From nobody Sun Sep 14 12:27:02 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cPnVj6f25z67r8v for ; Sun, 14 Sep 2025 12:27:41 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4cPnVh47Clz49QL for ; Sun, 14 Sep 2025 12:27:40 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=pass (policy=none) header.from=denninger.net; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id 2243FB05B1 for ; Sun, 14 Sep 2025 08:26:00 -0400 (EDT) Received: by denninger.net (Postfix, from userid 58) id 591BC455089; Sun, 14 Sep 2025 08:27:04 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on NewFS.denninger.net X-Spam-Level: X-Spam-Status: No, score=-4.9 required=3.0 tests=ALL_TRUSTED,BAYES_00, HTML_MESSAGE autolearn=no autolearn_force=no version=4.0.1 X-Spam-Report: * -3.0 ALL_TRUSTED Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000] * 0.0 HTML_MESSAGE BODY: HTML included in message Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 0D499454F34 for ; Sun, 14 Sep 2025 08:27:03 -0400 (EDT) Message-ID: Date: Sun, 14 Sep 2025 08:27:02 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: IPv6 networking problems in 14.3 To: freebsd-net@freebsd.org References: <4C00D174-21FE-47C4-A30A-A382138571A5@keehole.org> Content-Language: en-US From: Karl Denninger In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms040807050405010007060801" X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.66 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_LONG(1.00)[0.999]; NEURAL_HAM_SHORT(-0.94)[-0.938]; NEURAL_HAM_MEDIUM(-0.92)[-0.920]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; R_SPF_ALLOW(-0.20)[+mx]; MIME_BASE64_TEXT(0.10)[]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; FREEFALL_USER(0.00)[karl]; ARC_NA(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; R_DKIM_NA(0.00)[]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; HAS_ATTACHMENT(0.00)[] X-Rspamd-Queue-Id: 4cPnVh47Clz49QL This is a cryptographically signed message in MIME format. --------------ms040807050405010007060801 Content-Type: multipart/alternative; boundary="------------iNQWWvjMUzlSHkawez0MgTzL" --------------iNQWWvjMUzlSHkawez0MgTzL Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gOS8xMy8yMDI1IDIyOjM5LCBDaHJpcyBSb3NzIHdyb3RlOg0KPg0KPiBJbnRlcm5ldDY6 DQo+IERlc3RpbmF0aW9uICAgICAgICAgICAgICAgICAgICAgICBHYXRld2F5ICAgICAgICAg ICAgICAgICAgICAgICBGbGFncyAgICAgICAgIE5ldGlmIEV4cGlyZQ0KPiA6Oi85NiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgbGluayMzICAgICAgICAgICAgICAgICAgICAgICAg VVJTICAgICAgICAgICAgIGxvMA0KPiBkZWZhdWx0ICAgICAgICAgICAgICAgICAgICAgICAg ICAgZmU4MDo6M2U4YTpiMGZmOmZlM2U6NGRjZSV2bGFuMCBVRyAgICAgICAgICB2bGFuMA0K PiA6OjEgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgbGluayMzICAgICAgICAgICAg ICAgICAgICAgICAgVUhTICAgICAgICAgICAgIGxvMA0KPiA6OmZmZmY6MC4wLjAuMC85NiAg ICAgICAgICAgICAgICAgbGluayMzICAgICAgICAgICAgICAgICAgICAgICAgVVJTICAgICAg ICAgICAgIGxvMA0KPg0KPiBCdXQsIGFzIG5vdGVkIGVhcmxpZXIsIHRoYXQgZ2F0ZXdheSBo YXMgbm8gTUFDLCBiZWNhdXNlIEnigJltIG5ldmVyIGdldHRpbmcgdGhlIHJlc3BvbnNlIHRv IHRoZSBOUy4NCj4NCj4gJSBuZHAgLWFuIHwgZ3JlcCAnZmU4MDo6M2U4YTpiMGZmOmZlM2U6 NGRjZScNCj4gZmU4MDo6M2U4YTpiMGZmOmZlM2U6NGRjZSV2bGFuMCAgICAgIChpbmNvbXBs ZXRlKSAgICAgICB2bGFuMCBleHBpcmVkICAgSQ0KPg0KPiBNeSBkaGNwY2QuY29uZiB0aGF0 IGZpbHRlcmVkIHcuci50LiBpbnRlcm5hbCBuZXR3b3JrcywgYW5kIG1hbnkgY29tbWVudHMg cmVtb3ZlZCwgYXJlOg0KPiAtLS0tLS0tLS0tDQo+IGR1aWQNCj4gdmVuZG9yY2xhc3NpZA0K PiBvcHRpb24gY2xhc3NsZXNzX3N0YXRpY19yb3V0ZXMNCj4gb3B0aW9uIHJhcGlkX2NvbW1p dA0KPiByZXF1aXJlIGRoY3Bfc2VydmVyX2lkZW50aWZpZXINCj4gc2xhYWMgcHJpdmF0ZQ0K PiBkZWJ1Zw0KPiBub2lwdjZycw0KPiBub2lwdjQNCj4gbm9pcHY0bGwNCj4gYWxsb3dpbnRl cmZhY2VzIHZsYW4wDQo+IGludGVyZmFjZSB2bGFuMA0KPiAgICBpcHY2b25seQ0KPiAgICAj IEluIHRoZW9yeSBvbmUgY2FuIGdldCBhbiBhZGRyZXNzIHdpdGggSUFfTkEsIGJ1dCBWZXJp b24gRmlPUyBkb2Vzbid0DQo+ICAgICMgcHJvdmlkZSBhbiBhZGRyZXNzIGxpa2UgdGhhdC4g IFRyeSBpcHY2cnMNCj4gICAgaXB2NnJzDQo+ICAgICNpYV9uYSAwDQo+ICAgIGlwdjZyYV9h dXRvY29uZg0KPiAgICAjIFJlcXVlc3QgYSAvNTYsIHRoZW4gZnJvbSB0aGF0IGFsbG9jYXRl IHRoZSBmb2xsb3dpbmcgc3VibmV0cyBhcyBub3RlZA0KPiAgICAjIDEyICAxNCAgMTcgIEE0 ICBERCAgNzIgIDBGIDY2DQo+ICAgIGlhX3BkIDAvOjovNTYgaW50MS8xOCBpbnQyLzIwIGlu dDMvMjMgaW50NC8xNjQgaW50NS8yMjEgaW50Ni8xMTQgaW50Ny8xNSBpbnQ4LzEwMg0KPiAt LS0tLS0tLS0tLQ0KPg0KPiDigJxpbnRO4oCdIHJlcGxhY2VtZW50cyBhbmQgZGlmZmVyZW50 IElQdjYgc3VibmV0cywgYnV0IHRoZSBhYm92ZSBpcyB3aGF0IEkgaGF2ZSBpbiBlZmZlY3Qu DQo+DQo+IFRoYW5rcy4gIEFwb2xvZ2llcyB0byBhbnlvbmUgd2hvIGlzbuKAmXQgZGVlcGx5 IGludm9sdmVkIGZvciB0aGUgbG9uZyBtZXNzYWdlLiAgOi0pDQo+DQo+ICAgICAgICAtIENo cmlzDQoNClRoYXQgZ2F0ZXdheSBpc24ndCBieSBhbnkgY2hhbmNlIHJ1bm5pbmcgb3V0IG9m IFJBTSBzdWNoIGFzIG9uIG5hbm9ic2QgDQooZS5nLiAvdmFyIGlzIHZvbGF0aWxlKSBpcyBp dD8NCg0KSWYgc28gdGhlIGR1aWQgaXMgbm9uLWZpeGVkIGFuZCBzb21lIElTUHMgd2lsbCBo YXZlIGEgaGlzcy1maXQgaW4gdGhhdCANCnRoZXkgIm1hcnJ5IiB0aGUgTUFDIG9uIHlvdXIg ZW5kIHRvIHRoZSBNQUMgb24gdGhlIE9OVCBhbG9uZyB3aXRoIHRoZSANCmR1aWQgYW5kIHVz ZSB0aGF0IGludGVybmFsbHkuIElmIHRoZSBkdWlkIGNoYW5nZXMgYnV0IHRoZSBNQUMgZG9l cyBub3QgDQppdCB3aWxsIG5vdCBhcnAgYW5kIHlvdSdyZSBob3NlZCBhcyB0aGVpciBlbmQg aGFzIG5vIGludGVybmFsIG1hcCBiYWNrIA0KdG8geW91ciBnYXRld2F5IHRodXMgeW91IGRv bid0IGdldCB0aGUgYWR2ZXJ0aXNlbWVudHMgKGFuZCBpbiBzb21lIGNhc2VzIA0Kbm8gZGVs ZWdhdGlvbiBlaXRoZXIhKSBhbmQgaXQgZG9lc24ndCBjb21lIHVwLg0KDQpJIGFsc28gaGF2 ZSAibm9hcnAiIGluIG15IGNvbmZpZyB3aGljaCBvdGhlcndpc2UgbWFkZSB0aGUgSVNQJ3Mg Z2VhciANCnVwc2V0LiBJbiBhZGRpdGlvbiBJIGhhdmUgbWFkZSBzdXJlIHRoZSBkdWlkIGRv ZXNuJ3QgY2hhbmdlICh0cnkgImR1aWQgDQpsbCIgd2hpY2ggd2lsbCBnZW5lcmF0ZSBvbmUg dGhhdCB3b24ndCBzbyBsb25nIGFzIHRoZSBpbnRlcmZhY2UgaXQgaXMgDQphcHBsaWVkIHRv IGRvZXNuJ3QpIGFuZC9vciBtb3ZlIC92YXIvZGIvZGhjcGNkIHRvIHNvbWV0aGluZyB0aGF0 IGNhbiBiZSANCnN5bmMnZCAoZS5nLiBzeW1saW5rIGl0IHRvIC91c3IvbG9jYWwvZXRjL2Ri L2RoY3BjZCBhbmQgdGhlbiBhZnRlciB0aGUgDQpmaXJzdCBib290IHN5bmMgdGhhdCkgc28g dGhlIGR1aWQgZmlsZSBnZXRzIHJlc3RvcmVkIG9uIGEgcmVzdGFydC4NCg0KSSByYW4gaW50 byB0aGlzIHdpdGggbXkgZmliZXIgaGVyZTsgdGhlIGZvcm1lciBjYWJsZSBjb21wYW55IGRp ZCBub3QgDQpjYXJlIGlmIGFsbCB0aGlzIHdhcyB2b2xhdGlsZSBvbiBhIHJlc3RhcnQgaG93 ZXZlciB0aGUgZmliZXIgZmlybSBkaWQgaXQgDQp3YXMgYSBsb2FkIG9mIGZ1biB0byBnZXQg c29tZW9uZSBvbiB0aGUgcGhvbmUgd2hvIGFjdHVhbGx5IGNvdWxkIGZpZ3VyZSANCm91dCAq d2h5KiB0aGVpciBzeXN0ZW0gZ290IG1hZCBhbmQgd291bGRuJ3QgcmVjb25uZWN0LiBJbiBt eSBjYXNlIHRoZWlyIA0KZW5kIHdvdWxkIHJldHVybiBhbiBJUHY0IGFkZHJlc3MgYW5kIGZ1 bmN0aW9uIGJ1dCB3b3VsZCBub3QgY29tZSBiYWNrIHVwIA0Kb24gSVB2NiB1bmxlc3MgdGhl eSBjbGVhcmVkIHRoZWlyIGludGVybmFsIHRhYmxlcyBtYW51YWxseS4NCg0KTXkgZ2F0ZXdh eSBpcyBydW5uaW5nIDE0LjM6DQoNCkZyZWVCU0QgMTQuMy1TVEFCTEUgIzAgc3RhYmxlLzE0 LW4yNzE0NTYtNzAwNjhiMzAzMGY5LWRpcnR5OiBNb24gTWF5IDEyIA0KMTg6NTM6NTggRURU IDIwMjUgDQprYXJsQE5ld0ZTLmRlbm5pbmdlci5uZXQ6L3dvcmsvT0JKL0Nyb2NoZXQtd29y ay1BTUQxNC91c3Ivc3JjLjE0LVNUQUJMRS9hbWQ2NC5hbWQ2NC9zeXMvR0VORVJJQyANCg0K DQpUaGUgImRpcnR5IiBpcyBiZWNhdXNlIEkgYWxzbyBwYXRjaGVkIHJ0YWR2ZCBzbyBpdCBo b25vcnMgdGhlIHZsdGltZSBhbmQgDQpwbHRpbWUgcGFyYW1ldGVycyBvbiBpbnRlcmZhY2Vz ICh3aGljaCBpdCBkb2VzIE5PVCAiYXMgc2hpcHBlZCI7IEkgaGF2ZSANCnJlcG9ydGVkIHRo aXMgYXMgYSBidWcgd2l0aCBhIGJyaWVmIHBhdGNoIHRoYXQgZml4ZXMgaXQsIGJ1dCBpdCBo YXNuJ3QgDQpiZWVuIHBpY2tlZCB1cCBvciBtZXJnZWQuKQ0KDQotLSANCkthcmwgRGVubmlu Z2VyDQprYXJsQGRlbm5pbmdlci5uZXQNCi9UaGUgTWFya2V0IFRpY2tlci8NCi9bUy9NSU1F IGVuY3J5cHRlZCBlbWFpbCBwcmVmZXJyZWRdLw0K --------------iNQWWvjMUzlSHkawez0MgTzL Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On 9/13/2025 22:39, Chris Ross wrote:<= span style=3D"white-space: pre-wrap"> 

Internet6:                                                               =
                                                =20
Destination                       Gateway                       Flags    =
     Netif Expire                               =20
::/96                             link#3                        URS      =
       lo0                                      =20
default                           fe80::3e8a:b0ff:fe3e:4dce%vlan0 UG     =
     vlan0                                      =20
::1                               link#3                        UHS      =
       lo0                                      =20
::ffff:0.0.0.0/96                 link#3                        URS      =
       lo0                                      =20

But, as noted earlier, that gateway has no MAC, because I=E2=80=99m never=
 getting the response to the NS.

% ndp -an | grep 'fe80::3e8a:b0ff:fe3e:4dce'
fe80::3e8a:b0ff:fe3e:4dce%vlan0      (incomplete)       vlan0 expired   I=
=20

My dhcpcd.conf that filtered w.r.t. internal networks, and many comments =
removed, are:
----------
duid
vendorclassid
option classless_static_routes
option rapid_commit
require dhcp_server_identifier
slaac private
debug
noipv6rs
noipv4
noipv4ll
allowinterfaces vlan0
interface vlan0
  ipv6only
  # In theory one can get an address with IA_NA, but Verion FiOS doesn't
  # provide an address like that.  Try ipv6rs
  ipv6rs
  #ia_na 0
  ipv6ra_autoconf
  # Request a /56, then from that allocate the following subnets as noted=

  # 12  14  17  A4  DD  72  0F 66
  ia_pd 0/::/56 int1/18 int2/20 int3/23 int4/164 int5/221 int6/114 int7/1=
5 int8/102
-----------

=E2=80=9CintN=E2=80=9D replacements and different IPv6 subnets, but the a=
bove is what I have in effect.

Thanks.  Apologies to anyone who isn=E2=80=99t deeply involved for the lo=
ng message.  :-)

      - Chris

That gateway isn't by any ch= ance running out of RAM such as on nanobsd (e.g. /var is volatile) is it?=

If so the duid is non-fixed = and some ISPs will have a hiss-fit in that they "marry" the MAC on your e= nd to the MAC on the ONT along with the duid and use that internally. If= the duid changes but the MAC does not it will not arp and you're hosed a= s their end has no internal map back to your gateway thus you don't get t= he advertisements (and in some cases no delegation either!) and it doesn'= t come up.

I also have "noarp" in my co= nfig which otherwise made the ISP's gear upset. In addition I have made = sure the duid doesn't change (try "duid ll" which will generate one that = won't so long as the interface it is applied to doesn't) and/or move /var= /db/dhcpcd to something that can be sync'd (e.g. symlink it to /usr/local= /etc/db/dhcpcd and then after the first boot sync that) so the duid file = gets restored on a restart.

I ran into this with my fibe= r here; the former cable company did not care if all this was volatile on= a restart however the fiber firm did it was a load of fun to get someone= on the phone who actually could figure out *why* their system got mad an= d wouldn't reconnect. In my case their end would return an IPv4 address = and function but would not come back up on IPv6 unless they cleared their= internal tables manually.

My gateway is running 14.3:<= /span>

FreeBSD 14.3-STABLE #0 stabl= e/14-n271456-70068b3030f9-dirty: Mon May 12 18:53:58 EDT 2025 kar= l@NewFS.denninger.net:/work/OBJ/Crochet-work-AMD14/usr/src.14-STABLE/amd6= 4.amd64/sys/GENERIC

The "dirty" is because I als= o patched rtadvd so it honors the vltime and pltime parameters on interfa= ces (which it does NOT "as shipped"; I have reported this as a bug with a= brief patch that fixes it, but it hasn't been picked up or merged.)

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------iNQWWvjMUzlSHkawez0MgTzL-- --------------ms040807050405010007060801 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwOTE0MTIyNzAzWjBPBgkqhkiG9w0BCQQxQgRAENYXUaPPce1O 58p69nHqcvxRuryfqSwQjODTsllxcKc7RY9k7RyjvJ8+1AO9BOe85wWlewQ740rGdQH4jyXp QDCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICAI947PIvIiZRIHaf 5t6iLZ4RcDuj+xBoDodZBKJmtBRJIzM4wSPZjgGH+zm2clGdHUyStWBk5uFOcBKmpK3rG+iY 9ko3YIal4u4pp6fjIjbfjKLYmbf1FyQ2qPHXfBn4+ufo07jXNTfICvwm68eAWDUlTHYFl6HZ 10GzPAHE0y7tPlZMPp52a9y1RQBWiUIy20gzdKDiWhGPvUi7ngid9ZYJBSAni667az4JprnZ 5mz+4pLngddE+HuGTJZXoSE47dWzuop0oTAnGQVC4P68OpRoUsFoMx+vdhN0B08v96Sj8B8V CbTKM0iZ1J7ab5y/nZUJvbgvTXIHngNOHtYEcdYgR5T9wxe55LAaPIZSri7ra7oqca0IZ01I SfgwTT2MJ1j15Bw3FyE5yajiMAX0Cv7Y+P0DF1X9ACdjQTfkUA35yO6l2P5M2kf5cvrK3ibN 4xQ/4SkvJ5RLE0Y1VGCz2Ee0T9hmh8Kf2J9UKXwjlsZ+GGlPuvMFh2HP3fmXxHr0LEwC7SLW rYHwr33mKJgoEuXT0M5Z16plzBzR9Rz330INpQ2jp3pZNuBjvqHaoe5cZQq3OnI02AlzLKWe NRwheEOLHxizVtMRB+CHx7pT3bz/n7b/DhotaaCNqtAAEk0Sz1b3kqaviCn2EPJ91+zhuwXv cbC1CIqoEjNOUsEu5ogsAAAAAAAA --------------ms040807050405010007060801--