I purchased a CHR license. Why is it still showing as expiring in /system/license/print ?

See below. The first print was the demo license. I then purchased, issued renew command but there is still a next-renewal-at and deadline-at date:

[admin@SunGate2] > /system/license/print 
         system-id: xxxxxxxxxxx
             level: p10
  limited-upgrades: no
   next-renewal-at: 2024-10-02 00:42:31
       deadline-at: 2024-10-09 22:58:20
[admin@SunGate2] > /system/license/renew 
account: xxxxxxxxxxx@xxxxxxxxxxx.net
password: **********
level: p
p-unlimited     p1     p10   
level: p1
p1
level: p10
  status: done

[admin@SunGate2] > /system/license/print 
         system-id: xxxxxxxxxxx
             level: p10
  limited-upgrades: no
   next-renewal-at: 2024-11-01 14:59:59
       deadline-at: 2024-12-01 14:59:59
[admin@SunGate2] >

This is documented.
CHR licenses are stored in the cloud, the virtual router does not know, whether you have moved or revoked this license. This is why at “deadline” date, it will check status. If license still valid, it will again extend this date to the next check date.

Thanks. Not sure, didn’t find it on the Documentation page for the CHR licenses.

This happens automatically, without having to run /system/license/renew etc?

Which firewall rule (host/port) is required for this check?

Yes it happens automatically, it needs access to license.mikrotik.com
It is all here https://help.mikrotik.com/docs/display/ROS/Cloud+Hosted+Router%2C+CHR#CloudHostedRouter,CHR-LicenseUpdate