OK, I fired up the old DC (the trusting domain), which is now offline, but that still didn't identify the SID.
However, I did discover that the SID in question it the Local Admin account of the Exchange server. Once I completely removed this security account from the Exchange database itself...