X5C must not contain attestation root per requirement of BASIC attestation verification and RFC5280 path verification algorithm, that specifies “no duplicates allowed”.

The sample in the specs is wrong. Will be fixed next version.