From my research, in an uncontrolled shutdown, the system would use the timestamp on the last file to be updated in /etc until it could get an update over the network.