carrier-explode iOS carrier and country bundles
782 of 782
TMobile_Charter_USUS UnitedStates country bundle
  1. iOS 27.0 image · build 72.0
  2. iOS 26.5 – 26.6.2 image · build 70.0
  3. OTA · iOS 26.4+ · build 69.2shown
  4. OTA · iOS 26.4+ · build 69.2 · iPad
OTA · iOS 26.4+ · build 69.2 (4)
  1. iOS 27.0 image · build 72.0
  2. iOS 26.5 – 26.6.2 image · build 70.0
  3. OTA · iOS 26.4+ · build 69.2shown
  4. OTA · iOS 26.4+ · build 69.2 · iPad
Package
BundleTMobile_Charter_US
Build69.2
version.plistBuildVersion=1 CFBundleShortVersionString=69.2.0 CFBundleVersion=69.2 ProjectName=CarrierBundles SourceVersion=4444004000000000
FromOTA · iOS 26.4+ · build 69.2
Size152.9 KiB packed, 299.4 KiB unpacked, 42 files
Content ID62ec067ad0fd8f26347744f0688df16d3e2e342a77c8330196661106f965959d
SHA-1b7f4e95ca25992e2db7d3d58f1d382b086aa8557 verified
SHA-38490368524a3afa494ae17f5fdf12586e81b95054a9fa39d41f52c87ac82071ab3c47cd0c417c00efd58f461c1436a922d
URLhttps://updates.cdn-apple.com/20260330/carrierbundles/122-17601/F7447A43-2F5F-4489-91D0-58EBF0A59D0D/TMobile_Charter_US_iPhone.ipcc
Override sets12
Download .ipcc
Identity
CarrierName = "Spectrum"
Operator name shown in the status bar and in Settings.
HomeBundleIdentifier = "com.apple.UnitedStates"
The country bundle this carrier bundle expects to sit on top of.
SupportedSIMs [] 1
MCC+MNC values (optionally with _GID1-/_GID2-/_ID- qualifiers) this bundle claims. The handset picks a bundle by matching the SIM against this list.
[0] = "310240_GID1-BA02"
SupportedPLMNs [] 2
Networks treated as the home network for this bundle.
[0] = "310026"
[1] = "310260"
Data
apns [] 1
Access Point Names. Each entry carries a type-mask (which services may use it) and a tech-type-mask (which radio technologies).
[0] {} 2
configuration [] 2
technology-mask = 9 bits 0, 3 · 0x9
MTU [] 1
Per-technology MTU override, keyed by a technology bitmask.
[0] {} 2
technology-mask = 9 bits 0, 3 · 0x9
size = 1440
MMS {} 10
MMSC URL, WAP proxy, size limits and junk-report routing.
ForwardJunkReports = true
AllowReturnReports = true
GroupModeAllowUserOverride = true
GroupModeEnabled = true
MMSC = "http://wholesale.mmsmvno.com/mms/wapenc"
MMSCarrierReportJunkAddress = "7727"
MaxRecipients = 20
MaxVideoBitrate = 131072
MaxMessageSize = 1048576
OnWhileRoaming = true
Entitlements and eSIM
CarrierEntitlements {} 13
Server that gates carrier features (Wi-Fi Calling, tethering, Watch plans). SupportedEntitlements is a bitmask of which entitlement classes are queried.
UpdatePeriod = 72
SupportSecureIntent = true
ServerAddress = "https://eas3.msg.t-mobile.com"
Authentication {} 3
Type = 1
IncludeGID = true
Username = "0$IMSI@nai.epc.mnc$MNC.mcc$MCC.3gppnetwork.org"
AllowCurrentLocation = true
SupportedEntitlements = 4205977 bits 0, 3, 4, 7, 8, 10, 11, 13, 22 · 0x402d99
Bitmask of entitlement classes the device may request from the entitlement server. Individual bit meanings are not published.
SupportedAuthorizationTokens = 2 bits 1 · 0x2
UserAgent = "Entitlement/$version ($device) iOS/$iOSVersion Carrier Settings/$carrierBundleVersion"
SupportPhysicalSIMtoESIMTransfer = true
ProtocolVersion = "2"
SupportsOnDevicePhysicalSIMConvert = true
EnableDeviceAccountIdentifier = true
DisableSecondaryCredentials = true
RemoteCardProvisioningSettings {} 6
eSIM download settings: SM-DP+ hostnames, ICCID prefixes that match this carrier, and whether an Apple ID check is required.
MatchingICCIDPrefixes [] 2
ICCID prefixes that route an eSIM download to this carrier.
[0] = "890126"
[1] = "890124"
SupportedSKUs [] 1
[0] = "SKU_NA"
ProvisioningMethod = "CarrierFlow"
MinCompatibleWatchOS = "11.1"
SupportsFauxCard = false
ServerURL = "cust-005-v4-prod-atl2.gdsb.net"
PhoneAccountTransfer {} 2
Rules for moving a line between devices — SM-DP+ URL, one-time-code sender short codes, minimum OS.
TransferErrorCodes {} 4
CarrierDefaultErrors [] 2
BillingErrors [] 3
SuccessfulTransferWithDelayedActivationErrors [] 1
BlockedAccountErrors [] 1
OneTimeCodeForTransfer = true
CellularPlanProvisioningSettings {} 4
Behaviour of the in-Settings 'Add Cellular Plan' flow.
RequireEntitlementCheckForAttachMonitorMode = true
WaitForPhoneNumberDuringActivation = true
AttachMonitorModeBackoffTimes [] 5
[0] = 60
[1] = 300
[2] = 1800
[3] = 3600
[4] = 7200
DelayMonitorModeBackoffTimes [] 4
[0] = 30
[1] = 60
[2] = 120
[3] = 300
EncryptedIdentity {} 3
Certificate used to encrypt subscriber identity during activation.
Certificate = "MIIGYTCCBUmgAwIBAgIMNajla7Xc4dmxkjgoMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNTEyMDMxMzI1MDJaFw0y NzAxMDQxMzI1MDFaMH8xCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhNaXNzb3VyaTES MBAGA1UEBxMJU3QuIExvdWlzMS4wLAYDVQQKEyVDaGFydGVyIENvbW11bmljYXRp b25zIE9wZXJhdGluZywgTExDMRkwFwYDVQQDExBha2Euc3BlY3RydW0ubmV0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaE3c15Q/o9m3A3t9Luz5tyb 7bJU1Y7P6r/S+md7FUNIEYd2SVJxL7ri56EsCjYgbz6PiDkv1945I48+zM5gIYKG HDQ8xW8tnvAU3imnTYRqFwdgi4mSlpuupAqSY0HpBAE0NPpIsESNnyFY3XFyvzu3 KRa3LIQ+XpCBMyngGZdJVzFWEdIIaO+fY07+tmVk9D/OQpScNnParHj8cqKnTDne R3jzrAp4E/nvO4b9u6/8Wcmp24byRIiZa26xqyKrYiwvYteyG1/uJyAjDcDx0AvT HCF/rB3VSQNUXActDqLawokfOT7TJ5oIOMVEG++gPU5FIgRY4IIExkNSY0pBcQID AQABo4IDCjCCAwYwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgY4GCCsG AQUFBwEBBIGBMH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2ln bi5jb20vY2FjZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhito dHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1Ud IARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmds b2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAbBgNVHREEFDASghBh a2Euc3BlY3RydW0ubmV0MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAf BgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUmdaxUYUt uzEShYTqjEa6tevqAx0wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AByfaCzp +vBFaVD4G5aKh93bMhDYTObIsuOCUkrEz1mfAAABmuRjWqAAAAQDAEcwRQIhANNz AVaZgUvXd7zn2tnHIBxgw9Bnvdwn5o1NekO+c/XlAiBzTjrr1JbTGS6d+DYWzyaT mb/IPQox2vcB/9QJTb17GgB3AExj3JjlnB2riPYeij3ero+rRKM3e1+blMP7oZz8 wb4mAAABmuRjV68AAAQDAEgwRgIhAJF+B3h4jpckUqGZ0eVqO4ZdgQCb5166z0Lh yjw4m1UhAiEA4qe/ZMqv1VtXdctHsydS2GtxChMpshFL8W6TWfCmijAAdgDW1Y2p 0BdT82pKoMdXSQKv68fcLNOM2fdkyAyJGR6fAgAAAZrkY1piAAAEAwBHMEUCIQDX J8zH29VD8KstZJ428WpxglKu2a5pkYGjCJX6YOfmNQIgebUwuZZM74RqjJfZ2e6c Fi9TBuW1PN3VgCb91DsdQXUwDQYJKoZIhvcNAQELBQADggEBAFjBFagtqvP8qVVW HREBwfYiDdm2nCdbcUgEiMNbQ6PNH1aVhpBJD8AUuSAImei3r77Fx2aU0RsC2lTp HTCnkwlcKVOuKG5zKVtpDXM+9StHyOKR4ysDMtyyGYYL8Oc3Cr2j/FW6umy0AEkS 6jd7rMDE7CdZzdURRsTccH9t1FR8NKkCpGj8Ivj2QZP9f27VHOVhN/yZZTCQKdAt Jwgz0vvz5HR7dBN4SAW4vBpV2ayiwghxnoFWS7ZIoVxdp5JebQZx0ksi0AG2oWAu ZylBm/902bxtmnlYPXo/XfvA0+lCjImRj6DsA/IZ7CReKZzf6nb51Bdgc8YFkYBM Hjud2pQ="
KeyIdentifier = "CertificateSerialNumber=35A8E56BB5DCE1D9B1923828"
AnonymousUsername = "anonymous"
Voice and IMS
RCS {} 3
ShowBusinessMessagingSwitch = true
EnableBusinessMessagingByDefault = true
EnableRCSByDefault = true
PhoneNumberRegistrationGatewayAddress = "22223333"
Short code the handset SMSes to register its number with Apple services (iMessage/FaceTime).
SMSSettings {} 4
ForwardJunkReports = true
SMSCarrierReportJunkAddress = "7727"
ShowEmptySMS = false
TransportFallback = false
PushSettings {} 4
CellularPlanTransferTopic = "com.t-mobile.iphone-transfer"
MultiSIMTopic = "com.t-mobile.dejaneiro"
SAWatchTopic = "com.t-mobile.SAWatchTopic"
Topic = "com.t-mobile.msg.eas"
VisualVoicemailServiceName = "IMAP"
Emergency and alerts
CellBroadcast {} 1
Public-warning (cell broadcast) configuration. Only country bundles carry the full schema; carrier bundles carry at most throttling knobs.
MessageValidityPeriod {} 2
How long a received broadcast stays valid, in minutes.
TimeLimit = 1440
AirplaneMode = false
TestEmergencyNumber = "922"
Number used to test the emergency path without reaching a PSAP.
Location {} 3
Location policy during emergency calls, including AML.
EnableCPIDuringEmergencyMode = true
EmergencyLocation {} 3
ControlPlane {} 1
UserPlane {} 4
AugmentedEmergencyAction {} 1
EnableEarlyReturnDuringEmergencyMode = true
Presentation and policy
StatusBarImages [] 1
Carrier logos drawn in place of the operator name (older iOS only).
[0] {} 1
AllowPrefixMatching = false
Services [] 1
USSD/short-code shortcuts surfaced in the carrier menu in Settings.
[0] {} 2
ServiceCode = "1-833-224-6603"
ServiceName = "Pay My Bill"
MyAccountURL = "https://spectrum.net/login/?target=https://spectrum.net/my-account"
OTASoftwareUpdate {} 0
Whether iOS updates over cellular need carrier opt-in.
Other keys (19)
AllowEDGEEditing = false
SupportsNITZ = true
DataIndicatorOverride = "4G"
Show4GSwitch = false
ShowDialAssist = true
ShowTTY = true
TTYRelayNumber = "711"
com.apple.voicemail.imap {} 11
BeaconServiceCenter = "+12063130004"
MaxGreetingDuration = 120
SendBeaconOnBootup = true
UsesSSL = true
GreetingNotification = true
MinPINLength = 4
UsesMWI = false
ClientManagesTrash = true
AllowedIMAPServers {} 1
FQDN [] 2
MaxPINLength = 9
BeaconAddress = "122"
CarrierSpecificCLIRPrefixCodes [] 1
[0] = "*67"
MaxBluetoothModemConnections = 5
RequiresServiceProvisioning = true
SuppressSimToolkitSendShortMessageNotifications = true
Show3GSwitch = false
TetheringPhoneNumber = "1-833-224-6603"
CoreOSNetworkingStack {} 1
ECN {} 2
ForceEnableCellularInternet = true
ForceEnableCellularNonInternet = true
PhoneSettings {} 2
AutoCallPickupTimer = 25
CarrierVoiceCallSpamReportAddress = "7728"
EnableLTEAfterUpgrade = true
VVMIgnoresIntlDataRoaming = false
MyAccountURLTitle = "Spectrum Mobile"
782 carriers, 225 countries · iOS 27.0 (24A437) TMobile_Charter_US GitHub Ready