In an indirect (embedded) question, the word order is the same as in a statement: subject + verb. So it's "who you are", not "who are you". The sentence is a statement, so it ends with a full stop, not a question mark.

"I don't know who you are."

Answer: (D)