carrier-explode
Explode and decode carrier data
GitHub
About
Carriers
Countries
Features
Builds
Compare
Work in progress: carrier-explode doesn't have the best coverage on iPadOS yet… we're working on it!
iPadOS
iOS
Pixel
Samsung
iPadOS
watchOS
Turk Telekom
TR 2026-09-14
Turkcell
TR 2026-09-14
B-Mobile
BT 2026-06-05
CS
Cellular South
US 2026-06-05
CTM
MO 2026-06-05
Fastweb
IT 2026-06-05
Spectrum Mobile
Verizon_Charter_LTE_US
US 2026-06-05
Verizon
Verizon_LTE_US
US 2026-06-05
Verizon
Verizon_Response_LTE_US
US 2026-06-05
vodafone HU
HU 2026-06-05
Vodafone Travel
NL 2026-06-05
Xfinity Mobile
US 2026-06-05
Spectrum Mobile
TMobile_Charter_US
US 2026-03-30
Comcast Business
US 2026-03-24
Simly
AE 2026-03-24
Telefonica eSimFLAG
ES 2026-03-24
Cyta
CY 2025-12-11
LMT
LV 2025-12-11
Telia
EE 2025-12-11
Telia LT
LT 2025-12-11
ORA MOBILE
PF 2025-11-03
Roamless
BE 2025-11-03
VinaPhone
VN 2025-11-03
povo
JP 2025-10-15
ATT Dish MVNO
US 2025-03-31
Boost
US 2025-03-31
BT
GB 2025-03-31
Y!mobile
JP 2025-03-04
UNEFON
MX 2024-12-10
Cellcard
KH 2024-10-28
G
Genesis
PL 2024-10-28
Dialog
LK 2024-06-07
E
Eskimo
SG 2024-06-07
Jio
IN 2024-06-07
Odido
TMobile_nl
NL 2024-06-07
One NZ
NZ 2024-06-07
SaskTel
CA 2024-06-07
SKT
KR 2024-06-07
Telekom SK
SK 2024-06-07
TSEL
ID 2024-06-07
VIVO
BR 2024-06-07
Vodafone AU
AU 2024-06-07
2degrees
NZ 2024-05-13
Claro BR
BR 2024-05-13
Copper Valley Telecom
US 2024-05-13
Digicel
FJ 2024-05-13
Digicel
TO 2024-05-13
Digicel
WS 2024-05-13
GTA
GU 2024-05-13
Holafly
AT 2024-05-13
Hutch
LK 2024-05-13
KT
KR 2024-05-13
Nomad
SG 2024-05-13
Optimum
US 2024-05-13
Orange F
FR 2024-05-13
T-Mobile
US 2024-05-13
T
TELCEL
MX 2024-05-13
TELUS
CA 2024-05-13
entel
CL 2023-12-11
Telstra
AU 2023-12-11
vodafone.de
DE 2023-12-11
eSIM Go
AT 2023-10-27
au
KDDI_LTE_only_jp
JP 2023-10-25
BICS
BE 2023-10-25
CMLink
BE 2023-10-25
Digicel
PG 2023-10-25
T-Mobile CZ
CZ 2023-10-25
1and1
DE 2023-09-18
AIS
TH 2023-09-18
Vodafone Kiribati
KI 2023-06-02
Next 100
327
Newest
Verizon
Verizon_LTE_US
OTA iPadOS 26.5+ · build 70.1
current release
OTA iPadOS 26.5+ · build 70.1
current release
Overview
Settings (91)
Modem
Files (51)
overrides_J411.der.pri
iPad mini (A17 Pro, Cellular)
Header
Dialect
Qualcomm
PRI Revision
0.1.172
Settings (74)
All (74)
efs:/data (1)
efs:/data/3gpp (1)
efs:/data/3gpp/throttling (1)
efs:/nv/item_files/modem/data/3gpp/ps (4)
efs:/nv/item_files/modem/data/epc (1)
efs:/nv/item_files/modem/lte/L2/mac (1)
efs:/nv/item_files/modem/lte/ML1 (2)
efs:/nv/item_files/modem/lte/rrc/cap (6)
efs:/nv/item_files/modem/lte/rrc/efs (6)
efs:/nv/item_files/modem/mav (11)
efs:/nv/item_files/modem/maverick/uim/apps (1)
efs:/nv/item_files/modem/mmode (7)
efs:/nv/item_files/modem/nas (6)
efs:/nv/item_files/modem/nas/mav_hpplmn_scan_throttler (1)
efs:/nv/item_files/modem/nr5g/RRC (12)
efs:/nv/item_files/modem/qmi/cat (1)
efs:/nv/item_files/modem/uim/gstk (2)
efs:/nv/item_files/wcdma/rrc (1)
efs:/policyman (1)
nv (5)
pri (3)
efs:/data
(1)
·
APM rules
=
"APN_String:ims; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:2; IPAddressRequired:2; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:2; IPAddressRequired:2; APN_String:vzwinternet; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; "
Attach PDN Manager rules (which PDN is required for attach)
efs:/data/ds_dsd_apm_rules.txt
efs:/data/3gpp
(1)
·
3GPP data dynamic config
=
show XML, 867 bytes
Per-PLMN data rules, domestic/international roaming PLMN lists
efs:/data/3gpp/data_3gpp_dynamic_config.xml
efs:/data/3gpp/throttling
(1)
·
srv_req_throt_config.txt
unverified
=
"FAILURE_TIMER_1:0; FAILURE_TIMER_2:0; FAILURE_TIMER_3:30; FAILURE_TIMER_4:30; FAILURE_TIMER_5:30; FAILURE_TIMER_6:30; "
Data services setting: Data services (PDN, throttling, AT commands)
efs:/data/3gpp/throttling/srv_req_throt_config.txt
efs:/nv/item_files/modem/data/3gpp/ps
(4)
·
Rel-10 throttling
=
1
= On
Rel-10 APN congestion back-off (T3396)
efs:/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
·
rel_10_throttling_per_plmn
unverified
=
1
Data services setting: Data services (PDN, throttling, AT commands)
efs:/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
·
Allow infinite throttle
=
1
= On
Allow an infinite throttle timer
efs:/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
·
Service request throttle behaviour
=
0
Service-request throttling behaviour
efs:/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
efs:/nv/item_files/modem/data/epc
(1)
·
PDN throttling config
=
"FAILURE_TIMER_1:0; FAILURE_TIMER_2:0; FAILURE_TIMER_3:60; FAILURE_TIMER_4:120; FAILURE_TIMER_5:480; FAILURE_TIMER_6:900; DISALLOW_TIMER_1:0; DISALLOW_TIMER_2:0; DISALLOW_TIMER_3:60; DISALLOW_TIMER_4:120; DISALLOW_TIMER_5:480; DISALLOW_TIMER_6:900; "
Carrier PDN throttling timers
efs:/nv/item_files/modem/data/epc/pdn_throttling_config.txt
efs:/nv/item_files/modem/lte/L2/mac
(1)
·
lte_mac_enable_aas
unverified
=
4278255873
0xff010101
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
efs:/nv/item_files/modem/lte/ML1
(2)
·
ard_config
unverified
=
hex, 128 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/ML1/ard_config
·
traffic_forced_r1
unverified
=
0
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/ML1/traffic_forced_r1
efs:/nv/item_files/modem/lte/rrc/cap
(6)
·
whitelist_ca_combos
=
hex, 32 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
·
blacklist_ca_combos
=
hex, 65 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
·
blacklist_explicit_ca_combos
=
hex, 201 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
·
LTE bands without non-contiguous CA
=
B5 B48
hex, 32 bytes
LTE bands left out of non-contiguous intra-band CA combos
efs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
·
whitelist_ca_combos_with_laa
=
hex, 32 bytes
CA combo list: LTE CA / EN-DC band-combination allow/deny list
efs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
·
LTE bands with UL CA
=
B2 B5 B13 B66
hex, 32 bytes
LTE bands allowed in uplink carrier-aggregation combos
efs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
efs:/nv/item_files/modem/lte/rrc/efs
(6)
·
LTE feature enable
=
hex, 32 bytes
LTE RRC capability feature-enable bitmap; bit list unpublished
efs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
·
disable_4l_per_band
unverified
=
hex, 32 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
·
LTE band priority list
=
hex, 10 bytes
Prioritised band list for LFS/FFS scans (uint16 array)
efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
·
csg_control_v2
unverified
=
hex, 40 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/csg_control_v2
·
lte_rrc_sub_feature_enable
unverified
=
hex, 32 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
·
conn_rej_cell_depriority_params
unverified
=
hex, 16 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
efs:/nv/item_files/modem/mav
(11)
·
LTE CA combos per PLMN
=
1
= On
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml
efs:/nv/item_files/modem/mav/lte_ca_xml_generation
·
Drop EN-DC in call hysteresis
=
25
Hysteresis timer before dropping EN-DC during a call
efs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
·
Drop EN-DC in VoLTE hysteresis
=
25
Hysteresis timer before dropping EN-DC during a VoLTE call
efs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
·
enable_fblte_based_bwp_config
unverified
=
1
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/mav/enable_fblte_based_bwp_config
·
enable_rlgs_fr2
=
0
RLGS congestion: Radio-link congestion scoring (none / low / med / high, DL and UL)
efs:/nv/item_files/modem/mav/enable_rlgs_fr2
·
mav_dmc_enabled
unverified
=
1
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/mav/mav_dmc_enabled
·
sa_depri_td_bwp_thresh_val
=
30
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
efs:/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
·
volte_screen_on_hysteresis_tmr_val
unverified
=
2
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
·
mav_avoid_uwb_roaming
=
1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic
efs:/nv/item_files/modem/mav/mav_avoid_uwb_roaming
·
mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
=
1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic
efs:/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
·
vzw_pco_check
unverified
=
1
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/mav/vzw_pco_check
efs:/nv/item_files/modem/maverick/uim/apps
(1)
·
SIM provisioning strategy
=
2
How the modem provisions the SIM: proprietary, MSISDN-based or 3GPP follower; value order unconfirmed
efs:/nv/item_files/modem/maverick/uim/apps/card_prov_strategy
efs:/nv/item_files/modem/mmode
(7)
·
LTE disable duration
=
900
How long LTE stays disabled when CS services are unavailable
efs:/nv/item_files/modem/mmode/lte_disable_duration
·
SMS only
=
1
= On
Register for SMS only
efs:/nv/item_files/modem/mmode/sms_only
·
UE usage setting
=
1
= Data centric
TS 24.301 UE usage setting
efs:/nv/item_files/modem/mmode/ue_usage_setting
·
nrdc_mode
unverified
=
1
Multimode setting: Call manager / system determination
efs:/nv/item_files/modem/mmode/nrdc_mode
·
nr5g_plmn_blocking_timer
unverified
=
4294968016
0x1000002d0
Multimode setting: Call manager / system determination
efs:/nv/item_files/modem/mmode/nr5g_plmn_blocking_timer
·
NR5G disable mode
unverified
=
0
= NR5G enabled
Disables NR5G SA and/or NSA
efs:/nv/item_files/modem/mmode/nr5g_disable_mode
·
lte_rpm_info_2
unverified
=
hex, 11 bytes
Multimode setting: Call manager / system determination
efs:/nv/item_files/modem/mmode/lte_rpm_info_2
efs:/nv/item_files/modem/nas
(6)
·
hplmn_rat_order_ctrl
unverified
=
2
NAS setting: NAS mobility management / PLMN selection
efs:/nv/item_files/modem/nas/hplmn_rat_order_ctrl
·
HPLMN RAT order
=
NR > LTE > WCDMA > GSM
hex, 12 bytes
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATs
efs:/nv/item_files/modem/nas/hplmn_rat_order
·
Temporary FPLMN backoff time
=
4294967295
0xffffffff
EMM temporary-forbidden-PLMN backoff timer; 0xffffffff = disabled
efs:/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
·
nr_disable_duration
unverified
=
0
NAS setting: NAS mobility management / PLMN selection
efs:/nv/item_files/modem/nas/nr_disable_duration
·
nr_t3517_config
unverified
=
5
NAS setting: NAS mobility management / PLMN selection
efs:/nv/item_files/modem/nas/nr_t3517_config
·
ignore_uplmn
unverified
=
1
NAS setting: NAS mobility management / PLMN selection
efs:/nv/item_files/modem/nas/ignore_uplmn
efs:/nv/item_files/modem/nas/mav_hpplmn_scan_throttler
(1)
·
config_params
unverified
=
hex, 10 bytes
NAS setting: NAS mobility management / PLMN selection
efs:/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params
efs:/nv/item_files/modem/nr5g/RRC
(12)
·
cap_control_4cc_ulca_fr2
=
1
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_control_4cc_ulca_fr2
·
NR band capability
=
hex, 28 bytes
NR band feature-capability list; proprietary layout
efs:/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
·
band_priority_list
unverified
=
hex, 128 bytes
NR5G setting: NR5G RRC / L1
efs:/nv/item_files/modem/nr5g/RRC/band_priority_list
·
cap_csi_rs_32_port_control
=
hex, 195 bytes
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
·
failure_mgr_efs_nrdc_list_cfg
unverified
=
hex, 20 bytes
NR5G setting: NR5G RRC / L1
efs:/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_nrdc_list_cfg
·
cap_control_nrca_3x_f_plus_t_band_combos
=
16843009
0x1010101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
·
cap_control_nrca_4x_f_plus_t_band_combos
=
65792
0x10100
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
·
cap_control_nrca_f_plus_f_band_combos
=
257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
·
cap_control_nrca_f_plus_t_band_combos
=
1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
·
NR TDD+FDD combo control
=
7
Enables NR-CA/NR-DC TDD+FDD band-combo classes
efs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
·
cap_control_nrca_t_plus_t_band_combos
=
65793
0x10101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
·
cap_disable_ul_256qam
=
1
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
efs:/nv/item_files/modem/qmi/cat
(1)
·
Block SMS-PP envelope
=
0
= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscription
efs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
efs:/nv/item_files/modem/uim/gstk
(2)
·
mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
unverified
=
393236
0x60014
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
·
feature_bmask__mav_override
unverified
=
256
Apple override: Apple override of the Qualcomm item of the same name
efs:/nv/item_files/modem/uim/gstk/feature_bmask__mav_override
efs:/nv/item_files/wcdma/rrc
(1)
·
Fast return to LTE after CSFB
=
1
= On
Return from WCDMA to LTE right after a CSFB call
efs:/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
efs:/policyman
(1)
·
Carrier policy
=
show XML, 1594 bytes
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode
efs:/policyman/carrier_policy.xml
nv
(5)
·
Roaming preference
=
255
= Automatic
Roaming Preference
nv:442
·
Disable CM Call Type
=
515
nv:5280
·
PRI revision
=
11272448
= 0.1.172
0xac0100
Packed PRI Revision header
nv:62005
·
AAGPS Positioning Modes Supported
=
1
nv:1920
·
MGRF Supported
=
1
nv:5895
pri
(3)
·
Legacy NV item list
=
show list, 35 entries
Legacy NV items the modem may take from this file; with a value here: 442, 1920, 5895, 5280, 62005.
pri:nv-list
·
NV path schema index
=
show list, 308 entries
308 NV paths the PRI format knows (MAVZ); not overrides.
pri:schema
·
pri:9fa710
=
178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.