carrier-explode
Explode and decode carrier data
GitHub
About
Carriers
Countries
Features
Builds
Compare
Work in progress: carrier-explode doesn't have the best coverage on iPadOS yet… we're working on it!
iPadOS
iOS
Pixel
Samsung
iPadOS
watchOS
Turk Telekom
TR 2026-09-14
Turkcell
TR 2026-09-14
B-Mobile
BT 2026-06-05
CS
Cellular South
US 2026-06-05
CTM
MO 2026-06-05
Fastweb
IT 2026-06-05
Spectrum Mobile
Verizon_Charter_LTE_US
US 2026-06-05
Verizon
Verizon_LTE_US
US 2026-06-05
Verizon
Verizon_Response_LTE_US
US 2026-06-05
vodafone HU
HU 2026-06-05
Vodafone Travel
NL 2026-06-05
Xfinity Mobile
US 2026-06-05
Spectrum Mobile
TMobile_Charter_US
US 2026-03-30
Comcast Business
US 2026-03-24
Simly
AE 2026-03-24
Telefonica eSimFLAG
ES 2026-03-24
Cyta
CY 2025-12-11
LMT
LV 2025-12-11
Telia
EE 2025-12-11
Telia LT
LT 2025-12-11
ORA MOBILE
PF 2025-11-03
Roamless
BE 2025-11-03
VinaPhone
VN 2025-11-03
povo
JP 2025-10-15
ATT Dish MVNO
US 2025-03-31
Boost
US 2025-03-31
BT
GB 2025-03-31
Y!mobile
JP 2025-03-04
UNEFON
MX 2024-12-10
Cellcard
KH 2024-10-28
G
Genesis
PL 2024-10-28
Dialog
LK 2024-06-07
E
Eskimo
SG 2024-06-07
Jio
IN 2024-06-07
Odido
TMobile_nl
NL 2024-06-07
One NZ
NZ 2024-06-07
SaskTel
CA 2024-06-07
SKT
KR 2024-06-07
Telekom SK
SK 2024-06-07
TSEL
ID 2024-06-07
VIVO
BR 2024-06-07
Vodafone AU
AU 2024-06-07
2degrees
NZ 2024-05-13
Claro BR
BR 2024-05-13
Copper Valley Telecom
US 2024-05-13
Digicel
FJ 2024-05-13
Digicel
TO 2024-05-13
Digicel
WS 2024-05-13
GTA
GU 2024-05-13
Holafly
AT 2024-05-13
Hutch
LK 2024-05-13
KT
KR 2024-05-13
Nomad
SG 2024-05-13
Optimum
US 2024-05-13
Orange F
FR 2024-05-13
T-Mobile
US 2024-05-13
T
TELCEL
MX 2024-05-13
TELUS
CA 2024-05-13
entel
CL 2023-12-11
Telstra
AU 2023-12-11
vodafone.de
DE 2023-12-11
eSIM Go
AT 2023-10-27
au
KDDI_LTE_only_jp
JP 2023-10-25
BICS
BE 2023-10-25
CMLink
BE 2023-10-25
Digicel
PG 2023-10-25
T-Mobile CZ
CZ 2023-10-25
1and1
DE 2023-09-18
AIS
TH 2023-09-18
Vodafone Kiribati
KI 2023-06-02
Next 100
327
Newest
Boost
Dish_US
OTA iPadOS 18.4+ · build 63.1
current release
OTA iPadOS 18.4+ · build 63.1
current release
Overview
Settings (53)
Modem
Files (35)
overrides_J482.der.pri
iPad (A16, Cellular)
Header
Dialect
Qualcomm
PRI Revision
0.1.161
Settings (81)
All (81)
efs:/data (1)
efs:/data/3gpp/throttling (1)
efs:/nv/item_files/data/3gpp (2)
efs:/nv/item_files/modem (1)
efs:/nv/item_files/modem/data/3gpp (1)
efs:/nv/item_files/modem/data/3gpp/ps (3)
efs:/nv/item_files/modem/data/epc (1)
efs:/nv/item_files/modem/lte/L2/mac (1)
efs:/nv/item_files/modem/lte/ML1 (1)
efs:/nv/item_files/modem/lte/rrc (1)
efs:/nv/item_files/modem/lte/rrc/bbq (1)
efs:/nv/item_files/modem/lte/rrc/cap (5)
efs:/nv/item_files/modem/lte/rrc/efs (11)
efs:/nv/item_files/modem/mav (9)
efs:/nv/item_files/modem/mmode (7)
efs:/nv/item_files/modem/nas (7)
efs:/nv/item_files/modem/nr5g/rrc (3)
efs:/nv/item_files/modem/nr5g/RRC (11)
efs:/nv/item_files/modem/sms (1)
efs:/nv/item_files/modem/uim/mmgsdi (1)
efs:/nv/item_files/wcdma/rrc (1)
efs:/policyman (2)
nv (6)
pri (3)
efs:/data
(1)
·
APM rules
=
"APN_String:internet; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; "
Attach PDN Manager rules (which PDN is required for attach)
efs:/data/ds_dsd_apm_rules.txt
efs:/data/3gpp/throttling
(1)
·
srv_req_throt_config.txt
unverified
=
"FAILURE_TIMER_5:720; "
Data services setting: Data services (PDN, throttling, AT commands)
efs:/data/3gpp/throttling/srv_req_throt_config.txt
efs:/nv/item_files/data/3gpp
(2)
·
RPM params
=
hex, 10 bytes
Radio Policy Manager retry limits (10 bytes)
efs:/nv/item_files/data/3gpp/rpm_params
·
RPM SIM list
=
hex, 60 bytes
SIMs Radio Policy Manager applies to
efs:/nv/item_files/data/3gpp/rpm_suppported_sim
efs:/nv/item_files/modem
(1)
·
LTE connection control
unverified
=
1
efs:/nv/item_files/modem/lte_connection_control
efs:/nv/item_files/modem/data/3gpp
(1)
·
Call before PS attach
=
0
= Off
Allow data-call origination before PS attach
efs:/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
efs:/nv/item_files/modem/data/3gpp/ps
(3)
·
Service request throttle behaviour
=
1
Service-request throttling behaviour
efs:/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
·
nr5g_ran_bit_rate_support
unverified
=
65793
0x10101
Data services setting: Data services (PDN, throttling, AT commands)
efs:/nv/item_files/modem/data/3gpp/ps/nr5g_ran_bit_rate_support
·
3gpp_rel_version
=
5
3GPP release: Signalled 3GPP release
efs:/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
efs:/nv/item_files/modem/data/epc
(1)
·
PDN throttling config
=
"FAILURE_TIMER_5:720; "
Carrier PDN throttling timers
efs:/nv/item_files/modem/data/epc/pdn_throttling_config.txt
efs:/nv/item_files/modem/lte/L2/mac
(1)
·
lte_mac_enable_aas
unverified
=
0
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
efs:/nv/item_files/modem/lte/ML1
(1)
·
cdrx_opt_info
unverified
=
257
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/ML1/cdrx_opt_info
efs:/nv/item_files/modem/lte/rrc
(1)
·
PC2 whitelist
unverified
=
show XML, 1075 bytes
Bands allowed Power Class 2 (26 dBm)
efs:/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
efs:/nv/item_files/modem/lte/rrc/bbq
(1)
·
Fake eNodeB mitigation
=
1
= On
LTE false-base-station (fake eNodeB) mitigation
efs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
efs:/nv/item_files/modem/lte/rrc/cap
(5)
·
max_lte_cap_size
unverified
=
7000
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
·
whitelist_ca_combos
=
hex, 32 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
·
blacklist_ca_combos
=
hex, 65 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
·
whitelist_ca_combos_with_laa
=
hex, 32 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
·
LTE bands with UL CA
=
B2 B5 B12 B14 B30 B66
hex, 32 bytes
LTE bands allowed in uplink carrier-aggregation combos
efs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
efs:/nv/item_files/modem/lte/rrc/efs
(11)
·
lte_conn_ctrl_barring_optimz_params
unverified
=
1
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
·
LTE feature enable
=
hex, 32 bytes
LTE RRC capability feature-enable bitmap; bit list unpublished
efs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
·
disable_4l_per_band
unverified
=
hex, 32 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
·
LTE band priority list
=
hex, 12 bytes
Prioritised band list for LFS/FFS scans (uint16 array)
efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
·
lte_rrc_sub_feature_enable
unverified
=
"@"
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
·
lte_connection_ctrl_params
unverified
=
hex, 16 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
·
LTE feature disable
=
hex, 32 bytes
LTE RRC capability feature-disable bitmap
efs:/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
·
lte_fgi_r8
=
2101342462
0x7d3ff0fe
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
efs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
·
lte_fgi_r10
=
14142
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
efs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
·
lte_fgi_r10_tdd
=
14142
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
efs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
·
lte_fgi_r8_tdd
=
2101342462
0x7d3ff0fe
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
efs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
efs:/nv/item_files/modem/mav
(9)
·
LTE CA combos per PLMN
=
1
= On
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml
efs:/nv/item_files/modem/mav/lte_ca_xml_generation
·
5G on non-DDS SIM
=
1
= On
Allow 5G on the SIM that is not the default data subscription
efs:/nv/item_files/modem/mav/5g_allowed_ndds
·
Disable SA on null SUCI
=
1
= On
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)
efs:/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
·
disable_sdm
=
1
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
efs:/nv/item_files/modem/mav/disable_sdm
·
mav_dmc_enabled
unverified
=
1
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/mav/mav_dmc_enabled
·
EN-DC combos per PLMN
=
1
= On
Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)
efs:/nv/item_files/modem/mav/endc_ca_file_generation
·
mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
=
0
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic
efs:/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
·
sa_depri_bw_val
=
4
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
efs:/nv/item_files/modem/mav/sa_depri_bw_val
·
sdm_nsa_icon_override
=
0
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
efs:/nv/item_files/modem/mav/sdm_nsa_icon_override
efs:/nv/item_files/modem/mmode
(7)
·
LTE band preference
=
37383395278847
0x21fffffeffff
LTE band bitmap (bit n = band n+1)
efs:/nv/item_files/modem/mmode/lte_bandpref
·
LTE disable duration
=
0
How long LTE stays disabled when CS services are unavailable
efs:/nv/item_files/modem/mmode/lte_disable_duration
·
SMS only
=
1
= On
Register for SMS only
efs:/nv/item_files/modem/mmode/sms_only
·
UE usage setting
=
1
= Data centric
TS 24.301 UE usage setting
efs:/nv/item_files/modem/mmode/ue_usage_setting
·
SA-only carrier
=
1
= On
Carrier runs 5G standalone only (no NSA)
efs:/nv/item_files/modem/mmode/mav_sa_only_carrier
·
NR5G emergency support
unverified
=
1
= On
NR5G emergency-call support
efs:/nv/item_files/modem/mmode/nr5g_emc_support
·
NR5G disable mode
unverified
=
0
= NR5G enabled
Disables NR5G SA and/or NSA
efs:/nv/item_files/modem/mmode/nr5g_disable_mode
efs:/nv/item_files/modem/nas
(7)
·
hplmn_rat_order_ctrl
unverified
=
2
NAS setting: NAS mobility management / PLMN selection
efs:/nv/item_files/modem/nas/hplmn_rat_order_ctrl
·
mav_pssi_reg_unblock_hplmn_max_reg_failure
=
1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
efs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
·
HPLMN RAT order
=
NR > LTE > WCDMA > GSM
hex, 12 bytes
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATs
efs:/nv/item_files/modem/nas/hplmn_rat_order
·
ISR
=
1
= On
Idle-mode Signalling Reduction (TS 23.401)
efs:/nv/item_files/modem/nas/isr
·
Reject LTE null ciphering
=
1
= On
Reject an LTE NAS Security Mode Command that selects null ciphering (EEA0)
efs:/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
·
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
unverified
=
4
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
·
CSG support
=
1
Closed Subscriber Group (femtocell) support
efs:/nv/item_files/modem/nas/csg_support_configuration
efs:/nv/item_files/modem/nr5g/rrc
(3)
·
endc_whitelist_ca_combos
=
hex, 32 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
·
endc_reduced_cc_lte_fr1_ca_combos
=
517
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
·
nrsa_whitelist_ca_combos
=
hex, 32 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos
efs:/nv/item_files/modem/nr5g/RRC
(11)
·
band_priority_list
unverified
=
hex, 128 bytes
NR5G setting: NR5G RRC / L1
efs:/nv/item_files/modem/nr5g/RRC/band_priority_list
·
cap_add_bw
=
hex, 772 bytes
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_add_bw
·
cap_control_dl_256qam
=
1
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_control_dl_256qam
·
cap_feature_mac
=
hex, 10 bytes
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_feature_mac
·
cap_feature_meas_and_mobs
=
hex, 22 bytes
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_feature_meas_and_mobs
·
cap_feature_phy
=
hex, 12 bytes
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_feature_phy
·
cap_control_nrca_f_plus_f_band_combos
=
257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
·
cap_control_nrca_f_plus_t_band_combos
=
1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
·
NR TDD+FDD combo control
=
7
Enables NR-CA/NR-DC TDD+FDD band-combo classes
efs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
·
cap_control_nrca_t_plus_t_band_combos
=
257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
·
cap_disable_ul_256qam
=
257
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
efs:/nv/item_files/modem/sms
(1)
·
Refresh vote OK
=
0
= Off
Vote TRUE for SIM REFRESH
efs:/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
efs:/nv/item_files/modem/uim/mmgsdi
(1)
·
ens_slot_enabled
unverified
=
1
SIM setting: UIM / SIM manager / SIM Toolkit
efs:/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
efs:/nv/item_files/wcdma/rrc
(1)
·
WCDMA to LTE PS handover
=
0
= Off
WCDMA->LTE PS handover support
efs:/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
efs:/policyman
(2)
·
Carrier policy
=
show XML, 1318 bytes
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode
efs:/policyman/carrier_policy.xml
·
5g_sa_allowed_on_ndds.xml
=
show XML, 574 bytes
PolicyMan policy: PolicyMan XML rules (RAT capability, bands, 5G/SA gating)
efs:/policyman/5g_sa_allowed_on_ndds.xml
nv
(6)
·
Disable CM Call Type
=
515
nv:5280
·
PRI revision
=
10551552
= 0.1.161
0xa10100
Packed PRI Revision header
nv:62005
·
AAGPS Positioning Modes Supported
=
1
nv:1920
·
ENS Enabled
=
1
= On
Enhanced Network Selection
nv:3461
·
UMTS AMR Codec Preference Config
=
5
nv:6850
▾
Feature Group (unnamed, tag 9f83e453)
unverified
2 of 25 flags set
nv:62035
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
3
: The modem checks it in its geo-MCC attach logic, alongside a home-network check (medium confidence)
pri
(3)
·
Legacy NV item list
=
show list, 35 entries
Legacy NV items the modem may take from this file; with a value here: 1920, 6850, 5280, 3461, 62005, 62035.
pri:nv-list
·
NV path schema index
=
show list, 324 entries
324 NV paths the PRI format knows (MAVZ); not overrides.
pri:schema
·
pri:9fa710
=
178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.