Trust Store/Asset version 16. update

Standance wrote:

Trusted roots can only be provided by the iOS update and therefore are legit?

The Apple trusted roots are part of iOS and updated with iOS, yes.

Trusted roots can be added via profile, on managed or supervised devices.

I have gone through the existing trusted roots and I am struggling to find the version that is logged into my phone.

2023032800 was what was posted in the image in the question above—Apple uses a trust store version derived from the release date, and the date for this trust store is from March 2023—and the current trust store list at Apple—see the circled text in the image below, in the white-background image—references the same 2023032800 version part way down the wad of text in the current trust store list, as well. (See the circled text in image below, in the black-background image.)

From empirical evidence, the Apple support articles can sometimes trail the actual versions shipped. In this case, the versions match, though

Thank you for the support and advice you have in helping me to understand this.

Do you really want to understand certificate authentication and trusted roots?

There are probably better overviews, but this is a start: https://en.wikipedia.org/wiki/Public_key_infrastructure

Current trust store version link:

Version associated with the particular trust store support article:

What is your question about digital certificates?

Available trusted root certificates for Apple operating systems - Apple Support

And no, there is no way for users or third party developers to change the list of certificate roots that are provided as part of iOS, as they are protected as part of iOS itself.