have you tried performing the following on both of your leaf switches:
deactivate switch-options vrf-import vrf-import
if you do not have this statement in your configuration, then junos will automatically create the hidden policies for you!!!
if you specify it then you will also need to allow in the
target:65401:100
other wise you will not get you ESI etc fuctioning as required.
example:
set policy-options community evpn-type1 members target:65401:100
set policy-options policy-statement vrf-import term EVPN-Type1-Routes from community evpn-type1
set policy-options policy-statement vrf-import term EVPN-Type1-Routes then accept
set policy-options policy-statement vrf-import term vxlan10 from community vxlan10 set policy-options policy-statement vrf-import term vxlan10 then accept set policy-options policy-statement vrf-import then reject
I based my config on this blog:
https://blog.noc.grnet.gr/2016/09/28/lab-on-evpn-vxlan-on-juniper-qfx5100-switches-3/
oh and make sure you are on D.43 otheriwse you will hit a bug in multihoming with ESI