The enforcers based their suspection on the following picture:
and they compared it with this one:
But as you can see, the people are running and scared, thus this photo was taken AFTER the bombs went off.
He still has his backpack on.
Also, look at the numbers on their hats. You can see a 3 on Dzhokars hat, and a 7 on the other persons hat.