programatically determine if the tgt has expired

[Rick]

What is the easiest way to programmatically determine if the tgt has
expired?

Like klist I know I can iterate through the cache like below.  In the loop I
can check times
and compare for the string 'krbtgt'.  It just seems a little hackish.

while (!(retval = krb5_cc_next_cred(context, cache, &cur, &creds)))
 retval = krb5_unparse_name(kcontext, cred->server, &sname);


Thanks in advance