From nobody Sun Sep 14 16:29:16 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cPtsY4tfGz686Ds for ; Sun, 14 Sep 2025 16:29:21 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4cPtsX2PVrz3RdZ for ; Sun, 14 Sep 2025 16:29:20 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=pass (policy=none) header.from=denninger.net; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id C01EDB05B1 for ; Sun, 14 Sep 2025 12:28:14 -0400 (EDT) Received: by denninger.net (Postfix, from userid 58) id 201BC45523F; Sun, 14 Sep 2025 12:29:19 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on NewFS.denninger.net X-Spam-Level: X-Spam-Status: No, score=-4.9 required=3.0 tests=ALL_TRUSTED,BAYES_00, HTML_MESSAGE autolearn=no autolearn_force=no version=4.0.1 X-Spam-Report: * -3.0 ALL_TRUSTED Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000] * 0.0 HTML_MESSAGE BODY: HTML included in message Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id AD7BC4551EB for ; Sun, 14 Sep 2025 12:29:18 -0400 (EDT) Message-ID: <6fce77fb-9ba8-4c7b-bb9b-0e337d91f278@denninger.net> Date: Sun, 14 Sep 2025 12:29:16 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: IPv6 networking problems in 14.3 To: freebsd-net@freebsd.org References: <4C00D174-21FE-47C4-A30A-A382138571A5@keehole.org> Content-Language: en-US From: Karl Denninger In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms010108050808020204040801" X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.00 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_LONG(1.00)[0.999]; NEURAL_HAM_MEDIUM(-0.91)[-0.912]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; NEURAL_HAM_SHORT(-0.29)[-0.292]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; MIME_BASE64_TEXT(0.10)[]; RCPT_COUNT_ONE(0.00)[1]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; FREEFALL_USER(0.00)[karl]; RCVD_COUNT_THREE(0.00)[3]; R_DKIM_NA(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; HAS_ATTACHMENT(0.00)[] X-Rspamd-Queue-Id: 4cPtsX2PVrz3RdZ This is a cryptographically signed message in MIME format. --------------ms010108050808020204040801 Content-Type: multipart/alternative; boundary="------------XtDDGfgs0INqdC9BA50stkTf" --------------XtDDGfgs0INqdC9BA50stkTf Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gOS8xNC8yMDI1IDEyOjE5LCBDaHJpcyBSb3NzIHdyb3RlOg0KPg0KPj4gT24gU2VwIDE0 LCAyMDI1LCBhdCAwODoyNywgS2FybCBEZW5uaW5nZXI8a2FybEBkZW5uaW5nZXIubmV0PiB3 cm90ZToNCj4+IFRoYXQgZ2F0ZXdheSBpc24ndCBieSBhbnkgY2hhbmNlIHJ1bm5pbmcgb3V0 IG9mIFJBTSBzdWNoIGFzIG9uIG5hbm9ic2QgKGUuZy4gL3ZhciBpcyB2b2xhdGlsZSkgaXMg aXQ/DQo+DQo+IE5vLiAgRnVsbCBmbGVkZ2VkIG1hY2hpbmUgaGVyZS4NCj4NCj4gJSBkZiAt aCAvdmFyDQo+IEZpbGVzeXN0ZW0gICAgICAgICAgICBTaXplICAgIFVzZWQgICBBdmFpbCBD YXBhY2l0eSAgTW91bnRlZCBvbg0KPiB6cm9vdC9ST09UL2RlZmF1bHQgICAgMS40VCAgICA3 LjNHICAgIDEuNFQgICAgIDElICAgIC8NCj4gJSB0b3AgfCBoZWFkDQo+IGxhc3QgcGlkOiA0 MTU3NzsgIGxvYWQgYXZlcmFnZXM6ICAwLjAwLCAgMC4wMSwgIDAuMDAgIHVwIDM3KzAzOjQw OjEyICAgIDEyOjExOjM1DQo+IDQ0IHByb2Nlc3NlczogIDEgcnVubmluZywgNDMgc2xlZXBp bmcNCj4gQ1BVOiAgMC4wJSB1c2VyLCAgMC4wJSBuaWNlLCAgMC4wJSBzeXN0ZW0sICAwLjAl IGludGVycnVwdCwgIDEwMCUgaWRsZQ0KPiBNZW06IDMwTSBBY3RpdmUsIDYzOU0gSW5hY3Qs IDU3NDFNIFdpcmVkLCAxMzZLIEJ1ZiwgMTE4RyBGcmVlDQo+IEFSQzogMjQ2NE0gVG90YWws IDExMzlNIE1GVSwgNzA4TSBNUlUsIDcyM0sgQW5vbiwgMjVNIEhlYWRlciwgNTg4TSBPdGhl cg0KPiAgICAgICAxNDQyTSBDb21wcmVzc2VkLCAzNDkzTSBVbmNvbXByZXNzZWQsIDIuNDI6 MSBSYXRpbw0KPiBTd2FwOiA4MTkyTSBUb3RhbCwgODE5Mk0gRnJlZQ0KPg0KPj4gSWYgc28g dGhlIGR1aWQgaXMgbm9uLWZpeGVkIGFuZCBzb21lIElTUHMgd2lsbCBoYXZlIGEgaGlzcy1m aXQgaW4gdGhhdCB0aGV5ICJtYXJyeSIgdGhlIE1BQyBvbiB5b3VyIGVuZCB0byB0aGUgTUFD IG9uIHRoZSBPTlQgYWxvbmcgd2l0aCB0aGUgZHVpZCBhbmQgdXNlIHRoYXQgaW50ZXJuYWxs eS4gSWYgdGhlIGR1aWQgY2hhbmdlcyBidXQgdGhlIE1BQyBkb2VzIG5vdCBpdCB3aWxsIG5v dCBhcnAgYW5kIHlvdSdyZSBob3NlZCBhcyB0aGVpciBlbmQgaGFzIG5vIGludGVybmFsIG1h cCBiYWNrIHRvIHlvdXIgZ2F0ZXdheSB0aHVzIHlvdSBkb24ndCBnZXQgdGhlIGFkdmVydGlz ZW1lbnRzIChhbmQgaW4gc29tZSBjYXNlcyBubyBkZWxlZ2F0aW9uIGVpdGhlciEpIGFuZCBp dCBkb2Vzbid0IGNvbWUgdXAuDQo+PiBJIGFsc28gaGF2ZSAibm9hcnAiIGluIG15IGNvbmZp ZyB3aGljaCBvdGhlcndpc2UgbWFkZSB0aGUgSVNQJ3MgZ2VhciB1cHNldC4gSW4gYWRkaXRp b24gSSBoYXZlIG1hZGUgc3VyZSB0aGUgZHVpZCBkb2Vzbid0IGNoYW5nZSAodHJ5ICJkdWlk IGxsIiB3aGljaCB3aWxsIGdlbmVyYXRlIG9uZSB0aGF0IHdvbid0IHNvIGxvbmcgYXMgdGhl IGludGVyZmFjZSBpdCBpcyBhcHBsaWVkIHRvIGRvZXNuJ3QpIGFuZC9vciBtb3ZlIC92YXIv ZGIvZGhjcGNkIHRvIHNvbWV0aGluZyB0aGF0IGNhbiBiZSBzeW5jJ2QgKGUuZy4gc3ltbGlu ayBpdCB0byAvdXNyL2xvY2FsL2V0Yy9kYi9kaGNwY2QgYW5kIHRoZW4gYWZ0ZXIgdGhlIGZp cnN0IGJvb3Qgc3luYyB0aGF0KSBzbyB0aGUgZHVpZCBmaWxlIGdldHMgcmVzdG9yZWQgb24g YSByZXN0YXJ0Lg0KPj4gSSByYW4gaW50byB0aGlzIHdpdGggbXkgZmliZXIgaGVyZTsgdGhl IGZvcm1lciBjYWJsZSBjb21wYW55IGRpZCBub3QgY2FyZSBpZiBhbGwgdGhpcyB3YXMgdm9s YXRpbGUgb24gYSByZXN0YXJ0IGhvd2V2ZXIgdGhlIGZpYmVyIGZpcm0gZGlkIGl0IHdhcyBh IGxvYWQgb2YgZnVuIHRvIGdldCBzb21lb25lIG9uIHRoZSBwaG9uZSB3aG8gYWN0dWFsbHkg Y291bGQgZmlndXJlIG91dCAqd2h5KiB0aGVpciBzeXN0ZW0gZ290IG1hZCBhbmQgd291bGRu J3QgcmVjb25uZWN0LiBJbiBteSBjYXNlIHRoZWlyIGVuZCB3b3VsZCByZXR1cm4gYW4gSVB2 NCBhZGRyZXNzIGFuZCBmdW5jdGlvbiBidXQgd291bGQgbm90IGNvbWUgYmFjayB1cCBvbiBJ UHY2IHVubGVzcyB0aGV5IGNsZWFyZWQgdGhlaXIgaW50ZXJuYWwgdGFibGVzIG1hbnVhbGx5 Lg0KPiBUaGFua3MgZm9yIHRoZSBpZGVhcy4gIEnigJltIDk1JSBzdXJlIG15IGR1aWQvTUFD IGFyZSBzdGF0aWMuICBBbmQsIHVubGVzcyB0aGF0IHdvdWxk4oCZdmUgY2hhbmdlZCBiZXR3 ZWVuIDE0LjEgYW5kIDE0LjMsIEkgd291bGRu4oCZdCBleHBlY3QgdGhhdCB0byBiZSBhIHBy b2JsZW0uICBJIGNlcnRhaW5seSBjYW4gdGVsbCB3aXRoIGV2ZXJ5IHJlYm9vdCB0aGF0IEkg aGF2ZSB0aGUgc2FtZSBhZGRyZXNzLiAgTGV0IG1lIHNlZSBpZiBteSBkaGNwY2QubG9nIHRl bGxzIG1lIHdoYXQgaXQgdXNlZCB0byBiZS4uLg0KPiBObywgbG9va3MgbGlrZSBJIGNhbiBj b25maXJtIHRoZSBzYW1lIC81NiB3YXMgZGVsZWdhdGVkIGJlZm9yZSBhcyBub3csIHdoaWNo IHN1Z2dlc3RzIGl04oCZcyB0aGUgc2FtZSwgYnV0IGRvZXNu4oCZdCBsaXRlcmFsbHkgcmVj b3JkIG15IElQdjYgTEwsIERVSUQsIG9yIE1BQy4NCj4NCj4gU28gSSB0aGluayB0aGF04oCZ cyBub3QgbXkgcHJvYmxlbS4gIEl04oCZcyBub3QgdGhlIElTUC4gIEkgY2FuIHRyeSB0byBz d2l0Y2ggYmFjayB0byAxNC4xLCBJ4oCZbGwgcmVzZWFyY2ggd2hldGhlciBJIGNhbiBkbyB0 aGF0IHZpYSBaRlMgc25hcHNob3RzIHdpdGhvdXQgaXQgYmVpbmcgYW4gYWN0IG9mIG5vIHJl dHVybi4gIEdvb2dsZSB3aWxsIHRlbGwgbWUuICBPdGhlcndpc2UsIEkgbWF5IHRyeSBib290 aW5nIGEgMTQuMSBrZXJuZWwgYW5kIHNlZSB3aGF0IHRoYXQgZG9lcy4gIE1pZ2h0IGJyZWFr IHRoaW5ncyB3aXRoIGEgMTQuMyB1c2VyIGxhbmQsIGJ1dCBlYXN5IHRvIHRyeS4NCj4NCj4g LSBDaHJpcw0KDQpSb2xsaW5nIHRoaXMgYXJvdW5kIGluIG15IGhlYWQgc29tZSBtb3JlLi4u Li4gd2hhdCBpcyB0aGUgdW5kZXJseWluZyANCmludGVyZmFjZT8NCg0KSSBhc2sgYmVjYXVz ZSBJIHNhdyB0aGlzIGhhcHBlbiB3aXRoICJyZSIgZHJpdmVyIGludGVyZmFjZXMgKGJvdGgg SVB2NCANCmFuZCA2KSB3aGVyZSBpdCB3b3VsZCBub3QgZ2V0IGFuIEFSUCBtYXAgYW5kIHRo dXMgY291bGRuJ3Qgc2VlIGFueXRoaW5nIA0KYXQgYWxsIG9uIHRoZSBvdXRzaWRlIC0gdGhl cmUgd2VyZSBlbm91Z2ggb3RoZXIgc2NyZXdiYWxsIHRoaW5ncyBnb2luZyANCm9uIHdpdGgg dGhlICJyZSIgZHJpdmVyICh0aW1lb3V0cyBhbmQgc2ltaWxhcikgdGhhdCBJIHRvc3NlZCB0 aGF0IGFuZCANCm5vdyBydW4gb24gaXggYW5kIGEgY291cGxlIG9mIFNGUCsgdHJhbnNjZWl2 ZXJzIHdoaWNoIGhhcyBiZWVuIA0KZW50aXJlbHktc3RhYmxlIChhbHRob3VnaCBpZ2IgYWxz byBhcHBlYXJzIHRvIHdvcmsgYXMgSSd2ZSBnb3R0ZW4gbXkgDQpoYW5kcyBvbiBhIGJveCB3 aXRoIGEgY291cGxlIG9mIHRob3NlIGFuZCB0ZXN0ZWQgdGhhdCB0b28uKQ0KDQpHaXZlbiB0 aGF0IGFycCBpc3N1ZSBJIGhhdmUgdG8gd29uZGVyIGlmIGJvdGggYXJlIGNvbm5lY3RlZCAt LSANCmluY2lkZW50YWxseSB3aGVuIEkgd2FzIHRlc3RpbmcgdGhhdCB1bml0IEkgYWxzbyB0 cmllZCB0aGUgIm5hdGl2ZSIgDQpzcGxpdCBJUHY0L0lQdjYgcmVxdWVzdGVyIGZvciBkaGNw IHJhdGhlciB0aGFuIGRoY3BjZCBhbmQgaGFkIHRoZSBzYW1lIA0KcmVzdWx0cywgc28gSSB0 ZW5kIHRvIHRoaW5rIGRoY3BjZCBpcyBwcm9iYWJseSBub3QgdGhlIGNhdXNlLg0KDQotLSAN CkthcmwgRGVubmluZ2VyDQprYXJsQGRlbm5pbmdlci5uZXQNCi9UaGUgTWFya2V0IFRpY2tl ci8NCi9bUy9NSU1FIGVuY3J5cHRlZCBlbWFpbCBwcmVmZXJyZWRdLw0K --------------XtDDGfgs0INqdC9BA50stkTf Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On 9/14/2025 12:19, Chris Ross wrote:<= br> 


On Sep 14, 2025, at 08:27,=
 Karl Denninger <karl@denninger.net> wrote:
That gateway isn't by any chance running out of RAM such as on nanobsd (e=
=2Eg. /var is volatile) is it?


No.  Full fledged machine here.

% df -h /var
Filesystem            Size    Used   Avail Capacity  Mounted on
zroot/ROOT/default    1.4T    7.3G    1.4T     1%    /
% top | head
last pid: 41577;  load averages:  0.00,  0.01,  0.00  up 37+03:40:12    1=
2:11:35
44 processes:  1 running, 43 sleeping
CPU:  0.0% user,  0.0% nice,  0.0% system,  0.0% interrupt,  100% idle
Mem: 30M Active, 639M Inact, 5741M Wired, 136K Buf, 118G Free
ARC: 2464M Total, 1139M MFU, 708M MRU, 723K Anon, 25M Header, 588M Other
     1442M Compressed, 3493M Uncompressed, 2.42:1 Ratio
Swap: 8192M Total, 8192M Free


If so the duid is non-fixe=
d and some ISPs will have a hiss-fit in that they "marry" the MAC on your=
 end to the MAC on the ONT along with the duid and use that internally. I=
f the duid changes but the MAC does not it will not arp and you're hosed =
as their end has no internal map back to your gateway thus you don't get =
the advertisements (and in some cases no delegation either!) and it doesn=
't come up.
I also have "noarp" in my config which otherwise made the ISP's gear upse=
t. In addition I have made sure the duid doesn't change (try "duid ll" wh=
ich will generate one that won't so long as the interface it is applied t=
o doesn't) and/or move /var/db/dhcpcd to something that can be sync'd (e.=
g. symlink it to /usr/local/etc/db/dhcpcd and then after the first boot s=
ync that) so the duid file gets restored on a restart.
I ran into this with my fiber here; the former cable company did not care=
 if all this was volatile on a restart however the fiber firm did it was =
a load of fun to get someone on the phone who actually could figure out *=
why* their system got mad and wouldn't reconnect. In my case their end wo=
uld return an IPv4 address and function but would not come back up on IPv=
6 unless they cleared their internal tables manually.

Thanks for the ideas.  I=E2=80=99m 95% sure my duid/MAC are static.  And,=
 unless that would=E2=80=99ve changed between 14.1 and 14.3, I wouldn=E2=80=
=99t expect that to be a problem.  I certainly can tell with every reboot=
 that I have the same address.  Let me see if my dhcpcd.log tells me what=
 it used to be...
No, looks like I can confirm the same /56 was delegated before as now, wh=
ich suggests it=E2=80=99s the same, but doesn=E2=80=99t literally record =
my IPv6 LL, DUID, or MAC.=20

So I think that=E2=80=99s not my problem.  It=E2=80=99s not the ISP.  I c=
an try to switch back to 14.1, I=E2=80=99ll research whether I can do tha=
t via ZFS snapshots without it being an act of no return.  Google will te=
ll me.  Otherwise, I may try booting a 14.1 kernel and see what that does=
=2E  Might break things with a 14.3 user land, but easy to try.

- Chris

Rolling this around in my head some more..... what is the underlying interface?

I ask because I saw this happen with "re" driver interfaces (both IPv4 and 6) where it would not get an ARP map and thus couldn't see anything at all on the outside - there were enough other screwball things going on with the "re" driver (timeouts and similar) that I tossed that and now run on ix and a couple of SFP+ transceivers which has been entirely-stable (although igb also appears to work as I've gotten my hands on a box with a couple of those and tested that too.)

Given that arp issue I have to wonder if both are connected -- incidentally when I was testing that unit I also tried the "native" split IPv4/IPv6 requester for dhcp rather than dhcpcd and had the same results, so I tend to think dhcpcd is probably not the cause.

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------XtDDGfgs0INqdC9BA50stkTf-- --------------ms010108050808020204040801 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwOTE0MTYyOTE2WjBPBgkqhkiG9w0BCQQxQgRA98JGD69NBDu3 ASzFpimEcXtH314J4K5njVIRXw2yRl964GT4bLJmR4YukV+LYOnjcjogTPC1Z9OnE58qlcTb FTCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICAEU2LVvSdrPdtaOV kdsyb6JpxMCxnn2zVlr2xb/Gz604UX3yhggtuVDkoZE5hBUlpKdQdVnaweTcKjFS9W7CXG0O K7PM6zvHkfNVH/zH0JjCGb0JhtRh+c61baqQPavobg1Boiq34amaq3t/CcebzPS2ahAm9C3c x8MGYIvsyo7NL3YDEb7A4dqDkjFeKBjukaKHoXHZl+SEEuESvoYj1vidHJluXQq98PA5jXH/ myoUYGdOIpPUyP+r1c3MP8o2mKoWPRqzhBy9tEMmS3zxbPkh/bH3ICaui0pChPe51rZ2hqRW gTDOPigj9UoMZSQ3fxOi3X/9R3OJUOS5kaT9nGCBXiQSqRN37bDF621CKvr092i5k20dU9Um 1X+60pS0pQVeODK1MsHevmmqzxEgqC+4B2gSYQJCBtqY69dBAHDhzrspawbLhrEvY7kVzVxI dhgLk9W77YsjzNUftVNT/OJvFxo7yc5rRlmGPpo9oEbSBCb/9DGSclLzve5bd/hDzLTieLCs ZVJ6DHerGMveFHxZfP4dgsoQV/TyvkGJH1J8dqWdari+l8K4ZBRbmHflWmpIfbcginPNhhIj qnWC1PIP5o5LEO8otytZYZZypHZcYHr+k8zc0ZIoNzSq4oLjY8758PwzbVC571zVyLjKQgAg vwMjWGUIsq5PXo685AOEAAAAAAAA --------------ms010108050808020204040801--