View trustpoint used for ISAKMP in IOS?

[cairnsm]

When a router is configured for multiple trustpoints and all trustpoint certificates are valid for phase 1 authentication, is there a way to see which trustpoint was used for an IPSec tunnel outside of debug isakmp. I'd like to look at a DMVPN hub and see what trustpoints were used by the spokes. These tunnels are up and active.

Any thoughts on a show command or possible hidden command?

Thanks,

Mark

[aghaznavi]

I think when multiple CA trustpoints are specified within a single profile, ike will match only the last trustpoint configured.