What I used to do for a commercial product based on Fedora was mirror all the Fedora repos we needed. For each release we then had all thesource and binary RPMs (as needed for GPL license compliance etc).
From the mirror we use pungi to create our product repro.
We keep the mirrors going back over more then 10 years.