The list has got to be a plant by Jane. There are so many little details that just don't fit with the widely accepted storyline. If Jane's real list was the names we saw in his book about midseason, then Jane spent the rest of the time laying a trap for RJ - a fake list because if RJ knew he was on short list of suspects, he'd kill Jane, Lisbon, the whole team because after 5 seasons, the one thing we know about RJ is that he doesn't allow loose ends that could get him caught alive. Jane really plays up the secrecy and locks on his loft door for the second part of the season to send a subtle message to RJ, that he has something to hide so RJ will come and steal it. RJ takes the bait and steals Jane's fake list and this is KEY: Jane doesn't even notice and continues his charade. Let's be clear that Lorelei is still alive when RJ steals the list so that's why RJ can make that video with Lorelei before he kills her. Lorelei turns up dead and soon after Kirkland steals Jane's list. This time Jane notices (toothpick scene) and assumes RJ has finally taken the fake list. He wraps up his charade almost immediately (ignoring the distraction of LaRoche).  This also allows Heller's statement that the list is real to be true because Heller would be talking about the first list and not the fake one.

This theory ties up all the loose end questions like:
Why the toothpick scene?How was the Lorelei video possible?
Why give us a glimpse of names at midseason if it wasn't going to lead anywhere?
Why were the names in the book (midseason) the favorite suspect while the ones in the finale were boring and mostly unqualified?
Would Jane really hide something important with locks that practically shout "look here!"? 

Logic:  3rd season, Jane told the whole team the plan and the audience the plan and RJ won.  4th season, Jane only told Lisbon and the audience and RJ still won.  5th season, Jane doesn't tell Lisbon or the audience the real plan.

The list is a fake and the names we glimpsed in the book are the real suspects.