fixes #8591 - explicitly set where to subnets.id