYASMgBEwAr8NAv9d9/O3gcSKGgEjYASMgBEwAkbACBgB I2AEthFwB2obF1ONgBEwAkbACBgBI2AEjIARMAIrBNyBWkFighEwAkbACBgBI2AEjIARMAJGYBsB d6C2cTHVCBgBI2AEjIARMAJGwAgYASOwQsAdqBUkJhgBI2AEjIARMAJGwAgYASNgBLYRcAdqGxdT jYARMAJGwAgYASNgBIyAETACKwTcgVpBYoIRMAJGwAgYASNgBIyAETACRmAbAXegtnEx1QgYASNg BIyAETACRsAIGAEjsELAHagVJCYYASNgBIyAETACRsAIGAEjYAS2EXAHahsXU42AETACRsAIGAEj YASMgBEwAisE3IFaQWKCETACRsAIGAEjYASMgBEwAkZgGwF3oLZxMdUIGAEjYASMgBEwAkbACBgB I7BC4B/dtEk56n7qngAAAABJRU5ErkJggg== --_004_B0147C3DD45E42478038FC347CCB65FE02C127DA85XCHMW08Vmwnos_-- From internet-drafts@ietf.org Sat Dec 29 11:14:32 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 689D821F873E; Sat, 29 Dec 2012 11:14:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.523 X-Spam-Level: X-Spam-Status: No, score=-102.523 tagged_above=-999 required=5 tests=[AWL=0.076, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H7Ybt8YlJ6Ca; Sat, 29 Dec 2012 11:14:31 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D810821F8731; Sat, 29 Dec 2012 11:14:31 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Subject: I-D Action: draft-ietf-6man-ipv6-atomic-fragments-03.txt X-Test-IDTracker: no X-IETF-IDTracker: 4.37 Message-ID: <20121229191431.4571.21706.idtracker@ietfa.amsl.com> Date: Sat, 29 Dec 2012 11:14:31 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 29 Dec 2012 19:14:32 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the IPv6 Maintenance Working Group of the IET= F. Title : Processing of IPv6 "atomic" fragments Author(s) : Fernando Gont Filename : draft-ietf-6man-ipv6-atomic-fragments-03.txt Pages : 14 Date : 2012-12-29 Abstract: The IPv6 specification allows packets to contain a Fragment Header without the packet being actually fragmented into multiple pieces (we refer to these packets as "atomic fragments"). Such packets typically result from hosts that have received an ICMPv6 "Packet Too Big" error message that advertises a "Next-Hop MTU" smaller than 1280 bytes, and are currently processed by some implementations as "fragmented traffic". Thus, by forging ICMPv6 "Packet Too Big" error messages an attacker can cause hosts to employ "atomic fragments", and then launch any fragmentation-based attacks against such traffic. This document discusses the generation of the aforementioned "atomic fragments", the corresponding security implications, and formally updates RFC 2460 and RFC 5722 such that fragmentation-based attack vectors against traffic employing "atomic fragments" are completely eliminated. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-6man-ipv6-atomic-fragments There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-6man-ipv6-atomic-fragments-03 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-6man-ipv6-atomic-fragments-03 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From internet-drafts@ietf.org Sat Dec 29 17:15:38 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00D3521F886F; Sat, 29 Dec 2012 17:15:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.523 X-Spam-Level: X-Spam-Status: No, score=-102.523 tagged_above=-999 required=5 tests=[AWL=0.076, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pWt0PipLpNBd; Sat, 29 Dec 2012 17:15:37 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8860221F8835; Sat, 29 Dec 2012 17:15:37 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Subject: I-D Action: draft-ietf-6man-stable-privacy-addresses-02.txt X-Test-IDTracker: no X-IETF-IDTracker: 4.37 Message-ID: <20121230011537.2800.39239.idtracker@ietfa.amsl.com> Date: Sat, 29 Dec 2012 17:15:37 -0800 Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Dec 2012 01:15:38 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the IPv6 Maintenance Working Group of the IET= F. Title : A method for Generating Stable Privacy-Enhanced Addresse= s with IPv6 Stateless Address Autoconfiguration (SLAAC) Author(s) : Fernando Gont Filename : draft-ietf-6man-stable-privacy-addresses-02.txt Pages : 18 Date : 2012-12-29 Abstract: This document specifies a method for generating IPv6 Interface Identifiers to be used with IPv6 Stateless Address Autoconfiguration (SLAAC), such that addresses configured using this method are stable within each subnet, but the Interface Identifier changes when hosts move from one network to another. The aforementioned method is meant to be an alternative to generating Interface Identifiers based on IEEE identifiers, such that the benefits of stable addresses can be achieved without sacrificing the privacy of users. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-6man-stable-privacy-addresses There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-6man-stable-privacy-addresses-02 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-6man-stable-privacy-addresses= -02 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From fgont@si6networks.com Sat Dec 29 17:15:50 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A9E121F8884 for ; Sat, 29 Dec 2012 17:15:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.577 X-Spam-Level: X-Spam-Status: No, score=-2.577 tagged_above=-999 required=5 tests=[AWL=-0.022, BAYES_00=-2.599, DATE_IN_PAST_03_06=0.044] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L617Mcif0lCQ for ; Sat, 29 Dec 2012 17:15:50 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id CDA0221F8881 for ; Sat, 29 Dec 2012 17:15:49 -0800 (PST) Received: from [186.134.23.186] (helo=[192.168.123.123]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tp7Uj-0005Vs-7g; Sun, 30 Dec 2012 02:15:17 +0100 Message-ID: <50DF4305.7040904@si6networks.com> Date: Sat, 29 Dec 2012 16:22:45 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Brian Haberman Subject: Re: I-D Action: draft-ietf-6man-ipv6-atomic-fragments-03.txt References: <20121229191431.4571.21706.idtracker@ietfa.amsl.com> In-Reply-To: <20121229191431.4571.21706.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Dec 2012 01:15:50 -0000 Hi, Brian, I've rev'ed this document according to our recent email exchange. Should we progress this document now? Thanks, and Happy New Year! Fernando On 12/29/2012 04:14 PM, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the IPv6 Maintenance Working Group of the IETF. > > Title : Processing of IPv6 "atomic" fragments > Author(s) : Fernando Gont > Filename : draft-ietf-6man-ipv6-atomic-fragments-03.txt > Pages : 14 > Date : 2012-12-29 > > Abstract: > The IPv6 specification allows packets to contain a Fragment Header > without the packet being actually fragmented into multiple pieces (we > refer to these packets as "atomic fragments"). Such packets > typically result from hosts that have received an ICMPv6 "Packet Too > Big" error message that advertises a "Next-Hop MTU" smaller than 1280 > bytes, and are currently processed by some implementations as > "fragmented traffic". Thus, by forging ICMPv6 "Packet Too Big" error > messages an attacker can cause hosts to employ "atomic fragments", > and then launch any fragmentation-based attacks against such traffic. > This document discusses the generation of the aforementioned "atomic > fragments", the corresponding security implications, and formally > updates RFC 2460 and RFC 5722 such that fragmentation-based attack > vectors against traffic employing "atomic fragments" are completely > eliminated. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-6man-ipv6-atomic-fragments > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-6man-ipv6-atomic-fragments-03 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-ietf-6man-ipv6-atomic-fragments-03 > > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From fgont@si6networks.com Sat Dec 29 17:15:51 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F84E21F8884 for ; Sat, 29 Dec 2012 17:15:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.597 X-Spam-Level: X-Spam-Status: No, score=-2.597 tagged_above=-999 required=5 tests=[AWL=0.002, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UVkxcTy1LiMR for ; Sat, 29 Dec 2012 17:15:50 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id 8778621F8881 for ; Sat, 29 Dec 2012 17:15:50 -0800 (PST) Received: from [186.134.23.186] (helo=[192.168.123.123]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tp7Uo-0005W1-Bf; Sun, 30 Dec 2012 02:15:22 +0100 Message-ID: <50DF7DB0.9050608@si6networks.com> Date: Sat, 29 Dec 2012 20:33:04 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ole Troan Subject: Re: Chairs review: draft-ietf-6man-stable-privacy-addresses-01 References: <5A09B460-28E9-465E-A25A-A5901359D21D@employees.org> <50D36595.3000704@si6networks.com> <02E79B66-2A04-481C-B4F2-539A2A746440@employees.org> In-Reply-To: <02E79B66-2A04-481C-B4F2-539A2A746440@employees.org> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Cc: 6man 6man-wg X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Dec 2012 01:15:51 -0000 Hi, Ole, I've rev'ed the I-D according to your feedback and our recent email exchange. Some additional notes below: On 12/21/2012 08:20 AM, Ole Troan wrote: [discussion of what this algorithm is similar to] FWIW, I've added an ack to the Acks section, noting that this algorithm was inspired by Steve Bellovin's work on TCP sequence numbers. For instance, what this algorithm does is to separate the IID-space on a "per-network" basis. >>> - The algorithm in the document is underspecified. >>> o It should specify the hash function. E.g. MD5 as RFC4941. >> >> Why should it? Put another way, is this needed for the algorithm to >> work? -- it's not. I've added some text in this area -- noting why we do not require any specific algorithm. >>> o It would be useful to include an example algorithm as has been done >>> in some other documents. >> >> You mean as in RFC4941? Or a algorithm in pseudo-code? > > as in 4941. RFC 4941 needs an algorithm because it is more complex than this IID. As far as this alg is concerned, the only algorithm one could come up with is: 1) generate the IID with this expression 2) tweak the U/G bit 3) Check for reserved addresses, and consider this a DAD conflict if it is a reserved address DAD shouldn't be included in this "algorithm" because we're not updating RFC4862 at all. -- we're just specifying an alternative algorithm for generating IIDs. >>> - Clarify what lifetimes these addresses have. >> >> You mean lifetimes in the sense of "same thing as tradtional slaac >> addresses" or lifetime in the sense of "the address will be stable as >> long as you don't change the secret key". > > an address cannot have a longer lifetime than the lifetimes advertised in RAs of course. > could you say something along the lines of: Stable Privacy Addresses have the same lifetime properties > as SLAAC addresses [4862] and expire as described in section 5.5.3 of 4862. I've clarified this. However, I should note that there's no reason to believe that these lifetimes change, since we're not changing SLAAC (RFC 4862). >>> - Specify the default for DAD retries (IDGEN_RETRIES) >> >> Will do. I did specify this -- however, IMHO this is out-of-scope, since this value should be specified somewhere else. Please check the rev'ed I-D -- I believe it is ready to ship. Thanks so much, and have a Happy New Year! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From fgont@si6networks.com Sat Dec 29 17:18:16 2012 Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6463521F8891 for ; Sat, 29 Dec 2012 17:18:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.597 X-Spam-Level: X-Spam-Status: No, score=-2.597 tagged_above=-999 required=5 tests=[AWL=0.002, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JFcf-cQ0E4gu for ; Sat, 29 Dec 2012 17:18:15 -0800 (PST) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by ietfa.amsl.com (Postfix) with ESMTP id B476621F8881 for ; Sat, 29 Dec 2012 17:18:15 -0800 (PST) Received: from [186.134.23.186] (helo=[192.168.123.123]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1Tp7XV-0005Xd-DI; Sun, 30 Dec 2012 02:18:09 +0100 Message-ID: <50DF964A.5000504@si6networks.com> Date: Sat, 29 Dec 2012 22:18:02 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: "6man-chairs@tools.ietf.org" <6man-chairs@tools.ietf.org> Subject: Re: I-D Action: draft-ietf-6man-stable-privacy-addresses-02.txt References: <20121230011537.2800.39239.idtracker@ietfa.amsl.com> In-Reply-To: <20121230011537.2800.39239.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: ipv6@ietf.org X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Dec 2012 01:18:16 -0000 Folks, I've rev'ed the document according to our recent email exchange. Should we ship the document now? Thanks, and have a Happy New Year! Best regards, Fernando On 12/29/2012 10:15 PM, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the IPv6 Maintenance Working Group of the IETF. > > Title : A method for Generating Stable Privacy-Enhanced Addresses with IPv6 Stateless Address Autoconfiguration (SLAAC) > Author(s) : Fernando Gont > Filename : draft-ietf-6man-stable-privacy-addresses-02.txt > Pages : 18 > Date : 2012-12-29 > > Abstract: > This document specifies a method for generating IPv6 Interface > Identifiers to be used with IPv6 Stateless Address Autoconfiguration > (SLAAC), such that addresses configured using this method are stable > within each subnet, but the Interface Identifier changes when hosts > move from one network to another. The aforementioned method is meant > to be an alternative to generating Interface Identifiers based on > IEEE identifiers, such that the benefits of stable addresses can be > achieved without sacrificing the privacy of users. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-6man-stable-privacy-addresses > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-6man-stable-privacy-addresses-02 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-ietf-6man-stable-privacy-addresses-02 > > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492