From nobody Wed Jul 23 19:35:12 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bnPVf0BqRz62vwc for ; Wed, 23 Jul 2025 19:35:22 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bnPVc2mTmz3fdY for ; Wed, 23 Jul 2025 19:35:20 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net; dmarc=pass (policy=none) header.from=denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id 02BD1B0FFC for ; Wed, 23 Jul 2025 15:34:51 -0400 (EDT) Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 0D7DE1F8341 for ; Wed, 23 Jul 2025 15:35:14 -0400 (EDT) Message-ID: <2ceaf7ed-3a04-47f3-a1f1-9f8a40cab9ef@denninger.net> Date: Wed, 23 Jul 2025 15:35:12 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: freebsd-net@freebsd.org From: Karl Denninger Subject: rtadvd appears to ignore options set in /etc/rtadvd.conf Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms080104050205070204010102" X-Spamd-Result: default: False [0.94 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_MEDIUM(1.00)[1.000]; MIME_BASE64_TEXT_BOGUS(1.00)[]; NEURAL_SPAM_LONG(1.00)[1.000]; NEURAL_SPAM_SHORT(0.74)[0.739]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; R_SPF_ALLOW(-0.20)[+mx]; MIME_BASE64_TEXT(0.10)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; ARC_NA(0.00)[]; FREEFALL_USER(0.00)[karl]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; TO_DN_NONE(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; HAS_ATTACHMENT(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; R_DKIM_NA(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; RCVD_VIA_SMTP_AUTH(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[] X-Rspamd-Queue-Id: 4bnPVc2mTmz3fdY X-Spamd-Bar: / This is a cryptographically signed message in MIME format. --------------ms080104050205070204010102 Content-Type: multipart/alternative; boundary="------------IRLz6uFfRJuN3lvGeIhUJYyU" --------------IRLz6uFfRJuN3lvGeIhUJYyU Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 Q29waWVkIG92ZXIgZnJvbSB0aGUgZm9ydW0gd2hlcmUgSSBhbHNvIHBvc3RlZCBpdDoNCg0K cnRhZHZkL3Nob3VsZCwvYnkgdGhlIGRvY3VtZW50YXRpb24sIGFsbG93IG1lIHRvIGNvbnRy b2wgdGhlIFNMQUNDIA0KcGx0aW1lIGFuZCB2bHRpbWUgaW50ZXJ2YWxzLiBJIGhhdmUgdGhl IGZvbGxvd2luZyBpbiBteSAvZXRjL3J0YWR2ZC5jb25mIA0KZmlsZToNCg0KQ29kZToNCg0K fCMgU2V0IHRoZSBwcmVmZXJyZWQgbGlmZXRpbWUgdG8gMTAgbWludXRlcyBvbiBhZHZlcnRp c2VkIHByZWZpeGVzLiAjIA0KQWxsIG90aGVyIHBhcmFtZXRlcnMgYXJlIGRlZmF1bHQuICMg ZGVmYXVsdDpcIDpwbHRpbWUjMzYwMDpcIA0KOnZsdGltZSM4NjQwMDpcIDpwcmVmaXhsZW4j NjQ6IGl4MTpcIDpwbHRpbWUjMzYwMDpcIDp2bHRpbWUjODY0MDA6XCANCjpwcmVmaXhsZW4j NjQ6IGl4MS40OlwgOnBsdGltZSMzNjAwOlwgOnZsdGltZSM4NjQwMDpcIDpwcmVmaXhsZW4j NjQ6fA0KDQpBbmQgaXQgaXMgaW52b2tlZCB3aXRoIHRoaXMgaW4gL2V0Yy9yYy5jb25mOg0K Q29kZToNCg0KfCMgIyBJcHY2IHJvdXRpbmc7IHdlIE1VU1QgYmUgYW4gSVB2NiByb3V0ZXIg Zm9yIHRoZSBJTlRFUk5BTCBpbnRlcmZhY2UgDQp0byAjIGRpc3RyaWJ1dGUgSVB2NiAjIHJ0 YWR2ZF9lbmFibGU9IlllcyIgcnRhZHZkX2ludGVyZmFjZXM9Iml4MSBpeDEuNCJ8DQoNCkFu ZCBpcyBpbmRlZWQgcnVubmluZyB3aXRoIHRoZXNlIHR3byBpbnRlcmZhY2VzICh0aGUgbGF0 dGVyIGlzIGEgVkxBTikNCg0KSG93ZXZlciwgd2hlbiBhIGRldmljZSBnZXRzIGEgU0xBQ0Mg YWRkcmVzcy4uLi4NCkNvZGU6DQoNCnxba2FybEBOZXdGUyB+XSQgaWZjb25maWcgbWNlMCBt Y2UwOiANCmZsYWdzPTEwMDg5NDM8VVAsQlJPQURDQVNULFJVTk5JTkcsUFJPTUlTQyxTSU1Q TEVYLE1VTFRJQ0FTVCxMT1dFUl9VUD4gDQptZXRyaWMgMCBtdHUgMTUwMCANCm9wdGlvbnM9 NjZlZjA3YmI8UlhDU1VNLFRYQ1NVTSxWTEFOX01UVSxWTEFOX0hXVEFHR0lORyxKVU1CT19N VFUsVkxBTl9IV0NTVU0sVFNPNCxUU082LExSTyxWTEFOX0hXRklMVEVSLE5WLFZMQU5fSFdU U08sTElOS1NUQVRFLFJYQ1NVTV9JUFY2LFRYQ1NVTV9JUFY2LEhXU1RBVFMsSFdSWFRTVE1Q LE1FWFRQRyxWWExBTl9IV0NTVU0sVlhMQU5fSFdUU08+IA0KZXRoZXIgNTA6NmI6NGI6MTI6 Yzg6NTggaW5ldCAxOTIuMTY4LjEwLjEwMCBuZXRtYXNrIDB4ZmZmZmZmMDAgYnJvYWRjYXN0 IA0KMTkyLjE2OC4xMC4yNTUgaW5ldDYgZmU4MDo6NTI2Yjo0YmZmOmZlMTI6Yzg1OCVtY2Uw IHByZWZpeGxlbiA2NCBzY29wZWlkIA0KMHg0IGluZXQ2IDI2MDY6ODNjMDo4MDAwOjFiMDA6 NTI2Yjo0YmZmOmZlMTI6Yzg1OCBwcmVmaXhsZW4gNjQgYXV0b2NvbmYgDQpwbHRpbWUgNjA0 ODAwIHZsdGltZSAyNTkyMDAwIG1lZGlhOiBFdGhlcm5ldCAxMEdCYXNlLUNSMSANCjxmdWxs LWR1cGxleCxyeHBhdXNlLHR4cGF1c2U+IHN0YXR1czogYWN0aXZlIG5kNiANCm9wdGlvbnM9 MjM8UEVSRk9STU5VRCxBQ0NFUFRfUlRBRFYsQVVUT19MSU5LTE9DQUw+fA0KDQpOb3RlIHRo ZSBwbHRpbWUgYW5kIHZsdGltZS4NCg0KQW5kIGEgdGNwZHVtcCBzaG93cyBpbmRlZWQgdGhh dCB3aGlsZSBydGFkdmQgaXMgYWR2ZXJ0aXNpbmcsIGl0IGlzIA0Kc2VuZGluZyB0aGUgZGVm YXVsdHMgYW5kIE5PVCB3aGF0IEkgc2V0Og0KQ29kZToNCg0KfFtyb290QE5ld0ZTIC9ob21l L2thcmxdIyB0Y3BkdW1wIC12IC1uIC1pIG1jZTAgaWNtcDYgYW5kIGlwNls0MF0gPT0gMTM0 IA0KdGNwZHVtcDogbGlzdGVuaW5nIG9uIG1jZTAsIGxpbmstdHlwZSBFTjEwTUIgKEV0aGVy bmV0KSwgc25hcHNob3QgbGVuZ3RoIA0KMjYyMTQ0IGJ5dGVzIDEzOjI1OjQ5LjM0NTQxNyBJ UDYgKGhsaW0gMjU1LCBuZXh0LWhlYWRlciBJQ01QdjYgKDU4KSANCnBheWxvYWQgbGVuZ3Ro OiA1NikgZmU4MDo6MmUwOmI0ZmY6ZmU2ODpmODk1ID4gZmYwMjo6MTogW2ljbXA2IHN1bSBv a10gDQpJQ01QNiwgcm91dGVyIGFkdmVydGlzZW1lbnQsIGxlbmd0aCA1NiBob3AgbGltaXQg NjQsIEZsYWdzIFtub25lXSwgcHJlZiANCm1lZGl1bSwgcm91dGVyIGxpZmV0aW1lIDE4MDBz LCByZWFjaGFibGUgdGltZSAwbXMsIHJldHJhbnMgdGltZXIgMG1zIA0Kc291cmNlIGxpbmst YWRkcmVzcyBvcHRpb24gKDEpLCBsZW5ndGggOCAoMSk6IDAwOmUwOmI0OjY4OmY4Ojk1IHBy ZWZpeCANCmluZm8gb3B0aW9uICgzKSwgbGVuZ3RoIDMyICg0KTogMjYwNjo4M2MwOjgwMDA6 MWIwMDo6LzY0LCBGbGFncyBbb25saW5rLCANCmF1dG9dLCB2YWxpZCB0aW1lIDI1OTIwMDBz LCBwcmVmLiB0aW1lIDYwNDgwMHN8DQoNCkFuZCBmdXJ0aGVyLCBvbiB0aGUgZ2F0ZXdheToN CkNvZGU6DQoNCnxyb290QElwR3c6L3Vzci9sb2NhbC9ldGMgIyBydGFkdmN0bCBzaG93IGl4 MTogDQpmbGFncz08VVAsQ09ORklHVVJFRCxQRVJTSVNUPiBzdGF0dXM9PFJBX1NFTkQ+IG10 dSAxNTAwIERlZmF1bHRMaWZldGltZTogDQozMG0gTWluQWR2SW50ZXJ2YWwvTWF4QWR2SW50 ZXJ2YWw6IDNtMjBzLzEwbSBBZHZMaW5rTVRVOiA8bm9uZT4sIEZsYWdzOiANCjxub25lPiwg UHJlZmVyZW5jZTogbWVkaXVtIFJlYWNoYWJsZVRpbWU6IDBzLCBSZXRyYW5zVGltZXI6IDBz LCANCkN1ckhvcExpbWl0OiA2NCBBZHZJZlByZWZpeGVzOiB5ZXMgTmV4dCBSQSBzZW5kOiBX ZWQgSnVsIDIzIDEzOjI5OjUyIA0KMjAyNSBMYXN0IFJBIHNlbmQ6IFdlZCBKdWwgMjMgMTM6 MjU6NDkgMjAyNSBpeDEuNDogDQpmbGFncz08VVAsQ09ORklHVVJFRCxQRVJTSVNUPiBzdGF0 dXM9PFJBX1NFTkQ+IG10dSAxNTAwIERlZmF1bHRMaWZldGltZTogDQozMG0gTWluQWR2SW50 ZXJ2YWwvTWF4QWR2SW50ZXJ2YWw6IDNtMjBzLzEwbSBBZHZMaW5rTVRVOiA8bm9uZT4sIEZs YWdzOiANCjxub25lPiwgUHJlZmVyZW5jZTogbWVkaXVtIFJlYWNoYWJsZVRpbWU6IDBzLCBS ZXRyYW5zVGltZXI6IDBzLCANCkN1ckhvcExpbWl0OiA2NCBBZHZJZlByZWZpeGVzOiB5ZXMg TmV4dCBSQSBzZW5kOiBXZWQgSnVsIDIzIDEzOjI4OjMxIA0KMjAyNSBMYXN0IFJBIHNlbmQ6 IFdlZCBKdWwgMjMgMTM6MTk6NTUgMjAyNXwNCg0KDQpPaywgd2hhdCBhbSBJIG1pc3Npbmc/ IFRoYXQgL2V0Yy9ydGFkdmQuY29uZiBzeW50YXggY2VydGFpbmx5IExPT0tTIGNvcnJlY3Qu DQoNCkZyZWVic2QtMTQuMy1TVEFCTEUsIGlmIGl0IG1hdHRlcnMuDQoNClRoaXMgaXNuJ3Qg YSAiY3JpdGljYWwiIHByb2JsZW0gYnV0IGlmIEkgaGF2ZSByZWFzb24gdG8gcmVzdGFydCB0 aGUgDQpnYXRld2F5LCBmb3IgZXhhbXBsZSwgYW5kIGl0IGdldHMgYSBkaWZmZXJlbnQgSXA2 IGRlbGVnYXRpb24sIHRoZSBvbGQgDQpTTEFDQyBhZGRyZXNzZXMgc3RpY2sgYXJvdW5kIGZv ciBhIGxvb29vb29vbmcgdGltZSAtLSBhbmQgSSdkIHByZWZlciANCnRoZXkgbm90LCBvYnZp b3VzbHkuDQoNCi0tIA0KS2FybCBEZW5uaW5nZXINCmthcmxAZGVubmluZ2VyLm5ldA0KL1Ro ZSBNYXJrZXQgVGlja2VyLw0KL1tTL01JTUUgZW5jcnlwdGVkIGVtYWlsIHByZWZlcnJlZF0v DQo= --------------IRLz6uFfRJuN3lvGeIhUJYyU Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Copied over from the forum where I also posted it:

rtadvd=C2=A0shou= ld,=C2=A0by the documentation, allow me to control the SLACC pltime and vltime intervals. I have the following in my /etc/rtadvd.conf file:

Code:
#=
 Set the preferred lifetime to 10 minutes on advertised prefixes.
# All other parameters are default.
#
default:\
        :pltime#3600:\
        :vltime#86400:\
        :prefixlen#64:
ix1:\
        :pltime#3600:\
        :vltime#86400:\
        :prefixlen#64:
ix1.4:\
        :pltime#3600:\
        :vltime#86400:\
        :prefixlen#64:
And it is invoked with this in /etc/rc.conf:
Code:
#=

# Ipv6 routing; we MUST be an IPv6 router for the INTERNAL interface to
# distribute IPv6
#
rtadvd_enable=3D"Yes"
rtadvd_interfaces=3D"ix1 ix1.4"
And is indeed running with these two interfaces (the latter is a VLAN)<= /span>

However, when a device gets a SLACC address....
Code:
[=
karl@NewFS ~]$ ifconfig mce0
mce0: flags=3D1008943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,L=
OWER_UP> metric 0 mtu 1500
        options=3D66ef07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO=
_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,NV,VLAN_HWTSO,LINKSTATE,RXCS=
UM_IPV6,TXCSUM_IPV6,HWSTATS,HWRXTSTMP,MEXTPG,VXLAN_HWCSUM,VXLAN_HWTSO>=

        ether 50:6b:4b:12:c8:58
        inet 192.168.10.100 netmask 0xffffff00 broadcast 192.168.10.255
        inet6 fe80::526b:4bff:fe12:c858%mce0 prefixlen 64 scopeid 0x4
        inet6 2606:83c0:8000:1b00:526b:4bff:fe12:c858 prefixlen 64 autoco=
nf pltime 604800 vltime 2592000
        media: Ethernet 10GBase-CR1 <full-duplex,rxpause,txpause>
        status: active
        nd6 options=3D23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
Note the pltime and vltime.

And a tcpdump shows indeed that while rtadvd is advertising, it is sending the defaults and NOT what I set:
Code:
[=
root@NewFS /home/karl]# tcpdump -v -n -i mce0 icmp6 and ip6[40] =3D=3D 13=
4
tcpdump: listening on mce0, link-type EN10MB (Ethernet), snapshot length =
262144 bytes

13:25:49.345417 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 56=
) fe80::2e0:b4ff:fe68:f895 > ff02::1: [icmp6 sum ok] ICMP6, router adv=
ertisement, length 56
        hop limit 64, Flags [none], pref medium, router lifetime 1800s, r=
eachable time 0ms, retrans timer 0ms
          source link-address option (1), length 8 (1): 00:e0:b4:68:f8:95=

          prefix info option (3), length 32 (4): 2606:83c0:8000:1b00::/64=
, Flags [onlink, auto], valid time 2592000s, pref. time 604800s
And further, on the gateway:
Code:
r=
oot@IpGw:/usr/local/etc # rtadvctl show
ix1: flags=3D<UP,CONFIGURED,PERSIST> status=3D<RA_SEND> mtu 1=
500
        DefaultLifetime: 30m
        MinAdvInterval/MaxAdvInterval: 3m20s/10m
        AdvLinkMTU: <none>, Flags: <none>, Preference: medium=

        ReachableTime: 0s, RetransTimer: 0s, CurHopLimit: 64
        AdvIfPrefixes: yes
        Next RA send: Wed Jul 23 13:29:52 2025
        Last RA send: Wed Jul 23 13:25:49 2025
ix1.4: flags=3D<UP,CONFIGURED,PERSIST> status=3D<RA_SEND> mtu=
 1500
        DefaultLifetime: 30m
        MinAdvInterval/MaxAdvInterval: 3m20s/10m
        AdvLinkMTU: <none>, Flags: <none>, Preference: medium=

        ReachableTime: 0s, RetransTimer: 0s, CurHopLimit: 64
        AdvIfPrefixes: yes
        Next RA send: Wed Jul 23 13:28:31 2025
        Last RA send: Wed Jul 23 13:19:55 2025

Ok, what am I missing? That /etc/rtadvd.conf syntax certainly LOOKS correct.

Freebsd-14.3-STABLE, if it matters.

This isn't a "critical" problem but if I have reason to restart the gateway, for example, and it gets a different Ip6 delegation, the old SLACC addresses stick around for a looooooong time -- and I'd prefer they not, obviously.

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------IRLz6uFfRJuN3lvGeIhUJYyU-- --------------ms080104050205070204010102 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwNzIzMTkzNTEyWjBPBgkqhkiG9w0BCQQxQgRACqV0vnpCrKiP L4VpXsMkReTs/OhySKPAsqtkj/YeiPBqN05Qjnyw69qEUtjYdUHZj7w5B4f7XbmuJj5ZOlbB BDCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICADRpuYXEZLGmyUPc 3Qfz+urXeA1HiruKVoIj0L7jJhH3/md3Jkz7iaKUaX+IEVt1S58Eol/UyyzUxkr0/RADXerx AxP+y2DSDOF7nB5d/48fw+h6kD5wv1dwbxTZpb1LiqeLxomJgRZsnjJg7MAFXYpt9MwOa8rO J2SsQB1ZJPxP1VWshgvhfLJ+4aPPKtcmxZKhF2fvQzJwOjwzpB94aZJ3DTIyRNoQFFrkrnbZ WtOtRGAsZFykkUIAnJbzjaOqH7NU8Gag+UQQXbf8Pi3FY4AMsMDVG42GrYOcXg8Fk7y6OlmG OR2uae8CRdoa5uMn73ZDX2wzEVDpv7mPOcRfjZDuLNAw16BG5ltNi0y/XoDqJvPetEFqcov7 mfeOLWaKqpI2bKR6vok4Ce0LhDOcvq3MpHYp/t3aKlse7m+CkRAWpS8CCIJXLoUlyDyT1BuV QiOtWxi8mfDpVssi9oHucgK2xioDvG6xIIdugwSUdxNTG9iWzqrdkonKHKKrD2U153UQNBfN g0MSUNnwHYsgFrVUQqDvUSpXCvzH4E4Khaj5p5/epGMWfs0K5+mgcKfT7TUpr0IfYYqWVdWz rI3NXV3LtOrir2rF+C+bWk5uAg7BR25UeqAqUCpsofaq7WF4CVGVaZBxfkKn9Hiq8+DS8Jiz 0EXw4YZ3V2b8r4WOF+7/AAAAAAAA --------------ms080104050205070204010102--