Dumb for the US: if US were currently MITM with certs copied by its agencies, US won't be able to do that for Iranian / Russian certs.

SSL MITM also requires hijacking the network and redirecting the traffic.