From nobody Tue Sep 30 12:18:15 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cbcXd2jc4z691Vn for ; Tue, 30 Sep 2025 12:18:25 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4cbcXb5Lgtz3vZh for ; Tue, 30 Sep 2025 12:18:23 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=pass (policy=none) header.from=denninger.net; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id C45A4B05F5 for ; Tue, 30 Sep 2025 08:16:59 -0400 (EDT) Received: by denninger.net (Postfix, from userid 58) id BADEC8D89D; Tue, 30 Sep 2025 08:18:16 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on NewFS.denninger.net X-Spam-Level: X-Spam-Status: No, score=-4.9 required=3.0 tests=ALL_TRUSTED,BAYES_00, HTML_MESSAGE autolearn=no autolearn_force=no version=4.0.1 X-Spam-Report: * -3.0 ALL_TRUSTED Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000] * 0.0 HTML_MESSAGE BODY: HTML included in message Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 5ABAB8D6D1 for ; Tue, 30 Sep 2025 08:18:15 -0400 (EDT) Message-ID: Date: Tue, 30 Sep 2025 08:18:15 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: IPv6 accept_rtadv for default route and prefix but force host portion of /64 address? To: freebsd-net@freebsd.org References: <1819478143.6522.1759232622123@localhost> From: Karl Denninger Content-Language: en-US In-Reply-To: <1819478143.6522.1759232622123@localhost> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms090501030309010806010209" X-Spamd-Bar: - X-Spamd-Result: default: False [-1.65 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_MEDIUM(1.00)[1.000]; SUBJECT_ENDS_QUESTION(1.00)[]; NEURAL_HAM_LONG(-0.79)[-0.788]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; R_SPF_ALLOW(-0.20)[+mx]; MIME_BASE64_TEXT(0.10)[]; NEURAL_HAM_SHORT(-0.06)[-0.065]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; ARC_NA(0.00)[]; HAS_ATTACHMENT(0.00)[]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FREEFALL_USER(0.00)[karl]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; R_DKIM_NA(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[] X-Rspamd-Queue-Id: 4cbcXb5Lgtz3vZh This is a cryptographically signed message in MIME format. --------------ms090501030309010806010209 Content-Type: multipart/alternative; boundary="------------lRjakxT00i8Hb50VV2prPZEU" --------------lRjakxT00i8Hb50VV2prPZEU Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gOS8zMC8yMDI1IDA3OjQzLCBSb25hbGQgS2xvcCB3cm90ZToNCj4NCj4gKlZhbjoqIFRv bSBQdXNhdGVyaSA8cHVzYXRlcmlAa2VlaG9sZS5vcmc+DQo+ICpEYXR1bToqIG1hYW5kYWcs IDI5IHNlcHRlbWJlciAyMDI1IDIzOjMyDQo+ICpBYW46KiAibmV0QGZyZWVic2Qub3JnIiA8 bmV0QEZyZWVCU0Qub3JnPg0KPiAqT25kZXJ3ZXJwOiogSVB2NiBhY2NlcHRfcnRhZHYgZm9y IGRlZmF1bHQgcm91dGUgYW5kIHByZWZpeCBidXQgZm9yY2UgDQo+IGhvc3QgcG9ydGlvbiBv ZiAvNjQgYWRkcmVzcz8NCj4NCj4gICAgIElzIHRoZXJlIGEgd2F5IHRvIGNoYW5nZSB0aGUg Y29uZmlndXJhdGlvbiBpbiAvZXRjL3JjLmNvbmYgdG8gZ2V0DQo+ICAgICB0aGUgcHJlZml4 IGZyb20gdGhlIHJvdXRlciBhZHZlcnRpc2VtZW50IGJ1dCBmaXggdGhlIGhvc3QgcG9ydGlv bg0KPiAgICAgdG8gc29tZXRoaW5nIGxpa2UgOjoxMjMgc28gdGhhdCBJIGNhbiBjaGFuZ2Ug bmV0d29yayBjYXJkcyBpbiB0aGUNCj4gICAgIHNlcnZlciBhbmQgbmV2ZXIgaGF2ZSB0byB3 b3JyeSBhYm91dCB0aGUgSVB2NiBhZGRyZXNzIGNoYW5naW5nPw0KPiAgICAgLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tDQo+DQo+IEhpLA0KPg0KPiBJIHRoaW5rIERIQ1B2NiBjb3VsZCBoZWxwIHlv dSBoZXJlLiBJbiBJUHY2IHRoZSBhZGRyZXNzIHZpYSBESENQIGlzIA0KPiBub3QgY29ubmVj dGVkIHRvIHRoZSBNQUMgYWRkcmVzcyBkaXJlY3RseSwgYnV0IHRvIGEgRFVJRCwgd2hpY2gg aXMgDQo+IHNvbWV0aGluZyBzaW1pbGFyIHRvIHRoZSBob3N0dXVpZC4gQUZBSUsgaXQgc2hv dWxkIGJlIHN0YWJsZSBiZXR3ZWVuIA0KPiBoYXJkd2FyZSBjaGFuZ2VzLiBUaGUgZGV0YWls cyBtaWdodCBiZSBpbXBvcnRhbnQsIHJlYWQgc29tZXRoaW5nIGxpa2UgDQo+IHRoaXMgDQo+ IGh0dHBzOi8vbWV0ZWJhbGNpLmNvbS9ibG9nL2Etbm90ZS1vbi1kaGNwdjYtZHVpZC1hbmQt cHJlZml4LWRlbGVnYXRpb24vLiANCj4gSSB0aGluayBpbiBteSBkaGNwdjYtY2xpZW50IEkg Y2FuIGhhcmRjb2RlIHRoZSBEVUlEIGFsc28gaWYgbmVlZGVkLg0KDQpOb3QgbmVjZXNzYXJp bHkuDQoNCk1hbnkgcHJvdmlkZXJzIChpbmNsdWRpbmcgbWluZSkgZm9ybSB3aGF0IGFtb3Vu dHMgdG8gYSAidHVwbGUiIHdpdGggdGhlIA0KZHVpZCwgTUFDIG9uIHRoZSBkZXZpY2Ugb24g eW91ciBlbmQgYW5kIHRoZSBNQUMgb24gL3RoZWlyIC9kZXZpY2UgKGUuZy4gDQpPTlQgaW4g dGhlIGNhc2Ugb2YgYSBmaWJlciBjb25uZWN0aW9uLCBldGMuKQ0KDQpDaGFuZ2luZyBBTlkg b2YgdGhlbSB3aWxsIHR5cGljYWxseSByZXN1bHQgaW4gYSBkaWZmZXJlbnQgZGVsZWdhdGlv biBhbmQgDQppbiBzb21lIGNhc2VzIChlLmcuIGNoYW5naW5nIHRoZSBkdWlkIGJ1dCBub3Qg dGhlIE1BQykgd2lsbCByZXN1bHQgaW4gDQp0aGVpciBlbmQgbG9ja2luZyBvdXQgdGhlIGRl bGVnYXRpb24gKCEhISkgd2hpY2ggaXMgdmVyeSBiYWQgZm9yIG9idmlvdXMgDQpyZWFzb25z LsKgIE15IHByb3ZpZGVyIGxvY2tzIG91dCBhIGNvbm5lY3Rpb24gdGhhdCBjaGFuZ2VzIGR1 aWQgYnV0IG5vdCANCnRoZSBNQUMuDQoNCk15IGV4cGVyaWVuY2UgaXMgdGhhdCBpZiB5b3Ug d2lzaCB0byBoYXZlIGEgInJlYXNvbmFibGUiIGV4cGVjdGF0aW9uIA0KdGhhdCB0aGUgZGVs ZWdhdGlvbiB3aWxsIG5vdCBjaGFuZ2UgeW91ciBNQUMgYW5kIGR1aWQgbXVzdCBub3QgY2hh bmdlLsKgIA0KTW9zdCBpbnRlcmZhY2VzIGNhbiBoYXZlIHRoZWlyIE1BQyBvdmVycmlkZGVu LCBzbyB0aGF0IGNhbiBiZSANCmFjY29tcGxpc2hlZCBldmVuIGlmIHlvdSBkbyBjaGFuZ2Ug aGFyZHdhcmUgb3V0LiBUaGlzIHByZXN1bWVzIHlvdSdyZSBvbiANCmFuIGFsbGVnZWRseS1m aXhlZCBkZWxlZ2F0aW9uIGZyb20gdGhlIHByb3ZpZGVyIGxlc3QgdGhleSBjaGFuZ2UgaXQg DQphbnl3YXkgc2luY2Ugb24gYSAiY29uc3VtZXIiIGNvbm5lY3Rpb24gdGhleSB0eXBpY2Fs bHkgZG8gbm90IGd1YXJhbnRlZSANCnRoYXQgaXQgd29uJ3QgY2hhbmdlIG5vciBkbyB0aGV5 IHByb3ZpZGUgYSByZXZlcnNlIEROUyBlbnRyeS4NCg0KTXkgcHJvdmlkZXIgKGFuZCBtYW55 IG90aGVycykgaW4gdGhlIElQdjYgcmVhbG0gYWxzbyBzZW5kcyBkb3duIHR3byANCmRlbGVn YXRpb25zIHZpYSBESENQOyBvbmUgZm9yIHRoZSBpbnRlcmZhY2Ugc3BlY2lmaWNhbGx5IChh cyBhIC8xMjgpLCANCmFuZCB0aGUgc2Vjb25kIGZvciB5b3VyIG5ldHdvcmsgKHR5cGljYWxs eSBhIC81NikuDQoNCkRoY3BjZCBpcyBtb3JlLWNvbmZpZ3VyYWJsZSBpbiB0aGlzIHJlZ2Fy ZCB0aGFuIHRoZSBkaGNwNmMgYWx0ZXJuYXRpdmUgDQphbmQgaXMgYSAib25lIGZvciBib3Ro IiBhbHRlcm5hdGl2ZSB0byB0aGUgdXNlIG9mIHR3byBkYWVtb25zIChvbmUgdG8gDQpnZXQg SVB2NCBhbmQgb25lIGZvciBJUHY2KSB3aXRoIG9ubHkgdGhlIElQdjQgY2xpZW50IGJlaW5n IGluIHRoZSBiYXNlLg0KDQotLSANCkthcmwgRGVubmluZ2VyDQprYXJsQGRlbm5pbmdlci5u ZXQNCi9UaGUgTWFya2V0IFRpY2tlci8NCi9bUy9NSU1FIGVuY3J5cHRlZCBlbWFpbCBwcmVm ZXJyZWRdLw0K --------------lRjakxT00i8Hb50VV2prPZEU Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On 9/30/2025 07:43, Ronald Klop wrote:=

Van: Tom Pusateri <pusateri@keehole.org>
Datum: maandag, 29 september 2025 23:32
Aan: "net@freebsd.org" <net@FreeBSD.org>
Onderwerp: IPv6 accept_rtadv for default route and prefix but force host portion of /64 address?

Is there a way to cha= nge the configuration in /etc/rc.conf to get the prefix from the router advertisement but fix the host portion to something like ::123 so that I can change network cards in the server and never have to worry about the IPv6 address changing?

Hi,

I think DHCPv6 could help you here. In IPv6 the address via DHCP is not connected to the MAC address directly, but to a DUID, which is something similar to the hostuuid. AFAIK it should be stable between hardware changes. The details might be important, read something like this https://= metebalci.com/blog/a-note-on-dhcpv6-duid-and-prefix-delegation/. I think in my dhcpv6-client I can hardcode the DUID also if needed.

Not necessarily.

Many providers (including mine) form what amounts to a "tuple" with the duid, MAC on the device on your end and the MAC on=C2=A0their=C2=A0device (e.g. ONT in the case of a fiber connection, etc.)

Changing ANY of them will typically result in a different delegation and in some cases (e.g. changing the duid but not the MAC) will result in their end locking out the delegation (!!!) which is very bad for obvious reasons.=C2=A0 My provider locks out = a connection that changes duid but not the MAC.

My experience is that if you wish to have a "reasonable" expectation that the delegation will not change your MAC and duid must not change.=C2=A0 Most interfaces can have their MAC overridde= n, so that can be accomplished even if you do change hardware out.=C2=A0= This presumes you're on an allegedly-fixed delegation from the provider lest they change it anyway since on a "consumer" connection they typically do not guarantee that it won't change nor do they provide a reverse DNS entry.

My provider (and many others) in the IPv6 realm also sends down two delegations via DHCP; one for the interface specifically (as a /128), and the second for your network (typically a /56).

Dhcpcd is more-configurable in this regard than the dhcp6c alternative and is a "one for both" alternative to the use of two daemons (one to get IPv4 and one for IPv6) with only the IPv4 client being in the base.

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------lRjakxT00i8Hb50VV2prPZEU-- --------------ms090501030309010806010209 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwOTMwMTIxODE1WjBPBgkqhkiG9w0BCQQxQgRAhsNm/iyfqv9K Z7pr94kDS8lQNHO6Jxw7SCfYK9c0eBMDqiFV+gE7Jx9Vyv+cr7dscLX50Qk56pCtCnGVB4V0 RDCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICAGmLVl8bvrTkmw5H kZNVRhab9dznwtqiSvdVGfcSFXFmeEjDoiQTpRqg8gHiwOeKs/qnfXFDuWU21QSkQbS+k3Hm TdzFeQ0lzYShmQNhnCcMk9jGPWE38zKUuDYVIkQKZ1JJBfz/zz9f6wYI7z/DloY0Ee1Rs1og j7Me2MOpy159ZxPCOJArGL/WPGcOZB47fGOOEKESfop6Ajw+tPF64wKDucK2zsUsHW2meVAA L/Ymg3HswYxjE6WPT8JV5+1Pu61Ky+dQp6GqVALBxJ0c91gfoHzPEjGdQ47ZAE8nMgNwuIwB bmYeBozYBfnJwvS4k0DM8GDEwqUfu2S47RQGEV7uvr5HqUyHrsiIjLW/9uyqxChNeLNkS9vD UHSJQQEPVhM5hEiRiVN89/GMYF+Y3t5fl3nRhpPa23HnxgZxrQmfJtK/Zp1qPwNn5Km5bMje tsuzmY/IXwMpu7+e9mAMnRSve7i/E83c2ib2HEgu5T39PmHu/E81x0RewgdjMDRAKSQaJIIr BO9sD60uByJrzrdcnSHRyuQTMYpPSBlntZ/1UFGdXbWPfYbvyuaJFAPpczPQSQAgbCUN15nE pnlI9Z18a+Q1Ig1w8ASa8YkxTN+KuTMc6RHZ3J81pBiGTWXgV33H64pk6Jk5ghhmjs0Kn7eY gS7uAxf+ZpkDcbYC2RErAAAAAAAA --------------ms090501030309010806010209--