"C:\cacert.cer" is just an example of the path where the certificate could be placed. Choose the one you want.
BTW, after running the command the certificate will be in your certificate store, so you can delete the downloaded file after.
If that was the case the update would say that it didn't apply, not that the root certificate is not trusted (I think).